skysight-inc/HackerNews huggingface dataset:
You mean batteries that rarely if ever need replacing (this isn't still the 1990s) and now fewer button to fail (the home button hasn't been a problem anyway for years now anyway)?

Not everything is a conspiracy, FFS.
I'd be interested in discussing this with you further offline. I'm not blind, but definitely interested in exploring ways to help. If you add some information to your profile about how to reach you I'll reach out.
Looking to hire low skill "coders" instead of experienced professional developers and engineers?

I see your problem right there.
I think the line should be practical. Personally, I switched to running Linux full-time about 15 years ago. Never looked back. But I still used nVidia drivers even though open source would have been preferable. Using anything else was hell, though, and investing the time I didn't think was worth it - there's a life to be lived outside of computers. These days, Intel GPUs and older Radeons have good open source support, so I use those.

I still use Skype, because that's what my (overseas) friends use. If you start going off on too much of a philosophical crusade trying to convince people to use open source tool X, more than likely I suspect most people will start thinking you've gone a little off the deep end.

For personal use, I try very hard to only use open source software, even if I know there are closed source alternatives that might be more polished / productive. (That trade-off is becoming less and less common; I find the quality of tools has improved drastically over the years.) Also, I try to contribute patches - or at least bug reports - whenever I can.

My point is, you gotta pick and choose your battles. Running an open source OS? Highly achievable. Changing the culture of the internet? Not likely.

---
I should add, wherever you end up drawing the line, good on you for taking the jump!
For Your Hands Only
Hyperbole much?
Thank you for your interest! We do plan to expand to Slack and Facebook Messenger indeed. You can follow our development roadmap on the official page: github.com/arbeitbot
I see where you're going with this.

dmidecode seems to indicate that the description from the actual RAM is lacking transparency about it's internal geometry.

I can get the ranking for slot-level interleaving from dmidecode on my systems (which means a kernel could or already has it as well).

Thinking about the inside-chip geometry issue as well as the current on-list proposal in the news item I've reached a different potential solution.

If page faults are tracked /by process/, the top N faulting processes could be put in to a mode where the following happens on a page fault:

* Some semi-random process (theoretically not discover-able or predictable by user processes) picks a number between 1 and some limit (say 16).

* The faulting page, and the next N pages, are read in (which should pull them in to the cache).

This would help by making it harder to mount a /successive/ attack on different memory locations. Processes chewing through large arrays of objects in memory legitimately shouldn't be impacted that much by such a solution; surely less so than a hard pause on the process.
Gonna point you to this reply, which is quite good:

https://news.ycombinator.com/item?id=12818193
I'd like to help.
I think of Iomega: $100/share in 1998, $2/share in 2005. There are better investments...
Part of the argument is that we draw conclusions and interpret a book based on our own experience in the current time - not the time at which the book is written. Meaning changes with time, he gives an example of Moby Dick. It meant something totally different to someone back when it was written and was not popular. It was not until later did the book become popular because it was interpreted for the various meanings people think it's about. Secondly, the book is written for that specific audience - not the entire internet and/or world. The author remains in total control. He then mentions Kafka as an example because he as so controlling of his writings.
Sounds great, I'd like to see the assumptions in the financial model that show how it is cheaper than conventional roofing material.
I beg to differ.

Regarding liberties Germany actually had a pretty good track record up until WW1 (considering the standards of the times).

How could its economy have outpaced the ones of France and Great Britain by then? Liberlization did. Its what made Germany a jewish "america" for Ashkenazis all over eastern Europe. Social Security, Kindergarten and other institutions were formalized. Even with WW1 and its subsequent burden of the overreaching Versailles-agreements, the people of Germany were living in a newly found state bound to fail - but were still the same people.

Berlin in the 20s had the most vegan restaurants in the western hemisphere. Gays were more accepted than for a long time to be seen in the west.

The scientists you cite got their educational groundwork to build upon out of these decades of progress.

Decades of work that shouldn't get discounted so casually ("wasn't exactly...").

I know this isn't a history thread but since we're using history for making helpful generalizations getting history right helps. And Germany was certainly not "all-brownshirts" from 1900-1945 :-)
original article on Harvard Gazette: http://news.harvard.edu/gazette/story/2016/10/dont-trust-tha...
Yes, but even if your standard only states that manufacturers have to provide some sort of resilience to attackers modifying the binaries on the device remotely, I suspect many manufacturers are going to go with the simplest way: preventing any modifications save manufacturer-signed updates, and/or reducing user configurability of the device.

My feeling on this are somewhat mixed; on one hand virtually everyone who owns a modifiable device never makes any significant modifications and doesn't know how to properly secure it to boot. On the other hand, that means that even if manufacturers had no selfish reasons to put in such limitations of their own volition, the natural state for most consumer device markets is going to be to have no modifiable devices available for purchase just because making an unlocked version isn't worth it.
Clearly a ploy by Microsoft to snag some decent hardware for their own staff on the cheap.

Nice try, slugheads!
The buttons failing easily is a myth. There was an issue in one early generation, and that was fixed many years ago.
To make sure I fully understand the proposal, it is to:

1. Generate public/private key pairs for all mailboxes at a given domain
2. Publish the public key in a DNS record at the mailbox domain
3. Encrypt message bodies with that public key in the MUA at send-time

A few comments (assuming I understand correctly):

First, this sounds a lot like SMIMEA (https://tools.ietf.org/html/draft-ietf-dane-smime-00) or OPENPGPKEY (https://tools.ietf.org/html/draft-ietf-dane-openpgpkey-02) DNS records.

One requirement in this approach (not mentioned in the linked article) is that this only makes sense if you use DNSSEC. If you don't use DNSSEC, all the threats that apply to opportunistic STARTTLS apply.

There are pros and cons of DNSSEC, and various deployment issues, but in general SMIMEA and OPENPGPKEY are both basically workable. (Another option, widely discussed but as far as I know not specified in a formal protocol, is to use HTTPS and webfinger with CA-signed certs for key discovery.)

Second, I think there are a number of smaller errors in this blog post.

1. The primary issue with STARTTLS is not the two listed here (lack of encryption at rest, downgrades on "the whole chain") but rather the fact that it is opportunistic and enforces no certificate authentication. So active MITM attacks (DNS injection or stripping, to name a few) work. But they work on the proposed scheme as well, since nowhere is it specified that we must use DNSSEC!

2. I don't understand how server-side key management avoids the encrypted-at-rest issue, since the keys are stored on the server!

3. The focus on client-to-server (i.e. MUA to MTA) connections seems spurious to me, since (as others noted here) the vast majority of users use a handful of MUAs that do enforce SSL (mainly web browsers, Apple Mail, and mobile mail clients like iOS Mail or Android's Mail app). The real issue is server-to-server (i.e. MTA-to-MTA) connections.

4. Encrypting message bodies leaks header metadata. Given the fact that this proposal seems to primarily suggest server-side key management, it's not really "end-to-end" encryption anyway, so it sacrifices metadata leaks to gain...nothing. Doing transport-layer encryption between servers is effectively a better option.

So tl;dr:

In broad strokes, the proposal makes sense and reads like a slightly less-detailed version of a couple of existing IETF proposals. But as with everything, the devil is in the details.

Hope that makes sense.
> The company raised $32.36 million of Series C...Draper Fisher Jurvetson...on November 15, 2006,

> The company raised $45 million of Series C1 venture funding out of a planned $100 million from Draper Fisher Jurvetson on July 8, 2010, putting the pre-money valuation at $1.1 billion.

> The company raised an estimated $573 million of Series C2 venture funding from The Lucas Venture Group (Menlo Park), Draper Associates (San Mateo), Partner Fund Management (SF) and Sandbox Industries (Chicago) in March 2015, putting the pre-money valuation at $8.4 billion. BlueCross BlueShield Venture Partners also participated in this round.
The Dell case at least was a honest mistake. Superfish actually did MITM to show ads and Lenovo was trying to make money from it.
Ask HN: Anybody else annoyed by lever.co job ads?
Is anybody else annoyed by lever.co job ads?

https://imgur.com/a/r4gH9

they state that they are hiring "an" engineering manager as part of a "50/50 men and women team"

well, is this a male quota job or a female quota job?

I am all for diversity and all, but this is a pretty big signal of discrimination.

Paraphrasing Bill Clinton: "I am a male that works in Silicon Valley, and we all know what that means"

Just bums me out to see it in my face.
Looks amazing! I wonder how they get wired together? How are they attached to the roof?
I think you meant "knowledge" rather than "intelligence".

Sorry for the nitpick. There are many smart people who are not techies.
Off topic, but I just checked out your website. I read the landing page, and it sounds reasonable so far. I saw the "Try Some" link and thought, "Sure, I'll give it a try!" I thought it would lead to a page offering to send me a free (or very cheap, shipping only) sample square. Instead I am asked to pay $90 (!) just to try it (which is different than the $85 price actually on the form.)

May I suggest making that link lead to a "free sample" page rather than a "give us $90 before even trying a bite" page? I think you'll get a whole lot more uptake that way.
I love it, I think it's both solid an elegant, and quite portable (needs bash + gpg) but your average enterprise architect will call it a hack and start comparing it to a multi k$ solution that needs its own server or three, has a fancy GUI etc...
Solar panel roofing tiles have been around for a long time. I wonder what this will do different? Pricing? Or perhaps they are relying on brand strength alone.

Edit: I understand the urge to downvote because I'm not singing praise, but I promise I'm not trying to be overly pessimistic or critical of what Tesla is doing. Fact of the matter is, solar tiles have been done before, and failed miserably.
New (granted not quite shipping) hubs/docks sound like $100 or so. You sit down, connect the tb3/usbc cable and your mouse, keyboard, and display works. Of course your laptop is getting charged as well.

Preorder for $105 http://www.theverge.com/circuitbreaker/2016/10/28/13453274/a...
I agree wholeheartedly, but does anyone have any advice or stories of how they've made this happen? Are there other vendors or solutions out there that focus on ease of switching over to their systems?
How has LinkedIn changed after Microsoft takeover?
The title says it all. Its been a while since the takeover and the new management had some time to implement any new ideas they might have had, so how has it all changed now?
It's difficult to beat the cost of the usual raw materials, so they need to exceptionally long lifetimes.

edit: even with the cost savings from power generation, the roof itself needs to last forever.
Just to clear things up for people unfamiliar with IPv6, the ISP does have some input in this process: they give your router a unique prefix (basically a subnet) which the router delegates to the devices in your network.
AFAIK it is not SMM, it is a separate CPU. IMO, the most important lesson everyone should learn however is the laptop anti-theft arms race is horrible too.
An interesting take, but note the recent submission on the same topic: https://news.ycombinator.com/item?id=12721423

I thought the first was sadly abbreviated with only six comments and would welcome a much more extended discussion on this awkward subject. Upvoted. The hypothesis of the video, if valid in any way, seems a compelling concern for this province of YC. I think ensuing dialog could be fascinating, and hope it is.
Could be true. I had no problem with mine.
Very impressive. I wonder how Go manages to even stop all threads in 100 microseconds, much less do any work in that time.
1.- You need to call them again.

2.- complete a project, make a blog about it.

Basically, sell yourself.
The annual bonus is a lot more likely than a liquidity event for your stock options in your pre-IPO startup.

Think of it this way: would you rather get a 5-6 figure bonus most years, or a 6-7 figure stock option liquidity event in 3-7 years with a 95% probably of zero and you don't find out until after the 3-7 years have passed?

Fundamentally, they serve the same purpose, to tie compensation to company performance. But banks still expect to be around 50 years from now and earn profits the whole time, startups expect to take a big gamble on growth and then cash out in a big event and sort of change form. If you're a VC the latter is a pretty good deal because you only have to pay LT capital gains tax, not ordinary income; and obviously you're able to de-risk through diversification, unlike employees.

The bonus structure in banks is there so they can set salaries to be more like a percent of the company's revenue that year, except people refuse to accept salary decreases so they have to call it something else. If you compare it to pre-IPO stock options, it seems like it could be a lot less risky from the point of view of the employee.
He sounds really immature and irresponsible. If you look at his code on GitHub, it's full of sloppy stuff, commented-out code, and worrisome little loose ends with comments like "should I check this value?"[1] Even his commit messages are full of sloppy stuff.[2][3] That's fine for hacking on game systems, emulators, or various consumer electronics (and he's clearly quite good at it, given his accomplishments), but would anyone really want to trust their life to code like this? How much testing has he actually done on this thing? By his own accounts, it didn't even work until less than a year ago.[4] The NHTSA is right to question him about safety if he's planning to put this on the market for anyone & everyone to use on public roads a matter of months from now. Choosing to shut down and go work in another country after receiving just one inquiry about safety is a sign that there could be serious problems. A car is not a toy.

(Oh, and in case anyone responds with "well let's see your code!", please note that I'm not the one making asking people to trust their lives to my code, making wild claims about what I've built, nor issuing challenges to the likes of Tesla.[5])

[1] https://github.com/geohot/kvm-kext/blob/master/main.cpp#L642

[2] https://github.com/geohot/kvm-kext/commit/082b7ca99cba4c3b9c...

[3] https://github.com/geohot/kvm-kext/commit/96441be079562b0dd0...

[4] http://www.bloomberg.com/features/2015-george-hotz-self-driv...

[5] https://electrek.co/2016/04/06/tesla-autopilot-comma-ai-geoh...
Oh I see the UPnP IGP AddPortMapping. Do the Merkai access that UPnP profile out of the box?
I think the literate in literate programming is too formal. Maybe it should have been conversational programming.

The comments should be the things that you would tell a new team member during a pair programming session. You assume she knows what the syntax of the language is, but you don't assume she knows the business intent behind the code or the history of trial and error that led to its current state.
Thanks! That's a new one. War is brutal and you are right that at some level it's hard to make clear distinctions. The Romans were certainly very good at it.
Off topic, have Apple ever officially acknowledged that their OS is a rip-off of FreeBSD project, or even given them credits anywhere?
Why is 3-4k GPUs mining a bad thing? That seems really good for a brand new blockchain.
Ask HN: Switching careers, from scientist to developer. How?
Last year I received my PhD in molecular biology. I got a very competitive postdoc fellowship and, now, I more-or-less hate what I do.

During grad school I was exposed to programming (via a course in molecular dynamics) and almost quit the PhD program. It's all I wanted to do, day and night. Luckily (?) I didn't waste 5 years and leave without the degree.

Now I'm a well-paid postdoc, doing what should be exciting research, and still all I do is work on random side projects during my free time (and at work). I've been able to force some bioinformatics projects on my boss, enabling myself to do some of what I enjoy out in the open. But this isn't going work out...

So, what's the best way forward?

1) Enroll in a bootcamp. There are a few geared toward PhDs (Data Incubator, Insight, etc.)
(Are these legit?)

2) A Master's degree. A lot of the job openings (one's I'm interested in) "prefer" a CS degree.

3) Just apply for the jobs straight away.

How have you guys switched careers?
More importantly, consider how much more empowered malicious state-backed entities become. At the moment we can only be surveilled (which is plenty terrifying). What happens when we can be physically influened remotely at scale
That's simply not true. I was actually hired as a consultant by Green, and he did hardly anything with that contract. I know of no proposal actually made to any Bitcoin devs for inclusion, and in any case, it took a long time to improve the tech to the point where resource requirements were low enough for either Zerocoin or Zerocash to be viable in any currency.
When your building e-commerce not supporting IE 8 and 9 is lost revenue, potentially a decent chunk.
As a dude who works for a SV company, I know how good I have it.
Note that what he said is that the solar roof plus the electricity that it generates is cheaper than a conventional roof. The up-front cost is higher for the solar roof.

So, yes, there are assumptions in there: how much power can be generated, how valuable will it be 10 years from now, etc.
My understanding of UPNP is that it allows the router itself to become a discover-able device on the network. Then the IoT device connects to the router and adds a static port mapping from the router's public IP address on a specific port to the IoT's private IP address. The NAT still works as it normally does where any packets that try to leave the network get remapped by the router seamlessly. The danger in this case is the IoT device has a listening port on your public IP address, allowing attackers to connect directly to it through your router.
All of that is still part of its original instructions.
Samsung adds first 64-bit and Cortex-M4 based Artik modules
I didn't know that. I thought they were always in an r&d phase before.
Microsoft will pay you up to $650 to trade in your Mac on a new Surface Book
Well, the code can simply be made public by bad application logic. Which is why I thought you where talking of on premise where the intranet will seal off outsiders
It's typically more expensive to replace somebody. And if there's no reason to fire you... why would they?
Actually it's a 20% cut for the first few years; the 10% figure is only relevant if you're talking about the entire theoretical coin supply.
Sorry. Reset. What problem are we trying to solve, and why that problem next?
Yup, just use:

lines = `git log -p --all`.lines.map(&:chars)

So I found that `git grep /.+/ $(git rev-list --all)` is a better way to get the content of all the files: https://gist.github.com/Dorian/e1514535c3c5036cf327ce61eb34a...

But actually an hex number regexp might me far more accurate than the entropy (e.g.: secrets are often long hex numbers).

I tried it and it yields interesting results: https://gist.github.com/28110f0b8105db11e8973d1d0be85259
Mostly agree, but MagSafe was amazing and USB is what everyone in the world uses... we will just have to get a hub... it's not like when they killed floppies or CDs or Ethernet Ports and I hadn't used those in years anyway... This stings. I still like HDMI... literally all the ports on my 2013 MBP I think are perfect. Except the card reader... that's dumb and can go away.

Ugh, I don't care about plugging in dual 5k monitors, I use my laptop monitor when I use my laptop -- I only care about HDMI for conference room sharing since everyone has that. I'm sure in a year I won't care once I buy a hub and new adapters... I apppreviate pushing the envelope but I like more "standard things" like USB and HDMI.
What about the razed blade stealth? It seems fantastic but I don't know anyone using it.
I consider this one of the biggest problems facing the US presently.

It has deep connections to the war on drugs, to institutionalized racism, and a number of other darker areas we have a hard time talking about.

Thank you for pointing it out.
Yes, we all got together this week in Paris.
Because Moneyball would correct the $ that is being offered to you anywhere

Also it's more about using better techniques to identify talent
Let's just say after the past few years I'm not brimming with eagerness to give the benefit of the doubt. That said in this case I actually do see the problem the new system is trying to solve, and think it's got a lot of cool stuff to offer.
There's certainly no shortage of crummy developers layering on useless abstractions for no reason other than dogma. Don't worry, soon all those young and thoughtless developers will be coding in nothing but JavaScript, and the crufty Java die-hards will be pumping prime contracts to migrate old Java business engines well into retirement.
Brilliant. Can't wait to order one. Wonder when it will ship since I was planning on reroofing next 4 months or so.
> if I asked a human cryptographer "why is there an XOR in this round?" I'm asking about the fourth one, the final cause or purpose; the cryptographer might answer "because I wanted uncorrelated input bits to stay uncorrelated after this round", or whatever. But talking about that most interesting "why?" as regards an AI's activity is... controversial, to say the least.

Really? We don't seem to have any problems with saying "your eyeball contains a lens to focus light onto the retina" or "predators have sharp teeth because that is the efficient way to handle meat, as opposed to fibrous plants", but those are both final causes. There's nothing different about an AI's activity. Any activity or quality that is pursuant to a goal, however defined, may have a final cause.
Be thankful that's all it does: https://www.youtube.com/watch?v=Kr_X10iYeP8

Imagine if he did that to the whole internet.
You also now get a 30 percent tax credit to replace your roof. Before, you'd be entirely out of pocket for the roof, separate from the solar install.
Huh? Reka is fiat. It's just that the fiat is Reka's, not that of the SNB. ;)
Is there a summary for anyone that doesn't want to sign up?
Any thoughts about Cisco?

We're literally trying to be the taste and execution. I work for Cisco. Curious about candid thoughts.