skysight-inc/HackerNews huggingface dataset:
From Figure 1 (which illustrates some ROC curves):

> The gray line is the AROC curve for a baseline (random) classifier

The AROC is the area under the ROC curve, not the curve itself.

Also, the scale on Figure 1 for the x-axis (corresponding to the False Positive Rate, or sensitivity) go above zero and below one, which doesn't make any sense.
How about this:

The John has to audition for the porn shoot (which in practice will take 5 seconds) but an administrative charge of $200 has to be paid by him to the film studio company. The film studio pays then $100 to him and $100 to the actress as salary for the porn shoot. At the end the resulting porn flick is encrypted, stored in a super secured data vault and offered for sale at the price of $1,000,000,000 ... ?

I think I hacked the law!
Almost one in ten set to quit /If/ snooping legislation is passed.
7.3% of people who responded to a survey about online snooping, that was run by a VPN company. That doesn't equate to "almost one in ten" people.

In fact, if anything, I'd say that survey signals that most people probably aren't actually worried about it. 1/3 of the respondents said the law wouldn't change what they do online.
Why Twitter Must Be Saved
You could host your own API's and whitelist the workshop's external IP(s) from authentication?

Another option would be for you to create a "proxy API", which would use your own auth credentials to connect to the API of your choice, but uses some workshop-compatible auth means for requests to it.

I don't really think it's realistic to expect every API implementor to care about workshops, and it's not so hard to get your own API even as a student.
yes, the infamous Mitchell & Webb Identity Theft sketch https://www.youtube.com/watch?v=CS9ptA3Ya9E
It's looks like we are talking about differences of use of physics in practice versus advancing of physics as science. No doubt, if I will need to calculate something, being paid for that, I will use proven formulas. Totally agree with you at that point.

However, current major theories are in stuck, they cannot explain what we see, because now we have more data. So it is better to look for something else, which will explain everything we know already and more.
No, that's NASCAR. And tailgating. :)
Wish I could remember where I saw it (reddit?) but just last week I read a comment from a backhoe operator that said basically, "it's fun for the first four or five hours then it's hours of tedium making sure you don't kill someone who's stupid enough to stand in the wrong spot."
To what it relates to neuroscience I agree, but in the end it's mostly mathematical models that don't connect much to (physical) reality
How is this the case?
You may find this article [1] from the guardian interesting.

[1] https://www.theguardian.com/books/2016/jul/18/against-electi...
Get over it man.
Is there a fork of Android that strips away Google's intrusion? One that is also maintained often too.
In The Netherlands it is extremely common for applicants to put a picture of themselves on their resume... I find this pretty messed up.
Here is the thing. The email exchange with Politico actually proves to me that the Clinton campaign has a lot less influence over the press than people assume. Politico sent an article that is very critical of Clinton to her campaign. They were trying to push back. Then Politico published the article anyway. If the Clinton campaign had any influence over Politico they would've been able to stop the article. You have to see the context. This was THE big critical story about Clinton during the primaries (besides the millions articles about emails) and I couldn't find anything essential that the Clinton campaign was able to prevent from publishing.
If only programmers would invest as much in their own productivity... :/
Ask HN: Is it expected to always be working during working hours?
I am a fairly new employee at a rather large company and when I was just starting out I had a lot of things to learn (as expected), so I did a little bit of everything to get the hang of it all. As time went on I have been given my own projects to work on, but there are moments when I am unable to do anything because of a dependency on someone else down the line. In times like these, is it expected of me to find myself a (side)task to keep me busy or is it understandable that I am on "hold", so to speak, and dealing with things that aren't necessary work-related (i.e. doing errands, reading, taking video courses etc)? I'm new to the IT industry (and to working full-time in general), so maybe all of this is commonplace knowledge to people with more experience.
computers where not hyped when it was 320x240. Virtual reality doesn't have to be about gaming. If it can open new ways of thinking, interaction, then it doesn't need 4k. The resolution is more than adequate. It's more about finding utilization.
> I would prefer, if I could retire, to make short films and maybe to write plays. But I can't retire yet. So I'll push stones. It pays well.

Please don't stay because of the pay. You won't look back in 25 years and say "I'm so glad I bought a new iPhone in 2016, but didn't do the things I wanted to in life"

The last company I worked for was full of people only staying because retirement was "only" 10-15 years away, and they were not a healthy/happy lot.

You'd be giving up your life "now" in the hopes of a good life "then", which is insanity.

I have left Software twice now to pursue my goals - the first time I spent two years driving Alaska->Argentina more-or-less on vacation, and right now I'm spending two years driving around Africa. I'm exploring my passions while on the road for writing, photograph, videography, languages, etc. etc. I have less money now, and a lot more happiness.
I absolutely want to be done with coding by the age of 40. Coding is a young man's game. It'll always be a passion and hobby of mine, but it wouldn't fulfill me to still be primarily writing code for someone else's company.

I was an athlete in a former life that allowed himself to get woefully out of shape. I went on a health kick a couple of years ago, got into better shape than I was in college. Now I do personal training on the side, just finished my first triathlon, and am now training to compete in American Ninja Warrior. I really wish American Gladiators was still around though as I would've much rather preferred that.
Despite Push, 32 States Saw Fewer Than 100 Additional AP CS Exams Taken in 2016
Come join me girls
If the included file is writable by the PHP user then I would say that poses a reasonably high security risk; potential privesc, information disclosure, RCE. Of course an attacker would need the ability to manipulate local files as the PHP user, but that isn't much of a stretch.

Under a typical install, e.g. Debian, Ubuntu, etc, nginx parses the configuration files as root thus any exploit of the config parser gains full root access as the nginx master process doesn't drop caps.

Depending on where the include line is placed it may be possible for an attacker to create server blocks allowing them to execute arbitrary PHP by permitting PHP execution from a directory with PHP write access, e.g. `wp-upload`. Assisting exfiltration of data by allowing easy remote access to the filesystem. Possibly proxy all traffic through an attacker controlled script or host. Exposing local services to the outside world.

I'm sure there's plenty of other interesting little attacks possible if given enough time to play around with it.

If at all possible I would avoid permitting unprivileged r|w access to nginx configuration files.
Google is a MySQL shop. It's what their RDS-like cloud offering runs, and it is (or at least, was) the supported RDBMS for building apps internally. (Sadly)
TIL. I did not know Xdummy. I have just followed your link. It is trivial to launch. It avoids installation of vnc, has a better compatibility and is already present everywhere.
Potatoes are members of the nightshade family, along with tomatoes and peppers and a few others. Of course selective breeding can produce toxic potatoes if you don't test for the levels of the toxin they're already known to produce. Also, the claim that there's a lot more risk and uncertainty with conventional breeding doesn't stand up, because GMO crops build on top of conventional breeding and inherit its risks too, and because it's nowhere near as clean, simple and interaction-free as you might naively expect.
Unfortunately, Awesomium seems to have been in "lights on, nobody home" mode for over a year now, and uses an outdated version of Chrome. [1] The nail in the coffin is a predictably unfulfilled promise (see Yannou's rule #1 and #2) followed by radio silence: [2]

"The product is very well alive. Version 1.7.6 will be released in a few days with many new features and an updated Unity plugin as well. Meanwhile, we are also working on our next major version (v2.0)." Perikles C. Stephanidis, Jun 15

The other big problem is that it's not free. So nobody is going to pick it up and run with it.

[1] http://answers.awesomium.com/questions/6880/does-the-project...

[2] http://answers.awesomium.com/questions/7255/is-awesomium-dea...
Data science test – Beta testing
Aspiring Minds is ready to roll out the first version of its simulated Data Science test. The test will help data science enthusiasts to evaluate themselves and companies to easily identify good data scientists.
We are looking for enthusiastic beta-testers, experienced in data science (>2 years), from the industry as well as academia (Ph.D./Master students preferred), who are well versed in machine learning programming in Python and/or R languages. This will greatly help us build a good product which is very useful for the community.

For this, you will take a 60-minute test and then share your feedback in a 10-minute form on question quality, comprehensiveness and platform.

If you are a data science enthusiast, you'll definitely have fun experiencing the test. We are sure you will also have some learning about data science.

We have exciting rewards up for grabs for our beta testers, as a token of appreciation.

Wanna be a part of this enriching experience?

Apply here: https://docs.google.com/forms/d/134V_1hWg_L-uvNiacFOvy_lCtJqDv26_rLLpOq7h9iQ/viewform

Additional information and guidelines: The questions in this test module are designed to assess the data science acumen of the candidate. The results of these assessments will then be used as job credentials by a large pool of big corporates! Your work would involve solving 4-5 data science questions comprising MCQs and programming problems, within a span of 10 days. During this period, we'd like you to be committed to the assignment and provide an extensive feedback about the various aspects of the test module. The questions from the feedback form will also be made visible to you before you start the test so that you have in your mind, the kind of feedback you need to provide before you start testing. You can then write your responses to the questions after you finish the test.
Think different heroes: A tribute to Aaron Swartz
Or rather rubbing shoulders is usually used to describe networking, though if you are mingling with the great and the good/important or famous, hobnobbing may have been a better term.
Neither is a browser runtime. I would even say running code in a browser could be more dangerous, because you have a huge complexity (HTML+JS+Network Stack+3D Engine+kichen sink in modern browsers) and thus a large attack surface. Whereas if you built an isolation layer around a OS process (or bytecode), you can restrict the code to do only what it has to (render to audio and video buffers), and you have to audit the wrapper (sandbox/VM/runtime), which is much smaller than the whole browser.

The reason browsers are relatively safe now is that so many brilliant people are working really hard on them, not because they are inherently safe.
That's really cool! Like it a lot!
I am not sure precisely where Elizabethan England was on this curve in the time of Shakespeare, but that was well before 1790-1820.

Perhaps that's less "significant" than "unusually well preserved."
Do you mean it's not politically correct?
If they do promotions at all, instead of filling higher level vacancies with new hires (at "raise by changing jobs" rates). This also explains why those raise-less promotions are even possible: those who accept them see them as an investment in their future market value, the next time they change for a raise they can enter on a higher level.
Shouldn't Chromium Embedded Framework be on this list? [1] That seems to be robust, well maintained and widely used by many projects [3], uses a recent version of Chrome, and it supports off-screen (non-GPU-accelerated) rendering. [3]

I haven't used it myself, but I'm considering it, so I'd appreciate hearing other people's thoughts about it.

[1] https://bitbucket.org/chromiumembedded/cef

[2] https://en.wikipedia.org/wiki/Chromium_Embedded_Framework#Ap...

[3] https://bitbucket.org/chromiumembedded/cef/wiki/GeneralUsage...
Reemphasising: CGI can be used to reduce costs. Hence, relying on "uses CGI" as a sign of either a high-budget or low-budget production isn't valid.

If you want to assess the budget, look at the budget.
I guess my point is that to some of the top researchers, the current developments are a means to an end, and the end is understanding cognition.

Totally agreed that if you're into the deep learning/CNN development, especially the practical side, the connection to brains is only through the "neural" analogy.
I think it got downvoted because it is inaccurate.

* You can opt-out entirely on interest-based advertising with google [1]. You can also just delete your cookies/only browse in incognito/etc.

* Advertisers cannot target audiences with less than 100 people (1000 for search ads)[2] so they can only get a 1% chance of identifying "you" (this will go down as the list grows above 100), and even then that is only if you click on an ad for their product which is typically way under 1% as well. So less than 1% of the time, they have a maximum of 1% chance of identifying "you".

* They do not sell your personal information [3]

[1] - https://support.google.com/ads/answer/2662922?hl=en-GB

[2] - https://support.google.com/adwords/answer/2472738?hl=en-GB

[3] - https://privacy.google.com/intl/en-GB/how-ads-work.html
Lessons from the Dyn DDoS Attack
The Infancy of Julia
StarClinch – India’s largest talent discovery portal
Nice work!

How does the initial submission to the sites work? Am I missing something or is this currently a manual process? It would be cool if it submitted on the first comment.

N.B. If you auto add all your blog posts to HN you will get silently blocked from submitting (although it will still appear to work from your point of view). You will then need to, firstly notice this, then email the mods to get unblocked.

I've hit this myself, so now I just include a simple link to:

javascript:window.location=%22https://news.ycombinator.com/submitlink?u=%22+encodeURIComponent(document.location)+%22&t=%22+encodeURIComponent(document.title)

You can see this at the bottom of all my posts on https://unop.uk and I've seen others do something similar.
Not even close to suicidal.
what new apis should phantomjs support?

download support[1] is the only new api in development. it's not tagged for the 2.5 release[2].

[1] https://github.com/ariya/phantomjs/pull/14225
[2] https://github.com/ariya/phantomjs/issues/14458
How the Push for In-House Movements Ruined the Modern Luxury Watch Industry
I've been using chromium-headless for certain automated tasks, and I've been getting a lot better results than from PhantomJS in terms of correctly rendered resources, resource consumption and execution speed. If your business depends on rendering engines and you're using PhantomJS, chromium-headless is probably something you want instead.

I build from chromium src, and my code is more or less an extension with its own BUILD.gn with a deps on //headless. Once you've built the initial tree (took a night for me), builds will be really fast.

Most of the interaction with the browser is by the chrome debugging protocol, as with "normal" chromium. Generally speaking, you want to target that, instead of the internal APIs.

There are some tweaks you need to be aware of. Chromium needs a homedir, so you want to configure that. There's state stored between sessions, so if you want process invocations stateless, consider spending some time hacking or run the process in a fresh namespace/chroot/docker/jail/whatever each time. I had to write my own protocol handler and URLRequestJobs because I render pages from archives on disk and that was the easiest way to get that started at the time.

I don't know if vanilla chromium supports it, but I'm pretty sure I've seen a --headless flag somewhere... If not, headless_shell is pretty easy to build following the official build instructions[1]. I'm running on RHEL/Fedora/CentOS. There's also unofficial images on docker hub if you want to go that route.

[1]: https://chromium.googlesource.com/chromium/src/+/lkgr/headle...
What about Electron? Multiple people, including myself, have used it to make a web browser
also: social apparently meaning social security number. some American thing obviously.
The national security argument only flies if the people buy it. That's the root cause; fix the people.

I deliberately and provocatively overly simplify the issue here, but I claim that every problem we face can be solved by better education that simply requires people to ask "Is that really the way you say it is?" in every single step of every single fact they ever face.
I'm getting pretty good mileage out of using uBlock Origin's "Advanced user" mode and by default filtering everything (other than the initial HTML). Then as needed I can allow images, JavaScript, third party content, etc. progressively. The base experience though is much like the 90s web experience. Of course there are sites with almost no content in the the initial HTML file.
Consider adding a downloadable build to the github page. I'm capable of doing it, but feeling little lazy to install using npm (mine is probably outdated etc.), but I'd definitely install a ready build.
1) How much do people actually believe the sinking of the Sewol was a human sacrifice of hundreds of children to honor a cult founder?

2) How likely is it that that's actually true?
I think it speaks to a vision of masculinity I can't really relate to, and think many around me would agree. (Man, this is the first time I've seen downvotes on HN - interesting that this is such a sore thing.)
Unless the API can somehow place proper phrase instead of image. If text would be matching all images, this should work fine.
Show HN: Hacker News Night Mode – A Firefox Addon
The situation you are lamenting (and I agree with your sentiment) is not a "tragedy of the commons." I think you are trying to describe a collective action problem. Collective action problems are frequently brought up during a discussion of the tragedy of the common but the existence of a collective action problem does not imply that there is a tragedy of the commons. If you are interested in these types of issues Mancur Olsen's "The Logic of Collective Action" is the standard introduction.
Yes - it's a good distinction to make and when you need it, it's extremely useful. As I said, Perl deserves respect for Unicode in general and raising awareness of this issue is a key reason for that.

However, keep in mind that I was responding to a comment which simply referred to “Unicode issues or needing to use silly "u" prefixes”. This whole tangent started with a guess about what the author might have had in mind.

On this specific point, note that I wasn't saying that it wasn't good to have both but that I wouldn't call a language incorrect for working only with Unicode codepoints. That's because for most programmers this entire class of problem is someone else's problem – usually whoever wrote the text rendering engine in your browser or OS – and the people who do need to care have needed to learn most of e.g. http://unicode.org/reports/tr29/ anyway and understand which portions are relevant to whatever task and data they're working with. It's kind of cool that e.g. 'क्षि'.elems == 1, 'क्षि'.chars == 2, etc. but on the rare occasions where that would be more than trivia, I was more interested in questions like measured width in a certain font or language-specific collation or word-breaking rules.

This is all coming back to why I don't think attacking other languages is effective advocacy unless you're very knowledgeable on the details and impact for working programmers. Telling someone that a commonly used tool which works well for millions of users is incorrect is unlikely to produce the desired outcome. Showing them a cool thing which your favorite tool does better is usually going to be more effective because it gives you something concrete to talk about and it's not confrontational. Programming languages are a major commitment and very few people are going to switch because of one bullet point – that either takes market requirements (e.g. Objective C/Swift, JavaScript) or gradually building up a good reputation over time.
IPv6 and a return to end-to-end addressing isn't really aligned with the AWS style of proprietary platform lock-in.
The same NYT whose profit shrank by 95,7% in the last quarter because of the extremely biased reporting?

http://www.dailymail.co.uk/news/article-3897406/New-York-Tim...

And the exactly same numbers by Reuters but with completely misleading headline as if everything was fine:

http://www.reuters.com/article/us-newyorktimes-results-idUSK...

Funny how the NYT now makes about as much profit as I do as a contractor. Maybe I should buy them and put their journalists to more profitable use, like for example letting them clean toilets or work the streets.

Edit: Why the downvotes? Does somebody dispute the fact that the NYT's profits are down by 95,7%? Or would somebody dispute that this company wouldn't be making more profit if it sent its employees to clean toilets or sell their bodies?

I believe I made here a sensible business case for saving the NYT.
If caring for your incompetents is fun, then dwarf fortress or the genre of DF-lite will be for you.
Everything is scraped from large porn sites. Please contact me for details, link in my profile.
I don't know any lawyer that looks like Ally McBeal and her colleagues, but that show was funny, that's the only issue of the Big Bang Theory.
There is a Google Group for it: https://groups.google.com/a/chromium.org/forum/#!forum/headl...

I check every now and again. I'm super interested in headless PDF generation (using Nigtmare now)
That's a bit like saying "besides having reasonably good eyesight and ten working fingers that can type, I can't think of anything else one might need to be a developer as a profession..."
Can Weed Help You in Weight Loss and Weight Gain?
So A/B "The Americans", "Better Things" or "Vikings" and either of "Dallas" or "Webster". There has been significant improvement.
Looks promising. There are plenty of issues with Disqus and running a full Discourse instance just for comments is probably overkill.

This is my current low-tech solution on https://unop.uk that works on any page (or any site for that matter):

<a href="javascript:window.location=%22https://news.ycombinator.com/submitlink?u=%22+encodeURIComponent(document.location)+%22&amp;t=%22+encodeURIComponent(document.title)">Submit / Comment on Hacker News</a>
Contacted you. Make sure to check the spam folder ;)
Teaching. But the money difference is so ridiculous that I would have to go back in time and make every financial decision differently for the past ten years including having less children in order to afford it. Instead I have taken second jobs coaching at a gym, volunteered for hour of code and other programs at my local library and started teaching Sunday school at my church.
Is that an admission that if people hit a paywall they don't proceed to pay for the high-quality content behind it?
fwiw, nightmare is just a thin layer above electron's browser.