skysight-inc/HackerNews huggingface dataset:
> Those get fixed.

This has been done, but poorly and only for an extremely select few things. KASLR is just one example of a poorly implemented feature that pales in comparison to alternatives (completely subsumed by features in the grsec implementation, for example, since it only randomizes things like .text addresses. Maybe some of that got fixed.) Features like kptr_restrict can easily be subverted by a number of trivial infoleaks unless you back it up with a lot of other protections, etc.

Other things like __ro_after_init for read-only post-init memory have only recently been incorporated into arch/x86 (in the past few months AFAICS, so likely kernel 4.8+ only) since being available for nearly a year on x86 at least. I'm not sure if they fixed the fact __ro_after_init apparently didn't work on loadable modules. grsecurity's implementation is better anyway (allowing remarking variables as writeable for short windows), but I'll concede that extra power relies on KERNEXEC, which breaks some userspace things.

I don't think they botched the LATENT_ENTROPY plugin, at least...

If you actually look at the details, Linux has a pretty bad track record as far as "meaningfully implementing defenses" goes, considering how long this stuff has been around. It's better than literally nothing, I guess.

> There are places where the kernel could be further hardened, but would break software.

Uhhhh, sorry, but you need to do your research. There are plenty of places that could be improved without breaking userland at all, while still mitigating many classes of exploits. PAX_REFCOUNT is one example (a variant of which will probably soon go upstream in some weird way, of course). RANDSTRUCT, PAX_MEMORY_STACKLEAK, KSTACKOVERFLOW, JIT_HARDEN, RAND_THREADSTACK... If you're determined to fix the FPs, the SIZE_OVERFLOW plugin qualifies, too (it occasionally hits false positives, murdering an otherwise legitimate task, but this is a different scenario to a feature outright breaking userspace, and it's caught many bugs and can stop many actual exploits on its own).

There are probably at least a dozen major features in grsecurity that don't have to compromise userspace, and still aren't implemented in Linux, with no equivalent, and no timeline on the horizon. I'm not sure what to take away from this assessment of yours that the only remaining improvements will break things, other than you aren't really aware at all of what the current defense landscape looks like...
Interesting to notice that they are writing not what they believe, but what they think what the readers will like. Very inspiring.
Inline styles don't work for a number of reasons:
- No pseudo class support
- No media query support
- Specificity issues
- You'll never stop writing CSS, bloat becomes a problem.

That being said, the approach functional CSS takes is quite similar to inline styles. It takes the main benefit of inline styles (being able to see what styles are applied to an element without having to look at a CSS file and do a lot of context switching) with the benefits of having a stylesheet. Best of both worlds.
http://content.usatoday.com/communities/religion/post/2009/0...
> why people take what they leak so seriously - any jackass with an internet connection can spread information, but wikileaks has a reputation for thouroughly vetting the information they recieve.

I haven't heard of them having a reputation for verifying of vetting their information. Among a large number of people, I think their reputation is that of the quadruped you referenced.
I've used Common Music to make some algorithmic compositions. It was a lot of fun.

Unfortunately, I can't get the latest version of CM to compile, and CM has been moving towards a GUI version, and away from teh command line, which I found kind of sad.

Still, CM is my preferred algorithmic composition environment, by far. It's a shame it's not better known.
You can but it limits what you can do. Example, I can use my Google home with my apps account except I can't use calendar, flight info, or be a part of my existing google music/youtube red family group.
God I didn't want Trump to won, but what happened with Twitter that it became such l self censored echo chamber?

And that one guy with zero charisma was the only one in the Valley to fight back... Who is this Peter I'm interested?
Too bad for all the people that suffer in the meantime. Said one smart person:

... this long run is a misleading guide to current affairs. In the long run we are all dead. Economists [and everyone else] set themselves too easy, too useless a task, if in tempestuous seasons they can only tell us, that when the storm is long past, the ocean is flat again.
> The .gov domain name is exclusively used by the US government.

Not directly:

http://www.ca.gov/
https://www.bart.gov/

(and many other entities at government levels other than Federal)
The baseline I'd like to see this compared to is the not-very-deep-learning "bag of tricks" that's conveniently implemented in fastText [1].

[1] https://github.com/facebookresearch/fastText
During my husband’s multi-month cancer treatment, I declined every invitation for coffee, drinks, and networking of any form. Most of these invitations came from VCs who were trying to get information about what I was working on or the parenting space in general.

Given that most of the time it's the founders chasing the VC's, I was quite curious why she seemed to be on the other end of the stick. A quick click to her Twitter mentions:

> Previously #KillEricsCancer, Postmates, Twitter, YouTube, Google, MIT.

Not saying other people can't have similar success, but you may want to learn more about a person's background before getting too confident.
that's definitely on my todo: https://github.com/pqvst/paperworks-talk/issues/3
Have they fixed the referer spam problem yet?
It seems like she certainly has a track record with major companies as a Product Manager at Google, YouTube, Twitter, and even Director of Product at Postmates.

She even got a dedicated write up in TechCrunch.[0] That is probably enough to get various sized VC's attention.

[0] https://techcrunch.com/2015/12/09/postmates-and-twitter-prod...
She had an article written about her on TechCrunch. That would likely put her on a lot of VC's radar.
What's the difference between softmax with categorical loss ([0, 1]) and sigmoid binary loss? ([0/1])
I think you are misreading him. I gave two possible academic definitions of racism that I had heard of, A) "discrimination plus power", and B) "systems creating unequal outcomes" (or "systems of oppression").

It seemed to me that he was clarifying what those who believe A) mean, but personally goes with B) more. Which is good, because for the reasons you mention, A) is more extreme.
From the same Wikipedia article:

"The wholesale cost in the developing world is about US$0.12 for a course of treatment. In the United States it costs $25–50."

:(
Ask HN: Help me find a good startup to be an early stage employee at?
Hi HN Community,

I am a typical rank-n-file engineer at a big silicon valley tech giant. Work is mostly just plumbing and maintenance now. Prior to this, I have build products from ground up at 2 startups and really miss unadulterated building.

I wanna go back to building a startup from the early stages but the trouble is, i have battle scars now :) and have been burnt by equity structures designed to often neglect the employees in case of a liquidity event.

So many startups still offer 0.01% stake, standard 1yr cliff, and a 90 day purchase period for a role as early as employee number 5 and this is pretty BS imo.

Are there any good examples of companies with a more modern comp. structure?

P.S: I am not blaming the player, I am blaming the game. So, I'm only looking for people not interesting in playing that game.
Feature Golf
Only if the host is 1) running network daemons, and 2) not behind NAT.

These cameras are at risk because the run web servers and use UPnP to make themselves directly available on public IP addresses.
Nations that support discoveries and what has happened when it ends?
Ask HN: 6502 or Z80?
Pretty self-explanatory, really.

The grandfather of ARM, or the cousin of x86?

Speccy or BBC?

The chip that made the Apple //, or the one behind your terminal?

CP/M, or 1000 BASIC variants?

Which one would you pick? And why?

Oh, and no saying that you pick the 6809. We'd all love a 6809, but they weren't common at the time, and Rochester isn't selling in small quantites now, AFAIK. Besides, it's so much nicer that everyone else would agree with you, which takes the fun out of things.
Coincidentally I just read an article about the idea being implemented during a Hackathon at Princeton very recently [0]. Four students put together a very intelligent AI in 36 (!!) hours to verify articles posted on FB for truth, using the term AI lightly of course. They've also open sourced their project since then [1]. Obligatory chrome extension link [2].

[0] - http://www.sfgate.com/technology/businessinsider/article/It-...

[1] - https://github.com/anantdgoel/HackPrincetonF16

[2] - https://chrome.google.com/webstore/detail/fib/ofpheinlpjdffp...
Feel free to elaborate. I keep being told this by professional mechanics, it appears to be the firm conviction of more than one reputable 4x4 magazine - and an experienced overland explorer like Tom Sheppard swear by them.

I am open to arguments to the contrary, but simply saying that those of a differing opinion are clueless is hardly an argument.
I'm not sure what your point is, but he said the KKK was ok around 30-40 years ago, and later disavowed it saying he was joking. In a era of much greater discrimination, that behavior and more like it cost him an appointment as a federal judge. And that incident, from 30-40 years ago, is seen as so bad that people are bringing it up again. I think that demonstrates how fringe those attitudes are - they certainly are not acceptable to the great majority of Americans. If he said it again now, his career would end in milliseconds.

Outside the racism, I agree that he is very conservative, in a way that used to be fringe, which has little support now, but is widely accepted as normalized. That, I strongly feel, is a serious error by us, the public.
Judging from other disclosures (p__sy grabbing, etc.)nothing was going to stop voters for voting for him.
Datanet: A New CRDT-Based Distributed Database
What about FastText?
I'm using the Microsoft Sculpt keyboard at work at the moment, which has a similar ergonomic layout but less travel than my old Natural. It's also really nicely made (magnetic stand + battery cover, and fairly sleek design).

However, one fairly significant issue is that the top row uses buttons instead of keys. It doesn't bother me too much, but I can imagine that would mess with some people's workflows. Also the corresponding "ergonomic" mouse was the worst I've ever used. It's like a large ball that forces me to stretch and grip constantly to keep my fingers on the buttons. I replaced it almost immediately.
I Agree, this is not a good article. Somewhat generic solutions for improbable problems.
Along similar lines, see "Punished by Rewards":

https://www.amazon.com/Punished-Rewards-Trouble-Incentive-Pr...
You can get coffee makers (including, I'm sure, K-cup variants) with timers.

The "bacon alarm clock" is also a real thing, being basically a timer-driven toaster oven with precooked bacon in it, but that'd be a bit more worrying to run automatically than just a coffee maker.
I just don't see the need to depend on Google for anything. They have a good search engine, even though it's ad-choked. (Search for "credit card".) But for everything else, there's an alternative. IMAP for mail, paid backup services, Github. I don't even have Google enabled on my Android phone; at initial power-up, when it asked for a Gmail sign up, I clicked "later" and then deleted the "first time" program.

Google went bad a few years ago. Google had to pay $500,000,000 to DoJ to avoid criminal prosecution in the "sportsdrugs.com" case.

"Federal agents created www.SportsDrugs.net, designed to look “as if a Mexican drug lord had built a website to sell HGH and steroids,” Mr. Whitaker said in his account of the sting… At the agents’ direction, Mr. Whitaker said he signaled his illegal intent to Google ad executives, including Google’s top manager in Mexico. As a tape recorder ran, he walked Google executives through the illegal parts of the websites. He said he told ad executives that U.S. Customs had seized shipments, for example, and that one client wanted to be “the biggest steroid dealer in the United States.”"

"Mr. Page, now Google’s chief executive, knew about the illicit conduct, said Mr. Neronha, the U.S. attorney for Rhode Island who led the multiagency federal task force that conducted the sting. “We simply know from the documents we reviewed and witnesses we interviewed that Larry Page knew what was going on,” he said in an interview after the August settlement…".

Never forget this.

[1] http://www.cjr.org/the_audit/the_journal_takes_us_inside_th....
.gov used to have broader rules and there are a lot of grandfathered domains.
This is actually an interesting article. It's not about Tump, but about sentiment, group decision making, etc.
A eulogy for What.cd, the greatest music collection in the history of the world
I believe they do work[0], it's that most people simply don't use them. I use them in articles, e-mails and HN comments[1] pretty often ;).

--

[0] - especially if you can hyperlink to them and from them back to the main text.

[1] - as demonstrated.
You'll get better at visualizing with practice. Making sketches lets you nail down the big picture without the tool and all of its detailed needs getting in the way.
Peg.js is excellent. I'm working on a browser IDE for it to help people learn how to build programming languages.
You've never run a business, have you?

Your comment isn't aligned with reality on many fronts. Take it from someone who had to pay for employee salaries using credit cards and a second mortgage on my home back in 2008/9 just to keep them employed as long as possible while searching for solutions.

That is not how business works. Mangers don't have crystal balls. On the other hand, if they did, and saw the massive 2008 economic downturn, it's likely people would have been laid off en-masse months before they did. Good management doesn't mean you see every single approaching storm. And, no, corporations are not evil or greedy.

Shit happens and you deal with it as best you can. Most people think large companies have more wiggle room but that is generally not true at all. Their mass and scale can be very damaging.

I remember talking to one of our automation (as in hardware, not software) suppliers back in 2009. Their orders went from 1,200 machines per month to 200. And this happened, quite literally, over one or two quarters.

When you have an infrastructure built-up over time to service a certain level of business and, overnight, almost without warning, your business gets cut down to one sixth of it's prior size, well, things have to change and they have to change very quickly.

The options are: Drain the company of all cash, everyone loses their jobs and the company goes out of business. Or, lay-off a sizable portion of your workforce, sell off assets, restructure and generally do anything you can to stay alive, remain viable and see daylight on the other side of the singularity that tried to kill you.
Everything seems like a win to Donald Trump. Great (?) watch http://www.pbs.org/wgbh/frontline/film/the-choice-2016/
My definition is the accepted meaning of the word.

> Whether those statements were racist is a debate that's been held a thousand times

I disagree; it is not a matter of debate. In fact, I've never heard anyone but the most dedicated apologists say otherwise. The racists generally have said that they don't care, which I believe.
I can't seem to find where the sample size is mentioned. It mentions that Quid has 50,000 company descriptions, but is n=50,000 tiny in thr ML/DeepLearning world?

I do neuroscience research and where I am coming from I have maybe n=150to200 per class. And that is not generally regarded as a tiny sample.
The "available" column is wrong.

Try entering "cat"

It suggests "kat.com" as available

it is not
My mistake, you are right [1]. Thanks for the correction.

[1] https://en.m.wikipedia.org/wiki/Significant_figures
Subject has clicked on the button nine times within one second.

Yup, ThinkPads with their dual mice (and mouse buttons!) are cool.

Subject has run script to click on the button ten times within one second.

"Wha--" * looks at xterm with "sleep 1; while true; do xdotool click 1; done" in it * "how did you--"

Subject has tried to drag the body.

"So I can't select now?!"

Then I ran one of the JavaScript excerpts in another comment which proceeded to make the page continuously open extra tabs (from other links). Task Manager to the rescue...
By comparison, the UK government announces £300 million investment to teach children how to join a choir. https://www.gov.uk/government/news/thousands-of-children-to-...

Priorities. :|
Obviously, she can do what she wants with her life, but by writing about her decisions, she has invited people to comment on her experiences. I've dealt with a newborn. It is soooo stressful and exhausting. I have dealt with serious health problems. Even more stressful. I have almost a decade of startup experience (though not as a founder). Also stressful. For 99.9% of people, and maybe more, combining the three is a recipe for disaster. Apparently she got lucky and it worked out, but I really hate this message that people can "have it all" because life doesn't work like that. There are always trade offs.
I have a feeling this whole article is an attempt at a super meta/reverse psychology maneuver to grab VCs attention.
Programming YouTube Channel
Jeez, that sounds so much like a writ of assistance (which is what inspired the Fourth Amendment), it's ridiculous on its face that anyone would grant a warrant like that.
Perhaps silly since Trump's position is "Intel yes, Infosys no", i.e. no change in H-1B policies for students who graduate from US institutions of higher education, and given how big a fight there will be just to zap the Infosys bodyshop sector of H-1Bs, it's highly questionable it'll go further.

On the other hand, if the only reason you're going to spend 4 years at school in the US is to get an H-1B visa, the risks for the opportunity cost you're taking has definitely gotten higher. On the third hand, do we really want such people getting work over here, as in, if you're here to get a real education and then work over here, that's quite different than just the latter.
At least it makes a good slogan.

"Get you p__sy grabbed at Trump University!"

Someone make a shirt pls.
Why would it violate anything?

When you retire, you are basically stating that you are unfit or unwilling to continue working, and as such the company you have worked for all this time should continue to pay your living expenses.

Getting a new job basically says that you can and want to continue working.
AWS Serverless Application Model (SAM)
What are you doing at a squat rack for an hour?
Interesting you mention this ...

There's a big item on one of my whiteboards: "put gmvault into the environment" ... the idea being that you could run 'gmvault', over SSH, on rsync.net:

ssh user@rsync.net gmvault ... blah blah ...

I've been meaning to do this forever ... it would be great if rsync.net customers could not install anything, but just run gmvault as an ssh command.

The only reason it takes time is that we do not have a python interpreter in our environment - we try to keep things as simple and locked down as possible - which means we have to "freeze" gmvault as a binary executable in order to put it into place ...

So ... folks want this ?
Not the OP, but I swear by cardboard, hot glue, and play doh.

I make lots of rough scale "prototypes" with the above tools to get started, and spot lots of problems this way.
Z80. I found it so much easier to program (while hand-assembling using a printed opcode table) back in the 80s. Also, ZX Spectrum all the way ;-)
How to Start a Startup at Penn
Not that I know of, it's a hard problem, perhaps look at this very recent discussion of it: https://news.ycombinator.com/item?id=12970820 ?
I did as well.
Ok, that's not too unreasonable (especially if you need to download an extension anyways). If you make delta updates available for changed pages, this should actually be reasonably small once you have done the initial download.
I got a talk about it when I got my green card.

Kind of late to be doing it when you're applying to naturalize
Tutorial on Kubernetes Container Monitoring and Log Collection
Who are you even replying to? No one assumed anything about you and jump in anyways with a negative spin.
Ok. Good they're doubling down on it.
Nope, big table.
Let me urge you to follow politics more closely; all our lives and welfare depend on an informed citizenry. Here are a couple of very efficient ways:

* Subscribe to The Economist and read it weekly. It's designed for busy people but has real, sophisticated information and exceptional breath of coverage. It's a bit right of center, but not ideological (except their obsession with the free market solving every problem), and very credible.

http://www.economist.com/

* Read this news summary daily. It's a bit left-of-center, but again non-ideological and the coverage is exceptional.

https://www.justsecurity.org/category/news/

* Check the headlines at the NY Times. They are criticized by all sides for being biased against them, an excellent sign of good journalism. Their editorials are left-of-center, but ignore them and read the news:

http://nytimes.com

In about 20 min a day, you'll be better informed than almost everyone you know. Final tip: Skip all editorials, columns, talk radio - 99% is either uninformed, intended to twist things and manipulate you, or both.
I've always liked the scene in the movie version of "A River Runs Through it" where the father is teaching his son to write, and has him write an essay, then says "half as long", several times.

That has actually been one of the best reminders for me regarding my efforts at writing. Write and compress until the essential points remain.
> The statistics say that most of these alarms are not indications of peril

That's because they are CYA lawsuit deflectors.
Charlie Stross should put the language Z in his books. It's another language of that heritage, but writing a working compiler in it would constitute a thaumaturgic formula so powerful, the universe would end.
Judging by the text and posts the author is well aware of all that, is this preaching really necessary here on HN? :/

The process of reverse engineering and hardware design itself is still very interesting to read about and I'm not sure what your post really adds besides negativity?
It sound like a great idea, but I can't access your site.

This is the warning that I get from Trend Micro on my router:

Warning! The website contains malware. Visiting this site may harm your computer.
Detailed informations:

Description:
Malicious Domain or website, Domains that host malicious payloads.
Host: 94:35:0A:EB:B6:D8
URL: catelus.com

Maybe a false positive, or a puppy with a bad history?
Right!

Yes, there is a cost to writing code instead of using a pre-existing solution. But there is also a non-zero costs to using pre-existing code!

In the end, using the pre-existing code will be a win in most cases. But reading docs is not nearly as much fun as reading code, so the emotional and procrastination barriers can be higher.