skysight-inc/HackerNews huggingface dataset:
Stories like these always remind me about Satoshi Nakamoto, who too, in this digital age has managed to remain unknown and at the same time very prominently be part of the technical community in the early days of bitcoin.
Why China Should Build the Great Collider
Of Monoliths and Mesh Networks
https://translate.google.com/#de/en/zeit
That's fair enough. It's kind of like where I am, but I suck more.

But

No matter how much you know, there's always going to be a part of the stack that you can't develop for: you can't know everything.

that was my point.
I don't think that example counts against anyone. My reading is that only KY -> MA -> NY counts against MA instead of KY.

"People who grew up in one state, went to college in another and then moved somewhere else are counted as migrating from the state where they attended college"

To me "somewhere else" means a third state neither KY or MA.
The Challenge of Consciousness
Welcome to the arms race.
It would be very difficult to introduce enough extra paper ballots to make a difference, because the chain of possession is audited in real time by a lot of people, many of whom don't know each other ahead of time and have no incentive to collude on a felony.

Perhaps you'll prove me wrong in a follow-up comment, but in my experience folks who think about paper vote fraud like what you describe, usually have little to no experience at actual polling places aside from popping in briefly to vote.

In contrast, you could have 20 people looking at an e-voting machine, and none of them could tell whether it's working correctly. It's a black box, literally in many cases.
About half a year ago a paper was posted here on HN about research which conclusively demonstrated vote manipulation in several provinces in Russia: https://arxiv.org/abs/1410.6059 The technique essentially uses the non-random distribution of round numbers in vote counts as indication that some sort of manipulation has taken place.

At the very least, it would seem prudent (or perhaps a fun project for someone) to check if election returns in this past election pass this test.
This is why we need statistically inclined journalists. The problem is that this makes journalism even more expensive.
Ask HN: Would you discuss your company's analytics privately?
I do a lot of analytics, mostly in SQL/Python, across, at the moment, 5 tech companies. 50-80% of this is repeatable. The other 20% is not. And that is the stuff I feel that actually could make companies significant money.

Do you have the same feeling? Would you share your analytics (the HOW and the WHY) privately in exchange for other experts in the field sharing their knowhow?

Asking because I am contemplating whether to start a private community - somewhere I would not be afraid of an end consumer finding how we do analytics.
Oh really? Right from the horse's mouth

https://www.epa.gov/noi

>Many of the environmental statutes that govern EPA actions contain provisions that allow citizens to sue EPA when EPA fails to perform an act or duty required by the statue.

Right now there's a few lawsuits against the FDA to try to prevent them from regulating e-cigs.
Unless the attacker is a foreign state, who can't gerrymander but can bring Stuxnet level of hacking resources.

As a remote foreigner, I'd much rather find out that Putin got Trump elected than US voters did. The latter saddens me so much.
There are procedures for auditing counties can have, paper ballots have barcodes which must be unique or fit a pattern. If voting machines have printed receipts (the only sane way to do electronic voting afaik) the printed receipts can also be tallied and must be unique. If there is no paper trail, you can still check the voting machines and databases for any tampering with a forensics/security team in case the manufacturer is a complete idiot who hasn't provided enough security.

Given the amount of hacking that has gone on during the election, to influence the election, it is worth investigating at some level for a sanity check. The kind of targeting required though would mean the Russians had to have the best polls out there. Targeting few counties in WI, MI, and PA, (and OH, FL, AZ) enough to tip it to Trump in a electoral college big-way? Doesn't seem too plausible, but I'm no spy.
> HR: We want someone who can provide value from day 1.

This is particulalrly bad, because no one can honestly promise that without knowing more about what their walking into. If the codebase is spaghetti and it takes a week to checkout and setup a project (alarmingly common). They're rewarding the liars.
The best motivation I've heard is here: http://security.stackexchange.com/a/17088/77002

Essentially, blowfish (Bcrypt) doesn't appear to be FIPS-compliant, so if you have to be FIPS-compliant, you use PBKDF2.

And, considering the rest of the comments about why Bcrypt is preferred over PBKDF2, it appears it's all about how a GPU gives a significant speed-up for PBKDF2 but not Bcrypt. But now there are FPGAs that significantly speed up Bcrypt in similar fashion, so it could all be a wash depending on who you talk to.
https://mobile.twitter.com/LatishaOrtiz54/status/80079429551...

https://mobile.twitter.com/LatishaOrtiz54/status/80079523505...

These were part of the Berkeley team's rationale for asking for investigation.

I have not independently verified this claim yet.
As they say, if both sides all of the sudden hate you, you must be doing something right.
Thanks for using GitLab. Reading this as the first thing about the release from the beach in Maui. Mahalo!
Alex Halderman is not 100% legit, he's an activist pushing an agenda, HIS agenda, now aligned with his beliefs and political preferences.
What did he get wrong with the election? As others have pointed out, he gave Clinton a 70% chance of winning. The fact that Trump won was not unrealistic in the slightest (30% chance).
The Big Little Man from Brooklyn (1968)
I usually have fun with security challenges. And get annoyed at ones with multiple choice answers.

What's your favorite movie? -> a sexual position

Where did you go to high school? -> another sexual position

City of birth? -> something else from the kamasutra

Of course, that makes phone conversations where they ask you those security questions very fun.
Weird. I distinctly recall that a few weeks ago refusing to accept the results of an election was treason. Lots of people saying that, including here on HN. What changed, I wonder?
Mobile Spy App for iPhone, Android and Windows Phone License Key
JS Coach: Opinionated Catalog of React Native (and Other JS) Libraries
Many will say that "free speech" is a negative right, and as such it only means anything in the context of governments: in other words, it is something the government cannot take from you.

Government can use force (the very real threat of jail, fines, etc) against you to suppress your speech. All Facebook can really do is prevent you from using their site, in the end. Naturally, if they work with a government, Facebook becomes a kind of arm of the government, but that's a separate context (but it is also what this article is about).
I recently did a similar thing with a Spectrum emulator and zasm. As I kid I completely failed to teach myself Z80 machine code, but trying again now with way better tooling it was surprisingly easy and a whole lot of fun. I actually enjoyed the 8bit assembly experience. The feeling (on 8bit machines) that the whole computer is deterministically comprehendible was a change.

I then started looking at what i386/AMD64 assembly looked like to teach myself that, and quickly decided to back away :)
That explains tiny variations, but the article is talking about a shift to a new variant which requires a different immune response.

The question is why did this new variant "completely replace" the old ones in the population, instead of just operating in parallel?

The only thing I can think of is that the old flu variants were in decline already due to herd immunity, but the article seemed to imply there was more to it than that.
https://www.verifiedvoting.org/verifier/ is doing it
They can hit two birds with one stone since they keep talking about wanting to filter the things people share in the US too.
I'm flagging this article because while the topic itself is totally on-topic, the discussion has devolved into ridiculous discussions of "censorship of fake news" which is a totally different problem.
I worked at NIST until recently, and my password expired every 90 days. We also had separate passwords for a half-dozen legacy IT systems (timesheets, travel requests, IT support, etc), all with more stringent and senseless length/character requirements than the last. And password managers were not allowed per security policy.

It was frustrating.
Your world is very different from mine, because it would never occur to me to ask that question, much less to answer it with anything but an emphatic "no". I am fairly sure I have never learned anything about programming from a video and have trouble imagining how that would work. I am curious - who produces these videos? Where do you find them? What sorts of things do you learn from them? How do they overcome the slow pace and low information density which appear to me to be intrinsic to the medium?
Here is the change.org petition we can all sign to make a difference:

https://www.change.org/p/demand-an-audit-of-the-2016-preside...

Every vote should count correctly.
"Sinclair was considered a muckraker, or journalist who exposed corruption in government and business.[4] In 1904, Sinclair had spent seven weeks gathering information while working incognito in the meatpacking plants of the Chicago stockyards for the newspaper. "
Yeah, it's weird how it's a national scandal that people have to present ID to vote, but not to drive a car, rent an apartment, open a bank account, buy cold medicine, get federal assistance, enter a courthouse...
'If 20 million people use the same password manager and I have an exploit for it'

Someone is going to exploit my local password manager remotely?
Wow you guys were coddled. I had a hard time finding good Spectrum info in an ex-YU backwater, mostly just piecing it a bit at a time from magazines.

If I got access to something like Stack Overflow back then I think I would have fainted.
Award-Winning Suite of Microsoft Word Documents Processing APIs for Any Platform
The insinuation is that the disparity in voting methods could reflect tampering (for Trump or Clinton, depending on your party affiliation).

I think there is actually robust statistical approaches to detecting irregularities and to normalize for demographic differences, etc.

If anyone has a credible source for such a study, I'd suggest replacing the original link, which offers no evidence, statistical or otherwise.
The challenge when considering a small anomaly is to explain how the hackers could have known in advance it would be sufficient to tip the election.

Today, we know the vote totals, so we can look back and say "wow, it's a small effect, but it would have been enough to tip things the other way."

But hackers working on Nov 8 would have had no idea how the vote was going in real time. No one does, especially in a state that uses paper ballots for some counties. The vote count only becomes apparent much later.

So how would the hackers, who were obviously highly motivated to achieve their desired result, decide that a 7% tweak in a few counties would be enough to get what they wanted? When they wanted it so badly that they're willing to commit felonies to get it?
Does that mean if I'm the editor of a newspaper I'm required to publish every letter to the editor I receive? Even if it's inarticulate neo-Nazi barf?

Censorship is something the government does. The First Amendment doesn't apply to private entities. Private entities are not obliged to provide a platform for whatever opinion you feel like spewing.

This topic has devolved into ridiculous flamewars.
This is not something you can hand wave away with "common sense." Common sense would suggest that college-educated young people are moving to Massachusetts (Boston) and New York (NYC), but the article shows the opposite. If the effect is clearly big enough to affect those states, what else does it affect?

E.g. why does Kentucky show in-migration and Kansas out-migration? Why does Alabama show out-migration while Louisiana shows in-migration? Arkansas shows in-migration but Missouri shows out-migration? Oklahoma shows in-migration but Kansas shows out-migration? College-educated people are moving to big cities in Wyoming but out of Nebraska? Are Connecticut and New Jersey showing a net in-migration of college-educated people because Connecticut and New Jersey residents are going to school in New York and moving back home?
There are a few instances of generics manufacturers being shut down expressly due to this. eg the fake drugs were being sold to consumers

It's very easy to find specific instances via standard Googling/DuckDuckGo/etc.

Note - that's not me being hand wavy, I'm actually saying "Google it" because in-depth results DO show up.
At some point (now? before?) they'll start to hit feature parity with the market leader (github, presumably) and the releases are bound to be significantly less exciting.
Note, google didn't close down their office, they just shutdown operations. There were and are still engineers and sales people employed in china, and specifically the wudaokou headquarters.
I have done that repeatedly. If you're doing in-house software and have a brisk release cadence, it's not particularly hard. And it's not just an Agile thing. I was doing it for financial trading systems in the 90s, and my dad was doing it for manufacturing systems in the 70s and 80s. He'd watch people using the software, see an issue, talk with users about the issue, make a modest change, an then see if it was better.

It looks different for modern consumer products, because your software is typically a small part of someone's life. They don't want to talk to you daily. Instead you have a product manager acting as proxy for the users. But if you have good instrumentation, you're still getting user feedback daily.

Even in the consumer context, you can talk to real users frequently. At my last startup, we had user testing every Tuesday afternoon. We'd book 4-5 sample users every week, and we'd always have some question we wanted to answer. And plenty of places have small beta tester groups that provide fast feedback on new features.

That all depends on a fast release cadence and a tight relationship between product management and developers. But once you have it, it's addictive for product managers. Oursourcing basically becomes impossible, because their turnaround time for answering a question drops from seconds to hours, and the turnaround time for shipping a small change goes from hours to days. This forces batch size back up, which is not only vastly less fun, but also reduces ability to explore the product space and find high-value business wins.

Every time I've been asked about outsourcing, I've asked, "Will you send your product managers there too?" 99% of the time the answer is no, because they can see how that would impair the information flow. The trick is getting people to extend that desire for connection and fast iteration past the managerial tier.
You're assuming that I haven't already done that. :)
Ya, what was that about? Every single person knows that society is more willing to trust a woman who claims to be in distress over a man who claims to be. [1][2][3]

There's a reason the the archetype is " a damsel in distress" and not "a transient in distress." (Snowwhite, Andromeda, Beauty and the BEAST, King Kong, Princess Sofia and the OGRE)

[1]http://healthland.time.com/2010/12/13/study-why-we-think-wom...

[2]http://www.dailymail.co.uk/news/article-2713862/Men-lie-wome...

[3]https://www.researchgate.net/publication/222329553_Trust_and...
FYI: In response to the ColganAir accident, the FAA raised training experience to 1,500 hours from about 250 hours.

That means there's no qualified entry-level pilots, which is the whole point of regional airlines (cheap, non-union pilots.)

So what ABX is doing is trying to make their existing pilots cover the shortfall, instead of financing new pilots to work there. It's all about the Benjamins.
I'm sorry, it doesn't seem remotely comparable. Huge, complicated products are often made of seemingly inconsequential pieces. That SV piece was about an entire product made of an inconsequential piece of tech.
"Media does not spread free opinion; It generates opinion" --Oswald, 1918 https://en.wikipedia.org/wiki/Decline_of_the_West
The Case Against Python 3
Interesting point, hadn't considered that.

Sounds like it'll be one of those "implementation dependent" things then, and someone into this kind of thing should probably investigate.
I don't understand how that is relevant.

She could have lost (to pick a blue state at random) Vermont and still held the popular vote. What you're saying is that by removing the most populous blue state, she'd lose the popular vote. How is that relevant? States are arbitrary boundaries; we could slice and dice California up into 55 states, giving each one an electoral vote. Now we could remove any one of those and she'd still maintain the popular vote. We're allowing an arbitrary division determine our president, rather than a somewhat less arbitrary "majority of voters".

But all -that- aside, the parent comment was referencing the OP. Literally nothing was said about the popular vote; the OP is about possible voting irregularities in some of the swing states that might lead to Hillary also clinching the electoral college majority (and the parent comment was saying how they're not very happy with the prospect of a recount).
boyter you rock dude. nice work!
As an American who was living in china at the time, yes, it was inconvenient, but at the same time I think they made the right stand. You can already get a western harmonious search engine in Bing, anyways, and I preferred google's course of action to Microsoft's (my employer at the time).

I don't think American companies have morally good reason to be complicit in Chinese censorship, but I understand why they play along, even if I personally don't agree.
In American parlance, the Nazis were socialist ("it's even in the name"), so fascists and socialists can cohabitate in the same party.
Without Texas, Trump lost the Popular vote by even more. With neither, Hillary still wins the popular vote. If we remove arbitrary chunks of the vote, it can go different ways! This is insightful!
>"hackers" are the boogie man

While there is a great deal of misinformation and ignorance in the media regarding info sec, labeling hackers as "boogie men" is irresponsible because it implies the threat is not real.
> hen I first saw the numbers a couple of weeks ago what I saw was pretty obvious evidence.

I was surprised by the result as well. But curious what did you see as obvious evidence?
Sorry to reply so late. But like you, it seems, I'm also interested in the tension between social welfare (education, medicine) and national borders. I'm saying this as someone who wants 10 million new immigrants to the USA per year.
You guys all pointed out the much stronger correlation during the primaries, right? Because it seems pretty hard to believe that such intense institutional collusion for Clinton could lead to widespread hacking for Trump... in fact... it's not believable.
I think you've lost the thread with you NYT and Brietbart examples. These companies are publishers, and since when is publishing censorship? This makes as little sense as saying Comedy Central censors dramas because they choose not to show dramas.
> At the risk of 100 down votes

Max you get is 5.
I liked HPMoR. What about it made you think it was shitty?
Gmail was never hosted in china. When Google pulled out, it meant shitting down the china local search engine, with the one through HK eventually being blocked. Gmail wasn't even blocked in china until a couple of years ago.
Why America Is a Republic, Not a Democracy
You realize that the flu kills lots of elderly people? It's not just about you. A year in which the flu vaccine actually works well enough to break transmission would give a lot of people an extra year of life.
Hmm, why no call for audit in 2008 or 2012? Can the fact that a Democrat won have something to do with this?
I feel the same. For the same reason given a new topic I start with the video tutorials and then dive into the text.
Sunscreen not working is news to me. I burn easily. You can see burned finger marks on the areas of my skin that I miss.

This seems trivially easy to test.
The good APIs do, but it's still at a loss to both sides.

a) The producer of the events has to store them in semi-permanent storage. I've been there and done that - failed webhooks result in a table of tens of millions of rows, even if the memory on each event is only 48 hours. It's astounding how many events fail to process. And I've been through extensive verification that there is truly no problem on our side - it's always the client who is wrong. Emails back and forth for weeks with the client screaming "it's your fault!" - only to finally receive an "oops, we found the problem on our end... sorry".

b) Frankly, if the consumer of the events fails on a single webhook more than 5 times in a 24 hour period, that event is a permanent loss. The reason it fails consistently is because that specific event is a permanent failure to process on the consumer's side. It is probably throwing a 500 Internal Server Error or similar - every single time. 0.001% of webhook consumers actually have emergency alerts when webhooks fail on their end, so the job will continue to throw a silent/unlogged/unnoticed/ignored error no matter how many times you retry. These are the same type of developers who will never poll your "failure queue", because they don't even understand that their consumer endpoint throws 500 Internal Server Errors on 10% of your requests. You're trying to provide a service to developers that live in a fantasy world where errors and exceptions never happen on their end.

It's a simple fact that developers who consume webhook requests are a disgrace. Chances are that if a request fails two times, it will never succeed. And yet the best APIs will try hundreds/thousands of times over a 24 hour period - simply to prove to that client that it is their fault that they are not processing webhooks properly. There is only so much a webhook producer can do. There is no magic we can do if the consumer is copy/pasting PHP snippets from Google or Stackoverflow.

Story time. The most memorable situation I can remember is a client who was experiencing 100% webhook consumer failure for more than three weeks. The emails from their team - and subsequent phone calls from their CTO - were absolutely stunning; it got to the point that we were hounding our own business people to drop them as a client, the verbal abuse was that bad. Turns out they had a bunch of PHP developers who were for the first time writing their consumer webhook endpoint in C for some reason. They were trying to parse the custom "id" field that they sent us as a string in a JSON field, as an integer. It was all because they sent us a string, and choked on trying to re-interpret it as an integer. It hurts to even think about that case.

tldr; Fuck webhook consumers. Incompetent developers who don't know how to handle errors that are 100% their fault.

Funny aside: the most amusing cases come from PHP and .NET developers who expose their internal server errors in production. When you can copy/paste the response they gave you on a webhook because they are calling an undefined function or method... pure bliss.