skysight-inc/HackerNews huggingface dataset:
This thing kept me away from Ruby and RoR. I tried it a few times but never liked the magic after using Python/Django for a few years.
the falcon wing doors were a little wonky and the source of delays.... but the factory automation... i'm curious what you think.... because i think that is where they are really innovating. they say general assembly will be completely automated and no workers will touch these cars within a year or two.
If widely used and critically important open source projects like OpenSSL can have latent security bugs lying in them for years (Heartbleed?) - I don't think it's practical to assume "the open source community" will security-audit and send pull requests for your "open sourced" product app.

If you want your code security audited, pay a reputable firm to conduct an audit. Throwing it up on Github and thinking "the good guys" will spend time looking and contact you for free when they discover problems is misguided at best.
If I'm writing a library, and I want to make a relatively minor breaking change to one function (e.g. changing the type of a parameter), that's not a significant change to the whole library, but it is a breaking change and semver demands that I bump the major version number.
I tried Flow but ended up using Typescript for my current project. If I were to go hard on Flow I'd probably be using Atom with Nuclide instead of VSCode.

I actually like Flow slightly better but the community created type libs for TypeScript convinced me to go that direction.
There goes the stock
Write me at david.shindo@gmail.com
We changed the UI a few months ago to (try to) prevent those.
It's

[fn(x) for x in something]

vs

something.map {|x| fn(x)}

Coming from Ruby the Python one wasn't easy to understand. It's ok now, after a few months of writing in Python. I don't see a reason to adopt that form in Ruby or the other way around. Both forms suit well the language they belong to but won't look good in the other.

Not only that, what does Python list comprehension do that Ruby can't do?
Note this is the paper on the information theoretic metric, the "Variation of Information":

"It is closely related to mutual information; indeed, it is a simple linear expression involving the mutual information. Unlike the mutual information, however, the variation of information is a true metric, in that it obeys the triangle inequality" (https://en.wikipedia.org/wiki/Variation_of_information).
Well maybe you can tell me how you get phished without being retarded? In all my experiences phishing schemes are like bit.ly links that have a form that requires the user to enter in all their data. If you fall for something like that, i don't have much sympathy tbh
A significant release does not mean it's a completely different direction. It just means that it's significant in some sense.
Yahoo! Japan is separate from Yahoo! "worldwide". They actually run separate parallel infrastructure for many things, so I highly doubt YJP was part of the one billion accounts.
The existence of crafted collisions -- being able to create a pair of M1 and M2 such that MD5(M1) = MD5(M2) -- is primarily relevant to situations where MD5 is being used as a signature algorithm, such as in certificate issuance. In these applications, being able to generate a pair of documents with the same hash is catastrophic.

Being able to generate a pair of passwords that are treated as equal, on the other hand, is useless from a security perspective. It's a neat party trick, but it's not dangerous.

Now, if there were a preimage attack -- being able to take MD5(M1) and come up with a M2 such that MD5(M2) = MD5(M1) -- that'd be a much bigger deal, and it'd break MD5 password hashing wide open. But nobody's done that yet.
Californian culture can be stifling at times at how "laid back" it is. There is a culture of lethargy and apathy here that can leave people wanting more, which is why so much talent that grows up here ends up moving to far more rigid cities and cultures like in New York. The rigidity of Chinese cities coupled with their liveliness makes for a fantastic escape from California.

That and infrastructure here is absolutely frustrating. Everything in California was structured around car culture. While much of China is now the same way, there is still plenty of excellent public infrastructure as well. Some might argue it's worse than the US, and I can definitely see how the large crowds in subways, the constant construction, and the some of the cheaper buildings are ugly and poorly designed... but California's ultra-expensive, 20 year major projects consistently are less effective in sheer results than China's quick-and-dirty development.

And lastly, I think it needs to be said that China as a culture, nation, and civilization is ancient! Its deep roots and environment create such a fascinating mix of old and new. Here in California, we paved over our past forcefully, and what past there is left to observe is often depressing at the core; nothing to be proud of.

Oh, and I forgot to mention the countryside. California is beautiful, but China is so entirely different geographically that just being there feels so shockingly wonderful.

Don't get me wrong. I love California at the end of the day and would find it hard to ever leave, but I'm simply explaining my statement. :)
This is good advice, if you have that control over your schedule.

What I've found, for me, is that going from home to the gym (running, BJJ, strength & conditioning, depending on the day), I come out of it physically tired, but mentally refreshed. The next few hours I can focus on other tasks pretty effectively. Part of it is the physical activity is, for me, meditative (which is itself refreshing), but also that it's totally different from what I'd just spent 8 hours doing, and was intending to spend the next 3+ hours doing.
Is your PhD in Economics? Maybe there would be a place for you where I work.
I want to love you, VS. Your name would look so good on my resume.I'm going to try one more time.
Why involve a blockchain when there's no coordination problem? The only benefit of a blockchain over a log is that multiple, uncoordinated parties can agree on an order of events, but order doesn't matter here.
Whoops, meant paperless boarding passes via your phone which came on to the scene in 2010.
I don't know what exactly you're looking at, because from my perspective "everyone" is an insane exaggeration on your part. I know countless people who run, cycle, ski, mountain bike, play soccer, go backpacking, play board games, travel, partake in live music, and so on and so forth.

Sure there are disproportionately more workaholics in the area. There are also disproportionately fewer people who work 9-5 then go home and veg out on their couch. To me, the lifestyle here is rich and amazing. Where I grew up, which was in an equally large and cosmopolitan city, it's too cold or too hot for 4-6 months of the year to do much outdoors, salaries weren't high enough for people to routinely go to expensive restaurants or travel, and the geography is nowhere near as beautiful or interesting.

Maybe you should look inward more and take charge of your life; it may be that you're hanging around people who focus entirely on work, and so your perception is skewed.
Hello! I'm AJ. I manage the website. We started the site with a cookie cutter template and left a garbage TOS and Privacy Policy in there by mistake. Someone told me about this post and so I pretty much pulled the TOS and I've been working through the Privacy Policy too. Consider this a draft, would love your feedback on github issues: https://github.com/daplie/daplie.com/
That sounds awesome.
More likely report than find. From what I've seen of their current disclosure policies, and what execs have written on Y!Answers and such, they find the problem, they figure out who did it and how, and then after they've figured out how to fix it, they alert the userbase and the public - in that order.

Also, please do remember that we're getting into a different leadership team now at Yahoo; previously they were absolutely convinced that disclosure and alarmism were one and the same - and that any perceived weakness in the Yahoo Mail product would drive people to GMail.
I hear you, but even if that's true, the comment is uninformative to readers who haven't had direct experience.

What we want instead is comments that share experience, so others can benefit from it. It's basically a variant of 'show, don't tell'.
Uber says it’s reviewing incident of self-driving car running a red light
JavaScript Intellisense in HTML

This is awesome - I was just this week looking at using Vuejs for a new project instead of React, but the lack of Intellisense in "Single File Components" with VSCode was a deal breaker for me, better to stay with JSX. I've used all kinds of things before the associated tooling is really up to par, and it's one of those things I often regret later. At least it's still not too late to revisit the decision!
This worked for me. I borrowed way too much money going to school. As a fresh MBA grad in the suburbs of Los Angeles, California, with few marketable skills, I couldn't find any career options that would offer a starting salary that came close to covering my costs.

My big break was finding a job in San Francisco. I charmed my way into an entry level sales gig with a base salary of about 35K USD (in 2004), and was soon making at a 70K-ish "annual run rate" (stealing that from startup PR lingo). And that job did all of the lead generation for me. I wasn't able to find a job like that outside of a big city.

Even when I was homeless for a bit a few years later, I chose to stay in San Francisco over moving in with my suburban LA parents because there I saw more opportunity in San Francisco. For me, it was riskier to play it safe in the burbs than hustling in San Francisco. It's better to burn out than fade away.

The way I see it, if you wanna make it as a professional, and you don't have a reasonably understood career path to follow, it makes sense to go where the money is. You can live financially cheaply in most places, and you'll have to decide how much you're willing to work for it. For me, living in San Francisco is, and has been, worth it.
If you're using a proper type-safe compiled language then most "subtle" breaking changes can't possibly be missed because your code won't compile anymore (assuming you used that API to begin with). You don't need a major version number to call attention to the fact that one parameter of one method changed from a boolean flag to a set of options, anyone who's using that method will find that out pretty quickly.

The main reason semver is done the way it is is so you can do things like have package managers automatically pick the latest compatible version, since incompatibilities are denoted by the major version number. That's why I'd prefer major.breaking.minor.patch, because you can still have the package manager automatically detect compatible versions, but you don't end up in the crazy land of releasing a library at v27.
Only if those tasks burn you out. If you want to learn a language, music, drawing, etc., then spending a few hours on them each morning before work oughtn't wear you out. That is, you're doing them because you enjoy them. If they become tedious, they're not work, you likely don't have a deadline, you change up that routine. Drop the music for a bit if you find yourself too frustrated by some piece or element of playing the instrument, but you still have that time, so fill it with leisure reading of a novel for a few weeks, return to the music refreshed.
The voting system of India has been heavily criticized by Hackers. People from the German CCC have gone there showed how easy these systems are to exploit. Indian authorities have reacted pretty hostile of course.

Nobody says you can not run electronic voting, its just hard to do it securely. India does not do it securely.

See here for lots of information (India should be mentioned somewhere: https://media.ccc.de/search/?q=voting)
http://arstechnica.com/security/2016/12/op-ed-im-giving-up-o...
I gave another try to Atom recently because of Flow and Nuclide, but I definitely prefer VSCode.

By the way, the Flow extension for VSCode is a port of Nuclide, so it's almost the same end result I guess.
> Please, someone explain to me what does this thing do that Browserify can't.

Nowadays not a lot more, but when it came out it was a revelation.

The key thing to note is that replicating webpack's abilities in browserify takes about the same or more amount of config and boilerplate.
Fittingly, attempting to change my password to a 32-character random string generated by 1Password returns an error that the password "cannot contain my email or username", regardless of the contents of that random string (I tried several).

It does, however, _happily_ accept `passwordpassword` and cheerily move along to confirming that my recovery email account from 2003 is still valid.
I'm not a fan of Fragments when it comes to navigation either, but there are other solutions as well (see Conductor). But there are limitations to using a new Activity for each screen, which I mention in my other comment below. They really only make sense for specific features in an app that require a specific entry point. Things like external intents (other apps, push notifications, etc...) or deep linking, as another user mentioned. They may be useful for Google Instant Apps too depending on how it ends up working.
OK, so if i want to build a program that proves my haskell code with a similar ease as using quickcheck[0] it would be possible, its just that nobody has done it yet and not that i would be nearly useless because i wouldn't be able to prove the most basic every-day functions.

I would guess an database of previously proved lemmas for all the used libraries would help, so that you don't have to recompute everything.

[0] quickcheck is an awesome library that generates unit-tests for specified properties (like: "for all lists s: length(sort(s)) = length(s)", i would then just generate a few hundred lists and check whether the property got violated)
Mike Ash talks about an implementation for macOS/iOS: https://www.mikeash.com/pyblog/friday-qa-2012-02-03-ring-buf...
Your security answer is a software license key?
Consider "Engineering Security", by Peter Gutmann: https://www.cs.auckland.ac.nz/~pgut001/pubs/book.pdf
Not to mention, the live hacks of moving vehicles have already occurred multiple times. Thankfully, there are not yet enough skiddie tools and the bar to entry is just high enough that mass casualties have not yet occurred. Give it a few more months or maybe even another year before your car is just another IoT that can be controlled remotely. I do not believe it would be irrational to consider the risk of 100k cars driving into oncoming traffic at the same time. That is a lot more damage and chaos than a few little 747's could do. Am I incorrect?

My only questions are

1) will the skiddie tools be on github first, or will someone have to buy/leak them and repost on github?

2) If a minor executes the scripts and lives are taken; and assuming you can determine who ran them, will they be tried as adults and will the verdict or punitive actions make up for the damages?
Thanks for the comments and email! I'll be responding to your email in a few minutes.

I'm going to make another course, but not sure what it's going to be over yet. I'll be asking people that completed the Twitter clone course what they are interested in, but I'm leaning towards building a full web app (user, payments, etc).

Haha I saw some people tried to do injection attacks. That's pretty great. We have you covered though :)
Stop giving a fuck and pick up the phone
Every release of LLVM breaks the internal APIs. So, yes, changing the major version every release is honest and adopting semantic versioning.
I recently did this after I found a password manager that works with the devices I use. Took me a few hours to remember and track down all the accounts I use. Managed to get close to 70 accounts and even then I missed some. I think it was worth it though.
Next Steps in Unsupervised Learning: Adversarial Networks vs. Predictive Dynamics
If you live in a place with geothermal energy its not surprising that you have cheap energy. Otherwise, we've already invested a lot in making buildings more energy efficient, but heating is simply very energy-intensive. Commuting by bike might work for single young urban professionals, but not for people with families. We know what a society without the motor car looks like - it looks like almost every society in history, where people either lived in villages or extremely cramped cities. In brief, most visions of ecologically-friendly future seriously underestimate the value of cheap energy and personal transport.

As for the effects of climate change, they look intimidating as a whole - when you look at each item individually, they are unpleasant but manageable. Humans have been dealing with the weather for millennia, after all.

> Stronger storms, drought

These happen routinely now. Yes, it would be preferable to have less storms and drought, but we know how to handle them.

> the displacement of peoples

In the last decade the Chinese have built scores of new cities across the third world - it's not that hard for people to move.

> an ensuing refugee crisis as their crops fail and water supplies dwindle

We grow crops in many different climates now. Crop failures happen now in poor countries with bad infrastructure and management. Societies with sufficient capital and technology can adapt to almost any climate. (In extreme climates, with desalination plants and hydroponics - or people could just move).

> Maintaining the civilisation we built at the cost of the natural world we inherited isn't fantastic

This is really the crux of the issue - should the standard of value be maximising human flourishing, or minimising human impact?
> How can you come up with that argument in good faith ?

Let's say I've seen far worse in 2016, from companies storing far more sensitive data.

Like a bank, with no 2FA support, emailing me my plaintext password after clicking "Password forgotten", in 2016.

This story is problematic, but I'd be grateful if that bank would implement even the same stuff as Yahoo.
As a New Yorker, all we're hearing here is LA, LA, LA. Just a heads-up.

Smoke a joint in NYC, spend a night in jail. Smoke a joint in LA, change the world. How I look at it all.

We got Brooklyn, and that's about it.
No they didn't. Webpack 2 has been kept in alpha and beta for so long exactly because the documentation was lacking. If anything that fact alone shows a good amount of maturity.
It does look very clean. Thanks.
The Story of Commodore from an Engineer's Perspective
I don't know, I don't use intelliJ and I don't want to pay for webstorm. Somebody else probably knows.

Anyway I like how low-memory-on-the-disk and low RAM usage VScode is, so I probably wouldn't enjoy intelliJ and webstorm for those reasons. I felt like even sublime was too bulky for me. Maybe they're good for other people and that's fine, but vscode just ticks all the right boxes.
Rainbow tables are attacks against secure algorithms.

MD5 is recognised as an insecure algorithm: given a known hash, there are multiple possible passwords that would resolve to the same hash, therefore appearing to be the correct password.

With MD5, it's not necessary to compute an infinite number of possible passwords, and it is possible that, given a particular hash, a collision can be found within a reasonable time.
honest answer: one of those sites is your recovery email, the one way back into your digital life if something goes deeply wrong. It's the password reset email if another site is hacked. It's the "bootstrap myself from some other computer" account if your machine dies or your house burns down.

IMHO you should memorize one very strong password for one somewhat-trustworthy site.
> For the most part, when someone disagrees with climate change, they are instantly labelled as an ignorant science denier who has done no research on their own. That's not a good way to have a fruitful conversation with someone and it will never help solve any problems related to climate change.

Your point that conservatives can't dissent without being piled on is valid, and it's one of the reasons I apologized and tried to frame my point more tactfully (the other being that I felt bad for being nasty). The inability to have tactful conversations where we really listen to the viewpoints of one another troubles me deeply (I regret contributing), and is no doubt a major contributor to the intense polarization we are currently experiencing.

We are all, myself included, prone to uncritically accepting peer views and refusing to accept facts which contradict our narrative. Science, though imperfect, attempts to temper our irrationality with reproducible results and critical, fact-based consensus. The fossil fuel industry is responsible for dragging the issue of climate change from science into politics. I'm not saying they brainwashed a bunch of idiot rubes, but they did successfully muddy the water on a complex issue and connect it to identity. This is why I reacted so strongly to the phrase "healthy skepticism"; thoughtful individuals may be displaying this, but broadly I see it as the fossil fuel industry having exploited the instinct to draw more closely into one's tribe to guard against outsiders.
Druid.io 9.2 groupby improvements for real time analytics
True.

For the following statements:

> As with previous versions of Windows, I can configure Win10 Pro to download updates, install them, and/or reboot when, and only when, I tell it to.

> I can also choose to limit updates to genuine security-related matters.

> Under no circumstances will the appearance, feature set, or functionality of my Windows 10 Pro installation change without my permission.

> I do not need to download and apply hacks of uncertain provenance to achieve these goals, nor do I need to maintain a separate "update server."

Caveats:

Selecting specific updates requires a third-party tool, wumt, or going manually with a known KB id via the windows update catalog site: http://www.catalog.update.microsoft.com/home.aspx

The windows UI will only let you process all currently queued ones, if and when you choose to do so. (Though it does have an option to defer feature updates, which delays those by "months", but leaves security updates alone.) Further, when windows puts out combined updates (like these: https://support.microsoft.com/en-us/help/4000825 ) you can't tease them apart in the Windows UI. However, you can, if you know the KBxxxx, use the catalog to download things separately as install files and skip over the automated process entirely.

The above however only applies to selecting what to install. Under no circumstance will Win10Pro, if configured so, install or download anything without your direct approval.

That said, there is a certain second caveat which might need to be mentioned: Once you have completed an install process for an update requiring a reboot, windows will proceed to lock you into the "i'll reboot then, but you can push it back a few weeks" procedure. However since the decision when to install is up to you, i don't consider this a big caveat.
You are very fortunate then. My experience here in the Bay Area mirrors kLeeIsDead's. I get up at 6AM and come home from work at 7-8PM, and am mentally and physically exhausted daily from the whole rat race + commute. Totally different from other places I've lived where I could have a life. Fortunately I'm currently not subject to a lot of weekend work.
I wasn't aware it was possible to debug a running node server in the chrome browser until the addition of the 'inspect' flag in node 6. Maybe it was possible, I'm not superleet or anything.
Yes, I am expanding offline as well because I want to explore it as much as possible. Still fun for me, and what isn't I try to outsource to others.