skysight-inc/HackerNews huggingface dataset:
I don't know. They've been on intermittent backorder since launch and scalps selling them for $800 on ebay (MSRP is 400)

I don't doubt they're channel stuffing (who doesn't) But it's pretty well accepted that it's been a runaway success.

It's consumer grade tech, your VR club is a different PCMR audience.
I think to padobson's point, it's all about what you want to do.

There are certain restrictions that the Bay Area places on you, like how much money you need to earn, and a particular lifestyle you want to live, in a very specific industry. This is the same as someone going to Houston for Oil, NYC for Finance/Fashion, LA for entertainment, etc. People who live in those places have a particular set of goals - e.g. building big companies (vc or not), doing well on wall street, hitting it big in the movies, etc.

If you don't have those goals, then absolutely - stay where you want to stay. Work remotely. There is a ton of arbitrage in software dev right now, you can make a killing and live in really cheap places. You can literally live like a king. if that is what you want to do.

So it all comes down to your goals, and the Bay Area as a whole is self selecting in that way. If you want to do something more chill in software, that's great. We need more people making money writing code - it's great for the world economy. But you don't need to be in the Bay Area for this (unless you want to).
Do you have Pluot? Happy to send you firmware source.
How common without serious abdominal trauma? I didn't bruise, tear any muscles or crack any ribs or anything of the like. That kind of stat might give me something to brag about, not like a crappy immune system is something to be proud of.

The grading system is kinda cool. Unfortunately I can't use behind my current WiFi away from home. Maybe you can tell me how I did: The spleen was horizontally rupture into two pieces.
This is loosely related to the subject but I wanted to point out a scam that I was victim to and nearly lost more than a grand:. PayPal doesn't protect vacation rental by owner scams.

The reason that this was a close call rather than complete catastrophe was that I had the listing reviewed by the service's internal investigation team while I transacted. The team altered me of fraud, I responded immediately with PayPal to learn that hey guess what - their fraud claims policy excludes vacation rental services! They refused to help me. Further, the scammer knew this policy limitation, and even left me a troll voicemail as I was escalating the scam that was along the lines of "guess what? PayPal won't refund you!"

Fortunately, I used a credit card for payment. I managed to file a claim with the credit card company and reverse the fraudulent charge.

The reason I escalated this listing as a concern was that it had zero reviews and was new. The owner was also a bit too accommodative of my requests. I proceeded with caution.

I went to the authorities about this, including the secret service, who for whatever reason handles fraud like this. I never heard back from anyone.
Elon Musk joins Donald Trump's advisory team
Do you imagine that someone willing to blatantly steal a research paper and publish it as his own would be deterred by an NDA?

Also an author does not have contact or control over peer reviewers and typically no way to demand an NDA.
This is obviously an insane thing do (most fields are small enough that you will expect at least one person from the original paper to at least read the plagiarized paper), but this seems untrue:

> As you must certainly know, stealing is wrong. It is especially problematic in scientific research. The peer-review process depends on the ethical behavior of reviewers.

That people get proper credit is less important in scientific research than elsewhere, not more. It's obviously bad incentives, but with science it's most important that the information is accurate and gets out. Doesn't sound like the guy made it less accurate by republishing it with his own name on it.

I also find the "open letter" tone here a bit annoying and petulant. If this guy admitted what he did, why publish this without mentioning his name, and with just general platitudes like this? No one is on the side of someone who does this.

EDIT: Maybe I was unclear here, my last paragraph was intended to to indicate that no one would be on the side of the plagiarizers, and that I didn't like the indirect "you can figure out who we are talking about" nature of the letter. I think it would have been more effective to write this as, "Recently our work was stolen by such-and-such, we think it was terrible, etc."
The design of this website makes me kind of nauseous. It's very in-your-face, and the rotating pictures are motion-sickness inducing.
Obviously the error was made by the human who wrote the software that drove the car... hence, human error. QED.
Well if I can make requests, I was looking at OpenWebRTC in particular. :)
Yes, you can register an LLC or C Corp in any state, but the reason people do things a certain way is usually because of taxes. You don't want to get double taxed (the specifics are nuanced and vary from state to state).

If I were to do it all over again, I would just start out as a DE C Corp.
Isn't stealing it like this illegal anyway, without an NDA?
Yes, the current password.
True. Otoh I just told the attacker my specific method :-) And I'd prefer a system that was secure enough that doing so wasn't a problem.
Knowing how to drive and having insurance both sound like reasonable things for people to do, but we still mandate driver licensing and insurance.
Academic reviewers don't sign NDAs. We are working for free, as a community service. There's no way we'd accept legal restrictions on future speech in the process.

Copyright law provides legal remedies for plagiarism.
[Pebble] First Steps Forward with Fitbit
The names are at the bottom, in the references.

EDIT: I think the important part of your quote is The peer-review process depends on the ethical behavior of reviewers.. For better or worse, the formal peer review is central to the current scientific process in most fields. Reviewers are incredibly strong gatekeepers, if they can't be trusted that's a big problem. So maybe sort-of thanks to those guys for pointing out yet another flaw with it?

EDIT2: and as /u/jonchang pointed out above, the plagiarizers actually made up data, which is even worse.
Twitter Built an Instant Messenger Product but Killed It
I suppose we have different ideas of what makes a place pleasant. Sprawling suburban hellscape where I'm screamed at whilst riding my bicycle and my child can't walk outside without a substantial risk of being smashed into the pavement doesn't sound like a nice place for a family to me. I hope I'm right, since I moved to the city a few years ago and am starting one now.
This seems straightforward, but,

> That people get proper credit is less important in scientific research than elsewhere, not more. It's obviously bad incentives, but with science it's most important that the information is accurate and gets out. Doesn't sound like the guy made it less accurate by republishing it with his own name on it.

If you reward the people who plagiarize over the people who actually did the work, there is no more motivation to do the work and the scientific endeavor as a whole suffers.
What about taxes in cA?
if the password is stored properly, (i.e. bcrypt), the number of characters shouldn't matter at all, be it 50 or 5000.
It's a virtual reality experience that runs in the browser. These experiences can be anything: games, tools, entertainment. Mostly anything that a native VR experience can provide (given the limits of Web APIs).

The benefit to having this content in the Web are:

- Open ecosystem

- No gatekeepers or app stores

- No downloads / installs

- Link traversal (hop from one VR experience to another without having to change "apps")

- Instant publish (throw up a site without a review process)

- Instant sharing (Tweet a link to a VR site)

- More accessible for content creators or web developers (HTML, JS)

- Larger audience: no one is going to download a VR app for your small store, but they would more likely click a link on a web page to open it

- Easier to do cross-platform content
I'm doing an ME degree right now, and they teach us both Solidworks and Pro-E (now Creo Parametric.)

If I remember the results of googling 'Creo vs Solidworks' correctly, Creo is better at handling really big assemblies and is used extensively in automotive industry. Most of my peers prefer Solidworks.
Both of the points you brought up are not specific to c corps. Any company will list salaries as an expense on the P&L, and an LLC also provides a layer of protection between "business and business owner(s)". The first two Ls stand for Limited Liability...
The original paper (with author names) and the plagiarized version (also with names) are linked below the article.
During the scientific peer review process reviewers are generally agree to keep the process confidential and are usually bound by codes of professional ethics, e.g., http://publicationethics.org/files/Peer%20review%20guideline...
Note: random wasn't patched to use a secure generator in python3 (yet) - from a quick look, it appears secrets.choice() does what I thought random.choice() already did (python 3.6, not 3.5 and earlier)
Ah ha! There's the weakness I was missing, thank you so much for responding. I hadn't even thought of it that way---I knew salts shook up the resulting hashes, but an actual benefit of it is that it makes it pretty much impossible to do any "homework" (rainbow tables) ahead of time.
Ow. That'd irritate the crap out of me.

My teachers weren't sure how to treat me on return: I was still re-learning walking, after being bed-ridden for 5 weeks. So some kind of let me get away with anything, and the others expected me to try harder to catch up.

But again: The school didn't think there was anything wrong with me at first, probably just winded. Then I started puking blood everywhere. Great way to get people to actually listen to a kid.

Also, what is it with not trusting kids with pain? I developed pains in my leg in Year 9. More than a decade later, and my specialists think that was the first symptom of either MS or one of the fibro family.

I know lots of kids complain about minor aches and pains... But give it a bit of attention would you?
Race is not a bogus concept. It may be cultural but it's still real.

Offshore is not a race. That's just xenophobia.
I never thought that I'd like a Microsoft product again, but VSCode is really neat and has become my editor of choice.
Do you have sufficient proof to show in court that you developed it and wrote it prior? I view an NDA as one more layer of proof that it's yours in that battle
Seems like they hid it for a few years.
As Uber Launches Self-Driving in SF, Regulators Shut It Down
If these people actually gave a damn about the environment they would embrace self-driving cars. One-car-per-person is ludicrously wasteful.
Mark Zuckerberg Runs the World
It may be instructive to read the Editor in Chief's piece as well as the Retraction Watch commentary. Of interest is that the plagiarized piece fabricated wholesale a study population, making the published results incorrect and possibly dangerous.

http://annals.org/aim/article/2592772/scientific-misconduct-...

http://retractionwatch.com/2016/12/12/dear-peer-reviewer-sto...
Here's a good explanation of the whole story:

http://annals.org/aim/article/2592772/scientific-misconduct-...

For some reason it didnt load without me going into incognito mode, probably adblock related.
If the password is stored properly, (i.e. bcrypt) then there does need to be some length limit or it becomes too easy to DoS a service by sending it hundreds of megabytes of password to bcrypt. There's no reason for that length limit to be less than 100 characters though.
> What if it's a dll, .so? You upgrade and find out that your program is broken.

If it's not backwards-compatible then it needs to bump the appropriate version number (in my proposal, that would be the second dotted component). So I'm not sure what you're trying to say here.

> * Sometimes the API stays the same but the code behind the API changes a result (for example, secure_hash goes from MD5 to bcrypt)?*

If it's a non-backwards-compatible behavioral change then maybe you need to design your API better such that this kind of change is expressed in the API. After all, if you expect anybody to ever upgrade to your new bcrypt version, you need to provide some path for people to still work with their older MD5 hashes anyway.

> What about non-type safe languages (like HTML or JS, so things like Firefox or Chrome)?

Not something I particularly care about. Though it doesn't really matter anyway; even if you think the breaking change number is too "subtle", anyone who's manually upgrading to a new version instead of letting their package manager do it should already be prepared to deal with breaking changes, because if there aren't breaking changes then their package manager should have been happy to upgrade without any manual intervention.

> The point is that you should avoid breaking other people's code if you can. What happened if that removal of one function in that one module costs me a full years of work?

I have no idea what point you're trying to make here. My suggestion was just about changing the format of the version number, and has no bearing whatsoever on the actual breaking changes you do or don't introduce. I'm certainly not advocating for removing functionality.
The name is Carmine Finelli, probably of Italian origin, like the rest of guys who signed the paper.
I feel really bad for Dropbox and the reaction this got. I'm probably ignorant to a lot of issues minorities face, so excuse me if I appear insensitive to any particular group, that is definitely not my intent.

I saw the photo and my first thought was (no offence!) "cool, they aren't all < 30". I was a little surprised, I assumed they'd be a group that built their startup out of college for some reason.

I then noticed the male/female count and thought that was the focus of the "diversity" tag. "that's great, but nothing to brag about... I've been on teams with similar ratios, but maybe it's less common in smaller companies?"

I'd started scrolling and realised this was posted to highlight the backlash about the lack of black and hispanic (apologies if either term is wrong, please correct me and I'll know in future) employees.

I won't comment on the criticisms as I don't understand the issues faced over there (I'm non-US fwiw), but I do want to offer my perspective in isolation of the other issues.

When I look at that pic with diversity in mind, I don't see as clear a divide as I do in most groups. I compared it to my recent xmas parties (at what I consider a diverse office), which tend to separate into "the old guard", "new hires", "parents with young kids", "under 25s", the "smokers" and probably a few others. It's easy to forget diversity spans more than race and gender.

I'm going to assume Dropbox had good intentions. Maybe they'd seen an increase in an area they focused on (eg. gender) and were proud of their progress? Encouragement could help expand on that and improve the situation for groups who don't feel represented.

From one office to another, I hope the team had a nice end of year celebration and enjoy time with family and friends over the holidays.
How is reviewing a research paper a community service? I don't mean that sarcastically but realistically medical journals specifically like in this article are commonly not free, thus I'm hard pressed to understand how this is a community service. An NDA would simply restrict you from discussing it prior to the authors publishing of it as I see it.
I'm glad that semver is being widely adopted outside of the npm/rails world. It's incredibly useful to understand how much work will go into upgrading a package.

I think the attachment around "saving" major releases are really just attachments to marketing messages of yesteryear. It still feels good to announce "Library Version 3!", but from a technical perspective, semver is far more consumable and sensible. I'd rather be confident Lib v27.3.0 -> v27.4.3 won't break my build than having v2.9.0 -> v2.10.11 break my build, but look nicer.
It's out of line for people who are not at big tech companies with publicly traded stock or bonus.
That's what will happen, but it's fashionable to predict Uber's imminent demise.
This is excellent. Thank you so much for posting that mail.

I definitely agree when he says threatening lawsuits just makes you look like a bully. Violence can be defined¹ as a measure taken to force an unwilling person to change their behavior. Based on this understanding, I think lawsuits are a form of violence: legal violence.

It takes real maturity to deal with the company the way they did. "Yeah, we're infringing your license, what you gonna do about it?" is a direct challenge that invites litigation. Clearly unacceptable behavior from a company that knows and admits its own guilt and uses its own impunity to make the developers look weak. Instead of taking them on, they worked with the company and convinced them to cooperate. I think that is a major example of constructive behavior.

"Do I not destroy my enemies when I make them my friends?" — Abraham Lincoln

¹ http://www.nononsenseselfdefense.com/violencetypesBC.htm
Deterred? No. But I do think it would add valuable ammunition for legal repercussions.
dupe, https://news.ycombinator.com/item?id=13180973 and some other threads. please check before submitting!
I wasn't aware of that. Thanks for sharing. I'll have to look into it more
Gusto Is Hiring a Head of Payroll Engineering
IQ scores have to do with a lot of things. IQ can lower due to:

- not meeting basic nutrition requirements during gestation and early life

- not consuming enough iodine. iodine gets added to salt to ensure people consume it.

- exposure to lead and other toxic substances.

...and mental stimuli.

Some people (notably alt-right Twitter accounts), promote that idea that certain races have significantly lower IQ, spreading maps of average IQ per country. It is my duty to call out that as wrong. Having the aforementioned factors in consideration quickly refutes that idea.

Some people point out that there are genetic markers associated with higher IQ. To be honest, we haven't listed all of them yet. So I would stay quiet before pointing out that certain population doesn't have certain SNP.
Came here for the shit-talking.
I do not think you know how the scientific peer review process works. The manuscript will generally get sent to the editor of the journal through their submission system, with the corresponding electronic trail. Most manuscripts are also written with coauthors who can attest to their own personal contribution.

Recommend you read this for a primer on how peer review works: http://undsci.berkeley.edu/article/howscienceworks_16
You seem to be very confused. Upgrading from 5.4.3.2 to 5.5.0.0 with my scheme is no different than upgrading from 54.3.2 to 55.0.0 with traditional semantic versioning. I'm not suggesting any change to the actual model of semver, I'm literally just saying that I want to tack a new component on to the front for human consumption purposes.
I'd never do business with eBay, ever. You can surf around there and spot obvious scams in 5 minutes that have been run for a decade.

I consider them a co-conspirator.

The best bet for selling was Amazon, but now is Facebook groups.
MQS SD – The Newest Physical Music Format
https://news.ycombinator.com/item?id=13175928
owners generally do not pay themselves large officer salaries, because of the w-2 tax rates which can be extremely high in a state like california. this also muddies up the discretionary compensation numbers when a potential buyer comes along and assesses the P&L on the company. this w-2 income is also taxed twice -- the state takes its cut with payroll taxes and unemployment/disability insurance. if you add sales tax into the mix, an owner is paying upwards of 50% taxes on this money if he decides to buy something nice -- not smart.

to get non-payroll money out of a c-corp and into the owners' pockets, it will be taxed twice, first as corporate income and then as dividend income on the individual owners' tax return. if you have a way around this that doesn't involve laundering money offshore or to shell companies, i'm all ears.

for a smaller, closely held private company with no institutional investors, an LLC taxed as a partnership or something similar (not an s-corp) will yield a lower effective tax rate for the owners of the company and more closely represent what actually is going on.

investors want to invest in a delaware c-corp usually because all of the laws and case precedence are favorable to them.
I wonder how the "co-authors" feel about getting smeared with the plagiarism brush by the guy who did it? Did they have any foreknowledge of their names being attached to the stolen article?
How does yahoo have a billion accounts???
"there's always someone who knows someone's brother's roommate who makes $150K/year at Google"

I don't know any software engineer at Google (in the Bay Area) with such a low annual compensation:
https://www.paysa.com/salaries/google--software-engineer--mo...
This actually happened to my advisor when I was in gradschool. He gave an assignment to review a paper that he had written several years before, but had never published. One of the students decided to search for the title, to find similar papers. Lo and behold, she found a paper with the same exact title published in some obscure journal... curious.

Turns out it was the same exact paper. Well, almost. The plagiarizers made two changes: of course they made themselves authors, and they added several citations to papers they had written (or plgarized?).

The saddest thing about all this is that each of the plagiarizers were themselves holders of doctorate degrees. These were not grad students who didn't know any better (although a grad student should know better), but full tenured professors!

I can't think of a better example of how the reward system in academia skews scientific progress.
What you're describing is the same for every having algorithm in existence. All hashes can represent multiple (indeed, infinite) passwords. So they all have collisions. This is because all hashes are fixed-length, and so finite, while the possible inputs are infinite.

This isn't the reason that MD5 is weaker than other algorithms.
There's a difference between a major upgrade that breaks nearly everything (like Angular to Angular2) and a smaller but necessary change in a couple of the many functions of an API. So I think there is a point for a major.breaking.minor.patch versioning, depending on the amount of work necessary when bumping major vs breaking.

Major would be for rewrites: (almost) a new product, but with the same name for brand recognition.
>I'm not certain this has been thought through sufficiently. If an organization is in a position to confiscate the camera from a journalist, they're almost certainly ALSO in a position to extract the encryption password from the journalist.

Its rather odd to say someone hasn't thought something through when you haven't had any first-hand interactions with them (unless you have had them.. in which case you should detail them). Could you tell us how much time you spent thinking about it? The article is second hand reporting and is editorialized so you're only arguing against a straw-man. If you read the source document, the petition broadly speaks about "encryption features". One of those features, stated via example, is encrypting the data at source on the storage media. The features haven't been specified in any detail since a petition is not a technical specification. You're simply assuming what they are and aren't asking for.

Your own solution has deep flaws, as you yourself acknowledge. I trust the irony of the situation isn't lost on you ! :)