skysight-inc/HackerNews huggingface dataset:
The contrast between your statements and the press statement is great enough to imply Yahoo is being dishonest.
Cute idea, but thats not secure. You can edit the function prototype object to return anything you want:

(function() {}).__proto__.toString = () => "Hi!"

All functions use same __proto__ object (including functions that haven't been written yet), and it can be edited from anywhere in your program. (Tested in chrome 54).

At a meta level, if you're trying to run trusted code in a JS environment that has some untrusted code in it too, you're going to have a bad time. The same is true in native programs by the way - you can't protect your program from a malicious library you're running in process.

The right way to solve this is to stop sharing a JS environment with libraries you don't trust. I don't know how you can protect yourself from malicious extensions, but you can stop pulling in a kitchen sink of JS libraries by being super selective about what you pull in from NPM. (Which you really should be doing anyway.)
It's mostly because people don't realize how easy incorporation actually is.

Also, lots of businesses are very low-margin (to the point where even the few hundred dollars for incorporation is a large expense).
Sure, if you actually set the headers correctly and the browser actually retains them (recall that browsers are free to discard their caches at any time). And, if they can't be cached on the user's computer, who caches them? That's right, the CDNs. Like fast.ly. Who wrote the article.
Artlantis Studio 6.0.2.26 Crack Mac OS X Full Free Download
Two quarts is getting very close to irreversible shock territory, so nice job not dying.

EDIT: Upon rereading... If you were in primary school, then two quarts would represent a very large fraction of your total blood volume (like, anywhere from 70 to 120%). You'd be very firmly in 'dead' territory at that point (assuming they weren't simultaneously putting more in)
I strongly believe someone's conformity to obedience, authoritarianism and conventionalism plays a substantial factor in their performance.

I've dealt with many people with advanced degrees from top tier schools who seem to be completely unable to grasp subversive or non dominant thought patterns.

For years I was stunned, thinking "how on earth could they have such impressive academic credentials and be struggling like this."

The entire institution continually fosters and rewards a set of specific things with limited application.
Oh, not sure how I missed this! I'll have to try it out

EDIT: On trying it out, it seems to have reasonable support for most of the editing functionality, but the shortcuts for handling split buffers (C-x 0, C-x 1, C-x o, etc.) is completely non-existent. I'm unsure right now whether I'd be able to define them on mine own or whether I'd be willing to stick with it if I couldn't.
This is part of why people incorporate in DE. The courts there make piercing the veil quite challenging.
I don't want to criticize you in particular but I have a problem with "always give 5 stars". Are you telling me that your average Uber ride is 100% perfect? I find that hard to believe, moreover basic distributions would find this improbable.

Sorry for ranting, I wish more people would give realistic ratings to things instead of starting with 100% perfect and decrementing for misses. It should start in the middle, 50% and go up or down based on experience. This would give a much better set of ratings that mean something.
I find the following in Chrome:

> window.crypto.getRandomValues

// getRandomValues() { [native code] }

> window.crypto.getRandomValues = function () { return "aloha" }

> window.crypto.getRandomValues()

// "aloha"

Not sure if this is the case in all browsers. `window.crypto` certainly should be read-only.
A piece of software I'm familiar with does this Arch.Major.Minor.Patch.

The Arch number represents a "generation" of the software that represents a significant overhaul where the architecture changes and input files that were generated for previous versions are not likely to work.

Major represents breaking API compatibility, so users who write plugins for the software will need to recompile and possibly change their code (but maybe not depending on what changed).

Minor and Patch are what you'd expect from semver.

This works extremely well from my experience.
Yahoo installed a backdoor for the NSA behind the back of the security team
That and 90+% its a Toyota Prius.
Last time I checked, a jet engine doesn't quite blow smoke entirely across a tarmac.

Maybe hot air just rises anyway. Maybe kinetic influence matters less than boosting the thermal energy?

But inversion layers change with the weather, so even if this works once, it may not work every time. And a band-aid that fixes this now, may only encourage more runaway growth covered up by more band-aids.

Wouldn't want to actually change technologies though. Just blunder along and cobble together dust busters and blow torches and continue with business as usual.

I suppose I'd only expect roughly the same from my own town supervisor...
But all the places you mentioned are at least 1.5 hours drive from San Jose. You can't expect me to drive 1.5 hours just to not have to sit at home every time I want to have some fun? I love day trips, but I don't want to have to to a day trip every weekend or every day I want to have some fun. Compare that to LA or San Diego where you don't have to drive far to have fun (nightlife for example) or awesome beaches. All I see in San Jose is empty streets after 9pm. There is nothing going on in this town besides work.
> Running is not great for losing weight

Since when? I'd like a citation on that.
It makes plenty of sense, the people who donate to the lawmakers campaigns own companies towards the end of your table.
Stole the words right out of my mouth!

Did a summer internship in Redmond, and realized how much the weather affects my happiness and psychological well-being.

While SFBA weather is way better than Seattle, I still find it a bit cold/dreary for my liking. I really wish the tech hub was in San Diego instead, I'd move there in a heartbeat.
iOS Project does not build - Xcode 8.2... There is a guard statement with no else clause, that's the first error I got. I didn't bother looking further because... a guard without an else could never compile, so what am I looking at?

I'm getting flashbacks from my last workplace where people merged in code that didn't compile and then went 'oh really? let me fix that real quick'...

Code wouldn't compile in master but the codebase... everything had to be clever. We can't just have a model, a network request to fetch/update for it, a view controller and view cells. A few storyboards and of course no bloody tests - it's a phone app.

No, we need protocols everywhere we can fit them, third party libraries - ones that haven't been out a few years (Reactive whatever), a third party library to make a basic GET request (Alamofire looking at you), a CSS styling library, a JSON to Model library, list goes on.

What we don't need is folder structure that lets you know this is the initial VC, the two folders beneath it are the 2 possible places you can go, the sub-folders in there are the places you can go from that VC and on and on.

Let's just dump all VCs in one folder, all cells in another. Nevermind that in 90% of the cases, that one cell is only ever used in that one tableview - no need to group those together.

I don't know - maybe it's just me - I'd rather I download a zip, open the project, click that triangle and it runs - this thing makes me jump through hoops, and it still doesn't work... And nothing makes sense, unless you go learn reactive cocoa - based on the amount of files/code, a clear waste of time.
> Or that Google, Uber, Tesla, etc wouldn't already be taking these numbers very seriously and doing everything to minimize them?

Given that we know existing car manufacturers have faked or covered up safety data in the past, you're putting a lot of faith in the goodness of tech companies.
Emacs doesn't do go to definition? Eeek
The cmov looks better than sbb, but both have data dependencies than a predicted branch wouldn't.
Well, everyone around me pretty much determines what is available to me. No one is going to build a zoo in San Jose if no one is coming. San Jose does not even have something like University Ave in Palo Alto. SJ Downtown is horrible and certainly not a place I'd like to go to have fun. What I am saying is, that compared to other cities such as LA or San Diego, San Jose is dead. Nothing besides working is happening. Considering how much I am paying to live here, that is disappointing.
From the reader comments:

My brother (in his late-fifties) is a polyglot employed at a major European bank as a translator. He had remarked to me, about a year ago, that he figured that the job of translator would no longer exist in 15 years.

But one month ago, when he saw what happened to Google Translate, he called me up and said, "I was wrong. If I'm honest, I'm only needed to do cursory reviews of translations. I've been made as redundant as the carriage driver or the switchboard operator."

Assuming the story is truthful, this is amazing. I wonder how well Translate works on older/more technical language, like the many scientific articles published only in German in the first half of the 20th century. This weekend I may well see for myself.
But Yahoo definitely does not know how it got hacked, losing 1 billion accounts.
The first one I found: http://www.medscape.com/viewarticle/804569

So beware of feeding kids and pregnant women with sea salt only.
Don't forget about home repairs and renovations, HOA, and services like gardening, etc. depending on what you buy.

It is easy to end up spending double rent on a comparable place. The difference is for now at least the home you buy can grow nicely so you need to do the math on rate of return for that vs other uses of that cash.
Restricting calorie intake.
I took a photo of handing it to the USPS man.
Is vsc's debugger better than chrome devtools?
The organization who detected that VW was faking the data wasn't actually the government (California Air Resources Board in this case). It was detected by a privately funded organization... funded in part by technology billionaires:

https://en.wikipedia.org/wiki/International_Council_on_Clean...

...I'm the one questioning the utility in of California's system of control. My faith in either actor's earnest participation is therefore not of much use.

I do know customers value safety and honesty of companies they buy/use cars from, and so do the investors who back these companies. Which are the people who keep these companies in business. That pressure exists independently of these permits. Which is why one must realistically question the utility of special government oversight.
In what way do they differ from other CPUs wrt interrupts that makes them more responsive?
Ehhh... not so much.

Some of the mid-size companies are okay at this; but the low-end guys are very, very unsophisticated (there are a lot of local / state plans as mandated by various state laws) and the super-big guys just have so much stuff they have no idea how to integrate it all. Think 15-20 different, incompatible claims systems with overlapping numbering schemes, different versions of schema, different versions of underlying DB required, etc. Then do the same with provider management systems, contracting systems, etc. You get the point.

By the time you get halfway through scoping out a project, the architecture will be obsolete. Oh and also the federal government keeps changing the rules about ICD-10, ACA, Medicare reimbursement, and a whole bunch of other stuff, so make sure you add in that capability to all existing systems and don't get sanctioned. A lot of companies are having a hard time keeping their heads above water.

The big guys are going to eat the data-hungry guys. Or rather, the big guys will buy the best of the new data-first health plans (Clover, Oscar, etc.) for their platforms and migrate everything onto them.
Has Deep Learning Made Traditional Machine Learning Irrelevant?
I had something like this happen.

The buyer from hungary filed a item not received claim and they took my money from my paypal account (it has been negative ever since).

5 months later out of curiosity I sent a message to the buyer and he replied that he did received. But since the case was closed in Ebay there is no way for me to forward the email I received from him to get my account back up in good standing...

I was sent to collections and filed a debt verification letter which they didnt reply correctly and havent responded to it and two years later still does not show on my credit report.

If it ever does I will just file the debt verification letter again and ask for small claims court.
Magic Leap loses its head of PR following rough week of bad PR
I drove past Cumberland on a weekend trip from DC to Ohio last year. This will sound like an underhanded compliment, but it is genuine: it looked very pretty from the highway! The mountains were beautiful and it seemed like every building in the whole town was made of brick. I plan to make it a point to actually visit there someday. I really wish it were possible to live in a quaint, small city like that.
Not buying the conspiracy theory. A California LLC company making more than $500,000 a year, $800 tax or $2,000 tax doesn't matter. I just think lawmakers are out of touch to the consequences of these sort of taxes, and don't think about stimulating small business and entrepreneurs.
If you collect user PII & get hacked, you should be obligated to pay for the damages. Specifically, covering the user for identify theft monitoring for 10-15 years.
"Dishonest", not in the slightest. From what I'm told, they really don't know how they got in. But that's only the part of the story discussed in the press release, what's not discussed is how the data existed in that format.
:) Question is, what does it purport to be? This is probably not the venue for this, but it is a rabbit hole, that's for sure. if you're really interested in a respectful disagreement, I'll happily share my email.

I have the same open door, if anyone can give me a rational basis that supports their truth claims (without opening the door to claims they reject), then I'll change my view. I have, once. I was an evangelical, I'm not now.

> we will have to agree to disagree ... it does so by

Why is that disagreeing? I've argued from the outset that it uses tools of rationality in its defence of doctrine. My point has been that it begins with the certainty of the truth of its claims. And you haven't said what else apologetics does other than defend doctrine, just said we disagree on that point. You've not been forthcoming on examples, so far, here's another example. To be clear, it isn't a problem for me that defence (apologia, 1 Pet 3:15) is the point, just that you seem to think I'm missing something, but haven't given an example.
Using a random answer doesn't help against an attack it the security questions are stored in plain text. I'm not saying storing security questions as a hash is any better practice since these questions just need to go away. I am saying that most likely they aren't stored as hashes so a phone operator can query you hence random is only as good as something like BarkBarkRuffRuff for a maiden name.
> However, it seems like "It's easy to create MD5 collisions," at least as it is true today, actually means something different: That, given a string, it's easy to find a second string that shares the same hash.

Very early MD5 collision attacks were even weaker, actually: given nothing, it was possible to find a pair of arbitrary garbage strings which had the same hash as each other. It wasn't until later that it became possible to pick what the strings would "look like".

> Are these "crafted collisions" generated by modifying string A and string B, until a collision pops out?

Generally speaking, yes.

> If that's the case... what's everyone freaking out about?

The issue with using MD5 as a password hash function actually has nothing to do with collisions. That's a red herring. :) The real problem is that using any fast and/or unsalted hash function for passwords is unsafe!

A fast hash function is unsafe because it makes it easy to generate a bunch of potential passwords, calculate their hashes, and look for a match.

An unsalted hash function is unsafe because it makes it possible to build a "rainbow table" of all possible passwords and their hashes, and look up password hashes in that table.

As used in this situation, MD5 is both fast and unsalted.
I think there are a number of cities you could get that kind of great experience in though -- Seattle, Boston, New York, Austin, probably others.
Is 11 people a really small sample size for a study like this?
If you're a HENRY (High Earner, Not Rich Yet), and have a good credit score (>740), you might qualify for a mortgage with 10% down payment without PMI/second mortgage.

With a frugal lifestyle, 10% should be doable in a couple years, especially if you're okay with living in the East Bay (so the house price is somewhat reasonable).
Yahoo - AOL email for grandparents, owned by Verizon, destined to be maintained by Taos.
How These 14 Steps Can Make Your Performance Appraisal More Successful
> In the rest of the western world, there is no debate about what's happening

I'm not sure what weight that should carry. From my understand a vast majority of Western European countries are opposed to GMOs, another area where the science is settled.

In fact, there is greater scientific consensus around the safety of GMOs than even climate change.

http://www.pewinternet.org/2015/01/29/public-and-scientists-...
> Housing and food are still the highest spending categories.

They can be your highest spending categories and still leave plenty of room left over to save.

As a young person living in NYC (high taxes, high housing, high food costs) I can still save a huge percentage of my income due to the high salaries.
If you're a priori judging the quality of a someone's work based exclusively on the nation of origin, that falls within the dictionary definition of xenophobia.

You can choose to not like the connotations of the word, but that's just your choice. Definitions of words are real.
I have my doubts as well as to its effectiveness, and of course, it's just a band-aid, but if the band-aid stops the pain long enough to fix the underlying issue, then go for it.

Unfortunately, like many tech band-aids, once the pain goes away the problem is ignored until it flares up again.
On a personal level, it's an ego boost. "Then there was that time I advised the President of the United States" is a pretty good anecdote. Good enough to tip the scales away from making a statement for political or business reasons.
Or you just save up to buy a home elsewhere.
Donald Trump-level DMCA takedowns on Xerox-level pop culture lexicon material. I call bullshit.
In Brazil that kind of policy is against the law.
You cannot forbid someone from seek court justice. It automatically renders the policy useless.
While the first author took the blame, Finelli wasn't explicitly named as the reviewer. So it could be any of the coauthors.

Source: http://retractionwatch.com/2016/12/12/dear-peer-reviewer-sto... (retractionwatch.com)
I thought we knew about this already, is there more info than before?
Enablers will not be forgotten.....
> Where TLS can provide an encrypted channel for convincing the user they are talking to the right server, Signal can convince the server it is talking to the right user - and that it is the same user that we spoke to last time.

Same thing can be done with TLS. It's called session resumption.
Isn't the rent just as high?
Thanks for taking the time to write up your experiences here. Much more informative than the Bloomberg article. I agree that culture/what management knows and focuses on can make a huge difference, especially in a field like medicine where there are so many rules and regulations around data and expensive industrial equipment that the market can take a while to catch up to consumer/enterprise tech.

I wouldn't be surprised to see you guys getting acquired by a Bigco insurance. I'm guessing that's an exit your investors are hoping for and part of a reason for the Bloomberg article, to start getting the company on the biz radar.
Wevr Launches First Subscription Service for Cinematic Virtual Reality
is that a knock on php? it gets the job done, I also am working on some phoenix side projects, but Laravel is my main bread and butter currently and what I excel at. Would love to do more/become better at using elixir/haskell in some future apps, but I only see them really mattering when I need lots of concurrency.
I live in the Detroit suburbs. Can confirm many programmers working for auto companies around here and friends with a few.
> I think you vastly underestimate how much low-hanging fruit there is in this field, and how difficult getting and maintaining good data (so you can find the things you can do) really is :)

100% agree. Health insurance data is about as garbage of data as you can get.

Many providers still fill out claims by hand and fax them in. A good many more have an EMR system that just automatically faxes it for them. All this faxing and handwriting and manual data entry means numbers get transposed and data is wrong all the time. Add to this the fact that the people at the doctor's offices filing the claims often have no idea what they're doing and will often file things completely incorrectly (i.e. under a provider code instead of a facility code), leading to a rejection.

I cannot overstate how shitty this data is. Across the board. EMR systems are getting better, but generally only younger doctors in independent practices use the more cloud-based/big data ones. Big hospitals and the like are still generally on proprietary EMR systems (and that doesn't mean it's any better; different departments can have different billing practices that still screw things up).

It will take AI to clean up this mess. It's just too complex for humans to tackle.
Right. It's common for correlations with specific diet and exercise factors in observational studies to disappear when the same things are studied as interventions in randomized controlled trials.
Vim doesn't either. You have to use third party plugins.
If one plans to take full advantage of brain, entrepreneur, capital and customer concentrations then yes. Otherwise, scarcity elsewhere make for increased career leverage (at varying income / cost of living ratios) elsewhere.

Also: https://news.ycombinator.com/item?id=13178495
In practice it's quite difficult to compare insurers in this way since it's not that often you need to make a claim and online reviews are overwhelmingly biased toward negative reviews so they're all like one-star. As far as I can tell the correlation between price and service is not that strong.

For what it's worth, when I had to make claims with Geico it was fine. But I was clearly not at fault in either case so it was not a difficult process.

I also think part of their ability to offer lower premiums is generally having lower human involvement -- no independent agents, claims routed through Web site or call centers, claims adjuster on site in body shop instead of visiting you, etc.
yup, machine learning and distributed computing is going to kill that market
https://androidcommunity.com/conversations-in-microsoft-tran...

^that just went live... what a time to live!
Why would you not recommend S-corp taxation (LLC taxes as S-corp) for this purpose? Doesn't that give you the best of both worlds (easy management with pass-through taxation)? There are obviously headaches over an LLC (have to keep books, corporate meetings, etc...), but I feel those are outweighed otherwise by the savings by taking at least part of your income as S-corp distribution vs wages.

You clearly feel differently, I'm just curious why.
Securing WebSocket with Plain HTTP Without HTTPS