skysight-inc/HackerNews huggingface dataset:
> While we technical folks would love to see all the details that's not how intelligence works. Some things have to be secret even though these days everything becomes a conspiracy and a political controversy and a tweet storm.

That's perfectly fair, so why can't they say "The Russians did it but we can't say why we know."? Instead we get "The Russians did it." and "Here is some evidence of the attack." This way, they are not directly saying it is evidence of the Russian attack, they just leave people to form that conclusion themselves. Pardon me if I'm a little suspicious at the "accidentally" confusing communication.

> That said I doubt anyone in either party committee had any idea how security works; even worse is that much of the US government is (and will be) lead by political benefactors with an axe to grind and not people with a real clue about modern security either so expect nothing much different in the future until someone hacks the nuclear "football".

Or the media. And yet, they know, with absolute certainty, despite no evidence or knowledge in the field, that the Russians are responsible for the attack.
Cheat codes don't expire.

Battle toads was nigh unplayable without cheat codes
I would prefer a surgeon who washed his hands over one who didn't but gave me antibiotics. I've had stitches a few times, but only one real surgery. I never got antibiotics for any of those. Maybe we could skip the analogies? I don't think they help the discussion.
Most Doctors Ignore One of the Most Potent Ways to Improve Health
The JavaScript Raytracer
I can tell that no plant geneticists reviewed this paper, certainly no maize geneticists.

The authors claim to use a 'near-isogenic' line for a control.

> The varieties of maize used in this study were DKC 2678 Roundup-tolerant NK603 (Monsanto Corp., USA), and its nearest isogenic non-transgenic control DKC 2675

Yet no mention of how 'near' these lines are is made, nor is the seed provenance discussed. This is, frankly, absurd, as the Monsanto transgenic line began development decades ago. Presuming that the other inbred had been established at that point, there is a minimum of 20 years that these inbreds have been independently maintained.

A proper experiment would have introgressed the EPSPS transgene into a known inbred. That is the only way you can ensure that you have a consistent genetic background, and is standard practice in the maize community. This is, almost without exception, reported in a manuscript. It is that important.

To contextualize this, I've compared control groups of a particular inbred (e.g. B73, Mo17, A619) and seen substantial differences in RNAseq data, simply because it was seed stock from different labs. These are lines that have been shared within the past 10 years. The B73 inbred (from which the maize genome was/is sequenced) is notorious for being defined as 'a barrel of seed in Mike Freeling's lab'. Honesty, the sheer diversity of maize, along with wind pollination, complicated field conditions, and undergraduate help =P, make all maize inbreds a moving target.

This is not a small detail of the paper; all the results rely on these lines actually being 'near-isogenic'. Any small differences between them can easily account for the observed differences. Hell, even after 3 or 4 rounds of introgression, you can often visually see differences between lines that aren't actually due to the trait in question; it's just background noise.

Whatever your views on transgenic technology, I would not base any decision on this work.
> add nightly builds to distributions

rustup run nightly cargo build --release

You were saying? In any case, there's no such thing as a stable vs nightly split. There's pretty much zero libraries that require nightly, and the few that have a nightly option for optional features will no longer require nightly after the macros update lands.
> we are pretty sure neurons are arranged in 3D structures, and heat dissipation is not a problem.

Actually, heat dissipation is a HUGE problem for biological structures. Heat exhaustion is a really easy thing to have happen to you.

Biological organisms operate well only in a very narrow temperature range. The brain is a gigantic heat producing organ coupled to an enormous heat dissipating organ--skin.
It's not evidence of a state sponsored actor. But it's also not evidence against a state sponsored actor.

Given that it's neutral, you can look at outcomes. Trump wins the election.

That was probably best for Russia, Israel, or China. It very well could have been a random hack. But the release seems to have been politically timed and motivated (though someone could absolutely have just bought the data) which would suggest looking closely at those with something to gain for involvement.
NewYearsResolutions.me Anonymously Ask Friends for Advise
I agree that IP addresses aren't good evidence but it isn't really possible to spoof TCP in practice.

http://security.stackexchange.com/questions/55279/how-easy-i...
I haven't looked at rust, and this sentiment is exactly what has kept me away. I watched perl, java, python, ruby, node and c++ (boost) fall into the trap of "we know better than the end-user/developers/sysadmins/os vendor, so let's reinvent dpkg poorly".

Why should cargo be any different? It is solving a problem I don't have (debian, ubuntu, openbsd, and freaking illumnos all have acceptable package management), and creating a massive new problem (there is a whole thread below this one talking about rust dll hell between nightly and stable, and the thread links to other HN articles!). From my perspective all this work is wasted just because some developers somewhere use an OS that doesn't support apt or ports.

Sorry this is so ranty, but I really want to know if anyone has had luck using rust with their native package manager.
Ahhh, kibwen (aka. bstrie) is one of the gems of the Rust community. He never fails to make us remember to look at the silly side of our silly programming debates.
All those you mentioned don't interfere with the election process. The last couple weeks all I have heard were Russians rigging the election process to help elect Trump, i.e. the election result is not what is should be, i.e. Trump's presidency is not completely legitimate.

It has been couple weeks of non-stopped Russian blaming from the news. So far there's not much direct evidence beyond a unnamed CIA source. Now this lackbuster report and Obama expelling Russians happen on the same day. It really smacks an orchestrated political propaganda campaign.

Mind you I am not a blue dog Republican. I've voted 16 years straight for Democratic tickets including twice for Obama. Democratic Party has been a real disappointment this year, and Obama making this last partisan political act really tarnishes his legacy.
I doubt I could make 17k/m consulting while doing something I enjoy. I could probably make that by getting into the business side of things and away from tech.
Good article by Isaacson. I would add I think it would be good if the CCCers got some outside consultation, both from people in the sex abuse field, and at least one person who is an expert on sociopaths, since that is what it seems JA is.

I think it would also helpful would be helpful to learn communication skills like active listening and the ones in Marshall Rosenberg's book Nonviolent Communication.
>If both parties agreed that it's wrong for foreign governments to hack the DNC's

1. There is no proof that this happened

2. Who said they did not agree?
Twitter CEO: We need an edit button
A general question to parents: Is it possible to raise a kid without a smartphone today?
> The singularity already happened, in meat space, i.e. Humans.

The singularity also happened in net space--the Internet.

For all of its faults, the Internet is really effective external species memory. All of our current AI relies on the Internet as its "storage".
I don't understand the need to create this false dichotomy. Eggs _do_ increase cholesterol, which leads to heart attacks. So does sugar.
Oh, I see what you mean.
The fruits of the bad actors, namely the data itself, is what needs to be regulated, analogous to what HIPPA does.
This is why I think no one should trust companies that sell you software, that you can't host yourself, for something as critical as documentation and source control. I feel really bad for all the companies that have to jump through hoops to get their data rescued from this company.

It also sucks to loose such a smart company. I wish they had built their solutions as a self hosted system so that people could still use their obviosuly outstanding work.
The problem is misleading the public about the nature of the information gathered and the shady ways that the information is sometimes used. If Facebook were only gathering information necessary to improve the experience of its users, and were not selling that information or lying about it, I don't think you'd see the same backlash.
Ideally, who speaks for your wants and desires? Realistically, who do you allow to speak for you on a regular basis? Your mom? Your boss? Perhaps an unhealthy narcissistic friend? Facebook?

Speaking for others is formulating emotional responses for someone else and then constructing a dialog that elicits those feelings in that person. Today, that can be done with software as has been shown time and time again with Facebook. In the past it's been the tool of choice for those who control others. Narcissistic parents or greedy corporations, the end result is the same: loss of choice for all.
True, It helps when the family members and friends are cheerful.
They may have evidence it was the Russians, but it sure isn't in this report.
Be careful, that money you bought from that Chinese gentleman could've very well be obtained by hacking one of your friends for it. Or obtained through shady (possibly rigged) gambling sites. Or "legitimately" obtained through gold farming (either manually in an Asian sweat shop or using bots) in a way that makes the game near unplayable for legitimate players (hoarding resources, driving inflation, ...)

Source: I've been involved with people in the gold selling business.
The full dietary guidelines being discussed appear to be here: https://health.gov/dietaryguidelines/2015/guidelines/
Minimalistic search app for FAQs with Markdown support built on Elasticsearch.
Does this same idea apply when running ZFS on top of the Linux LUKS mapper (whatever the proper terminology is)?
Well, "simulated Jones's" could pretty well describe many of our current celebrities.
I too am writing a travel website currently. I dont want to give out my focus tho :)

Your features seem to be dependend on having users. With the amount of etablished travel website, how do you want to overcome the chicken egg problem?
Even expiring cheats are still just cheats.

Battle toads as a game was broken, yes.
How Not to Respond to a Rewrite Req (if You Don’t Want to Look Anti-Semitic)
Obama Creates Two Nature Preserves:Bears Ears and Gold Butte
I never agreed to use such a definition for "shortage".
I'd prefer something a bit sturdier than circumstantial evidence if we're going to accuse a nuclear superpower of cyber warfare.
Python 3.6 Is Packed with Goodness
Yeah, that reminded me to clear my cookies again. Of course Facebook is there again. Even if they are somehow still building their dossier on me, at least I am not wasting my life on a site built for, I quote "Dumb F*ucks" - Zuck.
Related study:

http://www.pnas.org/content/111/20/7379.full
I make $30k+ in months when I am asked to work longer hours (50h of billable time). I wrote a book about how to break into consulting as a programmer; link in profile. The key is prospecting. I offer a fee chapter, devoted to 15 channels for finding clients.
He's a good recent resource on choosing effective charities:

https://80000hours.org/2016/12/the-effective-altruism-guide-...
I thought that cholesterol -> heart attacks was found to all be bupkis a while ago.
This post itself may be closer to agreeing with you than not:

The reaction of our community’s “immune system” was notably severe in this case; rather than doing it this way next time, we need to develop more compassionate systems to deal with problems earlier.
I think it's almost tautologically true that higher density requires (for example) less road, and less road is cheaper than more road. So that would just mean the differences you pointed out must be external to this analysis.

As a first stab in the dark I'd ask: does Oregon City have any poor people, or old people? If it's a rather new community build as a satellite for Portland's professional class, the demographics may be completely different from that of the state as a whole.

Portland may also suffer from its past: maybe they have pension obligations that they didn't build capital for. Or, conversely, Oregon City may be underfunding its future obligations.

I also just looked u the numbers to see what the difference is and you are right:

Portland Pop: 604,000 Budget: 4,000,000,000 = $6600/person/year
Oregon C.Pop: 34,000 Budget: 165,000,000 = $4860/person/year
I could be [very] wrong but my read of the practical use of this is that it creates a really complicated-mathey AST that allows for adaptation of a program to different forms. The paper notes several times how a program could be adapted for maximum efficiency on different hardware than it was originally written for. I'm certain there a bunch more to it, but that was all I was able to grasp.
Yes, that is what we already do. The two unsafe UTF-8 casts are the two critical spots at opposite edges of the generic abstraction where the instantiation corresponding to UTF-8 string needs to take advantage of the knowledge that something is guaranteed to be valid UTF-8.

What we have is as close as possible to what you suggested.

As I mentioned, we could get rid of the unsafe code in other ways without sacrificing performance. Ultimately it is up to me as a maintainer of serde_json to judge the likelihood and severity of certain types of bugs and make tradeoffs appropriately. There are security-critical bugs we could implement using only safe code, for example if you give us JSON that says {"user": "Animats"} and we deserialize it as {"user": "admin"}. My judgment is that using 100% safe code would increase the likelihood of other types of bugs (not related to UTF-8ness) and the current tradeoff is what makes the most sense for the library.

From another point of view, performance and safety are synonyms in this case, not opposites. If we use 0.1% unsafe code and perform faster than the fastest 100% unsafe C/C++ library (which is what the benchmarks show for many use cases) then people will be inclined to use our 0.1% unsafe library. If we give up unsafe but sacrifice performance, people will be inclined to use the 100% unsafe C/C++ alternatives.
You are right, I didn't look carefully, this is not simply eval(POST) backdoor, it has a payload and it is encrypted with an external key that is provided via POST or COOKIE; but I see some weak points and will try to guess the key.

Maybe this code is encrypted using some generic obfuscation tool and the file at github matches the rule at report because their payload was encrypted with the same tool?

I'll also add some thoughts under @wongarsu's comment.
We've banned this account for trolling, detached this comment from https://news.ycombinator.com/item?id=13280251, and marked it off-topic.

Please stop creating accounts to break HN's rules with.
The reason why you see startups avoiding this model is because supporting self hosted solutions is extremely difficult as a small team and only impedes the ability to evolve your product. It's a shame, but companies shouldn't adopt products if they lack a feature requirement (data migration).
I agree that the police should be involved when a crime is committed. The problem, according to Isaacson is that the whole CCC community has a set of social norms that have been preventing that. However, people seem to be realizing that, and are starting to work to change the norms. I am glad to hear that, and I think it is good he wrote about that since this problem is certainly found in many other groups.

There is something else. Yes, the police should be called when a crime occurs, but there are lots of sexual behaviors that are not strictly crimes but are still morally wrong. The main way to prevent crimes from happening in the first place is to have clear community norms against the lesser offences. Wouldn't you agree? And the only way that ever happens is through a whole lot of discussion within the community.

>Enough with the hearsay character assassinations. This time, the author even admits that he's conflicted and that his memory isn't completely reliable.

He said he personally witnessed many abusive episodes himself. And he spoke to many others who had personally been abused. That is not hearsay, which is when someone tells you something they claim someone else said. Instead it is exactly the sort of discussions that have to happen when a community is making a major change in its norms.
From the article the tagging feature is not available in the EU. An interesting question is are the citizens better/happier/safer without this feature? I don't propose to know how to measure that.
There is so much that 'everybody knows' about nutrition that is pure bullshit peddled by farmers, agribusiness and processed food companies.

Just one example-- that fat causes heart disease. Pure nonsense pushed by the soda and sugar industry.

https://www.theguardian.com/society/2016/apr/07/the-sugar-co...

Just eat a balanced diet, don't overeat, and don't eat too much processed food and red meat, and you'll probably be fine.
This is actually an important part of the market. A lot of the income of these games comes from "whales", players who spend a lot of money (sometimes thousands a year) on them. These are typically people with high expendable income but a strong desire for social status, and one of the ways they try and get social status is by buying such items (which makes them very beloved and helps retain other players too)
Pretty sure "biological distinctiveness" just got written into an MBA textbook. Integration will never be the same.
No, I think I would not only depend on users but they will have an option to put in data. I think initially I would have to scrape data, put some seed data myself, etc. But let's assume that the data is in fact there, then this aims to be a short trip/weekend getaway recommendation website. Is that something someone would want to use?
Ofcourse, please don't give away your focus. Though I don't think it matters because generally no one wants to build someone else's idea :)
So I just want opinions here on what a good travel site should do. I was initially thinking that this website I propose could get popular but now I am thinking - hey, anyone can google 'places around me for weekend getaways' and get a lot of links, etc.
Take the factorial function defined in one of the usual ways (recursive or iterative). How do you take the derivative of it, using this paper? Do you magically get the gamma function this way, too?

I just skimmed the paper without getting close to answering these questions -- anyone who does already understand, maybe explaining this concrete example could help the rest of us?

Thinking about the problem in my naive way earlier this year, I noticed that the usual if-then-else expression is a special case of linear interpolation, at least when you're dealing with numbers. ("lerp by t between a and b" generalizes "if t then b else a", taking false=0 and true=1.) But it's not so obvious how to handle recursion and nonnumeric data: I guess there's a hint in that the usual theory of programs has Scott continuity (https://en.wikipedia.org/wiki/Continuous_function) while differentiable functions are continuous in the reals, but I'm mathematically undereducated.
Even if these extensions are being used I'm sure the attack surface of X11, it's extensions and it's drivers is large enough to make it trivial to breach. Even compared to a modern browser like Chrome.
I don't know what you mean by valid. Everything you said I either disagree with or you actually weren't making a valid argument. I just didn't want to play this game with you.
5 Inbound Marketing Resolutions That Should Be on Your List for 2017
I disagree. All signs point to Russia wanting peace with the US, and I think they are cozying up to Trump so he will roll back the sanctions that have been choking the Russian economy since 2014 or so.

Clinton was the one saber rattling against Russia during the election, not Trump. So assuming your theory is Russia hacked the DNC, their motivations seem to be to avoid war, not escalate.

However, there is definitely a cultural war going on within Western civilization between cultural Marxists wanting a global, totalitarian state and libertarian civic nationalists wanting a decentralized, limited state.

Where Russia comes in, and what's really funny about all this, is that the "right" now finds itself aligned with former Soviet communists and the "left" finds itself aligned with the Islamic caliphate. Politics can make strange bedfellows indeed.
Perhaps your "good luck" was snipey and didn't add anything...
Interesting, why now I wonder?
Implementing Function Spreadsheets (2008) [pdf]
'everybody knows' red meat is bad?
"Just do it right" isn't very good advice.

And what exactly counts as "processed" food?
Great points, they've misled us for so long about--

>Just eat a balanced diet, don't overeat, and don't eat too much processed food and red meat, and you'll probably be fine.

Wait, what? Why is the evidence against red meat so much stronger than that against cholesterol or fat?

Edit: or processed food for that matter, although I grant that a higher prior as being bad because of how far it is from what we would have eaten in our ancestral environment (depending, of course, on what you count as processing).
If you see evidence of this, you should send it to hn@ycombinator.com so we can investigate. If you don't have evidence, it's unsubstantive to post such a claim—not to mention that interpreting other users' different opinions as shillage is uncivil and against the rules here.

We detached this comment from https://news.ycombinator.com/item?id=13281453 and marked it off-topic.
> I guess "not letting your kids play IAP funnels disguised as games" isn't an option?

The author states in the article:

Obviously, many parents avoid these conflicts altogether by simply banning such games altogether. While I sympathize with that sentiment, to me it seems extreme; fun and gaming strategies are legitimate pursuits for a child

Personally I think that's a false dichotomy because it's possible to plays games (not necessarily on a screen) that allow fun and strategy while at the same time avoid IAP funnels disguised as games.

> Why is Daddy up late at night grinding in the IAP funnel for him?

Because the people who designed the IAP funnel are even more clever and insidious than the author realises and it's not just children they are after.
"Balanced diet" is the terminology that's honestly hard to define. Until we have that definition, "a variety of types of food" seems better to me. Here, let me offer a correction:

"Eat a variety of foods, avoiding large amounts of any one thing, and don't overeat; you'll probably be fine."
See my comment with link to their code.
Exactly. That's how suburban bedroom communities in effect suck away tax money from the big cities they rely on.