skysight-inc/HackerNews huggingface dataset:
The way we model the world is with mathematical models and the complexity bounds on those mathematical models are actually statements about irreducibility of those problems to simpler ones.

In fact, the model is lower bound approximation to the real thing and if the approximation has certain complexity then the real thing will be much worse. That is the whole point of having a model. You approximate reality with something simpler and hope the solution to the simpler model problem is close enough to the solution of the real problem.

So what real world problems are you talking about? I'd say much of engineering and science is coming up with these solvable models for real world phenomena and so far no one has cracked the nut on coming up with a simple solution to problems that have complicated models. You might argue AGI is not one of those problems but that's a different argument.
That use is problematic, but it's worth pointing out why. Just like this, I fear many people will understand your comment as an insinuation that the LAT et. al. just made up these quotes. I haven't read all of Fisk's criticism, but I believe his case is mostly that it allows those government sources to spread misinformation behind the cover of anonymity.
The right choices are bounds checking or autoboxing. I very rarely want arithmetic modulo n (and when I do, I want to choose n), but never do I ever want signed overflow quietly giving wrong answers.
The problem is that those racial categories aren't very well aligned with anything. In 1816, this article would talk about how the Irish were a bunch of turds.

If you look at "asians" you're looking at mostly confuscian based cultures and various Indian ethnicities, mostly admitted for residency for work purposes.

"Hispanic" in particular is any of a dozen different distinct cultures. Statistically, hispanics are an overlay grafted on top of whatever other category you're bickered in -- sort of like how Jewish culture transcends nationality. A consultant from Spain and a mestizo immigrant from Guatemala picking tomatoes are the same, but have little to do with each other at all.

I would assert that if you dig deeper into data you'd find that Asian ethnic groups are pulling ahead as a cohort in many ways in the same manner that the white ethnic societies did for white immigrant groups 100 years ago. The old boys club is shifting.
Private keys can be stolen or extracted via bribery, etc.
Interesting reading in this area in case anyone missed it: https://news.ycombinator.com/item?id=13268051
But if people stick to old games, they can make content packs for old games, and people will still buy them (and relatively cheaply, too).
>"Until we start seeing some more balanced (frankly, I'd settle for nuanced) discussion about the compromises made to get Rust's strengths, I'm staying the hell away from it."

Look into the issues surrounding the borrow checker, that's one of Rust's main pain points. Long compilation times are another common issue.

To Rust fans, I realise both of those issues will be addressed to some degree as MIR matures, but I'm looking for flaws as things stand now.
The colors hurt me, but it is a tutorial thing, so that's ok.
Why would you factor out local cost of living when comparing incomes? For the wealthy, a high cost of living is a choice to live where they want.
I'd argue both sides stand to lose more or less everything 500 time over, if I believe the union of concerned scientists.
33C3 Software Defined Emissions – reverse-engineering car ECU firmware for truth
Could be biological: actual neurons; or using protein folding to do computation.

Meanwhile 28nm remains the cheapest per transistor process - the first time smaller nodes got more expensive (due to heat, mainly). In the short-term, we might go for larger dies, clocked lower, to get more computation for less power. Perhaps all that wasted hardware will get used more efficiently (eg Metal and Vulkan).
Ask HN: How can a beginner start contributing to open source?
I love programming, particularly solving problems using algorithms and data structures. I don't have a firm gasp over any language, but choose to work with C++, Java and Python. Whenever I try to get into open source, I realize the projects to be immensely big and very complex and end up looking for something simpler. But this goes on and on. So my question is, How can a beginner start his/her journey into the open source? What path would you recommend?
Agreed, ZFS has its caveats, but feature-wise and stability-wise ZFS is to -- a large degree -- what BTRFS should have been.

The licensing is incredibly unfortunate, though. (I don't care about the reasoning for the license, it's just bad that it isn't GPL-compatible so that it could be compatible with the most prolific kernel in the world.)

Anyway, back to BTRFS-vs-ZFS. It seems abundantly clear that a filesystem is (no longer) a thing where you can just "throw an early idea out there" and hope that others will pick up the slack and fix all the bugs. There's just too much design (not code) that goes into these things that it's not just about code any more.

My (small) bet right now as to the "next gen" FS on Linux is on bcachefs[1, 2]. It sounds much sounder from a design perspective than BFS, plus it's built on the already-proven bcache, etc. etc. (Read the page for details.)

[1] https://www.patreon.com/bcachefs
[1] https://bcache.evilpiepirate.org/Bcachefs/
> I think it's beneficial to read one of the Rust issue threads, "Rust does not guarantee thread-safety #26215"[1], about why they stopped referring to Rust as "thread safe".

No they didn't. That issue was closed as WONTFIX and rust-lang.org still says to this day "… and guarantees thread safety".

More generally, Rust can't protect you from logic errors, but it does more than just guarantees freedom from data races. The very issue you referenced has a discussion on this topic, about how the phrase "thread safety" isn't well-defined, but that Rust does give you a stronger notion about consistency in a multi-threaded world than just freedom from data races.

I genuinely don't understand your all-wheel-drive comparison. You seem to be arguing that the consistency guarantees Rust provides are actually bad because it will trick users into thinking that they don't have to give any thought at all to logical races in threading. And that's nonsense. Users have to think about that regardless of the consistency guarantees the language provides. The fact that Rust does most of the heavy lifting for you makes it a lot easier to reason about the logical races, because you know you don't have to even consider the consistency issues that Rust protects you from, which means you have much less complexity to reason about. In addition, most of the synchronization mechanisms that you need in order to share mutable values across multiple threads will tend to protect you from logical races too. For example, if you have a value that you want protected by a lock, you can't just stick the lock in the value and lock/unlock it in every method, because that doesn't help you share the value itself across threads. So instead you'd probably wrap the value itself in a Mutex, which you can now share easily (e.g. via Arc), and now the Mutex guards the whole value instead of just guarding every function call, meaning you won't have logical race issues when calling several methods on the value in a sequence.
If your "evidence" is that people in public positions are removed from public positions because of public backlash, then that is no evidence at all. Public opinion often rules out over actual facts in such cases.
I have started learning French few months ago. I started with Duolingo for couple of weeks to get the basics. I liked there tutorials. The APP even has a built-in messenger where you can chat in French with a bot(guessing same for German too).

The first book I read was Beauty and the beast in french. It's a short story to start with. It took me a long time to just read some sentences with proper pronunciation and I'm still working on it. I look up youtube videos for some extra info. The frenchpod101 videos are good.
I guess you might have already tried these, but just wanted to mention it anyways. Hope this helps! Good Luck!
There are so many basic React tutorials out there. Is all this really needed? I always thought the official tutorial was enough for any normal JS developer to get going with React.
> Nobody is saying Rust is perfect

Err, the title of this article is "Rust is Software's Salvation". The previous one was "Rust is mostly safety". No discussion of trade offs, no negatives to be found. From the original article: "[Rust is] Technology from the past come to save the future from itself"

> Not sure why marketing Rust implies that the community is trying to defend it

The original article was a call for marketing material, because they don't feel enough people are using it. Those people are, to paraphrase the sentiment from the comments in the first article, wrong for thinking they write safe C or C++ code.
Well, we (and by this I mean myself and my fantastic team) have been running it since 2015 as the main filesystem for a double-digit number of KVM hosts running a triple-digit number of virtual machines executing an interesting mix of workloads, ranging from lightweight (file servers for light sharing, web application hosts) to heavy I/O bound ones (databases, build farms) with fantastic results so far. All this on Debian Stable.

The setup process was a bit painful given some interesting delays when using some HW storage controllers that caused udev to not make some HDD devices available under /dev before the ZFS scripts kicked in and we have been bitten a couple times by changes (or bugs) in the boot scripts, however the gains provided by ZFS in terms of data integrity, backup, and virtual machine provisioning workflow were definitely worth it.
That's super annoying. The 100 person startup I'm at uses 2 factor authentication! It's so easy these days there is no technical excuse anymore.
GitHub should automatically convert +1 comments to thumbs up reactions
It's the point-in-time transfer of power that makes this unwise. He has less than a month to go and his top priority is what exactly? It should be on the smooth transition of power. Starting a tit-for-tat with Russia should be left to the next guy.
The HDT 2016 Code School Rankings
Keep an eye on Ars Technica in the next week or two, and also take a look at this article: http://arstechnica.com/tech-policy/2016/12/police-ask-alexa-...

TL;DR: The Echo uploads audio for cloud-based recognition when it detects voices, but it's not clear if or how long Amazon keeps that. The Echo also has its internal audio buffer which is used for that detection, and in this case the police were looking for any audio that might have been retained in that buffer in the time period before the device was disconnected during the investigation.
Its more about earning passive income from something that was fun to build. I built my side projects simply because I thought it would be fun to build them. The passive income from something I only maintain a few hours a week is just a nice bonus.
or users could just post a thumbs up.
I think you mean Cardalytics.

The amazing thing is that hedge funds trade on aggregate credit card purchase data.
Sorry I didn't get back to this.

It's a virtual linear log file which gets split occasionally by appending a sorted list of pointers to the end and "closing" that log file, along with occasional tasks repacking the log files together.

Individual records (either key/value or key/tombstone) have a pointer showing how far back they cast a "shadow" so you know how long you need to keep tombstones for.

Since only the active log file can ever have changes made, you can repack any two adjacent files together into a single compacted log file at any time, removing any duplicates or tombstones that don't cast a shadow outside the range being compacted.
We'll probably never know the name of the poor intern tasked to slap this together overnight.

Hope the main report due in 3 weeks has some substance.
what is money?
re: two-party consent, IANAL but there seems to be exceptions where if the parties don't have a reasonable expectation of privacy, consent is not needed. For example, somebody recording you giving a public speech does not need your permission -- the public can go hear you speak with or without the recording.

Since Trump was mic'd up on the bus (they were going to film a segment), I think there is a case to be made that he couldn't realistically make the case he didn't know he was being recorded or could be recorded. I think it'd be a hard sell that this was an illegally recorded conversation.
It's unlikely that simply formatting your comment as "we can't say X about group Y because it's politically dangerous" is enough to prevent this comment from being flagged as intrinsically bigoted/racist, so you might want to self-moderate.
Actioned, thanks.
In terms of illegally obtained content, the Democrats had no problem claiming higher ethical ground in releasing a tapped cell phone conversation of Newt Gingrich http://www.daviddfriedman.com/CCP_97/Gingrich%252fMartin%252...

And if you want to focus on foreign (illegal) involvement in U.S. elections, look no further than the alleged Chinese involvement in the 1996 presidential election https://en.wikipedia.org/wiki/1996_United_States_campaign_fi...

My point being, this is almost entirely political. It changes no ones mind.
Xvideo
>This report merely points the finger at Russia; it does not purport to substantiate that allegation.

That's the point, its just another completely baseless, unsubstantiated accusation. This report contains nothing that suggests that the Russians were any more likely to be the source of the hack then countless other entities. The problem is that these baseless claims are being presented as evidence and being consumed uncritically as such. Take for example the headline in PcMag:

>Hacking Evidence in Hand, Obama Sanctions Russia

http://www.pcmag.com/news/350675/hacking-evidence-in-hand-ob...
OneSignal is hiring a developer to work on our Ruby on Rails and Rust back end
zfs is not in mainline or centos kernel, so you are presumably willing to try stuff. I believe all the overlay/selinux work is now upstream, it is supposed to ship in the next RHEL release.
I just hit publish on a post about this! The common guidance is to get started light and to start with the issues. Even the GSoC student at the repo I'm starting to get involved in started by reading as many issues as possible before diving in.

Here are two links to help you:

http://words.steveklabnik.com/how-to-be-an-open-source-garde... - Steve wrote a great post about how he gets started with a new project

http://peteh.me/an-easy-way-to-get-started-with-open-source-... - Here's my post about how I'm starting to get involved in open source without being great at coding
I haven't written it yet. I suspect I can't beat b-tree in entirely random read workloads.
Show HN: Medium.com's image zoom in pure JavaScript
I was responding to this.

"In the real world, the interesting problems are much much harder than that."

In one of the parents.
My understanding is that he rides the powerful ebikes in the forest when snow is on the ground. When there is no snow he rides a regular bike.

Regarding the general question of danger to pedestrians: good urban planning works wonders.
Page 5 lists a YARA signature names "PAS_TOOL_PHP_WEB_KIT" that is supposed to match some kind of payload from the attack. It looks generic but is surprisingly specific.

A quick search reveals that it happens to exactly match [1] (if you fix a few obvious bugs where the github code uses $COOKIE instead of $_COOKIE, or produces base64decode instead of base64_decode. The attackers probably fixed that in production). Apart from the exact combination of three `isset` and two `_COOKIE`, that code starts with the unusual sequence `<?php $l___l_='base'.(32*2).'de'.'code';` which happens to be matched by the (also very unusual) regex from the report. It also ticks all other boxes from the provided signature.

I just found that within five minutes by searching github. It seems like an encrypted payload that can be executed by visiting the php page while having the password in a POST parameter or in a Cookie.

I'm not an expert, but the encryption looks very simple. Maybe somebody feels up to the challenge to try some statistical analysis or similar on it?

[1] https://github.com/Nu11ers3t/Null/wiki
The US can't be the police of the world for all eternity and act on its own in any conflict that arises. Acting unilaterally is only going to bring more and more problems; I hope you're not suggesting that the US should just oust Russian troops from wherever they are if it doesn't please the US.
"Many breach announcements this year pointed to a “sophisticated attacker” as a narrative of their issue. This usually is followed up by criticism when an initial means of their compromise is revealed.

Most breaches begin with spear phishing, commodity exploits, a leaked key, or some other obvious or preventable detail.
However, this is almost never the “sophisticated” aspect of a breach worth talking about. It’s easy to point at an embarrassing vector and dismiss the rest of an attack.
Thus, do not judge an adversary by the vector they’ve chosen.

An adversary may show you what “sophistication” means after advancing from their beachhead."

* https://medium.com/starting-up-security/learning-from-a-year...
Hmm. Maybe we should chat? Not directly related to this, but I'd love to pick your brain. Email's in my profile.
$1500 per hour? It's looks impossible for a developer, unless he is doing a business.
It's not just studying. I think the author of the original comment meant there might be genetic and/or cultural factors that affect the inteliigence level. And intelligence level usually correlates with income level, although a lot of the related studies might be just measuring "mean temperature in the hospital" which does not provide much of a valuable insight.
I have personally written that exact tool while learning Python. A RAT using Twitter for C & C. Uses PGP for encryption and verification. The twitter handles for the C & C change based on a hash of Googles lastest Doodle so you can access it without fear of account deletion.

TIL I'm as good as a state level intelligence team.

Hey CIA/NSA we know you are reading this, my contact info is in my profile. Hire me.
I wouldn't trust a person like Donna Brazile with running a thing as simple as a banana stand, the fact that she claims the emails were falsified convinces people like myself that they were indeed the real deal.
Its a Felt BMX and the motor is a 20 inch hub kit with 36 volt battery and 18 amp controller that I bought of aliexpress. Let me know if you want to know something more specific.
Ask HN: Best place to find contract jobs?
I'm looking for a remote position but I figured I should try it out before jumping all the way in. I'd like to land a remote contract position. Does anyone have suggestions on a market place to look for such jobs?
I recently looked around at "baby apps" hoping to find something to launch before letting my one year old play with my phone. (She loves smartphones more than any other object but I don't appreciate the random calendar entries and text messages she sends.) Every single one I found had advertising and half of them had in app purchases. The people making these apps must assume I'm an idiot.
Yeah, this was basically my conclusion too.

I'm somewhat okay with the parsing ones using unsafe if we can be very sure that the unsafe code actually has a performance impact, and be very careful about it. Some of them already do this, but not all.
Sounds like someone reads SSC :)
https://arxiv.org/
It does make a few differences, ie. plan to save a lot and cash out at lower CoL places.
Craig Murray said he got the document drop in September, right? Didn't Wikileaks start publishing emails earlier than that? (Sincere question, I don't understand the timeline here.)
Getting the heat out is an engineering problem. If nature could solve it (brain is 3D), we will find a way too.
A lot of CS papers are available on http://citeseerx.ist.psu.edu/
That's a lot of hype.

I don't hate C, like some here, but I am receptive to the many objections to it: it makes a lot of sense.

But I would be a lot more receptive to this particular attack on C (which is pretty reasonable) if it wasn't so melodramatic: claiming that Rust will "save software" and that C is some kind of garbage with no advantages of any sort. Both are false (although the latter has some truth to it: C has many issues).

The truth is strongly in your favour: No need to stretch it.
Alas, I think a week is too short to give Rust. Go will get you more pay-off in the short term, but as you internalise the rules of Rust you'll really start to reap the benefits. Unfortunately being an experienced user, I'm not aware of a single online source for learning this stuff - I mainly teach people directly in person or on IRC.
Sounds like the US defense industry.
Have you even talked to the elderly? They are much happier today than they were kids. The ability to communicate with old friends and family across the globe and purchase medicine easily.

Over half of your claims relate to the environment. Perhaps you are too attached to that? Or are you so firmly fixed to your narrative that quality of life is decreasing? I can easily cite many MORE animal species that are not extinct today, but would have been, if it were not for our technological advances and conservation efforts. But of course, this doesn't match your narrative, so you will deny it at all costs.
>The report also contains a pretty useless firewall rule named "PAS TOOL PHP WEB KIT FOUND" that can be used to search malware in PHP files. It is interesting that they have replaced digits in 'base64_decode' function name with regexp as if there were any other similar functions.

If you read that regexp carefully, it's more complicated than that. It doesn't match base64_decode, but it would match `='base'.(32*2).'_de'.'code'`. That's obfuscation in the payload, and in another comment I linked to some code that uses exactly this unusual (and pointless) obfuscation [1]

[1] https://news.ycombinator.com/item?id=13281008
What year do you think the singularity will happen?
The Brain Dump
It is interesting to see the strongly negative positions that some people take on any of these reports. It is almost like folks can have ulterior motives or know very little about how to protect sources and methods.
http://citeseerx.ist.psu.edu/
The purpose of these "reports" and the retaliation against the Russians is to undermine the legitimacy of the Trump presidency. There's no need for proof, just innuendo and allegation would do. Pretty sick of technology got dragged through the mud for political purpose.
I would invest in a weed ETF. How would you even go about setting that up? Let me know when it's available!
>For the wealthy, a high cost of living is a choice to live where they want.

To an extent. I think some of them might not mind living in less expensive rural areas if they didn't need to be in proximity to their workplace or common areas of business.

We aren't exclusively talking ultra-wealthy billionaires here, I imagine the article is mostly concerned with the more common wealthy upper-middle class workers like programmers, doctors, etc.
This is interestingly related to two psychiatric conditions named derealization and depersonalization:

http://www.calmclinic.com/anxiety/symptoms/derealization

A friend that suffers from the condition could never really explain what it felt like. Then, he tried VR for the first time.
Whatever the default level SmartScreen is already has a ding and a warning pop up about unknown executables. But it's amber and not red, and most people just click through it (I know I do).
12 Months / 12 Side Projects – Are you in?
Think Africa. Vietnams is already too expensive. Mexico probably is, too.