skysight-inc/HackerNews huggingface dataset:
A very detailed post which talks about their collaboration with security consulting firm Cure53 to identify various fairly novel exfiltration techniques, and attempt to adjust their Content-Security-Policy or some aspect of their application to try to mitigate it. This could be a great resource, and is certainly a valuable 'lessons learned'.

But I was also overwhelmed. There's a quip that security is a losing battle, but that wasn't my takeaway -- rather, the knowledge space required to develop and host a web application that accepts user-generated content in a way that won't leak info apparently everywhere is getting too much for generalist developers working alone or in small teams.
Uber is dank and lekker.
When cost comes down, financing becomes simpler, right?
ISRO successfully realigns Mangalyaan
Fifty percent of the jobs will be gone in ~20 years.

How many new jobs will be created?
> As far as using GCP's BigTable (HBase compat), we made this decision before we moved to GCP, but we are also not fans of using platform lock-in.

Did you consider GCP Datastore as well?

It has strong consistency for a single "entity group", but eventual consistency for queries on multiple entity groups.

So by storing data only relevant to a single user in an entity group, you can have strongly consistent, atomic transactions on that group (albeit limited to 1 tx/s), and at the same time do global queries on all user data with eventual consistency.
The strike slip nature of the San Andreas Fault zone in California precludes really big earthquakes. USGS thinks a 8.2 or 8.3 is about as big as they could get. The biggest historical California earthquakes have reached 7.9 in magnitude. (http://www.conservation.ca.gov/index/Earthquakes/Pages/qh_ea...)
I’m sure part of the reason is that mathematics was, and largely still is, written by hand. You can manipulate “code” more easily on paper with a terse, implicit notation. It can also have the advantage of engaging your visual pattern-matching abilities more than prose or prose-like notation.
Cray to Develop ARM-Based Isambard Supercomputer for UK Met Office
This illustrates the power & the problem of Common Lisp: the power is that it really is easy to add channels (and pretty much every other feature) to the language yourself; the problem is that it's generally easier to write your own code to do this than to use (or fix …) someone else's.

I've experienced exactly this: I too looked at ChanL. In my case it had a bug for one of my use cases, and it was honestly easier to roll my own channels (with, of course, their own bugs) than to understand & fix ChanL's bug.

The problem is that this leads to a proliferation of different libraries, all doing similar things. The power is that one really can write just about anything, and it will work well enough for your use case.
Thank you so much, you made my day.

I am going to download all of them and watch all of them. Again,thanks.
This is an interesting claim but I'm not qualified to evaluate its truth or falsehood. Can you link us to the "original foundation?"
Adoptly, the Tinder for child adoption, is indistinguishable from parody
My wife did a very similar research project for her PhD (https://goo.gl/vSZ69s)

They studied using the system in 5 groups (taking the same class) and got a statistically significant delta in the 3 experimental groups' scores vs. the 2 control groups.
Both exp and ctl solved the same set of exercises, both worked with a teacher, but exp groups also used the system.

The results about the learning deltas haven't been published yet, but you can e-mail her at <np at mathdip.org> if you're curious.
There's a simple solution to this. Just, don't take any salary that's below the highest market rate you can get. The second you start taking "equity" as compensation, you're putting yourself at extreme risk, needlessly. If you take a 10K salary cut for options, it's the equivalence of taking the higher salary and investing 10K in that single company. No self respecting financial advisor would ever tell you to take 10K or More per year and invest it in 1 single company - especially if it's the very same company your actually working for! That's just compounding High risk ontop of already high risk.

Even if you wanted to do this, you don't need to be an employee of a company to do that. Just join some venture Seed fund that you can invest your 10,20,30K per year, etc. Your chance of success is approximately the same, but at least you won't loose your job when it doesn't work out.

And, if your just out of school, or have no other options, then by all means go work for the start up. In this situation your not giving up a higher salary to do so.

And always make sure you have work/life balance - the company won't do that for you, you have to make it happen.
> It would cause parts of the world to lose their power grids

The questions I haven't seen answered are: how much of our capacity to manufacture power generation and transmission equipment requires a functioning power grid? I wonder if we(read FEMA) have a plan to divert the finite resources remaining after such an event to repairing the power grid?
Order Management Guide for WooCommerce Store
At a certain point you need to set a baseline expectation of your audience in order to communicate effectively. Do you think they should also explain exploitation, img-src, the mechanics of parsing unmatched quotes, javascript or CSRF? The target audience of the article knows what CSP stands for and most likely has been reading the other entries along this journey.
Apologies for that not being clear. Given I had linked to the original article in the first sentence, I took the perspective of people knowing which "CSP" I was talking about. I'll update the post in the morning to spell/link out to the first CSP reference.
Before we can measure leadership. Maybe we ought to first figure out what we mean by leadership.

Often there has being a mix up between leadership, management, and a bunch of other stuff that has nothing to do with leadership.

If people are interested in how and leadership is effectively exercised and what it is. Take a look at this paper: https://ssrn.com/abstract=1392406
The best communication tool to engage your app users: App Promo Videos
> Tangentially, I've always wondered why databases today still aren't capable of being self-tuning.

http://pelotondb.io
"Today, apps need many data stores - from database to search index, to cache and more. Our AI algorithm learns about your app and auto configures these for you so we don't have to which saves 50% or more of your time."
And I had thought it was communicating sequential processes for a second
Great. Now I need a hug.
So... all mobile sites?
That's the kicker though: how bad is "good enough"? If I ask Google for a donut shop and can pick the one that has devil's food chocolate donuts, who cares if Yelp would've given me better reviews; the basic information is there in front of me, and I don't have to install an app or deal with popups.

I stopped using Yelp the minute they made their mobile site unusable in a pinch while pulled over on the side of the road. It doesn't matter how good the content is if I don't have the time to jump through their hoops.
In finance, there are lots of instances where having a physical presence give you some sort of regulatory benefit.
I believe Chris Olah[1] doesn't have a degree. I suspect he doesn't need one now though...

[1] http://colah.github.io/cv.pdf
That reads like a right-wing version of Barlow's Cyberspace Manifesto:[1] "Governments of the Industrial World, you weary giants of flesh and steel, I come from Cyberspace, the new home of Mind. On behalf of the future, I ask you of the past to leave us alone. You are not welcome among us. You have no sovereignty where we gather."

Boy, was he wrong.

[1] https://www.eff.org/cyberspace-independence
Yes! I was just thinking about this, actually. We're building scalable tools for analyzing genetic data on Spark:

https://hail.is https://github.com/hail-is/hail

It's tricky because we need someone who can write, has technical knowledge (python, Apache big data stack) and some knowledge of bioinformatics and statistical genetics. There might be an option for some paid work. What's the going rate for technical writing?
Ok fair enough. Those two examples though are specifically not good examples, and its hard to improve documentation without specific examples of what is missing.
Have you looked at Kubernetes? It's pretty dead simple to get a cluster up these days and the general abstractions they chose are really great. Service discovery, config and secret storage, control loops, autoscaling, even stateful containers these days.

100% worth giving it a shot, even just to say you've tried it.

I've been using Docker for over three years now, and Kubernetes really is the realization of what I imagined containers would be like when I was just starting to use them in development.
The example you gave (wrong number of parameters in an override) would be caught by any sane statically typed language. (Though if you are distributing updates to .so's you need to explicitly check for ABI compatibility)

I had to search for Tox. It seems like analogous tools would be nice for statically typed "systems" languages too, though there is less need for them there (more bugs are caught at build time, instead of after deploy).

Debian sort of does the same thing when it builds packages, but only checks compatibility with current versions of dependencies. It would be nice if they also checked / tracked compatibility breakage (the "not all libraries are good" observation is language independent, and a "n days since we broke users of this library" label would be great).
I hope they enjoy reading my wife and I discussing dinner plans and my reminders to my son to do his homework.
From http://www.jsoftware.com/help/jforc/culture_shock.htm#_Toc19... , a great book about J:

> I've looked at some J code. Every other character is a period or a colon. I've got spots before my eyes. How can anybody read this stuff?

> You'll get used to it. J has a great many primitives, and it's important to keep the names short so that you can fit a lot of computation on one line; so the names are either single characters, like >, or a character with a period or colon appended (>. and >:). The period/colon is just part of the name. Single letters with period/colon, like i., are also used for primitives. If you want to assign your own names to the primitives, you are allowed to, but pretty soon you'll want to go back to the shorter names to save space and typing.
Introducing the AWS IoT Button Enterprise Program
I believe the HHS/CMS team spends quite a bit of time in Baltimore, because that's where CMS is. So it might still be worth talking to a USDS recruiter to see if it could be a good match.
Prepared statements are re-planned on use if the underlying statistics change.
I was hoping it meant "constraint-satisfaction programming".
I updated my profile--thanks! It's a bit daunting to think about all the places where I'll need to update my profile/bio. :)
Civil (and informative) comments like yours are why I come to HN.
This means that autopilot must be engaged at least 40% of the time (Amdahl's law!). Tesla owners, is that realistic?
Thanks for the good wishes!
If you decide to stop when a test says the error rate (FPR) is 5%, your error rate will be higher than 5%. If you don't want to call that a failure mode, it's at least a misuse of the metric.
Using an in-memory hash vs. a MySQL table
That's pretty cool. I would love to see Google make this option easier for people who want to help with improving civic tech at the local, state, or federal level.
I would expect them to expect their readers to look up concepts that are unfamiliar. Throwing around overloaded acronyms without definition makes that difficult.
Funny enough, I tried doing exactly that when I submitted the post to HN this morning: https://news.ycombinator.com/item?id=13437920. But, unfortunately, my submission wasn't the one to make the front page .
You are advocating for something called sequential testing. I'm not going to go into the details, but you don't use the same metrics with sequential testing if you want to control your final error rates. That is, you can't look at the p-value on your t-test and say that's your false positive rate for the sequential test. It's important for reasons you describe, but not exactly idiot proof.
What you're saying is really that it's too powerful for it's own good. And I agree. But what's good for Lisp isn't necessarily good for me, I prefer more power to one size fits all libraries. I think it comes down to experience in the end; the more you have, the more unwilling you are to give it up.
> it's near impossible to give you a helpful IDE (in a word-like language you can use autocomplete

What autocomplete you need in J? For verbs and conjunctions which are at most 2 letters long?

> how do you give ideas whether the user should use @ or ^ at a given point?

In the same way as IDE helps you to choose . or exp() ? They are completely different concepts, how can you mix them?

> it's near impossible to search for code examples and such

I think it's a common problem for complex code examples, in any language. You may, though, search for comments.

From http://www.jsoftware.com/help/jforc/foreword.htm#_Toc1917342... :

> C is a computer language; it lets you control the things the computer does. J is a language of computation: it lets you describe what needs to be done without getting bogged down in details

I think it's a great help. J doesn't just reduces typing; it also reduces the amount of things one needs to keep in the head to solve the problem.
PDF/A_2U Format Support and Rendering Specific PDF Page Region to Image in Java
You understand that AGI16 is a futureism conference and has little to do with actually building anything that works?

Whilst theories like a 'virtually embodied agent trained like a child' sounds like it makes sense there is nothing to say it will work, except that humans are like that. But we don't know how brains work enough to copy that anyway.
A popular saying in APL world: an APL programmer solves a problem in 5 minutes, then spends the rest of the hour to polish the solution to perfection.

I doubt you'll need a lot of maintenance for short (and thought-out) solutions.
The fact that something is recorded in history doesn't make it a historic event.
I can guarantee you that more people know that Kim Kardashian was robbed at gunpoint in London than what Manning did.
Dear Apple, please don’t do what Microsoft did
The Great Exception: California vs. Trump
The pricing model does not fit our needs, and that is even more locked in than the BigTable variant.
In A/B testing, either A or B is the control.
The article seems confused about the concept of satire. Satire is not something you debunk, that would be fraud.

That said, I hold with satire. I'm going to be laughing about this stuff all day.
This should not be the case, we strive for Discord be lightning fast at all times.

Please email me stanislav@discordapp.com I would love more details.
Docker for Mac is a pretty terrible experience. https://github.com/docker/for-mac/issues/77 has eaten a huge chunk of time for my team and the issue has been open and known about since the beta. Yes there are hacks to make things better, but as of a month or two ago the Docker team seems to have gone radio silent after providing periodic updates.
My God, that blog is a joke
the mind boggles when thinking about what literary recommendations are likely to emerge in the future.
Judging by the github issue list there are a lot more issues with Docker.qcow2 now than before. Mostly related to Docker.qcow2 preventing docker from starting.

Looks like a bad release. Hopefully 1.13.1 is soon.
It's a nice solution, I was looking into VESA mounts but eventually I went for this one because it allows me to transition from work to play (and vice versa) in just a few seconds. (And also because eventually I want to get a yoke): http://www.nextlevelracing.com/products/next-level-flight-st...
Ads for Google products topped Google search results 91 percent of the time
That's not at all the same as channels going away.
Ask HN: Will capitalism survive the robot revolution?
So many recruiter requests. Current contract is from LinkedIn. Was able to negotiate pretty hard just from the sheer quantity of offers.
‘Super Mario Run’ Will Jump onto Android Phones in March
I live in India and Uber / Ola (Uber's domestic competitor) are a godsend! In India we have Autos(https://en.wikipedia.org/wiki/Auto_rickshaw) And the drivers were (are?) ill mannered, demand exorbitant fairs. But Uber changed that. Since the drivers know that the ratings matter, they are nicer. Yes, one in a while you still get a negative experience, but as a whole. it's whole lot better.

For most of the Indians, cars rides are expensive. But I wouldn't mind if the Autos operate the same way Uber for cars work. Ola is already offering Auto rides in the same manner.

Even though I own a car, I don't enjoy driving because of traffic conditions and use Uber and Ola just because I don't feel like driving on a particular day.

I desperately hope that the Uber model succeeds in India, going back to what it was before is too painful to think about.
You've got to be kidding me. This is quite straight forward.

1. America has figured out how to listen to Merkel's phone calls.

2. Merkel finds out we listen to her phone calls.

3. Merkel stop using her phone for communications.

4. US is no longer able to listen to Merkel's phone calls.

Or:

1. US listens in on embassy.

2. Embassy finds out US is listening.

3. Embassy searches for and finds the bug.

4. US is no longer listening to the embassy.

Now apply this, at large, at the same time, to everyone that Snowden revealed we were spying on.
This release broke our Azure Container Service Kubernetes deployment. Had to downgrade back to 1.12 for now, but not without suffering a day of downtime trying to trace the issue.
Thompson sampling does not need to assume stability. You can inject time features into the model if you want to model seasonality (or, more accurately, ignorances of seasonality) and you can also have a hidden random-walk variable.

Yes, if you assume stability and things vary, you will not have good results. That seems like any statistics.
I have given up on using docker on macOS. I now use Ubuntu at work, and it's interesting to watch a lot of my co-workers give up on macOS too. I totally agree it is a horrible experience.
This is a hard question to answer, and my personal opinion is based on my experience in the Army over a while. The best leaders I encountered managed to somehow turn out the best in the people they led. That can manifest in a lot of ways. Improvements on subordinate performance, increases in technical proficiencies, a more disciplined approach to their work. Those are all good metrics, but the best leaders managed to get their subordinates to actually want to improve on their own, without sufficient goading from their leaders. Most of that, therefore, lands in the realm of understanding group dynamics, behavioral economics, and leadership psychology.
If you arent attaching it to anything, put it in a tinfoil sac. It will be fine and ready to go when needed, semiconductors and all.
" is conjunction, it binds to its arguments - in this case left FB and right 0 - stronger than those bind to their arguments. >: is verb, i. another verb, so

>: i. 100

is understood as

>: (i. (100))

- as two monadic (one-argument) functions applied sequentially.

To the left of that application sits the next verb -

FB"0

which applied next, so the whole thing is

FB"0 (>: (i. (100)))

Precedence/associative rules are: all verbs from right to left, all adverbs/conjunctions from left to right, adverbs/conjunctions are higher by precedence than verbs. That's it.
I think one of the biggest points being missed here is that Uber may very well be an iceberg. Meaning moving people is literally just the tip, but to get to the rest you have to subsidize the hell out of moving people.

The fundamental problem with what Benjamin pointed out with the lack of benefits with network effects, only applies when you are thinking about moving people and only thinking about 1 singular network. Sure, you and I may only want to go from point A to B within my city.

I think the real value for Uber is when they have this huge network of constant activity between most points within any city/country, the value proposition to carry cargo goes through the roof.

Imagine being able to send a document (or a package) anywhere else within the city in 20 minutes.

Amazon is experimenting with Drones for quick delivery, but just imagine being able to purchase something on Amazon, Walmart, Target, and get it within 30 minutes from an Uber driver.

Their network effect looks different than most others, say Facebook, because the real value is a network effect of networks. i.e. they have highly concentrated networks within cities, and they have a high concentration of city-networks within states, and outward.

The clear value proposition there is one can easily move a package from your house through your network within your city, to another network in an adjacent city, and on and on to say the next state.

Right now, sure you can ship something 'overnight' via FedEx relatively long distances within the US but technically it's not REALLY overnight. Technically, you have to reach the FedEx store before some cut off time (say 12 noon), so that package can then be taken to their sorting facility and make it out on the flight that night.

Imagine if there is the a real-time network where at any moment any package can be placed on the network and be on the most efficient route to the destination immediately. That's obviously the holy grail, but no longer do you have packages sitting in sorting facilities and waiting on bulky planes to take off.

They may not have these plans, but I have no inside knowledge and that's one clear advantage I can see of having a network where something is always being delivered between almost any 2 points within the network.

I assume that all of these investors are not dumb and neither is Kalanick and his team, so I suspect there is a much larger logistics play than we can imagine.

Just like Tesla isn't just a car company, but is also both a commercial power (Southern California Edison) & oil company (Exxon) plus maybe an autonomous delivery fleet all in one, I assume Uber is something similar we just can't see it yet.
Donald Trump on Fitness: Says Speaking at Rallies Is “A Form of Exercise”
As you sort of imply, it doesn't help that each implementation is half-baked, incomplete, and unmaintained after 16 months.

I've seen similar libraries that do the following, for example:

* Serialization and deserialization

* Promises

* Generators

* CPS

Somehow none of these "100 line wonders" make it into idiomatic usage, despite their purported utility.

These channels as presented don't solve many problems well. They will be very slow and contentious, they will be expensive to make, and they will not guard against memory ownership issues because you're just passing pointers to objects around, which message passing is supposed to solve.

But, it'll become another library on Quicklisp that 3 people use and that people's applications will inadvertently depend on.

Lisp is a fantastic language for many things, including a plethora of production applications, but it being a local optimum for exploratory programming means we get lots of very incomplete, scratch-an-itch code that is pawned off as a library intended for mass consumption. In fact, the author links to his GitHub repository, where you find exactly this random assortment of disparate utilities.

If I had my way, the rhetoric of this post would be closer to a pedagogical exposition of channels, how they're used, what their benefits are, a proof-of-concept implementation, and a non-trivial example application. I would vehemently stay away from having the thesis be anything about Lisp or the ease of implementing small POCs in Lisp.