skysight-inc/HackerNews huggingface dataset:
The premise of extracting meaning from noise is flawed. It doesn't matter what process you use to arrive at the meaningful conclusions if the source material is completely meaningless. It's analogous to a fallacy of false premise: you can literally arrive at any conclusion given a false assumption.
They use the same key and iv for every user

What dev sits down, starts writing code, and thinks something like this is a good idea? Not to mention all the other problematic choices.
So the attack vector here is to send someone a link to the search results page with a malicious query that injects JS into the page to decode the users password and then submit it to the attacker's backend collection server? Is that right?
Note to Self, on Time Management
Dupe: https://news.ycombinator.com/item?id=13407794
Walk right in and take the CEO's computer off his desk while waving the lien in their face. Nothing more effective. EVER.
I don't know if you've actually thought your logic through to completion.

You claim that you would "never consider paying for a news site", because it'll just get re-posted somewhere else.

I urge you to think and reflect on what you've just claimed.

Investigative journalism costs money. Going out and interviewing people, or taking photographs costs money. Digging through old archives, or filing Freedom of Information requests to your local government body costs money.

If everybody stops doing that - what exactly are you going to re-post? Kim Kardashian's selfie feed? Cute photos of cats?

WSJ and NYT do journalism - you may not agree with everything they write, but let's be honest, they do real, honest-to-goodness journalistic work. I have a lot of respect for their craft - they're what keeps companies and politicians honest as well, so I see them as essentially to a functional democracy.

Or let's put it closer to home - we techies complain that a lot of news content is just PR puff-pieces from hardware/software companies.

Well, sites like IDW, Anandtech, Phoronix, Engadget, Artstechnica - they do actual reporting, they go out and buy components and test them etc. That costs money.

By your argument, you refuse to pay because somebody will just re-post it - yeah, but somebody has to do the original work. So you are basically spiting the hand that feeds you
From The Hitchhiker's Guide to the Galaxy:

“Far out in the uncharted backwaters of the unfashionable end of the Western spiral arm of the galaxy lies a small unregarded yellow sun. Orbiting this, at a distance of roughly ninety million miles is an utterly insignificant little blue-green planet, whose ape descended life forms are so amazingly primitive that they still think digital watches are a pretty neat idea. This planet has, or had, a problem, which was this. Most of the people living on it were unhappy for pretty much of the time. Many solutions were suggested for this problem, but most of these were largely concerned with the movements of small, green pieces of paper, which is odd, because on the whole, it wasn't the small, green pieces of paper which were unhappy. And so the problem remained, and lots of the people were mean, and most of them were miserable, even the ones with digital watches. Many were increasingly of the opinion that they'd all made a big mistake coming down from the trees in the first place, and some said that even the trees had been a bad move, and that no-one should ever have left the oceans. And then one day, nearly two thousand years after one man had been nailed to a tree for saying how great it would be to be nice to people for a change, a girl, sitting on her own in a small cafe in Rickmansworth suddenly realised what it was that had been going wrong all this time and she finally knew how the world could be made a good and happy place. This time it was right, it would work, and no-one would have to get nalied to anything. Sadly, however, before she could get to a phone to tell anyone, the Earth was unexpectedly demolished to make way for a new hyperspace bypass and so the idea was lost forever.”
Embrace your inefficiency
Stage Oddity: The Story of David Bowie’s Secret Final Project
> This visitor is very different - it feels like it has ADD, or its a paid slave boy somewhere, or a bot that has clumsy intelligence.

I'm happy to see you associate someone with ADD with slaves or a non-intelligent bot.

"Each week receive hand-picked insights to help you develop your career & get promoted faster" by learning how to randomly insult people and equate them with slavery.

"BE GREAT AT WHAT YOU DO", like insulting people you've never met.

Do your testimonials come from people who learned how to insult people?
Such a nice book. My personal preference is to use CLRS for reference and Skiena for people want a quick introduction to algorithms.
Yep, flightaware advertises flight history "dating back to 1998".

Example: https://flightaware.com/live/flight/DLH458/history
Why Risk taken is more important than value added when splitting equity
This isn't a buffer overrun that's hard to detect though, this seems like something that should have been found using more proactive measures.
Just do nested tables.
This is a really nice tutorial, not just on keyboard PCB design but Kicad in general.

I also recommend the excellent "getting to blinky" videos:

https://contextualelectronics.com/learning/getting-to-blinky...

Which teach the basics of Kicad too.
Wow this is a unique book! Just skimming I see Bloom filters, tries, routing protocols, sequential logic and DDOS all in same book. This looks great. Thanks for sharing.
I believe that the key point here is that as adversarial networks compete against each other repeatedly they eventually will converge on a Nash Equilibrium.

Nash Equilibrium from Wikipedia:
"Amy is making the best decision she can, taking into account Phil's decision while Phil's decision remains unchanged, and Phil is making the best decision he can, taking into account Amy's decision while Amy's decision remains unchanged."

At the point this happens, a stable solution exists which is almost like saying that we have made the most rational decision given the information we had. Nash was novel in this theory to say that if the participants were rational they would converge on an equilibrium and not get lost in endless recursion. Endless recursion being something like participants endlessly guessing the other opponent move... If Amy knows Phil knows Amy knows Phil knows Amy knows Phil... Obviously it would be problematic for DL to plunge into infinite recursion.

I like to think of the Nash Equilibrium as a balanced teeter totter. When the teeter totter becomes off balanced rational systems will relearn to balance the odds again based the properties of risk (what Nash referred to as utility I believe). Once they do so, they once again converge on an equilibrium.
How do you like it? Also, any chance you do any photo editing on it?

On Thursday I almost bought a Dell U3417W[0] but I chickened at the last minute because I haven't been able to find much information on curved monitors and photo editing. Some people claim it's an issue, others claim that it's a fine and that it doesn't skew images.

The other one that I was looking at was the LG-34UC98-W (because Thunderbolt 2.0) but I read several reviews mentioning severe ghosting issues.

[0]: https://www.amazon.com/Dell-FR3PK-34-Inch-Led-Lit-Monitor/dp...

[1]: https://www.amazon.com/LG-34UC98-W-34-Inch-UltraWide-Thunder...
Their mobile application does or did send their Google GCM API keys to the client, along with a bunch of other bizarre server configuration information. I had no way to report it; I tried sending an email to their WHOIS contact to no avail.

If anyone has successfully reported a vulnerability to them, let me know!
> By definition a victimless crime involves consenting parties with no harm to outside parties.

I think it involves no victims, including the consenting parties.

Suicide is not a victimless crime (assuming it's a crime)

Attempted suicide would be a victimless crime.
> Obviously, mice are not humans and we know it will be much more complex to rejuvenate a person.

No, not really.
Pardon my ignorance, but how are the passwords actually stolen?

If I understand correctly, this exploit lets you execute arbitrary code on the search results page. And in this case, the code will load up an iframe from a separate place in McD's domain, get the 'penc' cookie and decrypt your own password.

So you would still need to send a link to a McD registered user, who clicked in Remember Password, and then presumably send his/her decrypted password to your own servers (how?). And also somehow steal their username/email.

Is that correct?
I have long thought that a coroutine mechanism was one of the most unfortunate omissions from the ANSI Common Lisp standard. The Lisp Machines had a mechanism called "stack groups" that supported efficient coroutines, but I guess it wasn't considered critical for Common Lisp to have such a thing. As you've noticed, though, adding coroutines in a way that's general, efficient, and portable is very hard.
15 years ago it was likely a 7 speed. In that same space todays bikes have 11-12 gears.

Additionally chains and gear teeth can wear together way past the designed for tolerances. So over 15 years things might work, but then you have to replace the chain, cassette, and chainrings. Replacing any piece alone would likely make things MUCH worse.

Generally if you ride daily it's worth replacing a chain annually, or at least checking for "stretch", which is actually wear. Chains are MUCH cheaper to replace than chainrings and cassettes.
For the mobile app.
It's not really changed.

To be honest, I don't think it so much of an issue any more. I have a library of parts I use regularly and just design footprints for new parts.

I'm my case, I doubt that Altium would have footprints for many of the parts I want to use anyway (quite often cheap connectors, switches etc). I feel like being comfortable with footprint design is an important part of the design process.

That said, there are many features of Altium that look very attractive. For example the push and shove routing.
تشكيل مصر المتوقع لمباراة مالى فى بطولة افريقيا 17-1-2017 د
If you take every AP there is and also have a nice story about having 11 siblings, many schools will accept you with generous aid.
Related: a list of names that probably should be reserved (for example, to prevent someone setting up a user-profile page at a URL you don't want them to control):

https://ldpreload.com/blog/names-to-reserve
That's really interesting. I've been considering moving back to my own mail server from gmail for a long time but have been worried about the security issues.

This is one more thing pushing me in that direction.
In bio sciences (I was in neuro), nature is considered a tier one journal and a big deal to get published in.
And, to my knowledge, least one specific principal level engineer worked on both systems
Very well put, I just have one addendum: Add Fortran to the list. If you program multidimensional array like data structures as flat arrays in C or C++, use Fortran for the kernels and Python for the glue instead. It's just as performant, has much more batteries included and is much more comfortable to achieve a high performance.
As we close the barn doors after the horses have left, we are left to ponder these two valuable resources for further edification.

[1]https://www.owasp.org/index.php/Cryptographic_Storage_Cheat_...

[2]https://www.owasp.org/index.php/Password_Storage_Cheat_Sheet
I was curious about what this special variant entailed and it looks to be some sensible guidelines/practices:

https://github.com/dovecot/core/blob/master/doc/securecoding...
Around 2014, however, things started changing.

You mean, 1996? That's when ST1 was approved. https://en.wikipedia.org/wiki/History_of_Link_light_rail
So a 10% conversion rate? Seems normal.
Kryptonite are plenty strong, they are a good deterent, but not theft proof by any means. I've talked with people who's job was to cut bike locks. It was generally something like cables, 15 seconds. Offbrand u-locks 45 seconds and 1/3rd of a cutting wheel, name brands minute in a half and a cutting wheel. Then the "new york style" heavy ulocks were on the order of 5 minutes and 3 wheels.

Certainly there are bigger cutting discs, if you are willing to make a bunch of noise and sparks you can cut them more quickly.
One. VCs structure their deals so that one breakout success is enough to return the fund. The smart ones never rely on lightning striking more than once.
there is no purpose in biology, there just is
> The angle of the belt doesn't change, the way a chain does, which means you can add a chain guard, as this bike does.

To be fair, the angle of a chain doesn't change either, if you have an internally geared hub, as one must with belts.
It's pretty simple to exfiltrate data from the JavaScript sandbox once it has been compromised via XSS. The simplest way is probably appending an img tag to the page's DOM, with a src pointing to a server you control and send the user's password as the image name.
Think of your startup as a gamble (because it is). People place "bets" on the future profits or sale price. Bets are placed in the form of UNCOMPENSATED time, money, ideas, relationships, supplies, equipment and facilities.

Your employee is betting 30% of his market salary.

You, the original founder, are betting part or all of your market salary plus cash to pay the 70% of the first employee's salary and anything else you have bought.

Later you will add more people and they will place bets too.

You have no idea how long the betting will last and how much will be bet until the company breakseven or raises a Series A round.

At that point you will be able to see how much each person bet.

Their equity should be based on their bets.

For example. If you and I start a company and we each bet $100,000 (in various forms) before we reach breakeven we each deserve 50% of the equity. However, if you bet $300,000 and I only bet $100,000, you should get 75% and I should get 25%.

Anything else isn't fair.

This is the essence of the Slicing Pie model (www.slicingpie.com). The Slicing Pie model uses the fair market value of a participant's contribution to not only determine a fair equity split, but also a fair buyout (if any) when someone leaves the company.

Traditionally, equity splits have been based on rules of thumb, industry averages, negotiations or guesses about the value of the company and a person's promised contributions.

Traditional splits are always wrong.

Slicing Pie is used all over the world.
Re-Frame:  a Reagent Framework for Writing SPAs, in ClojureScript
I'm not proud to say I'd have a lot of schadenfreude if they wait until after Kurzweil passes before they make the world changing breakthrough which eliminates natural death
The two original creators of The Gimp founded Cockroach Labs, were long time Google employees, and sold their startup Viewfinder to Square.
> Unix v6 was released in 1975. “It was roughly 9,000 lines of code,”

has anyone perused it? 9k is tiny.. is there any value, either direct or extrapolated, in lending it the mindshare?
Generating random noise and then filtering it to "find" patterns seems dubious, at best. Why not just generate animal shapes in the first place?

Starting from a random image it's possible to manipulate and filter it to find literally anything. It doesn't mean there are "animal pictures" in the random data; it means the image has been manipulated to look like it. It's a tautology.
The Plausibility of Life by Kirschner & Gerhart

OK, this is an oddball one, in that a book on Evo Devo is pretty far from CS, but reading it completely changed how I look at software architecture, protocols, formats, programming languages, and a whole range of other CS-related topics.

Superficially, it is what it says on the tin: an examination of the mechanisms by which life manages to evolve at all, that keep most mutations from being immediately lethal, and instead have a decent chance of producing (potentially) useful variations.

But under the hood, I've found it extremely interesting how and why so many aspects of the living world are resilient and even antifragile, and there is are lot of useful ideas and concepts to mine beyond relatively superficial biomimicry like genetic algorithms, neural networks, or even "design for failure" approaches for software and services.

Read it, and you won't think about "Worse is Better", "Bus Numbers", or Chaos-Monkeys the same way ever again.

http://yalebooks.com/book/9780300108651/plausibility-life
Inner classes in Java
Cash for Words: A Brief History of Writing for Money
> the moment you arrive regardless of who you are or where you come from (to some degree) you are an American

Unless you were Irish, Italian, Jewish, African, Middle Eastern, Muslim, Japanese, Mexican...

Don't pretend that the US is somehow morally superior in the way they have treated immigrants in the past and tidy.
I'm not about to join the FP circle jerk, but well-executed immutability can reduce memory bandwidth requirements rather than increasing them. This is because often in large C (and Java) codebases, the uninitiated will copy large structures and buffers when they don't need to, because they don't trust the other code[rs]. If you have a tree-like datastructure such as a nested map, immutability lets you copy the structure by reference even when modifying the contents.

That said, the added complexity in memory management means that if you can afford good programmers, it's better that they just try to avoid this practice in the first place. So HPC folks take the mutable approach.

I guess it's hard to say if an average, middle-of-the-road programmer will ever be able to productively work on parallel systems.
No offense but you seem to only have a surface understanding of Bitcoin.

I'm not sure what you mean by ordinary people lose a lot of money with it but ordinary people have surly lost more money in the stock market than they have in Bitcoin. Saying Bitcoin is inherently fraudulent is simply false.

On the topic of computer security. If you are serious about your Bitcoin's security there have been secure hardware wallets available for several years now that are easy to use and eliminate the chance of theft from hacking. They have come down in price to the point where they are very affordable.

The Ledger Nano S for example is $50. It's also super easy to use and never exposes your private key to your computer so it can't be stolen even if your computer is infested with Bitcoin stealing malware. Trezor and Keepkey are similar devices.
In terms of money perhaps, but in terms of life security, leisure time, etc I am in doubt the comparison really holds.
I'm stealing one of those to use as my avatar.

For some inexplicable reason, I find this earth-shatteringly fascinating. If such a bewildering array of patterns can be found in random noise, maybe all patterns -- our attempts to ascribe order to the universe -- are illusive.
One last data point for you and then I'll stop, since you don't seem willing to believe me anyway.

Did you ever read Chaos Monkey? (https://www.amazon.com/Chaos-Monkeys-Obscene-Fortune-Failure...)

The author was a founder of a very little startup (3-men shop) and after 6 months tried to approach Facebook to be acquired, and Facebook told him: we don't want your technology, but since you have proven to be capable of building something exceptional, we want you to join (and you can throw away your product), and we'll offer you $2-3M (don't recall the exact number) in RSUs with a 4y vesting schedule, which he clearly accepted.

Now, those "acqui-hires" happen all the time among those big companies. Since the acquiring company is clearly not interested in the product but just in the talent, how is that different than getting in the door as a really solid individual contributor with terrific experience in getting stuff done (of course, your resume and interview skills need to reflect that, and also, probably even more importantly, your negotiation skills). You can choose to not believe me, but the answer is that there is no difference at all.

If you live in the valley, I can't believe you don't have an acquaintance who followed exactly the path of being individually "acqui-hired" as a talented individual contributor (but not being part of a real acquisition, mind you), which is exactly what happened to my two friends described above (no direct reports, purely technical gig). They are very very good in their fields and managed to sell themselves very well to the right teams inside those big companies.
Ask HN: Have you had your business idea stolen?
A lot of people here don't share much detail when mentioning their successful small businesses. Often the argument is "I don't want someone to steal my idea."

But has this ever happened to you? Do you have an example of someone copying your project and putting you out of business?
Why would you spend $1 Million on ads that were not working?

Did you not test your ads to grasp the conversion rate before spending the money?
PUREmodules kickstarter, last day
I believe an equilibrium would be achieved at a single point of state/time for any of those games you mentioned. The equilibrium being the best next move given what you know about your risk and your opponent.
Don't worry, she can go back to being in the upper half of the totem pole back in her own country
Indeed, I have made the same experience the hard way by trying all other ways to get there. It's one of the few things that I can't seem to pull off without help from above in Lisp. I'll settle for faster conditions for iters, but oh how I would have loved to do green threads with the same ease.
What if they are using 2.5 inch 5TB drives like this http://www.theverge.com/circuitbreaker/2016/11/15/13642078/s... I use. They are nice as we can plug them into a 15 port USB stick, they auto power down when not in used. Amazon could have developed a box like what backblaze.com has done.
This was flagged. Is it really breaching the guidelines? If so, I'm sorry for posting it.

I felt it's political alright but not quite "politics" (e.g., not discussing specific people, or parties) and I felt that the subject (education) is definitely of interest to HN readers. There has been a lot of interest in the past in political subjects, like income distribution (universal wage etc), training and education (coding bootcamps) and generally, issues of equality of opportunities.

I particularly found this passage interesting to me and everyone who has graduated from computer science, especially people from the US:

One illustration is the decision of state colleges to eliminate programs in nursing, engineering and computer science, because they are costly – and happen to be the professions where there is a labor shortage, as The New York Times reports. The decision harms the society but conforms to the business ideology of short-term gain without regard for human consequences, in accord with the vile maxim.

Finally, I didn't think this is likely to cause much controversy, or start any flame wars. I rather expected it to sink off the new entries page with nary an upvote.

Also, I think I forgot to add the year in parens. Sorry about that, too.
> I could build a basic XYZ clone on my own with no funding in maybe 2 or 3 months.

People said the exact same thing about Twitter (and every other popular app), but it isn't true. There's a lot more to building a successful company.
Step 1: you never reveal your comp data. At all. I will, and have, walked away from interviews when they ask this stuff and don't let up.
They own the company that develops their software[1] as far as I know. It's a subsidiary.

[1]: This company: https://www.rdisoftware.com/