skysight-inc/HackerNews huggingface dataset:
Furthermore, as I've read some of the commentary around this case, it's pretty clear that--even in technical circles--a lot of people assume that everything that's said in Alexa's earshot goes back to the mothership. I think it's a safe bet that the typical consumer isn't up on nuances like listening for a keyword is a local operation.

Barring "Alexa: How do I clean up blood stains?" there's unlikely to be anything here (and would a Google search be any different?) But, if there were something incriminating in Alexa queries, the last thing Amazon wants is the inevitable headlines about how someone was convicted based on an Alexa recording which many would read as being an always-on ambient record.
19 Game Changing Affiliate Marketing Tools
With PyWren, AWS Lambda Finds an Unexpected Market in Scientific Computing
On the other hand, the letter O in the older American Morse was relatively short because it contained an "long" internal gap: "dit-dit" (as opposed to I being "didit" and the "word" EE being "dit, dit"). If the regular gap is the length of a dot, and the inter letter gap is the length of three dots, the length of the gap in O was two dots.

International Morse eliminated the "long" internal gap (according to Wikipedia [1], this had an advantage on the first long undersea cables), so O had to be re-encoded. '---' ("dahdahdah") was the only three-element code not already being used for a letter. (It happens to be the number 5 in American Morse.)

When I was a Novice-class ham many years ago, I found that older hams would sometimes send the pro sign C (in the sense of "confirm" or "yes") as didit-dit instead of dahdidahdit. I never really understood why; I just went along with it. Turns out didit-dit is C in American Morse.

[1] https://en.wikipedia.org/wiki/American_Morse_code
So if one were hashing data or a document format that also contained a bit of self-referential integrity data, e.g. the end of the data has a CRC of the rest of the block, or maybe a cryptographic signature using some other hash, wouldn't that further constrain the search space? Then not only would one need to back out the random bits needed to complete the SHA-1 collision, it would also have to satisfy a some other constraint within the other data in the block.

The best thing would be if one could prove a mathmatically incompatible set of counter functions where data colliding in the hash of one function would prevent the other function from validating correctly.
53% of British Columbians have tried marijuana, and 2.4% use opioids. Not much of a gateway...
Ah but did you witness it?

We are all reasonable people here and can agree that this behavior, if true, is disgusting and unacceptable. But is a "claim" evidence and should we assume it is by default "truth"? This is the crux of the issue.

If you stood accused of sexual harassment I'm sure you would hope society would take a moment to gather the facts before judging you, even if on an individual level you weren't a likeable person. Because being likeable and condoning sexual harassment are two different things.
CMV Is a Greater Threat to Infants Than Zika, but Far Less Often Discussed
From Terman to Today: A Century of Findings on Intellectual Precocity [pdf]
The disruption in mobile gaming that few are talking about
GWAS of cognitive empathy
I don't believe their public letter helps Uber -- it just puts Kapor Capital in an antagonistic relationship with Uber in general and likely Travis in particular, and weakens the plan Uber has committed to (bringing in a former AG, already familiar with the company, with very little delay, to do an investigation -- he's not an outsider, but I respect his integrity more than a completely random attorney), before we've even seen if it produces good results.

I can't tell how much of this was because Uber decided to find someone themselves, vs. relying on Kapor's Project Include.

There is a difference between "held accountable" (which would be shareholder/board actions) and "throwing bricks through the window" (which is this).
That is frustrating. In my field of cognitive neuroscience, there is often little incentive for a researcher to hide parts of their methods from their 'competitors' since, for example, my memory study is not about reporting but protecting a new technology. Indeed, prestige is often a consequence of others adopting your methods, so researchers are motivated to share scripts, and report the methods fully.
HOWEVER, certain journals can place limits on the length of the methods section, which is a damn shame.
Full details from Cloudflare: https://blog.cloudflare.com/incident-report-on-memory-leak-c...
I wonder what percentage of legal opioid users move onto heroin and obtaining the drug via illegal means. If more, then at very least the theory is applied in a hypocritical way.
My guess would be trade secrets since patents would be public information and afaik the technology isn't currently being sold this wouldn't be subject to patent infringement laws. Not a lawyer though, so I could be wrong.
Everyone deleted the app, so we have to use the CLI now!
Yeah I saw that. So I'm confused on where he's getting this idea, since as far as I'm aware of current research...the trend is the opposite.
Interesting, thank you for sharing.
You ran the shared connection situation with no problems? Great, but I linked to examples of people who have had different experiences, you can follow the links to see. Like all race conditions, sometimes they appear and sometimes not, and it can depend on your particular app.

They are not surprising, because the concurrency guarantees of AR do not include sharing a connection object between threads, it is not meant to be thread-safe.

With postgres, the race conditions on sharing a connection between two concurrent threads sometimes look like "PG::Error: connection is closed" or "PG::UnableToSend: another command is already in progress", with mysql sometimes like "Mysql2::Error: This connection is in use by: #<Thread:...>"
https://en.wikipedia.org/wiki/Activist_shareholder
... and the HN link/discussion (submitted by jgrahamc): https://news.ycombinator.com/item?id=13718720
Does anyone know why Susan chose to "blog" instead of filing a law suit?
While this is true, ML isn't a panacea that will solve all problems given time and training data.
> In early rounds, founders are looking for investors who will trust management to make decisions in the best interest of the company.

We're hardly in early rounds for Uber at this point. July 2016 was round 15 and Kapor's been invested in Uber since 2010 as angel investors (essentially round 1)[0].

[0]: https://www.crunchbase.com/funding-round/c76f942969286763614...

> who will trust management to make decisions in the best interest of the company.

And how is letting a culture like this go rampant "in the best interest of the company"?

> EVEN if they don't agree with those decisions, it's expected that they'll be a team player and provide support in whatever way possible.

I don't agree with you there either. It's not the investors responsibility or job to blindly follow the CEO. It's their job to advise them, to be asked for advise and to help correct course. But that also means you need to listen to them and when that's not happening investors need to ensure they're heard.
Yea that's incredibly bad if that's what that guy did.. in general for EE designs, the schematic/layouts are not that hard to deduce how you would do it if you are in contact with the company that makes the LIDAR device (the unique and difficult part -- basically just need to ask them, like "yo, how roughly should I interface with this thing and whats your recommendation on a number of the components.. and can you give me a reference schematic.."). So copying stuff means that the guy actually probably was clueless as to how it actually worked and planned to just hand it off to somebody else who did understand it -- so definitely super bad...
In related news, Tesla is accusing ex-autopilot director Sterling Anderson of stealing code from Tesla before starting up Aurora with Chris Urmson (the former CTO of Alphabet's self driving car program):

https://techcrunch.com/2017/01/26/tesla-sues-ex-autopilot-di...
Wired Love: A Romance of Dots and Dashes (1879) describes a long distance romance conducted "online", from the point of view of a female telegraph operator, where neither party knew what the other looked like or even the sound of their voice. Describes the virtual communities of telegraph operators and the culture surrounding them. It's a wonderful book.

http://www.kristinholt.com/archives/5686
-- a review of the book

Copies can be found at archive.org, Gutenberg, and Amazon.

What's also interesting to me are the telegraph hacks during the American Civil War. Tapping into enemy wires and sending misleading orders, or just listening in. Here's some discussion on it:

http://civilwartalk.com/threads/hacking-into-the-telegraph-s...
and users from HN argued with me saying that trump's admin wasn't anti marijuana.
It's interesting to read about users of Rust trying to build different kinds of systems. The "amazing language for game development" is quite an endorsement. Even more so when you read that his colleague was able to pick up the language and contribute with no hassle. Unfortunately libraries and bindings will take time to develop so any new-ish platform will have the same issue.

I am looking at picking up a new language. Something to add to the utility belt and not just for fun(so no lisp...). I am torn between go and rust. They seem similar yet coming from different backgrounds.

go is designed by a big company with a need for a safe systems language that is as fast as C that works well at scale with a distributed infrastructure. Rust is designed by a company with a need for a safe systems language that works well to build browsers? I like Mozilla's tech usually but go seems to have better recognition in the workplace. Any thoughts?
DA is one of the web's icons and it complemented the rise of CGI extremely well.

For me the site was at times educational helping explore software tools others used to create their works of art. Screenshots on the other hand were extremely useful in desktop customisation and seeing what was possible to do across OS platforms.
I think you're misplacing motives here.

The root cause for the founder sentiment in this thread is empathy.

The firestorm Uber is facing may be self-inflicted and justified, but the management team there is made up of real people that are in all likelihood good at heart.

When you have an ongoing PR crisis, a letter like this makes things impossibly difficult. And, the fact that it's written by someone who's supposed to be a trusted team member is an arrow through the heart.
Nobody has forced designers to learn to code, but I for one am happy to see so many UX professionals taking an interest. It's the job of a designer to clearly communicate their vision to developers so that it can be implemented. Designers who have a basic understanding of HTML/CSS are unquestionably better equipped to do that job.

Consider a dismissable modal that appears in the center of the screen. As a front-end developer, I would like to know the modal's dimensions, its colors, which icon to use for the dismiss button, whether the corners should be rounded, and what sort of transition to use (should it fade in/out, and for how long). By creating a functional prototype of the element, he or she no longer has to answer each of these questions individually.

I don't see this as a bad trend. When designers are able to communicate their ideas clearly to developers, everyone wins.
Check my math.

42U, 4 sockets, 8 cores = 1344 CPUs per rack.
two PCIe slots per U = 84 GPUs per rack
That's not even that exotic of hardware.
fifteen racks = 20160 CPUs and 1260 GPUsyum info
So five months or so assuming the GPUs can't be fed until the CPUs complete processing, give or take, in 15 racks of decently higher-end off-the-shelf stuff.
Sadly, Android Studio is now the only game in town. My advice would be use AS as close as possible to how the tutorials recommend. Technically you can still build android apps with Eclipse or the cmd line but, as a new user, this will be difficult.

Personally I'm going to skip Android Studio and wait until Google changes their mind again and moves to a new IDE. Should be only a year or so. ;>
That is the way I think... not that the story is necessarily bullshit (though like most conflict stories of which we've only heard one side it may have other factors) but that it's a fairly normal story from a rightfully disgruntled employee (there's always rightfully disgruntled employees) which has been elevated to the level of some unique crime against humanity.
Yeah, I somehow do not understand why she resorted to blog about it and not just file a law suit (I just asked this in a top level comment).
I thought that statistics is the right tool to handle uncertainity? I had the impression that all the "soft" science is based on statistics. We can't prove that smoking kills people. But, given a certain confidance interval (or whatever equivalent measure for baysian statistics?), we can state that smoking is not a good idea if you want to live longer than mean expected years...
Sure, some unforseen event may interfere with your experiment. But statistics should account for that, shouldn't it? Just wondering..
Oh, my god.

Read the whole event log.

If you were behind Cloudflare and it was proxying sensitive data (the contents of HTTP POSTs, &c), they've potentially been spraying it into caches all across the Internet; it was so bad that Tavis found it by accident just looking through Google search results.

The crazy thing here is that the Project Zero people were joking last night about a disclosure that was going to keep everyone at work late today. And, this morning, Google announced the SHA-1 collision, which everyone (including the insiders who leaked that the SHA-1 collision was coming) thought was the big announcement.

Nope. A SHA-1 collision, it turns out, is the minor security news of the day.

This is approximately as bad as it ever gets. A significant number of companies probably need to compose customer notifications; it's, at this point, very difficult to rule out unauthorized disclosure of anything that traversed Cloudflare.
Aggregations in MongoDB by Example
I'd imagine for the time being you could use DO's resizing features to vertically scale your droplet to handle the load. Then at a later point, horizontally scale.
I would target email addresses, and would collect them by doing Show HN launches for content that is very easy to make, like curated and aggregated lists/links, newsletters that never get written, or services that are a thin layer over an API. Stuff that could be created within a day.

When they were submitted I would wait until someone legitimately upvoted it. If it does get a real vote I would arrange an additional upvote from a HN user. At that point it will probably climb into the bottom 20 of the front page at least for a little while.

I would use a different product, domain, submitter account and helpful upvoter each time.
Another funny case is Melky Cabrera, an MLB player, who built out a website to cover up his positive PED test.

http://www.espn.com/mlb/story/_/id/8282185/san-francisco-gia...
Alphabet’s Waymo sues Otto and Uber for stealing design of key self-driving tech
Lots of insights/technologies you use today were produced by scientists working in such and even more secretive conditions, even with public funding involved (e.g. nobody at the Manhattan project would broadcast their discoveries to the world and same for many other fields, not necessarily war related).
> One could be a regular visitor to r/bitcoin and have no clue that there is a huge political battle going on amongst the users, miners and developers.

True story, I'm one of those visitors. Off to go read up on some stuff, apparently.
Garmin engineer shot and killed in Kansas in a allegedly hate crime
It makes supporting hibernate a lot easier - your system can just dump the contents of memory to the swap partition.
The 'unknown unknowns' will never be eliminated. Certainly it's worthwhile to try to improve methods communication, but there are limits.

You really have to try it yourself before you can understand the degree of troubleshooting that's required of a good experimentalist. You could have scientists live-streaming all their work, and you'd still have the same issues you do now. Even a simple experiment, something most wouldn't blink an eye at, has dozens and dozens of variables that could influence the result. The combinatoric complexity is staggering. The reality is that you try things, find some that work, and then convince yourself that it's a real result with some further work.

The methods that endure are the ones that replicate well and work robustly. Molecular biology is still built on Sanger sequencing, electrophoresis, and blotting, all in the context of good crossing and genetics, because that's what works. Some of the genomic tools are starting to get there, I'd venture to say that RNAseq is reasonably standardized and robust at this point. Interpreting genomic data is another story...
>Cloudflare pointed out their bug bounty program, but I noticed it has a top-tier reward of a t-shirt.

Considering the amount and sensitivity of the data they handle, I'm not sure a t-shirt is an appropriate top-tier reward.
People underestimate how significant a huge mailing list can be!
It's not really separate because their problem is the baseline amorality of their company culture. The disregard for laws, threatening journalists, subprime lending, and abusive work practices are all part and parcel of this. Maybe years ago you could have excused this all away, but at this point you're throwing your lot in with this pattern of sociopathic behavior, hoping that Kalanick's gaslit apologies will guarantee your stock options.
I'm sure it doesn't sit well with google that a group of guys left and started a self-driving company that very quickly was acquired for a ton of money.. Most likely google wants to get a piece of the action since essentially they practically deserve it if their IP is being used to help the company make their technology.
'You have a nice behind' scores a lot differently than 'you have a nice ass'. Hmmmm.
I used to think this - turns out when I deleted Uber and started using on of my local taxi co-op apps, the regular-ish trips I used to do with Uber were within a couple of dollars of the cab fare I've been getting charged - sometimes less expensive in a cab.
> https://sha1-2017.badssl.com/

This certificate has expired, so it's not that useful for testing.
I always was incredibly surprised at how quickly Uber had working self-driving cars (with the required, highly specialized hardware). Guess this explains it.
May I make a suggestion? Instead of just water breaks... take breaks. Get up, stretch your arms and hands, your neck and back. Walk around for a few minutes, even just in place. Drink your water.

You'll save yourself a lot of future pain.
Someone who can use Wix could possibly be called a “Web Designer”, but “Web Developer” seems a stretch within a conventional understanding.
In isolation I agree with you, but software does not exist in isolation. It exists in market places, on pacemakers, in airplanes, on voting machines and everywhere else.

Right now the default way to release "of the shelf" products is without source code. It is not a real business decision for many, so they default to what everyone else does. For no real reason, then they defend this with lobbyist and lawyers. This includes airplanes, pacemakers, etc...

I really do think closed source software should be illegal, because I think that is the only way that I will be able to verify there are no issues something I use, like a medical device. I cannot verify my grandmother's pacemaker and if there is a bug she dies. Currently, the source code doesn't need to be shared with her or me, just because its a trade secret. Why should a trade secret be more important than the lives of users of a product.

But its not just the one life threatening extreme. Look at the Vizio TV news for the past few weeks. These entertainment should be about as innocuous as possible. Vizio has enough data to know the political leanings of 90% of Vizio TV owners. How would you feel if they sold that to people in a political party that opposes you? This is software on entertainment devices, and it has this kind of power. To make it worse, they got away with it for 18 months before anyone figured it out. They might have gotten away with entirely if they used a bit of encryption.

Forget the virtues of open source, I firmly believe closed source software is not compatible with the basic freedoms required the long term for any democracy.
Something from a non-coder's perspective:

If I can create using English, there is a lot of possibilities for me. I can work on expanding language and build on skills I already have. I figure something like this will spill over into other areas. For example, I could theoretically make animation by describing the scene with words. Detail varies depending on how detailed I get.

It would still be a vast amount of work, but suddenly it is doable just by honing skills I already have. This is where the hope lies with folks like me.
ES6 brings to Javascript needed features that other programming languages already have had; like a cleaner way of writing classes, more basic collection classes, more tools for concurrency, the list goes on...

https://github.com/lukehoban/es6features
> but addiction is still a huge problem for society. If someone really wants to get high, there's not much we can do to stop them, and that's an acceptable consequence of drug legalization. But what we can stop is someone in a lot of pain who buys way too much Oxycodone and gets addicted because they didn't understand the risks.

But what part of the pain management patients actively abuse their meds. It's a real issue, but is it a commonplace issue where we absolutely have to devout resources to solving it?
> is it also possible for Uber to sue the supplier for leaking their confidential data back to Google?

My first reaction to the waymo announcement is also on this. "apparently inadvertently" sounds like a blatant lie.
Well often in behavioral sciences, the alternative hypothesis in experiment A is the null hypothesis in the follow-up, experiment B. If the results in alternative A do not act like the results in null in experiment B, then there is a failed replication. The researcher observing this, begins to lose confidence in the earlier finding, and pursues other ideas. This is the kind of implicit replications currently supported by funding agencies.
If you've had no problems, that's great, but lots and lots and lots of us have. I tried to summarize (well, that's not the right word, it was at length) here: https://bibwild.wordpress.com/2016/02/18/struggling-towards-...

While integration tests may ideally not use the database (although I find in practice, I think you often need or want to do some 'manual' setup first. But even if you don't, the _other_ tests do db setup and teardown, and the problems start happening when the Rails app is still busy doing something triggered by a test that the test thread considers 'over'. Easy to say "Well, don't do that", but in practice it is very difficult to diagnose, debug, and stop. Using fancy new front-end frameworks like React or Angular tends to make it orders of magnitude worse.

If you haven't run into problems, consider yourself lucky and I don't hold it against you, but many have.
Maybe I have a selective memory as a former Zynga employee, but generally these "stolen documents" lawsuits in high profile tech companies have generally turned out to be pretty factual. Easy to prove, and hard to fake.
My understanding is that electric power is very efficient at moving heavy rail cars up a mountain, so surprisingly little power gets stored.
I think https://www.sevenbridges.com is trying to solve this problem..
Disney’s Maker Studios cutting support for more than 55,000 YouTubers