skysight-inc/HackerNews huggingface dataset:
Ask HN: Learn Python, R? Or something else?
Hi Hacker News, I am doing a statistics project for some American football teams and I think it's going to require me to learn R.

Should I just learn R right away? Or should I learn another programming language first (like Python), then learn R?

I have some limited experience in Web development, doing web design and building website mainly in Word Press. As such, I know a some html, css, and Php.

Just looking to see if I could learn R without knowing much else.
Email me if you want to chat more. Check my profile page.
having to integrate with oracle software on a pretty regular basis I have come to realize:
Oracle software is extremely complex, simple things take more effort than they should.

Oracle tools are not optimized for developers of today. A key selling point to enterprises is your developers could be more productive with their point and click IDE/interfaces.

These days with the tooling around open source I believe you can get things done much faster (and have done this) the code is more maintainable etc.

Second disadvantage consider oracles commerce framework atg. They have their own concepts and terms for things that are in open source solutions making it confusing for developers familiar with open source frameworks. This could be on purpose to sell more consulting for partners.

Next the is the cost of training and up skilling junior devs. With open source you could probably teach yourself try searching for oracle atg tutorials. Check the # of stackover flow questions vs magneto.

Fourth: I have seen people who are "oracle developers" (fusion, odi, erp, atg etc) are mostly just product specialists. Give them a text editor and tell them to write something and deploy to a paas , commit to version control and they struggle.

Finally the software tends to be ops heavy encouraging bad practices like no version control or automation.

All of these factors are not considered in the purchase or "ROI" calculation, but some of them could seriously hurt your return.

I have seen companies spend millions in implementation of an oracle product only to use < 10 % of features and the same business objectives could have been achieved at the fraction of the cost.

* excuse typos on mobile
never mind the actual sums involved, 1% on top of 10% is a 10% increase in coverage. Is coverage inclusive of the time lost in labor as well?
I spoke with a recruiter from the Uber "money" team a few weeks back. They are investing 2 Billion per year just for that team.
Based on this and subsequent posts, it seems like you're making an "ends justifies the means" argument.

Does the ends justify the means here? Not really. Lyft is arguably similar to Uber but without so many alleged and evidenced wrongs. We can quibble about how similar they are, if Lyft would be successful without Uber, how successful Lyft is, etc. but the fact remains that a sizable competitor in this space doesn't have as many faults and seems to be doing just fine for a startup.

Does the ends justify the means ever? Perhaps. But it is often an argument made in hindsight to diminish real wrongs for the sake of theoretical utility, when in reality there are many levels of gray that have fewer wrongs and similar theoretical utility.
Cloudbleed: Namecheap still only supports SMS 2FA after 3 years of promises
There is brigading going on with some HN articles, though the comments fare a lot better. I think this mainly related to people not being able to down vote until they reach a considerable amount of karma. Often if an article reaches the top too quickly, people call it out in the comments.
This goes against my (and others) experience. Every recent OS release, Apple has dumb'd down the UI, not just for devs, but any user.
We've asked you not to do this already, so we've banned the account.
You also said that you want this to be a big step forward in both responsibility and compensation. This tells them you're expecting a market-accurate offer (so it will probably be good enough for you) and gives you a way out if they don't.
This hierarchy hasn't been relevant for at least 40 years. There are software developers in their 30s who have literally never seen a punchcard in person. Coder doesn't mean the same thing it used to mean.
>1) Git doesn't rely on SHA-1 for security. It relies on HTTPS, and a web of trust.

This is a big lie. When the -S flag is used, git signs the SHA-1 of the commit. Moreover HTTPS does not provide any form of authentication due to the extremely broken CA model. NSA could simply ask any CA to give them a cert for github for example. Not to mention that https would only authenticate that you are talking to the github server, it would say nothing concerning the authenticity of the code.

>they'd still have to convince you pull from their repo. This requires trust.

How about compromising your servers instead? Or maybe simply have NSA asking github to let them modify a commit (which would end up having the same SHA-1 and being signed by you).

>4) Even if you pulled it in, your git client would simply ignore their "poison" object, because it would say, "oh, no thanks, I already have that object". At worst, the code simply wouldn't work. No harm would be done.

https://stackoverflow.com/a/34599081

Didn't Git v2.0 break backwards compatibility? Couldn't they simply move to Sha-2 during that time?
Not so fast. You think up your own million dollar business ideas!
> often time foreigners themselves not familiar with American values of workplace equality and non-harassment.

I didn't know/understand is a valid excuse. Until someone tells you. This has been noted in the post. Quoted for your convenience:

Thus Uber’s moronic decision was a blood insult to the women in the group. You would think that when Fowler pointed out the error to the manager, he would have instantly recognized the scope of the blunder.

As a side note: non-harassment is a value in most parts of the world as far as I'm aware. There is nothing America-specific about it.
This reads to me like an ad for this agency, rather than a scientific/statistical research into the subject.

There is no disclaimer of that, however. Are such articles in the NYT common?
Just out of curiosity, were you really "flabbergasted" by learning of a particular instance of a practice which had existed in almost every society since prehistory (as even a semi-educated person would have known)?
Great! More tooling
I remember standing there and wondering why people kept coming up and pressing their faces against the wall.
Smart companies should start giving ethical puzzles to their management candidates. Many tech companies select from the pool of engineers by setting clever brainteasers to evaluate their problem-solving ability. How many do the same to evaluate supervisors' understanding of social technology and relations?

I know some firms have ethicists on staff, but they seem to be there more to guide and/or provide cover for working with potentially dangerous technology. I don't get the impression that they have much input into shaping the organization's culture beyond signing off on a list of diversity goals. I'd like to be wrong about this, though, can anyone shed more light on this question?
I agree with you. Which is why the entire Susan Fowler discussion and subsequent holier-than-thou proclamations (i.e. Mitch Kapor) are odious, since there is currently zero substantiation of any of her claims.
The Razer is a good example of why I don't switch. The closest thing they have to something in the Mac's lineup is the Razer Blade Stealth: http://www.laptopmag.com/reviews/laptops/razer-blade-stealth.

Compared to the 13" rMBP, you get a smaller display and almost two hours less battery life (and people are up in arms about the 13" rMBP being a regression on the battery life front compared to the previous model). It's not a replacement for the rMBP, just a less good, but cheaper, alternative.
Self-Hosted ClojureScript
Why not come back to India? I know the lifestyle cannot be compared to the US but hey at least you can be part of directly building the Nation. It's better to live in peace (with freedom) than live in fear (and in a golden cage).
Same here, all of mine do the same. If you add them Apple Pay, you even get notifications added to lock screens. Nice for monitoring usage(which I caught a stolen card number with recently).
fwiw, I wrote a script in node that takes your 1Password exported URLs and checks them for cfduid and headers...not nearly as nice as if 1Password did this with Watchtower, but in the meantime...

https://github.com/weltan/cloudbleed-1password
what do I have to consider as a software developer to benefit from these upgrade? Do I need special tools/libraries?
Related discussion on a previous, similar thread: https://news.ycombinator.com/item?id=11832613
صور+اطفال+حلوة+2017+خلفيات+اطفال+جميلة+صور+اجمل+اطفال
So a note on Google's leather jackets that is completely tangential to the article: They source theirs from Golden Bear, who make amazingly high quality jackets (on par with Schott). They are actually quite expensive at retail unless you buy them in bulk, which Google does.
That would be much better. Also Cloudflare gives an option to require HTTPS on this link. What's so sneaky about Cloudflare is they call the insecure option "Flexible SSL" rather than what it is, "Insecure SSL". And a major issue is that the end user has no way of knowing the site's Cloudflare configuration and whether it is secure or not.
Polymath 12
You're not really correct: There are, for instance, poisons and venoms in nature.

Additionally, the example argument you make isn't an appeal to nature; The argument is based upon what early humans did (not nature, or whether something is "natural"), and is a resonable conjecture.

What I had an issue with in the parent comment was "Fasting is kinda natural" - which doesn't say anything about fasting in and of itself.
There have been a few articles claiming bots are being used on Twitter to impact trending topics. One solution I talked to a friend about was having a yearly subscription fee to make it less cost effective to create hundreds of fake accounts. Of course hitting a critical mass of users would be very difficult. And even if the service did become wildly popular, and trusted, it would only increase the value for companies to game the system.

I think the general population is becoming more aware of how intrusive ad networks are, possibly moving the needle on making a pay service more viable. But I don't think I know any non-tech people that would be willing to pay for a Twitter/Facebook/Reddit type service today.

So, I have no good solution. But I sure hope someone figures out a good solution. The whole concept of "pick your own truth" has some terrifying consequences.
Conflict and collectibles among the Yurok
I have posted this since Namecheap is using Cloudflare and for all I know my password has been exposed. As a frequent traveler SMS 2FA is not feasible. I am constantly switching SIMs. You can read in the comments they have been promising a better 2FA solution for 3 years now.

Please upvote this to bring attention to the urgent need for namecheap domain owners to have real security in light of Cloudbleed.

Domains are one of the most important assets for companies to secure and as such should have bank level security.

Note: I have changed my password but proper 2FA would allow me to sleep a bit better at night.
Agreed. I'm on GCP whenever I get to pick.

For anyone else who is on AWS (maybe because of rds postgres, or because it's client work that needs to be on AWS), you can go outside of vanilla AWS to get a similarly great dev UX. I've used Convox + the Weave ECS AMI on a project, and it was pleasant.
Linus suggested changing the hash algorithm doesn't need these changes, just take the first 160 bytes of a SHA2 or whatever and use that. The chances of collisions would still be less than SHA1.
by "types of things" I mean speculation of shillage/astroturfing as to discussions on HN, not the content of the articles themselves. Those are two different issues, and to conflate them means we can't discuss them at all.
When asked this, I've countered with "I was hoping to make $X" (where X is much more than I make now). Then I follow up, but "I'd like to learn more about the company before I make any decisions on salary."

This establishes that you are a high-value candidate, and you are flexible and not an egomaniac that only cares about money.
It is believed that second language acquisition is "harder" than first language for a number of reasons, such as the placidity of the brain crystallising as we age and, potentially, that any special hardware we may have has a finite capacity (because physics). People research this (my wife is doing her PhD on it currently) and the evidence is neither obvious nor conclusive.
There are two basic allegations in Fowler's blog post:

1. There is a horrifying amount of sexual harassment going on at Uber, far more than you'd expect from "a large organization will eventually hire some people who are douchebags," and that sexual harassment is institutionally tolerated at least.

2. Uber has a management culture of politics, infighting, and undercutting each other.

From a moral perspective, #1 is a bigger deal than #2. But from a bloodless amoral "can we get our money out of Uber" perspective, I'd expect investors to be much more concerned about #2.

#1 is pretty easy to deal with. Fire a dozen people in a high profile way, re-instruct HR, and then probably even if you have two dozen (or more) sexual harassers still in your organization, they will be good enough about hiding their tracks that you'll be able to go long enough for the furor to die down. And since large numbers of people just don't want to sexually harass other people, even if they're given lots of opportunity, you probably won't have to fire such large numbers of people that your organization will trip up.

#2 on the other hand: If that culture really is pervasive throughout the management, then they'll have driven all the non-political managers away. What do you do about that? You can't fire everyone between your execs and your ICs. You can't survive long-term with a management culture of backstabbing and empire building -- especially when you're trying to go through a super painful and disciplined process of weaning your company off multi-billion-dollar expenses towards a very distant line of profitability.
It wasn't a policy, but it was definitely just part of the atmosphere. Wow, that's odd to think about now, isn't it? The internet seems so interactive now, but back then a user submitting something to a website was absolutely a new thing.
Lots of women vote with their purses, and my understanding is that women form the largest single demographic among ride-sharing consumers.
This is something that stood out to me in the original blog post as well. It is unfathomable to me that anyone in a leadership position could harbor such a myopic view.

If this were my team and I somehow faced (at a Director level?) some resistance to the cost for the 6 women's jackets, I would have paid out of my own pocket.
I've got the same after-taste, but I think it's more common in real-estate such as this one: https://www.nytimes.com/2017/02/03/realestate/write-an-essay...
Keep in mind that FIPS-compliant and FIPS-validated are entirely different things and that NIST SP 800-53 specifies FIPS 140-2 validated operations for digital signatures.
Global plan says only 10% of coral reefs can be saved from extinction
I'm sorry, but this mail is totally stupid.
It assumes it takes one year to complete the exploit.

I don't think there is anything preventing from doing such an exploit in 1 month, or even less.
With the various CaaS providers the total cost even remains the same!
3 books to help you stop procrastinating
Children learn language without instruction. That is all. Clearly, there is innate linguistic capability in humans.
If you believe most doctors have expertise in nutrition and fasting you've not been paying attention.

It seems fairly obviously no one should arbitrarily and radically do anything just because someone told them to. There are a lot of special circumstances, but thankful there are useful concepts such as personal responsibility and common sense that have generally been useful in keeping humans alive for quite a while.
I'm not making any argument for or against CF. I'm saying that equating the size of a bounty program to the perceived level of dedication to security or code quality of a company is a straw man argument.
It hasn't switched because Linus (1) doesn't think anyone would do that and (2) he sees hash collisions only as an accident vector not an intentional attack vector.

> You are _literally_ arguing for the equivalent of "what if a meteorite hit my plane while it was in flight - maybe I should add three inches of high-tension armored steel around the plane, so that my passengers would be protected".

> That's not engineering. That's five-year-olds discussing building their imaginary forts ("I want gun-turrets and a mechanical horse one mile high, and my command center is 5 miles under-ground and totally encased in 5 meters of lead").

> If we want to have any kind of confidence that the hash is reall yunbreakable, we should make it not just longer than 160 bits, we should make sure that it's two or more hashes, and that they are based on totally different principles.

> And we should all digitally sign every single object too, and we should use 4096-bit PGP keys and unguessable passphrases that are at least 20 words in length. And we should then build a bunker 5 miles underground, encased in lead, so that somebody cannot flip a few bits with a ray-gun, and make us believe that the sha1's match when they don't. Oh, and we need to all wear aluminum propeller beanies to make sure that they don't use that ray-gun to make us do the modification _outselves_.

> So please stop with the theoretical sha1 attacks. It is simply NOT TRUE that you can generate an object that looks halfway sane and still gets you the sha1 you want. Even the "breakage" doesn't actually do that. And if it ever _does_ become true, it will quite possibly be thanks to some technology that breaks other hashes too.

> I worry about accidental hashes, and in 160 bits of good hashing, that just isn't an issue.
To the author:

> You’ve told them your uncomfortable

your -> you're
100M is an exaggeration but still I think that's fine. Enable people doing research for the benefit of others access to their stuff, but if someone is going to get rich off of it why not take a cut?
TI Explorer Lisp Machine Source Code (1991)
I think /r/the_donald is the largest subreddit on the site at this point. It's openly in support of the Republican president. So that seems fair grounds for the claim.

On the other hand, a lot of Republicans don't like said president, and it's been observed that he's kind of a democrat from 20 - 30 years ago rather than an actual Republican. But then, a lot of Republican voters think Republicans aren't Republicans, hence the RINO thing.

Seems to cut either way to me.
For the "clock-for-clock" improvements: nothing. For AVX512, various numerical libraries will be adding support for you over time. However, just as with Haswell and earlier generations, even AVX2 will run better on Skylake.
The vast majority of time we don't have all the information for making decisions. That's exactly why we use heuristics that are relying on some things being more or less statistically probable.
You might find this worth a read: http://sircmpwn.github.io/2017/01/13/The-problem-with-Python...
Everything is new to somebody at some time.
Those subs are the two of the top 5 most popular subs on reddit, you can bet management is closely involved in managing those subs. However You make it sound like I was referring to some fringe community.
I has hoping they had found some incredibly inaccessible webpage in the wild. Instead they built one. :(

Boo! Hiss! Click-bait!
Has anyone ever tried something like a captcha for upvoting? Upvoting isn't really something that needs to be done conveniently in rapid succession.
The political subreddits are almost a weird case study of trends and tactics right now. If you pay close enough attention to /r/politics over the last month or so you saw general tones of the stories being raised to the top: "Trump is being manipulated like a puppet", "Trump is too stupid to be president", "Trump is sabotaging ____".

And neither title is all that surprising withing the context of the echo chamber that exists there, but for a little while you'd see the same types of posts just circulating the page for days when suddenly the entire direction went to the next phase or tactic, there was actually quite little variety in my opinion.
Maybe the title should be changed, since it implies that 100% of the SSL S3 traffic is using s2n ?
Interestingly, you could also make the case that buying "women's" jackets for the women on the team is sexist, as it does involve treating them differently on the basis of sex. The only non-sexist way to give out these jackets is to ask people which 'sex' of jacket they want, along with their size.
If you didn't adjust, and immigrants somehow still were convicted of fewer crimes then that would be truly astonishing since then the poor/unemployed immigrants would be committing vastly fewer crimes than the corresponding group among non-immigrants.

Doing these kinds of adjustments is not dishonest if done correctly and in these circumstances it's often absolutely necessary to produce useful stats.

How stats are to be massaged depends on what argument one tries to make though.
There are valid arguments from uncontrolled data too.

An example could be e.g "the immigrants we allow in are going to be unemployed and poor which means we are going to get more crime, I don't want that so I'm against immigration" - this is an entirely valid argument to make from uncontrolled data.

This is a two step argument: immigrants are poor and poor people more criminal.

This is not the same as saying "immigrants commit more crimes" because if unqualified such a statement always assumes controlling for relevant factors.
Happy to fill in:

Prices on Sia:

- siapulse.com contains some information about pricing

- running `siac renter prices` on client on the master branch (yet unreleased) will give you a price estimate given the set of hosts you know about. This feature will be available in the next release.

- Storage cost: about $1 / TB / Mo (for 10-of-30 redundancy)

- Bandwidth cost: about $0.60 / TB

Prices on Storj:

- Not sure how the prices get set, but the prices are advertised on their website

- Storage cost: $15 / TB / Mo

- Bandwidth cost: $50 / TB

Prices on MaidSafe:

- No price given, but the claim is that it will adjust according to supply and demand. Should be within a small factor of Sia if that is the case (Sia's prices are also set by supply + demand).
I think he means the headline seems generated to get clicks and the underlying implied article isn't expected to contain any news.
> If you watch carefully

I thinks the problem; many browsers don't care to fact check, or even click through to the articles underneath. Indeed I just scroll through the list a few times throughout the day, and might click on anything that sounds interesting. But with the constant and obvious BS it all gets a bit tiresome. If there was an alternative site where they had rules in place to deal with the problem, I'd switch in a heartbeat.