skysight-inc/HackerNews huggingface dataset:
I built this thing for all of us who read too many books and collect too many ideas ("build things that people will miss when they're gone, take more cold showers, measure twice, cut once"). I keep reading great books or posts with great ideas and I keep forgetting to put them into action because they don't really belong on a task list.

So, the idea is you list a handful of thoughts / ideas / snippets that you should be considering and it pings you with an email randomly through the week and keeps the thought or idea in the front of your mind as you work.
Microsoft Launching $10/month Xbox Game Pass
Productivity is nonlinear in hours worked.

First 20 hours: read a bunch of math papers about some obscure part of stochastic programming.

Second 20 hours: figure out how to apply it to problems useful for the company.

The first 20 hours are worth $0, not $100k. If I spend an additional 10 hours/week improving my skills, that effect is multiplicative rather than additive.

Claudia Goldin has a great paper on this effect, focused on using this phenomenon to explain gender gaps in pay. (Specifically, the fields with the lowest gender gaps are the most linear fields, e.g. Pharmacists.)

http://www.aeaweb.org/aea/2014conference/program/retrieve.ph...
But the survey I posted that started this discussion was a survey of experts in AI.

Note that no one is claiming that skynet will appear any day now. Just that we will very likely have human-level AI in a few decades. I don't think that's a terribly wild or speculative claim.
This video by CGP Grey covers some similar issues/hypotheses:
https://www.youtube.com/watch?v=JEYh5WACqEk
Says the guy who choses to use a centralized Medium web service to host his words.
Well, Google rightfully said that GCE does not need most QEMU features, so they have made a simplified version. Is is sad they did not release it.

On the other hand, there are people who need QEMU features: we have a QEMU-based test script for boot images which actually uses a few more exotic features to simulate the target environment.
I do agree that the problems listed are more on the order of symptoms than fundamental causes. I'm not convinced that anti-realism is that fundamental cause, though it's quite certainly a major confounding factor.

Cory Doctorow in a recent Boing Boing article:

"we're not living through a crisis about what is true, we're living through a crisis about how we know whether something is true. We're not disagreeing about facts, we're disagreeing about epistemology."

https://boingboing.net/2017/02/25/counternarratives-not-fact...

I see the problems as of limits and distributionalism, most fundamentally. That's a longer story.
The Top 9 Most Common Mistakes Made During an Interview
Some older papers on security vulnerabilities of password managers:

https://www.schneier.com/blog/archives/2014/09/security_of_p...

Any thoughts on Bruce Schneier's PasswordSafe password manager?
Criminal possibly as well, possibly under the CFAA.

not a lawyer.
>Normal employee copays for a famils are in the $200-$400 per month range.

Completely wrong. Mine is about $850 for two people, no kids.
not even have a very competent team can put enough lipstick on this pig:

http://www.cvedetails.com/vulnerability-list/vendor_id-2337/...
I Remember IANA (1998)
Back in 98/99 I wrote an app on Delphi for my dad to run his business. He is still using it today (on a modern OS) although he reports bugs that I no longer can fix.
Fact or Fiction? NASA Spent Millions to Develop a Pen in Space (2006)
The problem is middleboxes like fortigate also do MITM on ssh connections. Assuming you are not bringing home devices into work and don't have your ssh server's fingerprint memorized you might be tempted to just type 'yes' when prompted.

In any case you are left with no SSH, or somebody watching your ssh and have control over your ability to tunnel.

The best you can do with these boxes is make a sub tunnel over one of the protocols that they do allow through, you just can't rely on the primary encryption provided by the protocol that the middle box is executing MITM on. If somebody actually looks at the traffic they will see that you are not transferring plain text at the middle box, so that might raise some eyebrows.
I used to do something similar, but a local password management solution like KeePassX is much easier/more convenient and can be configured to function similarly. It can be used without a browser extension and obviously, it doesn't require the user to upload anything to anyone's cloud.
Question to the experts here:

- What is the relevance of Docker here? I'm pretty sure that celery+rabbitmq are enough to do a distributed scraper...
Perhaps it's worth asking why preventing crime is so much harder today than in the past. That might lead to uncomfortable conclusions, however.

Apart from the crime prevention, what does the terrible neighborhood lack that the nice neighborhoods in 1970 had?
Preventing SQL injections in Python (and other vulnerabilities)
If you need smooth scroll you can't rely on browser support and need to use a library or cook something up yourself. It's surprising how few browsers work with smooth scroll. Today it's basically only Firefox; not even Chrome.
For me, it's because I love C# (and F#, which I'm still learning).
It's so smart to do that, Roslyn provides a good design, keeping a rich syntax tree that can help for language tooling (auto-completion), so Language Server for VSCode is for free and all backends too.
Google's Neural Network Ability to Determine Location of Any Photograph
The oil companies ought to have been pushing for solar/wind/nuclear to get that good more quickly. If they knew there was a problem and knew that the solution required making their business obsolete, then the proper choice is to make themselves obsolete rather than waiting for others to do it for them.

But, nope, let's screw over future generations because that's too hard.
One of the central questions of our time may become whether or not it's ethical to turn off dwarf fortress.
"Why not?"

Well, I might start at the $10-$15k price tag.
I'm a dev on a marketing team and we build all our own AdTech instead of buy products, for the most part.

The (mostly young) online paid ad guys are way more paranoid than the old conspiracy theorist hacker types I grew up around. All we do is talk about how advanced the tech around attribution is, all the data DSPs are collecting about you, etc. All of these guys seem to have an attitude where they're making a deal with the devil and they want to make as much cash as they can before retiring to some island off the grid. It's really bizarre.
> It is very important for a designer to recognize all the parts of a design that are not easy wins, that is, there is no proportionality between the effort and the advantages.

In optimization, if you make an analogy between speedup / improvement with advantages / effort, you get Amdahl's Law:

https://en.wikipedia.org/wiki/Amdahl's_law

"[T]heoretical speedup of the execution of the whole task increases with the improvement of the resources of the system and that regardless of the magnitude of the improvement, the theoretical speedup is always limited by the part of the task that cannot benefit from the improvement."
https://www.cvedetails.com/vulnerability-list/vendor_id-74/p...

Wow those are interesting.

SQL Injection is still an issue if there are string concats every where and calling the DB, so that is something, that can still happen.
Most of my work in the past few years has been migrating .NET projects to PHP for enterprise clients. Especially with PHP 7, the performance is good, it's easier to hire for, and the total cost of ownership is lower. The doomsayers predicting poor security are wrong - it is just as possible to build a secure PHP system as a secure .NET system, and just as easy to build an insecure one.

Of course, it depends on the project and the company, so this isn't a universal truth. But there are definitely a lot of companies out there spending a fortune on a .NET stack that are looking to move to a PHP open source stack for good reasons.
Indeed. A big chunk of the "cost disease" can be explained by this in my opinion. The unaccountable administrative state - largely peopled by the "knowledge worker" class - has effectively pirated a big chunk of the income of the country and redirected it to its class friends via direct government employment, government licensing, government regulation and government spending. Nearly all western governments demonstrate symptoms of this disease.
There is a case to be made for a form of civil disobedience involving significant numbers of people breaking a law in an attempt to have it repealed.

I personally break a few laws I just don't care for. Drugs laws to name one. Nobody is taking my LSD from me and I imagine there are millions like me.

That said I don't agree with what Uber is doing. They are one company trying to skirt the law.
I have an employee from the US (I'm otherwise from Europe) and while visiting through the conversation/personal stories he explained the most interesting part of relationship between US authorities and citizens: You're less likely to be "harassed" if you lie to them, because they can turn pretty much anything you say against you and dig so deep to finally find an excuse to bully you, or charge you with something.

That is quite a sad state for the society to be in, being always afraid of the authorities, rather than knowing their primary goal is to protect and serve.
React and Redux Sagas Authentication App Tutorial Part 3
“It's not a bug, it's a feature” originates from a '82 computer game
I would guess that they were one at a time because demand has been so high. By the time I was finally able to order a zero I lost interest in it and started using other boards. The question is if you want to get it into as many hands as possible or to people that are going to use a lot of them. But also people bulk order and sell at a markup. Stuff like this[1] still isn't uncommon ($23 for a pi zero on Amazon). At that markup I'd rather just buy a pi, arduino, or whatever. At $5 if it is a zero vs a msp430 I'm getting the zero for ease of use.

[1] https://smile.amazon.com/Raspberry-Zero-v1-3-Development-Boa...
> Why is it relevant that it happened on a Pride Parade, as the headline suggest?

Because people familiar with the initial incident will more readily connect this story of the legal outcome with the incident with that context. The story isn't just a standalone item, it's part of a series of articles stretching back to the initial incident. [0]

[0] You can follow the whole thing back with hyperlinks from the latest article to each previous story, back to: http://www.seattletimes.com/seattle-news/crime/woman-knocked...
Maybe? I am not convinced. I have used qemu (with virtfs) in my interactive session to test possibly suspicious 3-rd party apps, running as my regular interactive user.

With this vulnerability, the app might have escaped the sandbox and added evil stuff to my .bashrc. The SELinux would be totally useless there.

In other circumstances, the damage would be much more localized -- I mean, if you run qemu as daemon, you are likely doing it as non-privileged user anyway, so even regular unix permissions would be effective.
The problem has long, long, long predated the Internet. Though the Internet's not helping.

1. Look up H.L. Mencken and Walter Lippman, among others. Both were newspapermen and had tremendous insights, though they came from very different backgrounds.

2. I.F. Stone as well. His 1974 interview on "Day at Night" is on YouTube, and a very worthwhile 30 minutes or so. There's also a website devoted to his writings, highly recommended.

3. Changes in media and communications have profound influences on society, and always have. Look up Elizabeth Eisenstein, The Printing Press as an Agent of Change (1980). Her "Preliminary Report" (1968) is much shorter and gives the general spirit of the argument:
http://www.journals.uchicago.edu/doi/pdfplus/10.1086/240164
(Full text available via http://sci-hub.cc)

Regulating news, and carrying penalties for intentional disinformation, seems one approach.
Make sure you wave your mouse over it ...
Because before, to be a content creator on the internet you had to be a developer. Now, you don't need, you can use software created by others. This is good, is abstraction building. But it doesn't come for free. I don't have numbers to back my impression, though :)

(I mean fraction of the whole, but I would love to have the data to see if we are not having more people leaving software development due to increasing complexity or retired tech than joining. How many have left software development with the downfall of Delphi, Visual Basic, Clipper?).
There's a book called "The Power of When" which I hear talks about how every person is different, and how depending on what type you are your day should be structured differently. Could be an interesting read when deciding if the 40 hour work week is appropriate or not.
So does hipchat if i recall right
Why is the author using a convoluted scheme of splitting token into selector and verifier, and then storing hash(verifier) in the database, why not use a simpler scheme of accepting username and token from the user and storing hash(token) in the database?

In other words, my question is: Why do you need to split the token at all? Why not store the hash of the entire token in the database?

So now, the username of the user becomes the selector, and the token becomes the verifier. What is wrong with this simpler approach?
When is an intrusion or a breach a “cyberattack”?
Not really, if a junior associate takes 40 hours to do what is conventionally accepted is a 10 hour job, it is going to be marked down, either by the partner or the client.
> How is the average user supposed to know if zor.fyre.co is legitimate

The current system doesn't grant any legitimacy, it only binds a name to a cert.
Web and mobile prototyping, UX, product management: February’s 6 best posts
I don't think the 10x moniker is an internal label given by the developer themselves, rather a label applied to them based upon actual productivity. Your example developer would be commonly judged as the opposite of a productive developer.
The Next Thing Co GR8 is clearly not made by Broadcom. Look at the bottom of

> https://getchip.com/pages/chippro

who comes in question as manufacturer of the SoC (hint: Broadcom is not among them). Also according to

> https://github.com/NextThingCo/CHIP_Pro-Hardware/blob/master...

it uses a Mali400 GPU (not a VideoCore IV as the RPi).
How do I disable it or is it disabled by default?
I just use iCloud keychain. The third party ones can never be as secure. For non-safari usage a little less convenient but worth it.
It's missing a "P" – it should be "PPRPL":

Prerender, Push, Render, Pre-cache, Lazy-load

But of course Polymer doesn't do prerender, so it doesn't fit the Google's image.

It really bugs me that you'll have to load and parse a huge amount of code to get anything rendered on the screen with Polymer.
He's just in the wrong place at the wrong time.
Honduran activist’s killing links to US-trained elite troops
UT inventor Goodenough on verge of another revolution in battery tech
> An hour a day either direction doesn't make much difference at all;

But it can make a big difference. I don't think I can stay productive for 8 hours straight on the average day. So the last 1-2 hours are a miserable grind, effectively wasted time. Add to that, I don't live to work, I work to live. I'd be very happy if I had quite a bit of energy left when I get home so I can live my life too.

I think the real problem is the just lack of flexibility. If 40 works for you, why shouldn't you be allowed to work 40. At the same time, that doesn't mean everybody should be working 40. Same for any other number of hours. Same for any the time...
You might want to set a specific user-agent for your crawler
> But I can't rewire my apartment since it's not mine, so I can't do much home automation.

If you're willing to pay some, that's not that much of an impediment. Something like the Phillips Hue bulbs are self-contained inside of the bulb (at least as far as powering it goes) which means you don't need to mess with any wiring.
Data Brokers Being Used by the Government to Track Muslims
I don't think they have anything against her personally. These tactics are used to fluster and confuse, and hopefully cause the subject to make a mistake. Clearly it's effective.

In a perfect world, this would only be applied to criminals. Because the agents aren't allowed to profile, they have to pull in people across the spectrum. Which includes authors, women with children, and old ladies.

I don't think they mean any harm. They're trying to do their job of protecting the border, but they have protocol that they need to follow.

Edit: anecdata, but there may be other reasons they make ridiculous selections like this (like old ladies). My grandmother, who is an elderly white lady who is hunched over, has the same name as a criminal on a watch list. Every time she went to the airport she was selected for additional screening. She never had the same experience as Fox, but sometimes they got real nasty. She always thanked them when they let her go, because what if she was actually the criminal, and they were protecting the country.
I just tried the demo "MyCorp" anvil app: https://secure-portal.anvilapp.net/

It definitely feels bloated -- slow loading, tons of JS, overly engineered. Perhaps the demo should do something more substantial.
Did I read that right? "it's necessary to deploy docker clusters to maximize performance of your machine" to get the performance out of a single system?
In some places 8 hour workday was achieved by union organized strikes, in other places by law decree and in other places by non-unionized workers and employers as an agreement.

The 8 hour workday was made possible by increasing productivity, mostly due to accumulated production capital and technological improvements ...
Red Hat also rips virtfs out of QEMU in RHEL, for what it's worth.
I got into tinkering with my PC because I had to edit config.sys and autoexec.bat to change virtual memory settings in order to play the computer games I wanted.

I share the concern that a phone is a consumer gadget much like the console was as a gaming platform compared to the Amiga/ST/PC stack. I'd imagine that kids that grew up with Amiga/ST/PC were much more likely to become programmers than those that grew up with consoles (Megadrive/SNES).
Do pointless jobs pay pointless money?
it took an hour here just to get a half-ways readable font.
after a while the game was completely destroyed by constant notifications. so I couldn't agree more with the horrible user experience.
Have you tried Xojo (used to be called REALbasic)? It's the closest I've found to Delphi, especially in that it builds & deploys really easily (eg no Java runtime required, feels native, never feel like I'm fighting with the compiler and my tool-chain).

I haven't played enough with Lazarus to see how they compare though, it looked promising too.
Madison looking to hire company to find Airbnb scofflaws
https://en.m.wikipedia.org/wiki/Criteria_of_truth

This isn't a greenfield.
By almost every metric, crime has gone down in the last 30 years.
Wow, that's harsh. And I don't take that point of view at all, if you read his history, he's done plenty.

There is a long tradition of this sort of thing, when I was starting up my company Bob Young (redhat) gave me a lot of advice, he was like your Dad is, ahead of you and knows what to do in a lot of situations where only experience helps you. I've seen that a bunch on an ad-hoc basis, this seems like a formalization of the same thing.

My reaction to the article was "huh, I took early retirement, don't really want to work, but if these guys could use me, I'd do that." It's a pay it forward kind of thing, us old folks still have a little value.

And most (all?) founders will tell you how lonely it becomes to be in charge. I had a great boss ~25 years ago who said "30 seconds of indecision will put you backwards 3 months". He was right, but it leaves you with noone to talk to about that indecision. This guy seems like the guy you could talk to and work out the things that you can't discuss with your team.
If you only support substitutions (the "s" command) maybe @sedy <separator><regexp><separator><replacement><separator><flags> that way you could e.g.

@sedy |foo/bar|foo|g

?
Roadmap.com is a community for product managers that offers up a lot of conversation around new products and in depth Q&A around innovating product.
This is a good point. Google has added functionality so that user installed certificates bypass all certificate pinning utilities, so users using these tools are less protected. However, there is no indication of the network being monitored once the certificate has been installed.

On Android every time a user-installed certificate authority is used a warning is shown. Furthermore, the user is forced to set a lock screen the moment you install a certificate.

If Google can push this (frankly user unfriendly) UI through, why not change "Secure" into "Monitored" in Google Chrome? The green padlock is a lie and the truth is exposed only after inspecting the certificate using the web developer tools.
I think the OP just drank the docker kool-aid :) It's also the future, obvs. https://circleci.com/blog/its-the-future/

> and learn how to use docker and celery

Seems the OP was learning Docker at the time? I think it just comes down to the tools you're comfortable with.
[Is NSA targeting HN readers?]

I'd suspect that the NSA would drink from bigger hoses to develop more comprehensive models. Those hoses would probably capture HN readership alongside everything else and like everything the firehose data would be mined and if HN correlated to something then the firehose data might be filtered.

As for detailed profiles, HN might be a data point but Facebook, Google+, Linkedin, etc. probably provide a more comprehensive picture (including pictures). In terms of browsing behavior, the NSA operates at the tapping the internet backbone scale.

[Related]

I suspect that a fair number of governmental and non-governmental agencies are interested in HN in terms of sentiment analysis and sentiment construction. Ignoring it would be unprofessional. Even amateurs will create sock puppet accounts to promote their business, personal, and political agendas. Small businesses from around the world will post material in their own interests. Mega-companies will post their blog updates here.
Not too long ago I built a small webcrawler using Node.js, figuring that crawlers spend most of their time waiting (e.g. downloading) and therefore Node.js would be well suited. At the time I found crawlers written in Python were fairly slow, which is not a surprise. It is backed by Redis and is pretty fast even on a single process. https://github.com/brendonboshell/supercrawler
Wow - looks brilliant. I'll have to try it. I've always wanted awk with a native understanding of csv, tsv, json, etc.

Does it have a binary for Windows?
On Azure, without Opcache enabled. That's not a very good comparison.
On the other hand, synchronous interfaces tend to be less error prone and simpler to work with (and more enjoyable...? :)

There is an active issue to add the async indexdb/websql storages to Store.js (https://github.com/marcuswestin/store.js/issues/181) so that they can be used when needed (e.g when you need to store many tends of MGs of data), but for 90% of your use cases the simplicity of the synchronous store.js API may likely save you a meaningful amount of code and callback/Promise/stack trace debuggery :)
> The presence or absence of consciousness could be empirically verified and experimentally tested.

How?

> consciousness is not an abstract idea, it belong to the category of biological processes.

Okay, describe the experiment which can prove that you are justified in making such statements.