skysight-inc/HackerNews huggingface dataset:
Well, races like these are always only won by who can afford the tech.

Taken to the furthest extreme, everybody who can run successfully in these races can afford proper nutrition, airfare, clothing, and entry fees. There are plenty of people in the world who can't afford those things - should we disqualify everything in the name of "fairness"?
We're using Apache Bloodhound, but only minimally by about 2 people. It does what it's supposed to do; that's the only thing I can say about it. There definitely seems to be room for improvement.
Apple does have a massive team working on optimizing their ARM chips, they started out with redesigning the uncore, hired quite a bit of talent from other companies, and have moved to optimizing the CPU itself.

They even forced Global Foundries and Samsung to sync processes at 14nm to build their chips:

http://semiaccurate.com/2014/04/17/semiaccurate-right-apples...
I wasn't even talking about breaking out of the sandbox. Also, at the most basic level, simply having a trusted and signed delivery process of binaries does add some security. Nobody here is saying it will prevent a compromise, but since when is security viewed like this? It's about layers of protection.

Reminds me of people fussing about getting root on a workstation. Simply getting access to the user's account, without root, will be hugely damaging. Plus you'll likely have root in no time after you get that user account.

And the review process isn't even entirely about stopping the attack. If the malicious code was in the app, when it was submitted for review, you can at least have a trail and can review it later to see how it happened.

If the attack happened with this specific app framework, the bad code could be dynamically loaded into memory and then purged, so you'd never know what happened.
3 Must Watch Sessions from SREcon 2016 Featured by Netsil
I suppose this could help anyone that is currently being targeted. Once they update it should be obvious that the dll is compromised. Maybe some will come out of the woodwork and show it.
When you use these Google APIs, can Google keep/ use your data in any way?
I think most elite athletes already jeopardize their health from too much physical activity. Consider traumatic brain injuries in the NFL or boxing or wearing out your knees from running on pavement for hundreds of miles. My friends and I talked about this once, we believe there should be two leagues - a standard league with rules and a no-limit league where you can dope as much as they want. They will push the limits of the human body and my bet is that our first mutants will come from this league.
> 2. Zebra companies are often started by women and other underrepresented founders.

Is this really the number 2 reason? Like, is the suggestion here if we got white men to start Zebras then Zebras would be more popular?

The other obnoxious thing is that they don't actually provide evidence for this; they cite that very few women get VC money and then claim that it's because they're running Zebras. And it's not relevant to say they start "30 percent of businesses" because I doubt that's 30 percent of software businesses.
Great essay. As the author explains, we need to get people to have rational discourse when they disagree with each other on important social and political issues.

I used to do workshops on this that worked fairly well. I used a simple method, namely mutual active listening. Two people who are on opposite sides of an issue agree that one will talk for a while, say five minutes, and the other will only listen and say back to them what they think they are saying. Then they exchange roles and the previous talker becomes the new listener, and vice-versa, for five minutes, and then switch again, and so on until each person feels like he or she has expressed their main ideas and been accurately understood. This process doesn't lead to total agreement, but invariably it produces a lot more agreement than the two parties had before they started out, and also friendlier, more respectful relations.

So mutual active listening works, but the question is how you get people to agree to do it. I think the best sell is that most people, I think, feel misunderstood and misrepresented by people on the opposite side of various issues. I would tell them that the people on the opposite side also feel misunderstood and misrepresented by them, and the only way each side can come to feel accurately understood is if they both agree to do mutual listening with each other. I haven't tried this yet, but I think it would motivate a lot of people to try mutual active listening.
No, I have not tried the GRU model
Great - so glad that you're up and running. Thanks for the update. We'll take this back and see if we can repro this in-house.
... or the locals realized that the buildings were beautiful as is and didn't change much. I know a number of towns around here that probably don't look much different than they did 50 years ago and they're thriving.

One of the nice things about small towns is that there's usually available real estate to put up new buildings without tearing down the old ones.
Ah, interesting. So you could have a RESTful API but your server uses GraphQL for the ORM layer, as you say.
The tax programs surrounding solar and wind in the US amount to a 50-60% subsidy of new plants. Without that, an enormous amount of the progress being made in those fields wouldn't be happening. I'm usually the first one in line to criticize the government, but in the case, the facts say something different.
BTing?
That's certainly the kind of attitude that will warm people to his pleas for crypto backdoors /s
> Just like knowing the lock is useless for people who are willing to go into my house, I still shut the door and lock it every morning when I leave home. We are in a fking corrupted world, unfortunately.

He fucking nailed it. This is what all of us are feeling. It's almost like, we are collectively being punished by trying to make shit more secure. It makes me dysphoric with hopelessness.

I can no longer proudly claim the West is free. We are living in a surveillance state. It's going to be hard to point fingers at other authoritative regimes around the world using the same tools.

I sometimes feel as if the West is a giant hypocrisy because of the double standards it upholds but relatively better than it's counterparts. Lesser evils.
I thought so too. However, the valuation of Instacart is now in the range of Whole Foods $3.4B vs $9.3B

Expect to see much rougher competition from Whole Foods. They have quietly already started this with their coupon app[1] (the wedge) and pickup (powered by instacart)[2]

[1]https://www.theguardian.com/business/2016/feb/10/whole-foods...
[2]https://pickup.wholefoodsmarket.com/
A good point, but their repos are so eccentric because Debian refused to support the RPi's older ARM architecture and the RPi community had to roll their own. That speaks to the original point of this subthread, I believe. Not only does Linux not offer the "exact same experience across the board," it cannot even do it for the ARM architecture. For decent enough reasons, really, when you think about it.
A bit related (though much more theoretical): https://en.wikipedia.org/wiki/Hearing_the_shape_of_a_drum
There were SEC filings and some early employees have clear numbers there. Yes, there were some millionaires.

Not a huge number of them but at the time of the acquisition, the average tenure of an employee was under a year because of the fast growth rate.

Disclosure, I was and still am at Jet. I won't throw my numbers out but I will say it is bellow the million line but also under a year of time pre-acquisition.
The iPhone also has the ability to automatically update apps in the background if you allow it.
I think Gitlab is mostly Ruby.
That is really amazing. How was this done?
I'd size it out based on initial requirements and take it from there. Some things to consider 1) how much "stuff" do I need to keep track of 2) What's the fastest way for me to do it 3) what's the implications of doing it fast?

Most times by going through this exercise you realize you actually don't need to build anything and Google Sheets suffices.
TrueCar | Santa Monica, CA - San Francisco, CA - Austin, TX | Full Time

TrueCar is looking to grow our technology team by quite a bit this year. We are hiring engineers with interest in the below positions:

* Software Engineers (Rails)

* Software Engineers (Rails/Platform)

* Front End Engineers (React)

* Data Engineers (Java/Hadoop)

* DevOps / Site Reliability / Infrastructure Engineers (AWS)

* QA / Software Development Engineers in Test (SDET)

* Project Manager

* IT Architect

We acquired the talent of quite a few Carwoo (YCS09) alums a few years ago. We've been around for over 10 years and went public 2 years ago. The company has big plans for the coming years and is looking for good developers to help us grow. See http://careers.true.com for the full scoop.

* We prefer you work with us in-person ONSITE in Santa Monica, San Francisco, or Austin. We'll handle most visa situations.

* Benefits are exceptional: Your health premiums are 100% paid for, we match your 401k (up to 3% of your contributions), and give stock packages. We also pay for your gym membership (up to $50/month) and have catered lunches every Wednesday.

* Our Santa Monica HQ is right by the beach and Third Street Promenade, so expect fresh air and plenty of food options. Our SF office is right off the Montgomery BART station with 360 degree views of downtown and the bay. The Austin office is brand new with state of the art designs and plenty of space to grow!

* Ruby on Rails, React, AWS, React, Redis, PostgreSQL, Hadoop, and Elasticsearch

* VISAS are handled under the right circumstances.

Send an email to me (Brett) (bemma AT truecar.com) with your resume and/or GitHub profile. Even if you're not applying but just have questions, drop me a line
Yeah, that's trivial to bypass on a compromised machine without touching their binaries or hijacking system APIs.
“Trump's the Silicon Valley candidate in every way but the ideology's flipped”
Yes, you have to trust the app developer. And Apple is acting as a check/oversight on that relationship, too. Whether it's of use or not, that is really another discussion.

That is my personal red line also. But I am 100% in support of them enforcing signed apps for the majority, but it should be something you can turn off for advanced users via firmware/bios. My mom does not need to run unsigned apps she finds on the Internet.
If you google "water on Mars," you come up with recent research saying, yeah, there is water there, such as: https://www.nasa.gov/press-release/nasa-confirms-evidence-th...
Pretty sure that if I found the CIA subverting my work, I'd be just as pissed off and quite a bit saltier in my release notes.
A lot of the Common Core math concepts are the same as the Singapore Math concepts. Things like breaking apart numbers, playing with them, grouping and re-organizing them. Singapore math does not try to teach the "standard math algorithms" like long division, instead trying to get students to understand the "why" behind why the division works.

The major complaint from parents with this seems to be they can't understand it. But that's exactly the point: their kids are supposed to be getting a more rigorous education (in the sense of understanding vs. being able to find an answer).

Another key problem: in the US, a lot of our math educators (especially at the elementary level) really don't like math. At the end of the day, the teacher has to explain, assign and grade the curriculum. If they don't understand the core concepts, or don't like teaching them (for instance, they know how to do the carrying-digits multiplication, but never have played with breaking up numbers to add them), they can't teach those concepts effectively. And we put nowhere near the amount of time or money into training our existing teachers as Singapore does. Common Core is an attempt to provide common concepts and training, so we can focus on making teachers better at areas they struggle with. But you can't do that if there's no will or resources to improve.
"Gray area"? Like the "gray area" when my high school went from cinder track to all-weather, and my mile times dropped dramatically? Or how an Olympic-quality track is noticeably better (with correspondingly better times) than my old high school's track? Modern shoes that are more cushioned, allowing more training without injury? Or the Adidas shoes from a few years ago (Boost, I believe?) with their energy-returning midsole?

Look, it'd be one thing to have little batteries and motors in the things. But these just take the energy that I've already expended and returns a bit more of it than my old shoes. But I've still got to do the work. And, hell, they're only $250 in a world of $120 race shoes, so I don't consider them to be outlandishly out of reach. Were I still obsessively racing, I'd buy a pair. And were I beaten by someone that has a pair, even if I didn't, I wouldn't have a problem with it.

So it boils down to this: how inefficient does my equipment have to be in order to follow the rules? Put a number on it, manufacturers can build to it, boom, sorted.
Yes, even if a legal subsystem is instantiated in which parties agree to abide by "programmatic contracts," the vast majority of people will not willingly use it. When an extremely precise condition is set, some party will eventually attempt to game the system (obeying the letter, but not spirit). It is in the interests of most parties to have some contract terms be ambiguous exactly as anti-gaming hedges. Ethereum's DAO debacle is a great example. It wasn't a hacker exploiting a bug, it was the system working exactly as intended.

As soon as you are in a situation where one of the parties protests that "strict compliance with the terms is not enough, common sense must apply" your situation is AI-complete.
This is really cool. My wife has been experimenting with using Google Cardboard in her classroom to do virtual field trips, and none of the resources she can find let you add in your own content. I've been thinking of building her an app with A-Frame and something like this to help synchronize what everyone is looking at.
wow, that sure looks like it could be automated, starting with the indexing passes (script them in Python maybe?) and slowly factoring out bits of it into sklearn modules or whatever. Alternatively, as a batch job spawned from within R, but that would get annoying over time. Still, the idea is great and it sounds like you guys end up with time to go kayaking etc.

I'd think that Microsoft would be bending over backwards to get you to run the R stuff on Azure, since they bought the Revolution operation to show off such things. In the long term I imagine that you'll move most of this to Python.

You might consider poaching some spatial statistics people from Uber. Like, say, some of the women. At least if the market is big and robust enough to bring in some heavy hitters. It seems like a lot of the steps might be automated with convolutions and validated against your expert pool, but I can't say for sure.

Neat projects. Best of luck.
Southern California offshore faults could produce M7.3 quake
It is so refreshing to see slim, fast websites. Only the minimal JS is used. Even though I don't have many repositories, I'll certainly consider supporting gitly.

Please remain true to your current vision.

Just a minor point: although the website uses so little JS, the Signup form is broken without it.

EDIT: by broken I mean it returns a JSON instead of an HTML page or HTTP redirect.
Are MD5 hashes that predictable that you can just make a few adjustments to a binary until it's the one you want?
The general class of model that you can use to create synthetic data is called a generative model [1]. The style of learning that pits one of these generative models against a discriminative one (the class you can't generate data from, including traditional neural networks) is called adversarial learning [2]. It's worth noting that normally you can use generative models for classification on their own as well.

[1] https://en.wikipedia.org/wiki/Generative_model

[2] https://en.wikipedia.org/wiki/Adversarial_machine_learning
No worries—as far as I can tell we're in total agreement!
I suspect it's not a detected action, but just a picture labeled "swimming", like one of these (random image from internet): http://www.ambientegallerie.com/blog/wp-content/uploads/2016...
> So maybe switch to barefoot running?

The original olympics were conducted naked, weren't they? That's not to say that naked is the answer, but wearing cyber legs or sharkskin suits or even springy shoes would all have been off-limits thousands of years ago. Back then it was all about one human body vs. another. Back to basics, I say!
But any 128 bit value is a plausible MD5 hash. Modifying the file to make that value is akin to doing a preimage attack right?
> it's like reading a description of a painting in book form.

Interestingly, that's exactly how I would describe reading Proust's Remembrance of Things Past. It's very hard to read at first, until you can get into the rhythm of the thing. For example, here's one sentence:

And so it was that, for a long time afterwards, when I lay awake at night and revived old memories of Combray, I saw no more of it than this sort of luminous panel, sharply defined against a vague and shadowy background, like the panels which the glow of a Bengal light or a searchlight beam will cut out and illuminate in a building the other parts of which remain plunged in darkness: broad enough at its base, the little parlour, the dining-room, the opening of the dark path from which M. Swann, the unwitting author of my sufferings, would emerge, the hall through which I would journey to the first step of that staircase, so painful to climb, which constituted, all by itself, the slender cone of this irregular pyramid and, at the summit, my bedroom, with the little passage through whose glazed door Mamma would enter; in a word, seen always at the same evening hour, isolated from all its possible surroundings, detached and solitary against the dark background, the bare minimum of scenery necessary (like the decor one sees prescribed on the title-page of an old play, for its performance in the provinces) to the drama of my undressing; as though all Combray had consisted of but two floors joined by a slender staircase, and as though there had been no time there but seven o'clock at night.
Sounds like they are talking about B Corps.

https://en.wikipedia.org/wiki/Benefit_corporation
These agencies helped make America great in the first place
On the top of my mind, TCP support and a couple of load balancing algorithms.
#Wikileaks Vault7: CIA Umbrage team, the factory of false flag ops
If Uber can stay afloat until we have full adoption of self-driving cars, they will profit big-time. They will have a fleet of cars at almost no cost to them as car owners get in line to sign up to rent out their car during "off" periods.
Solar and Storage now powering a sustainable Kauai
YAGNI. Not being an abstraction freak. Not implementing hundreds of features in the hope that they may be useful one day.

I have been going through the code of a well-known document database... I am horrified to discover over 400 classes in their abstractions project, including some very clever stuff, which I then try to find examples of in the rest of the code, only to come up with nothing.
I've probably given it the most thought out of any commenter in this thread, and I'm still on the fence. I don't believe it's 100% publicity. I'd above all else, like to see it done in one of the six marathon major events, or at least one qualified as a gold standard label. But the racing track doesn't really bother me.
I wonder if you might be able to use a magnetic field to screw with the birds and make them not want to go there. (since birds rely on the Earth's magnetic field for navigation)

Alternatively, I wonder how long it would be before the birds learned not to go there if they kept dying.
If they're as good as claimed, there's little chance that you'll have to suffer seeing me wearing them for more than a brief moment at the starting line.
The solution isn't straightforward because the problem isn't straightforward. It just looks like it is, which is by design.

The problem isn't straightforward because the software does a ton of things to try to keep the site good. We do a lot of manual moderation too, but anything we can write code for, we of course do.
Bleach v2.0 released
Congratulations to the team!

I would love to move over from Apache Cassandra to Scylla but honestly I'm a bit afraid to do that. I have no doubt that it's much faster but I haven't seen hard numbers about consistency and availability. Apache Cassandra is a much older project with many installations and is battle tested (to a degree) how can I be sure that Scylla will behave as stable as Cassandra in that regard?
I wouldn't mind a "natural" league where people compete with their junk out, like in good old Roman olympics. That would shift focus fully back to the athletes and their performance, as opposed to the technology they're using. I am concerned that is very difficult if not impossible to come up with precise rules that put everyone in equal standing with regard to technology. Someone will always find a way to gain an advantage, within the allowed limits, or the limits are made in such a way that they favor certain people and conversely.

But this wouldn't solve the problem of doping.
> As opposed to some other benchmark, that gets some other micro-optimizations?

Yes, because SunSpider in particularly is notoriously, egregiously bad. Google's Octane benchmark suite ( https://developers.google.com/octane/benchmark ) at least attempts to approximate real-world usage by benchmarking actual applications (like PDF.js), as well as scraping regexes from popular sites and using those as part of a regex performance suite. (And even still there are some arguably dubious entries in Octane.)
Couldn't get a read on the short reply, thanks for not bashing me!
I was always wondering why Softbank bought ARM. ARM is of course market leading processor design company but it is almost solely fabless and intellectual property company. I don't see how ARM would benefit Softbank.
Has Wikileaks ever published a bad leak?

I'm not talking about their write-ups and descriptions -- which I sometimes find sensationalized -- but the raw data. I don't remember any instances where they have published falsified information.
I know it's annoying to hear this, but I'm going to keep saying it: this stuff is silly. The DLL injection stuff in the CIA leaks should embarrass the CIA. If you're calibrating your defenses based on the idea that application programs on Windows and OS X can defend against malware, you're playing to lose.

Here's the rootkits track from Black Hat 2008 --- keep in mind that this is almost a decade old and that it's public work:

* Deeper Door: Exploiting NIC Chipsets

* A New Breed of Rootkit: The System Management Mode Rootkit

* Insane Detection of Insane Rootkits

* Crafting OS X Kernel Rootkits

* Viral Infections on Cisco IOS

* Detecting And Preventing Xen Hypervisor Subversions

* Bluepilling (implementing a hypervisor rootkit) The Xen Hypervisor

This is just one year's work. If you summed all of it together, you're talking ~2.5 FTEs across 7 different research projects which we will very generously assume took a full year to develop (spoiler: no, none of them did). People who can write hypervisor rootkits command a pretty decent salary, but it's not 2x the prevailing SFBA senior salary. So this is at most mid-single-digit millions worth of work.

I don't know why the CIA has this team of people bumbling around with DLL injectors and AV bypasses. Maybe it's some weird turf thing they're doing against NSA? But the stuff in the CIA leaks is not the standard you need to be protecting yourself against.
The reference to a rabbit hole makes no sense unless it's symbolic, since rabbits holes are about the size of a rabbit.