skysight-inc/HackerNews huggingface dataset:
I sure do and I realize this was largely the State's fault. I didn't mean to say "Flint spread the responsibility so thin" so much as "The responsibility was spread thin between Flint and the State"
Embarrassing the TSA agents might work sometimes, but some of them are also known to be vindictive and petty towards anybody who even seems like they might be challenging their authority. Given the possibility, however remote, of accidentally angering a vindictive and petty person who has power over my liberty and/or belongings... I think I'd just shut up and endure the pat-down.
Yea the reality is should Google report the addresses of people googling for "sexy teens"? Should Facebook inform the TSA of people who watch plane explosion videos? Whatif their profiles indicate they are Muslims?

Very very rarely does someone type into their browser that they want to rape a child, or share on Facebook their plans to bomb a plane. Instead the authorities make inferences, inferences that often lead to the harassment, even prosecution, of innocent people.
>If they're taking the time to pirate the app and use it then it's presumably worth something to them.

There is no dispute that they see the value in being able to use the software. The question is at what cost?

In economics terms, pirating costs the person too (time to find a working crack+frustration+malware risks+no updates/support). If a person chose to pirate it, it means that all those costs they have to pay by pirating have to be perceived to be less than the cost to get a software license. In rare cases it might not be true, for example, people in third world countries might not be able to pay, or people who have the habit of doing that. But that, in general, I believe is true.

I think it explains a lot how people don't generally pirate movies and music nowadays. Streaming and buying it legit is the lesser cost to pay. People pirate $1 games because people who have time to play games often have a lot of disposable time, including time figuring out how to pirate games.
So use it at research time, and hold it back at grant writing time! Have some mania of grandeur handy :)
E4X was part of Actionscript 3. It was very nice.
She has a fantastic writing style. Very engaging and informative. It was great to get an inside look at the YC experience. I especially like how vision driven she is!
Timg – Terminal Image Viewer
Brazile admits she forwarded town hall questions to Clinton camp
The bigger question is, why not use elastic infrastructure?

Sure, image optimization is CPU intensive, but their use case is super bursty. When the source image changes, you do multiple optimizations (convert to WebP, lossless JPEG, lossy JPEG quality change, etc), cache the results and you are done. The ratio of "optimizing image" to "serving optimized copy" must be insane.

Dedicated physical hardware feels like a waste.
There is if you are a county sheriff who doesn't have that authority.

And there is something very wrong with US immigration policies.
Yes, can't we go back to the good days when we just physically assaulted our children to teach them a lesson? sarcasm
Where did the TSA go wrong here?

They detained someone who wasn't a threat. They go wrong every single time that happens. It could be an excusable error if there was good evidence that they prevent what they were created to prevent, but they have yet to produce any.
Find the sketchiest ad networks (http://krebsonsecurity.com/ has lots of reading and links). You'll need to front some cash to buy bitcoin to buy time on those ad networks. Put your "ad" consisting of this exploit on the network, which then manages to root both the machine visiting the web page, and the VMWare host machine. Use this to build a botnet.

Given how juicy the VMWare escape is, I'd also just start dumping ~/Documents/ on any machine that you escape out from the guest OS on. Who knows what they'll have?

It's mostly going to be boring, so you'll want to automate this, but infect enough machines and you'll hit easy scammer pay dirt- PII on millions of people, despite regulations that prohibit doing this. Credit cards, social security numbers, phone numbers, addresses. From there, it's just a felony or two away from either stealing people's identities yourself, or selling the list in a scam forum (for way more than $100k). There are all sorts of juicy data that you might find; VMWare isn't something that most people run, and maybe there are other monetizable bits of data.

Assuming you don't find the scammers' wet dream in stolen data though, you're reduced to trying to monetize from other ways. Desktop popups, DDoS for hire, cryptolocker-style data-ransom, using the machine as a host for sending spam.

It's 2017 and it really sucks that spam is still such a huge problem (Gmail's spam filter is only so effective because Google's team works hard, and is good at their job, not because the problem has gone away). As a spammer though, this means it's still lucrative enough that there's some non-zero amount of money to be made. Due to the VMWare escape involved, you'll have fewer problems with machines in your botnet going offline (how often do you reimage a VMWare host compared to the guests on it?) and can charge more money to use it too.

There are established scammer networks that can already monetize a botnet and selling your botnet and its capabilities to them might be easier than monetizing yourself, but at some level in order to make money you start getting some serious exposure that will land you in prison for years if you get caught, plus you'll eventually start working with scary people that will kill you if it suits them.
[I work at imgix and have helped lead the team on the production issues we face and gathering the details for this blog post]

> Which piece of infrastructure?

In this case it was a top-of-rack switch. That rack had a few of our external DNS resolvers on it. Normally this wouldn't be a problem, because we deploy services across multiple racks to prevent this kind of failure mode.

In this case it was a bit of a problem, because this was the first rack deployed at this site and it turned out to not conform to the standard configuration across the rest of the racks (because it was what we bootstrapped the site with).

So two things: it was tough to get into the device to troubleshoot it (we wound up using the serial port infrastructure deployed for this purpose), and it had a service impact even though it shouldn't have (we have since migrated DNS resolvers out of this rack and have scheduled a future maintenance to get this switch's configuration corrected and ugprade its OS).

> New traffic patterns

This is a bit tougher to dig into, but essentially it was a needle-in-a-haystack kind of situation. Customers can use any imgix URL API parameter they like -- some of these use cases get pretty complicated for the backend to handle. Think of the watermark parameter stacked with another URL that is also an imgix URL with another watermark parameter, five layers deep. These sorts of operations take a lot more rendering resources than a simple ?h=600&w=600 operation.

In this case, we observed an influx of these sorts of more difficult operations. We have various logs and metrics sprinkled throughout the system -- we use Prometheus, Kafka, heka, BigQuery, Grafana and a few other systems to collect and present the data we need to run the service. We also issue unique id's per request to track their path through the system. What we don't have -- and need to -- is one end-to-end view of a request's path through the system and the system's capacity and performance at each point in our stack.

It turned out that for some amount of the increased rendering traffic we saw, it wasn't that we suddenly got more requests. There were simply many new permutations for each original object. That lowers the CDN cache hit rate for a period of time.

The other thing that comes to mind (and I think I'm forgetting a third type here), is that some of our request parameters require normalization so that they can utilize the same cache object. Think of parameters like dpr, which is a floating point number but realistically is only useful up to a few decimal places. dpr=1.33 and dpr=1.3333333333 are actually the same image, but they would have different cache keys and require two renders that are effectively the same object.

We normalize the dpr parameter down to three significant digits. What we found is that this sort of normalization was necessary for another parameter as well.
Because the human brain isn't a symbolic machine. It's a living organism made up of cells trying to survive and reproduce in the real world. All our symbol manipulation capabilities are built up on older abilities based on feeling, experiencing, socializing, and moving about.
Imgix is a good example of burden of legacy code / infrastructure that they can't get away from.
Who Buried Paul? (1999)
The second link I posted has survival curves. Child mortality is high but not the whole story - lots of people dying at all ages due to infectious diseases.
I'm not 100% sure what is your experience with others but these kind of people are pathological customers. At least in my business.

You can test this by adding something like this to your honeypot page or home page:

if you have do not financial needs or you are student
please email us and we can discuss how to you can get
software at discounted rate or free.

And you will get just bunch of hate emails. And we even decided: "who ever writes us an email that email contains "thank you" to "please" phrase (or nice in any other way) they will get our service for free". Just that: just be nice and you will get it free. And you know what: you will get maybe two or three emails in a year which have "thank you" or "please" in the email. All other emails will be rude emails demanding something. Like "I'm retired I do not have money to pay for your shit. Give me free or fuck yourself" (actual email).
Yea, it really should have a short description at the top. That alone would make the UI instantly more useful.
I don't think some of those places have "other sectors" that can be shifted to. I'm not arguing for burning fossil fuels, but shrugging and telling people already past the edge of desperation to "adapt" is cruel and unreasonable.
s/the only thing/one of the chief things/

DMCA takedown and anti-circ would be two other major flaws. Failure to require copyright holders to be accessible and identifiable, orphan works, and the impunity with which rights that don't exist can be asserted ("Happy Birthday" song, f'rex), would be high up my list.
> Intellectual humility doesnt get grants though.

Amen. In industry, intellectual humility doesn't help get promotions or get hired either.
This works great for coupon seekers for SaaS and eCommerce businesses too.
Well, depending on who you are the threat might shift from the one to the other. But why make it easier on any of these groups? At least you get to vote in the US elections and if enough people do what's right you might be able to change something about those percentages.
Celiac disease is not an allergy.
Blink: Intent to Implement – ServerTiming
One, keep in mind that Lua has the version 5.x. It is an accumulation of early user experience just like JS. I haven't said Lua was designed better from the start. I have merely stated that Lua in 2012 is probably better than JavaScript in 2012 (and I was careful enough to add a word "probably" :-).

Two, core languages don't matter here because they are fundamentally similar to each other at the core level (dynamic and considerably weak typing, unified object-array, first-class value from missing indexing, semi-working lexical scopes and much more). The pain points of Lua tended to be same to those of JavaScript in my professional experience.

Three, the language is not a mere combination of syntax and semantics. Any evaluation should also account for user bases and ecosystem, and in my very humble opinion Lua spectacularly fails at both. I'm not going to assume the alternative reality---Lua has a sizable user base and its ecosystem is worse even for that user base.
The patents/IP theft is the interesting part, which this story doesn't cover.
Does something like swagger exist for GraphQL?
Show HN: Decorating – Literally decorating your terminal with decorators
Depressed by Politics? Just Let Go
Guess you didn't see Wargames? 8-)
To get started, you’ll need:

...

To be in the U.S

At this point I'm past being the surprised by this.

Lawyers recommended it I guess?

I'd think annoying customers was something to worry about too but then again.
I guess you missed the main point, which is "false equivalence". The two examples you're using have absolutely no bearing on this case.

This is a technology licensing case. Would you be angry at Google for licensing its search technology to help run background checks on childcare providers? Would you care if Facebook licensed its social graph technology to see if you should be eligible for a drivers' license based on your medical history?
Your criticism of a randomized, double-blind, placebo-controlled study is essentially "but it doesn't fit my own (unblinded, uncontrolled) anecdote".

You offer an edge case that was not tested by the study.

Your criticism is constructive/relevant, but there is always some area of our understanding that the experiment doesn't reach... basically saying "here is a different but similar hypothesis that was not tested by the trial".

Ok; fair enough. But in the eyes of most readers, this data set generated by an insanely tight scientific design suggests that the optimal allocation might lie in a different direction of research for the individuals suffering these symptoms.

Interestingly: you can perform your own blinded experiment. If I were in your position, I would want to know whether my wife and I were planning our lives around a superstition. The way to answer that: an n-of-1 blinded clinical trial. It's a fair amount of work, but not as much as gluten avoidance, and would answer the question of your own circumstances better than any generalized scientific result from the literature.
[I work at imgix and have helped lead the team on the production issues we face and gathering the details for this blog post]

I'm sorry that you had this experience with imgix. We have had challenges in correctly addressing support issues during this period -- support has been swamped. We've expanded that team, and we're continuing to do so.

You're right, we didn't tweet this blog post, but we did e-mail it to all customers with activity since Jan 1 2017.

In this case, we didn't properly convey that the Shopify integration guide we provided wasn't an official integration with Shopify. It was meant as a best effort "here's how you can do it" sort of thing. I requested that we take it down because it wasn't working due to a change on the Shopify side which prevented us from purging images.

I'd love to talk with you directly to try to make this right for you. If you'd like, my e-mail is in my profile.
Why isn't this in your blog post? Or at least a separate "technical details" blog post linked from the announcement?

When you have an incident, especially something that hurts your customers beyond just a service outage, you come clean, fast, and as completely transparent as possible.
Given their previous monumentally bad security hole I wouldn't feel inclined to trust it.
Bullfrog should never have died.

Molyneux's new game Godus and Godus Wars wasn't as fun.
yes, https://github.com/graphql/graphiql
and it's better
Software (and startups in general) doesn't get created because you're eating beans and rice, heated off a hot-plate, in the closet of your friends apartment.

I actually disagree with this. Living in near-poverty gives two distinct advantages:

- Reduced number of available ways to occupy your time.

- Visceral hunger to improve your situation.

I'm reminded of the Hikikomori thread here; these individuals withdraw from society because society gives them enough to survive and be entertained. If you withdrew their preferred method of passing the time -- say you can live alone, but no video games -- I suspect many would lead a different lifestyle.

So you could plot people on a graph of the ambitiousness of how they would ideally like to spend their time vs how badly they want to get there. For the sake of discussion, let's say one of the axes goes:

- Books

- Video Games

- Travel, sports, friends

- Yachting

- Going to Mars

For me personally, I enjoy books, video games, travel, and friends, but these in a way seem "not enough" for me to lead a fulfilling life. So I'm making plans to do more.

Yacht-class recreation wasn't enough for Elon Musk, so now he's going to Mars.

In a way, startup poverty is an interesting motivational hack -- living well below your earning potential gives you the hunger, but you apply that hunger to something with a higher potential rate of return, instead of just getting a market-rate job.
I highly doubt it was the insecticide. It is far more likely that it was some combination of the cleaning supplies used. Many household cleaners can be used in bomb making.
Yeah, that was odd :(
EU Open Data Portal
Used this in junnit tests. A callback to a specific host caused entire platform to hang 5-10 minutes or untill restart of different batch jobs but also dermed like Translations did it too. Turned out specific certificate with strong key would not be picked up by java provider but in stead fell down to our ncipher hardware box and Got stück. Now we Used httpclient but through Socks proxy and timeout does not Work Then. After That Bouncy Castle was put before ncipher as provider and was tested with all those Certs to avoid similar problems.
[I work at imgix and have helped lead the team on the production issues we face and gathering the details for this blog post]

We posted the blog post yesterday (Friday) afternoon, after getting the copy ready Thursday evening. Friday was spent acquiring the right customer e-mail list (a little harder than it sounds and something to improve in the future) and taking one last pass over the post (among other tasks we're all doing to actually operate the service, communicate to individual customers, etc.).

It's super important to be open and honest and fast in your response, but it's also important to communicate correctly. The post in its current form is meant to be transparent and apologetic but also show that positive steps have been taken and results are being seen now. If we missed the mark on transparency, or honesty, or the hints of positivity, it wouldn't have been the right message for where we truly are at today.

I'm completely open to writing a more in-depth technical post, but that would have compromised our timing to get this post out on Friday. That's why we went with the post in its current form -- anything else would have taken longer to get to our customers.

It's something that I'll think about more this coming week and hopefully get out soon.
Yes. I wave my magic wand and make it so gech can only contribute one comment. And yes there is pixie dust, in case you're wondering.
Reddit discussion: https://www.reddit.com/r/cpp/comments/5zzurr/c_value_categor...
Great! Even if you disagree, just the existence of a Gov standard will:

1) Create a minimal common language for all sites that the citizens are forced to use. Now we can all can use these patterns in our sites knowing that more users will know them. Remember that software isn't intuitive, but familiar: http://www.asktog.com/papers/raskinintuit.html

2) Force software developers for public services to put up a minimal decent interface, instead of just a list of features.

The best page is their Design Principles: https://standards.usa.gov/design-principles/
> I miss the old days too, but I wouldn't vote to water-down airport security

Do you mean the "security" theater with a 95% failure rate?
http://abcnews.go.com/US/exclusive-undercover-dhs-tests-find...

To which the response is "cavity searches!" which will only continue to fail.
http://kxan.com/2017/03/06/tsa-changing-pat-down-policy-afte...

The most effective change to security protocols was reinforcing the cockpit doors and changing how authorized people enter the cockpit. Every high-profile attack since 9/11 has not involved hijacking, has not been stopped by the TSA, but has been handled by better educated passengers and flight attendants.
http://www.nydailynews.com/news/world/shoe-bomber-subdued-fl...
https://en.wikipedia.org/wiki/Umar_Farouk_Abdulmutallab#Atta...

Terrorists don't kill people on any scale worth worrying about.
https://www.washingtonpost.com/news/monkey-cage/wp/2015/11/2...

The barely trained high school dropouts in blue uniforms at the TSA only serve to increase our sense of servility to a government that is increasingly afraid of its own citizens.
First, read fucking Hastie, Tibshirani, and whoever. Chapters 1-4 and 7. If you don't understand it, keep reading it until you do.

You can read the rest of the book if you want. You probably should, but I'll assume you know all of it.

Take Andrew Ng's Coursera. Do all the exercises in Matlab and python and R. Make sure you get the same answers with all of them.

Now forget all of that and read the deep learning book. Put tensorflow or torch on a Linux box and run examples until you get it. Do stuff with CNNs and RNNs and just feed forward NNs.

Once you do all of that, go on arXiv and read the most recent useful papers. The literature changes every few months, so keep up.
There. Now you can probably be hired most places. If you need resume filler, so some Kaggle competitions. If you have debugging questions, use StackOverflow. If you have math questions, read more. If you have life questions, I have no idea.

source: fizixer https://news.ycombinator.com/item?id=13890952

FWIW, a "super harsh" guide to (learning) ML [1] was posted on reddit a few days ago.

[1] https://redd.it/5z8110

Edit: The entire Reddit discussion feels slightly similar to this one, if more snarky. The first reply there also links all the resources listed above. I don't really know enough to add anything.
If Sociologists Had as Much Influence as Economists
> ... user bases and ecosystem, and in my very humble opinion Lua spectacularly fails at both.

I think that call depends on your use case. If you've ever tried embedding v8 or spidermonkey you might have a different opinion.

For instance we use to run the entire game state for multiple game titles I worked on in Lua. This was on the PSP where we only had a 400kb block of execution space and a 333MHz MIPS processor(system memory was 8mb w/ 24mb for video + audio).

Those types of environments are where Lua shines which lets you use a scripting language that scales from nothing up to full-blown systems.
And there is something very wrong with US immigration policies.

Yes, they haven't been enforced.
It is great, but regarding the format I would suggest some options to PDF:

a) markdown with embedded graphviz.

ex: https://github.com/TLmaK0/gravizo

b) a jupyter notebook (which also uses markdown blocks). jupyter can embed C++, so you can have interactive blocks that you can evaluate and play with.

ex: https://github.com/minrk/clingkernel/blob/master/cling.ipynb

Both seem more performant than in-browser PDF rendering.
I believe that depends on whether there's anything wrong with your country's immigration policies.
It is a captive venue news article / press release _about_ a paper at DOI: 10.1177/0146167217697695. I've only skimmed so far, but seems interesting and meaningful. What fraction of papers can be directly applied to your life? When I read the paper more closely I'll be looking for some kind of apology for religion since it was funded by the Templeton Foundation.
Rather than making a honeypot page, you can actually make a honeypot crack (or pre-cracked app) and upload it to torrent sites. I've seen a few apps do this.
Huh, didn't know about generators, learn something new every day(although like everything with JS support looks a bit spotty).