skysight-inc/HackerNews huggingface dataset:
People have always been like this... it just used to be that the "doctor" was always willing to bleed you or physick you, or whatever. Now doctors are trained only to render useful treatments, but the desire for woo is unchanged.

As you say, people don't like feeling ill, and if the answer is, "You're human, maybe it's environmental, or it's just you, etc..." people would rather take the illusion of personal control. That has never changed, and is unlikely to change unless medicine advances enormously.

People aren't very bright and thoughtful at the best of times. When we're really hurt, what little reason we have goes out of the window.
I meant that in the sense that posts claiming the parent was showing confirmation bias were in themselves likely trying to fault the parent's experiments in a way that reaffirmed their own existing beliefs.

I'm not saying that they were wrong in pointing out confirmation bias, but that they aren't coming from a much more objective perspective themselves.
Just watch the movie with Jude Law. We're close, we're so close!
> When searching for the crack, it means someone thinks that the software isn't worth the value being asked

Why would you think that is true in general? People even pirate $1 phone apps. Someone can think an app is worth the money but would still rather take it for free if they can get away with it. If they're taking the time to pirate the app and use it then it's presumably worth something to them.
Algorithm correctness: google "tla+"

Implementation correctness: google "jepsen"

Comparative overview: I'm not aware of one, but I'm sure there's one out there. If you find one, post it. Make sure it's very recent because there have been some very significant papers in the last few months.
>cost of 2 hardware admins 160k/year

This is by far the most expensive item in your estimate, and I'm sure that you don't suddenly need to hire another pair of admins when you buy a single Xeon blade.

Once you factor this fact in your estimates, you'll realise that the unit cost of each server is, unlike your estimate, negligible.
Babel offside (indention) JavaScript syntax extension
A history of the human population
Thanks for the feedback mamaniscalco, please check back again soon to see if our detection has improved (if you're interested).

As for the the purpose of the tool, one application could be protecting children from online hate/harassment for example.
I've always wanted to visit U.S.A. but coming from a muslim background I'll probably never do it. Just reading the post infuriate me.
On thinking about it, the mild mistreatment over a period of hours could be deliberate so as to induce stress and make him crack. Hence repeatedly asking the same questions looking for him to slip up if any part of the story was fabricated.
Well, for the most part, the color space we're accessing is the exact same, so you can always use whatever space you please. The biggest problem with things like RGB is that color selection ends up turning into a horrible mess of seemingly unrelated magic numbers.
In case you're wondering how you might use this: BadSSL is really convenient for checking clients. Is that weird version of Curl in that PHP webapp totally busted? Answer: probably yes -- although you can use this to find out how it's busted specifically in the context of TLS.

If you have a modern browser, whatever it does is probably fine. Also, consider using Chrome. (Yes, I know about the battery life issues.)

(Curl-from-PHP can be bad for non-TLS reasons! It's a likely SSRF vector, and it often does things like TFTP and Gopher so it will helpfully let you speak all sorts of protocols.)
Sadly, a lot of hacks exist in the world of food. It's refreshing that you're far from being one of them, and definitely it pays to eat at a restaurant that has pride in what it does. I think more broadly, you just have to choose wisely! I'd rather eat your food once a month, than a chain's once a week.
>Say, are you referring to the Extremist Moslems, or Extremist Christians?

I was referring to 9/11, obviously, because that resulted in our modern security state.

>That whole innocent until proven guilty in a court of law... It doesn't count for non-Christians, does it?

I'm not sure how 'innocent until proven guilty' applies here. Are you saying we don't need any airport security because that presumes guilt?

>Both have their fair share of "incidents". Perhaps you've never heard of the KKK? They're Protestant Christians.

Ok. I suspect I know what you're getting at, but you're injecting your skewed interpretation on what I wrote, as opposed to what I actually wrote.

>That's what this all really comes down to. Not while christians, eh?

I'm sure there are all kinds of people that are willing to murder others and airport security targets them as well.

EDIT:

I have to say, I really dislike the bigoteer tone in your response.
Can you really not run image rendering code on Linux servers? Vs you know, spending thousands of dollars racking OSX servers? Because that would make "increasing capacity" about 3 clicks in AWS....

Perhaps I am missing the competitive advantage of using OSX to resize images, but it sure seems like the shortcomings are obvious :)
+1 to Python Machine Learning, I feel like some of artificial intelligence is understanding a lot of finer (but critical) mathematical nuances, but some of it is just getting your hands dirty, and the second is definitely more accessible for somebody who is starting to learn.
Please don't. You've repeatedly posted uncivil and/or unsubstantive comments and we've asked you before not to do this.

We detached this subthread from https://news.ycombinator.com/item?id=13901277 and marked it off-topic.
I shudder at imagining a lot of the earlier Sim* games without a manual and largely pre-web. Without the space or time to create digital help content, there was so much that was only mentioned in the manuals!

I remember the SimEarth one being a pretty hefty tome.
There were no reboot options. The damn thing wouldn't turn on. My friend now has an XPS13 (which he had for just over a year before an issue with the fan prompted him to return it to the retailer for repair; amusingly the retailer screwed that up and offered him a new one as a replacement).
Perhaps they came across the exploit under different circumstances? Perhaps they've exploited it themselves in the real world, but the lure of the $100k prize is worth giving-up-the-goods?
McDelivery is leaking personal data for more than 2.2 million of its users which includes name, email address, phone number, home address, accurate home co-ordinates and social profile links.

I know the world has changed, but many of us remember being given a list of everyone in our city's name, home address, and phone number. The Phone Book. And I recall it was unusual not be be listed in the phone book. My father was prominent in our community, and we were always in it. We'd occasionally get calls from a someone angry at my father, but it wasn't a problem. Different times...
That makes sense. I guess I don't work enough in teams to have instantly seen the value. It's weird, actually, I see a lot of references to collaboration, either indirectly while reading articles, or directly on videos promoting collaboration tools. But in reality I don't collaborate very often other than via Slack. I wonder if it's just me or if collaboration is portrayed/perceived in an unrealistic way.
I recently was selected for a more thorough screening at the DFW airport, which included walking through the metal detector twice, having a body scan, the new "universal pat-down" [0], and individual swabbing and x-ray of every item in my bag (everything required to be powered up as well).

I am often selected for pat-downs, despite using the scanner, and I must say the newly implemented pat-down procedure was much more intimate than I was comfortable with. There's got to be a better way.

[0] http://www.usatoday.com/story/news/nation-now/2017/03/03/tsa...
Just because a company is ripping you off, it doesn't mean that's representative of the real market.

For 500€ a month, it's possible to buy your own 40 core blade with 256gb of RAM. In fact, it's possible to buy a pair of those servers.
Wait, so it's a password storing service that's not encrypted?
They kept serving an old image even after I flushed it multiple times. The image had an old discount code which customers presented us. We had to respect that even though we were technically not running the offer and was financially tough.

Their support (after few days said), they don't support Shopify. Their whole pitch was; we are Shopify compatible; when we signed up.
We need to get a bit smarter as consumers. Who really thinks it's a good idea to give McDonald's all her/his PII?
Thanks for explaining and openness.
We were bit frustrated as just finished migration to imgix and hit many issues with images delivery.
How do you Tree Shake with rollup?
Kerberos and OAuth are examples of authentication protocols. LDAP is not principally designed for authentication, it is a protocol for reading and modifying an hierarchical directory service (think phone book, DNS, etc.), but the "LDAP bind" operation has often been pressed into service for authn.
Since we're sharing shell tricks: The "sudo tee > /dev/null" may be baroque, but I find it useful whenever I start editing stuff in /etc in vim, only to find that I cannot write my changes because I'm not root. In that case,

:w !sudo tee %

does the trick. (What "w!" does is send the buffer into the given shell command as stdin.)
How is the comparison to sunburns supposed to make anyone feel better

I go through millimeter wave scanners a few dozen times a year -- getting sunburned that often would dramatically increase your cancer risk.
Discussion: https://news.ycombinator.com/item?id=13900632
Show HN: Lean App Toolkit [pdf]
How often do drugs get removed from the market by completely unjustified public outrage? I'm sure that all those people who complained after receiving the vaccine didn't really have horrible un-treatable lifelong consequences from it. Around the turn of the century, I worked with a guy who was foolish enough to agree to be vaccinated. He suffered greatly for it, and spent the rest of his days wishing that someone would invent a time machine.
Not the UK: In which probably 50% of the population feel the government doesn't represent them.
Not France I'd guess? Which seems to have issues and strong probability of a Frexit?
Not Italy, whose politics as seemed somwwhat messy for some time?

Those are the countries in Europe that are "doing well" in terms of GDP at least. Aside from Germany that is.

So is Germany the role model? I'm really trying to ask an honest question. I'm wondering which are the countries currently doing well economically and treating their citizens well.
Well, basically they developed the thing on macbooks with Apple's image manipulation libraries (which are basically just implementations of published, standard algorithms). Then they didn't bother porting it to something they could scale. Instead, they opted to commit to putting genuine Apple hardware on racks, something that even Apple doesn't do.

It's an understandable direction if your business is at the "Well, I have a few of these mac pros sitting around, I wonder if I could make a living at this" stage.
Any citation ? My understanding was that under CFAA unless you are explicitly circumventing security provisions it not illegal ?
Lean Apps Create Winning Startups.

What it's for: Entrepreneurs have a difficult time finding actionable advice when getting started with an idea. Many of us waste a lot of time and money building an app that nobody wants. The Lean App Toolkit uses Lean Startup methodologies to provide a step-by-step plan for validating an app idea and defining an MVP. Entrepreneurs interested in building sustainable companies rather than just growth machines bound for an investor exit will find the Lean App Toolkit essential! It helps build a foundation for mobile and web app businesses that generate revenue from day 1.

Looking for feedback from entrepreneurs!

-Paul
Wow. I just read that.

> We operate our own hardware, run our own datacenters, and manage our own network infrastructure.

This seems insane to me. Although I don't work with image processing beyond "saving for web" in Photoshop, so I could be wrong. Why would they not use AWS or any number of other cloud providers where capacity planning is handled for you?
To www or not www
I'd be curious to see how they've implemented this. It'd be possible to do this with cross signing encryption keys so that by supplying their credentials, they could unlock the keys to unlock your stored passwords
>He didn't refuse the scanner

He wasn't detained because he refused a scanner. You know that.

>when his choice was going to get complicated he could no longer switch back to the scanner.

Well ... yeah. What you refer to as a complication was him testing positive for explosives or poison.

>Why deny him a glass of water?

Is that the problem? He didn't get a glass of water?
That second sentence would make a good HN comment. The first one is pointlessly inflammatory; please don't do that here.
People who orders from mcdonalds? I guess they have delivery in India
Luckily, we don't have to speculate. http://www.nationalhomeless.org/factsheets/why.html
No, because the README for this project leaves me having utterly no idea who the audience is, what it is for, why it exists, etc., so I wouldn't feel I have the right background to do a proper PR against it.
Bay Area Bike Share is one of the least-used systems in US, costs $5k per bike
A Holocaust museum had to stop people from coming inside to catch augmented reality poison gas monsters with their cellphones.

That's some Neal Stephenson stuff right there.
Did you ever cross international border?

My reading is just fine, read the article. He was 'fasting' before security check. And he should say it is a medical emergency, if he felt like passing out.
Yeah, right. It is limited to 50 mph.
I would guess because of costs. At one point I was going to do a video processing app and after doing some calculations the costs were insane, and the savings with actual hardware were tremendous. I imagine image processing is a lot less than video, but maybe the same deal. Then again... they did rack mac pros so who the heck knows what they're thinking.
You know, I have never found a "casual" book covering tree-search techniques, from minimax to Monte Carlo Tree Search. Still relevant for game/agent AI (AlphaGo used MCTS for example).

You'd think there would have been 100 "How To Make a Computer Chess Engine in BASIC" books back in the 80s, and continuing to the present day, but I can't find them. Lots of papers and online tutorials, and some stuff in textbooks, but no accessible hands-on books.
>Still, refusing to give him a glass of water was not necessary,

OK. Sure. I suppose if you're held for 3 hours, you should have a right to water. Is the big problem here? If you're detained for more than 1 hour you should get a bottle of water?
I set off the chemical detector at SFO once.

I'm convinced it was because I'd been to one of those indoor go-kart'ing places the day before as part of a company event, and wore the same jeans.

Extended screening was not a fun experience. I've always opted out so I'm used to the standard pat down. This was a lot more invasive. I was directed to a private area with two security officers (SFO uses a private contractor, not TSA). Besides a more thorough pat down, my bag was unpacked and its items were swabbed and chemical tested. I don't think the chemical tester went off a second time. The whole procedure took about 15 minutes. It's not the easiest situation in which to remain calm.

But, instead of getting annoyed at the security personnel (TSA or otherwise), I remind myself that this is ultimately the doing of congress and my fellow citizens. And then I send the ACLU another donation.
Is it really the problem with "screen time" though? Are construction workers much healthier for example? What about the Samoans or some other pacific islanders? I think the type and easy availability of food makes a big difference.
C++ value category cheat-sheet [pdf]
many companies have bug bounty programs where they will pay people who discover bugs.

I've read criticism of Pwn2Own that argues that some people will find an exploit and save it for the competition rather than disclosing it to the company. This would give time for the exploit to be discovered by others who would use it.
China cannot detain me on entering the United States based on my Google search history.
To me it suggests that they had someone in the building trying to figure out which unit he lives in.
Maybe it's not a good comparison, IDK. The trouble with getting a sunburn is because UV radiation is ionizing, and we know that causes cancer. Even if you don't get sunburnt, frequent unprotected exposure to strong sun increases cancer risk.

Maybe going to the sauna is a better comparison? We don't really have a consistent way of comparing effects of different types of non-ionizing radiation.
It's just enemy-of-my-enemy stuff.

If I recall correctly, the initial Wikileaks trove was supposedly skimmed by a malicious Tor exit from Chinese intelligence traffic.

So yeah, pretty damn cyberpunk.
There is no difference, because both refer to what is clinically considered antisocial personality disorder. Both terms are too colloquially loaded and ill-defined to be very useful outside of the clinical context. People use "psychopath" to describe people across a wide spectrum, from asshole to antisocial personality disorder.

There has been a misconception that sociopaths are psychopaths without violent tendencies but with the same lack of empathy, but there's really no rigor in any of it.
How Austin survived its first SXSW without Uber and Lyft
What "nasty tactic" are you referring to? I see:

Actually I was going to suggest that we work together and merge the best features of both into a common source-base that could be used by both groups going forward: eventually unifying the developer pool and mind share. This might be difficult, but I think the end result would be useful.

Reaching out to another project with similar goals to clarify and understand the differences, and offer collaboration doesn't seem nasty. Am I missing something?
I always do it.

I don't trust those machines.

And yeah i'm white, i don't have any problems at security. People think i'm arrogant white dude before they think i'm a terrorist.
It says right in the article... "Most of the rest comes from family farms growing rice, maize, manioc root (like sweet potato) and plantains (similar to banana)... It is topped up with foraged fruit and nuts."
There's nothing wrong with enforcing your country's immigration policies.
That's mostly correct, except for some definitions of "should". Chrome connects to the Mozilla "Old" config, which is fine. The "Old" config does not mean "only old/bad ciphersuites", it means: "support old/bad clients". Chrome negotiates AES128GCM with ECDHE on my desktop, so it is rightfully pretty happy.

Meanwhile, while 2048 bit FFDH is considered safe, Chrome refuses to connect to it, for reasons that I've elaborated on elsewhere in the thread.
Oh. Sorry. I've never seen it mentioned here.

also: I had no idea there was even a down vote button on HN.
It shows the use of ImageMagick, a legendarily buggy and insecure application and library. It shows the use of system crypt() for password hashes, which isn't really very secure since (afaik) it doesn't support pbkdf2 on most systems or bcrypt (not the blowfish one) or script. It shows hardcoding database credentials in a flat file. And it shows it uses PHP, which has its own security problems as well as being well known as a language used by people not aware of secure coding practices.
Long-Term Thinking and Nuclear Waste
Not entirely sure but I think mpv works without X like mplayer.
Indeed, they are not workers.

Workers get paid for their work. Founders don't get a paycheck.
I wish this post gave more concrete details, so we could learn from it.

A critical piece of our network infrastructure failed after 3 years of correct operation in a way that proved difficult for our network engineering team to troubleshoot.

Which piece of infrastructure? How did it fail? Why was it difficult to troubleshoot? Can you do anything to prevent this type of issue in the future?

We observed new traffic patterns with significantly lower cache hit rates than our historical median, and it took us some time to determine whether the source was abusive in nature or a legitimate new customer use case.

What were the new traffic patterns, and why did this cause lower cache hit rates? Why did it take longer than expected to determine the nature of the traffic?
Improved our GIF encoding pathway to increase throughput.

I'd be curious to hear exactly what they did around this. I recently worked on some gif encoding, and was surprised that there's actually quite a tradeoff to be made between performance and good color palette choices.
You have to admit it's impressive they even noticed you're Dutch. Unusual for this kind of attack.
Running the delivery/CDN part on AWS would probably be way to expensive, and if you are running parts of your own infrastructure anyways (and thus are already paying for sysadmins, data center, ...) you can put at least the base load of your processing there also. But they could of course have the option to fall-back/scale to a cloud provider, if they didn't "require" Mac OS X...
Those are loaded questions.

Corporations already provide user data when provided a valid court order to do so, they have been doing it for decades.
I'm not seeing a smoking gun here and the thread looks very reasonable. I see nothing related to "growth" so maybe link to something that actually backs up your assertion?
I don't see any "nasty tactics" in the linked thread.

LLVM guy came and asked the misleading description of his project to be corrected, which he got. Along the line (of explaining why it's misleading), he also pointed out that the projects fundamentally have a lot in common, and that their users would benefit from an eventual convergence - which seems obviously true on the surface.

Now, libjit folk seem to have some valid technical reasons to not go down that route, including implementation language (C vs C++) and conceptual minimalism of libjit. Which they have clearly expressed.

All in all, a polite conversation around a genuinely reasonable question. Where's the nastiness?
> The world didn't suck because illuminati super-villains were oppressing the sheeple, it sucked for the same reason parks get trashed. Garbage accumulates and nobody bothers to pick it up.

Excellently phrased. And paradoxically, harder to fix.

Everyone is willing to play at being the hero, but no one wants to pick up garbage.
Using a title to editorialize like this breaks the site guidelines.

If you want to say what's important about an article, please do so in the comment thread, on a level playing field with everyone else. On Hacker News, submitting a story does not confer the right to frame it for everyone else.
The security charade is nonsense, there's no doubt but I see hundreds of brown people going through security with zero issues every time I go to JFK.
‘Brand consultant’? ‘PR researcher’? Why the ‘bullshit jobs’ era needs to end
It's probably just a typo, but OAuth(2) is exactly NOT an authentication protocol: https://oauth.net/articles/authentication/
> I agree. I have plans to create a site with animated gifs explaining from the most basic things in computer interface.

I remember my family's first Mac (an SE) came with a bootable disk with some simple interface tutorials like these.