skysight-inc/HackerNews huggingface dataset:
This, like the notion that police should aim for the knees when shooting at suspects, is one of those perennial concerns that doesn't survive contact with reality. Once force is applied, you shouldn't be surprised when things go wrong. Force is messy. Which is why, yes, it should be viewed as a last resort.

Maybe there are better ways to resolve this situation wrt to the police and the airline. But I think basic common sense says that there are much better ways this passenger could have handled it, too. At some point it must have been obvious to any reasonable person that 1) the cops weren't going to change their minds; and that 2) force would eventually and inevitably be applied to resolve the situation in their favor.
Many certifications are worthless, but I would argue that not all of them are.

I learned more useful, practical concepts and skills by taking a couple of SANS courses than I did in four years of a CIS program at a University. Both my university classes and the SANS courses consisted of books, presentations, lectures, and individual or group assignments/labs. If they are taught the same as a university course, why is it automatically considered inferior? SANS teaches a lot of tools, but they also teach the underlying concepts to prevent people from becoming dependent on tools. In some subjects, it would be insane to not teach tools. For example, I took the GREM (Malware Analysis) course. Its an very basic course, but it would be foolish for anyone to teach a course about reverse engineering or malware analysis without using IDA or OllyDBG.

While the class won't (and doesn't claim to) turn someone into a professional-level reverse engineer, this course helped me understand a few things about assembly that I just wasn't comprehending when I used other sources.

Would I attempt to use my GREM as justification for applying to a malware analysis job? Of course not, but the course has helped put me on the right path. Its possible many people learned through another, far less expensive method, but that doesn't mean the training was worthless.

If I were hiring someone, I wouldn't use certifications as a sign that they are qualified. However, I would use the certifications listed on their resumes, combined with their work experience, to figure out what kinds of questions I should ask them.

I also wouldn't use certifications or a lack of certifications to disqualify a person. Using your anecdotal evidence of bad experiences with certified people to label all of them as incompetent is ignorant.
The article suggests that the airline was the one breaking the law and not the passenger. So in this case the police helped the airline commit a crime. Is this nowadays what means to have a police force?
> Using voice messaging was strategic because the native mobile keyboard to type Chinese characters at the time was not easy to use and consumers found sending voice notes intuitive, personal and convenient for daily life.

this is amazing way of thinking around the problem
How does it compare to Toodledo?
What made you switch?
They're effectively adopting it piecemeal already, what with the current list of banned websites.
> [Formal education in software development] certainly put me in a great position upon graduating college and got me a great job, but nothing increased my skills more than simply working with more experienced developers in a full-time role.

That's, fine, but that's not what we're talking about. We're talking about management placing an (implicit, unrecognized and uncompensated) expectation on one developer on a team who happens to have a lot more experience than their peers. In other words, management is happy treating him as equal to his peers when providing compensation, yet expects significantly more output for the same pay.
VMware Acquires Wavefront
I just wobble my head forward, in a cow-licking-your-face fashion. My highesh score is 9. The google cardboard's band is little too tight for my head so can't keep it on for longer.
Turkification as a general policy continues to this day and probably will continue. I don't see how it 's related to Ayia Sofia though, when the temple was built people still called themselves roman.
Did BlackBerry get awarded more in this arbitration than they have made selling devices? (Former RIM employee - this isn't a jab, genuine question)
Yep the problem is that some of the well known certs are bad, not that the concept of IT security certifications are bad.

I've been in IT/Infosec for 17 years now. I have certs that I literally maintain as a HR/sales checkbox (e.g. CISSP) and certs that make me think every time I need to refresh them (e.g. CREST CCT). It's possible to have good IT sec. certs.
We didn't select MySQL on the basis of having SequelPro obviously, that would be insane. However if you are still using MySQL and want to switch over to PostgreSQL (like us) a major reason not to be not having SequelPro. Most other factors about PostgreSQL are better but just not enough for the effort to migrate to be worthwhile.
Or they could focus on making sure the code is solid.

Accepting thousands of modules from random people has downsides on the maintainability of the project and the consistency of the user experience.

Ansible by nature is a lot of independent modules doing different things. It is always a tough call to decide what goes in and what doesn't go in, and the project could go pretty bad quickly if they start merging anything.
This is a great comment to illustrate grandparent's point that irrational hate of certifications permeates the industry. Many certifications under discussion here are meant to assist at the entry-level. That's what the certificate is "supposed to represent". That's what skill the certificates "measure correctly." That's the 3rd group of people who care: people operating at or near the entry level.

It is no surprise that experts hiring experts in any field couldn't care less about certifications (aside from ones required by regulation). At the expert level, you hire real, verifiable experience.
Nice place to live if you like suburban sprawl, maybe. I doubt any company would be willing to offer me a high enough salary to make the sacrifice of living in SV seem appealing.
An Alternative Approach to Rate Limiting
You know what I would like? An app that would take all of my meager income and lavish expenditures, and break down taxes paid.
My takeaway from this is that Comcast and AT&T will be paid $45m by the government to develop the infrastructure.

Whilst this EPB company will invest their own money for the infrastructure.
Just downloaded and will investigate - thanks!
Because handbook says a certain amount is the maximum they can offer, and likely the crew offering more would risk their job. Following this fiasco, Munoz said they will expand the handbook. We'll see.
Is it really? A sensorless camera is pushing it, but the amount of processing current cameras do to your photos is staggering.
Based on this report of what the USPS is asking to replace an ages-old design mail truck [1] ($30k per), EUR 25k sounds pretty dang good for a purpose built small-run pure-electric vehicle. I'd bet they could easily get the costs down to 15K EUR with appropriate volumes.

Maintenance costs on electric vehicles are a lot less, and obviously they don't use fuel, so that costs less too.

[1] http://voices.washingtonpost.com/federal-eye/2010/06/broken_...
I'm with nailer on this. All I need is a decent built-in console with tabs and good support for bash, powershell and cmd.
Their creativity doesn't imply incompetence or irrationality. For example NATO/EU bombs the heck out of zillions of countries so a counterstrategy of "we are almost members of your own alliance" is a brilliant shield.

The other interesting strategy is the EU is indecisive about if the purpose of the EU should be to help the EU people or if its merely a cloak to hide German rule. Often an issue will be polarized along that axis. Naturally some commentary will align with "the purpose of the EU is non-military takeover of Europe by Germany" and some commentary will align with "serving all European people" and this is going to look really odd. The only way to avoid that is to self censor certain topics, unless of course your actual purpose is to stir stuff up to distract NATO/EU from bombing.
On overbooking, this is a solved problem: hold an auction where the max payoff is the risk in dollars X, distributed amongst Y passengers (the number of seats you need to free up). Start at some low anchor point ("$300 to get off the plane") and increment up until you have takers. If the total value exceeds X, write it off - you messed up.

I believe other airlines implement this in some capacity.
nginx pro has been around for longer than nginx has been popular, so no.
Crestify has a tool to import bookmarks from Chrome. Happy to hear you found the tab saving useful :). Let me know what could make Crestify the ultimate bookmarking tool for you, always open to feature requests on GitHub too!
This is really a thing that cannot be SaaS. You can't allow a remote software in a random place in the world ssh to your servers as root and execute random commands.
I knew a guy whose PRK surgery was... unsuccessful. It mostly improved his vision, but one eye was always fuzzy. He had to wear sunglasses for an entire year, and kept hoping somehow the eye's inflammation would calm down and things would improve, but nope.

Our eyes are incredible. Whenever we try to improve them, we incur risks. I'm sure glasses are included in this.
My fiancé can only use one eye at once due to a complicated condition, and also does not drive currently. I'm hoping for self driving cars to become a thing ASAP because having 2 kids and only one driver is quite taxing.
>The ubiquity of earbuds says otherwise.

I never said that everyone was like this, but from what I see, it's usually young people wearing earbuds, and not necessarily for that long either. How many people do you see wearing earbuds for 8 hours straight?

I think if you were to take a poll of the general populace, you'd find that a significant fraction (probably even a majority) would be very unenthusiastic with the idea of wearing earbuds for 8 hours.
I'm the author of the linked comment. I originally focused on state prisons because the article was about events in a state prison, so P(person did something bad|person is currently in state prison) was the relevant statistic. But let's repeat the analysis counting federal prisons and local jails as well.

In general, people with sentences longer than a year go to prison, and sentences shorter than a year go to jail. Roughly 57% of incarcerated people in the US are in state prisons, 9% in federal prisons, and 33% in jails [0]. In my earlier comment I noted that 52% of state prisoners are in for violent crimes, 18% for property crimes, and 18% for drug crimes. For jails, based on this source [1] I estimate 18% of the jail population is in for violent or weapons offenses; 3% for weapons; 30% for property crimes; and 31% for drug crimes. This source [2] suggests around 18% of federal prisoners are in for violent crimes; 17% for weapons/explosives/arson offenses; 11% for property crimes; 46% for drug crimes; and 8% for immigration reasons.

In my original comment, for state prisons, I counted violent crimes, property crimes, and 1/2 of other non-drug crimes to estimate that 76% of the prison population did something genuinely bad. For jails the number will be lower, both because there are fewer violent offenders and because the non-violent offenses tend to be less severe; if we count violent crimes, 1/2 of property crimes, and 1/2 of other non-drug crimes, we get 44%. For federal prisons, if we count violent crimes, property crimes, and weapons/explosives/arson offenses we get 46%. We can weight those three numbers by the sizes of the different groups to arrive at an overall figure of 61% for all incarcerated people in the US. (Of course, these numbers depend heavily on what you consider a "bad" crime.)

So of the entire incarcerated population of the US, about 1/2 to 2/3 are incarcerated for something genuinely bad. While you're correct to point out that this is lower than the 3/4 figure for state prisons, Broken_Hippo is still wrong to claim that "most" prisoners are in for things like non-violent drug offenses.

[0] https://www.bjs.gov/content/pub/pdf/cpus13.pdf

[1] https://upload.wikimedia.org/wikipedia/commons/d/d3/Felony_S...

[2] https://www.bop.gov/about/statistics/statistics_inmate_offen...
I think the point is more that security certifications CAN be worthless and you don't NEED them, but that doesn't make them inherently bad/worthless. I think the author's argument should be that the industry has begun to rely on them too heavily for vetting. That makes sense though because it can be very difficult to vet the skills of a client. The hiring process is very time consuming so if you see two candidates and one has "proven" they at least have some baseline skill in an area then they will lean on that for decision making in the same way they look at education or self reported experience.

Experience on a resume is self reported so that is an even worse indicator of skill than a cert. At least one of those two involved external validation by a 3rd party.

I think there are a few good ones out there and getting them ensure the person has at least a baseline knowledge of some subject. I have worked in the industry for years as a pentester, but I still went and got my OSCP and OSCE for fun. A lot of it was review, but it was nice to fill in some gaps and practice things I hadn't had as much experience with.

Certs are like college degrees, you can get by without them, but it can be easier if you have them. You will probably learn some things along the way and the provide a foundation for later studying or pursuit. You don't NEED them, but you don't need a lot of things in life, that doesn't make them worthless.
Alternatively, if your company is in the position to do so, maybe advocate for buying the license.

I feel they chose rather well with status pages–it's a feature that's useful, yet leaving it out doesn't cripple the OSS version in most use cases.
There are currently 18 mentions of 'police' on this page, but they were security, not police. That's a crucial detail.
Seriously. I've tried to read on category theory before and never really grokked what it was all about. The sentence you quoted was literally the first one I've ever read that actually made me say, "oh, that's what this is".
Additionally, the Senate gives minority population states a vastly outsized vote. North Dakota and California get equal say. 50 Senators do not come close to representing 50% of the US population.
[HW Startups] Troubleshooting your hardware product's technical risk
> For what reason would a person want to use Tor instead of his regular connection?

If I'm doing some background research for my work, I don't want to have to wonder if my ISP will sell me out, allowing a competitor to know what I've been up to.

If I'm hanging around gear head websites and letting people know just what a drooling fanboy I am for the products of a particular car company, I really don't want my ISP to sell me out and let the local car dealer know.
>"What makes reddit and now HN think Ataturk was some sort of beacon of democracy?"

Because he abolished the Ottoman Sultanate that had ruled for nearly 500 years and established a secular democracy. He also gave women rights.

I don't think this is a fact in any way specific to HN or Reddit but rather to history itself.
Very, very useful trick, especially if you already have Homebrew installed. And at this point, who hasn't? Get it at https://brew.sh
Ask HN: What credit card does your US startup use?
More context:

- very small team (< 5 people)

- mostly used for online services (e.g., servers, SaaS, api ...)

- rarely travel

- in San Francisco
One key missing piece in nginx is a way to interact with the configuration without having to edit the config file. This is such a vital piece of a modern infrastructure; where backends are added/removed on demand.

You can interact with haproxy via lua[1] or use etcd to have traefik load its configuration[2].

Seeing how [as others also mentioned] nginx seems to favor pro customers in terms of functionality, it would only seem wise to choose another proxy/load balancer for your next project.

[1]: http://www.arpalert.org/src/haproxy-lua-api/1.7/#Proxy.serve...

[2]: https://docs.traefik.io/toml/#etcd-backend
These are good lessons, but we have to consider whether a piece of WeChat's growth has to do with government backing. It's much easier to design for increasing user value if you don't have to worry about a marketing strategy.

I'm not making a judgment on that - I'm just saying that it might not be applicable to all startups.
In the meantime, clink (https://github.com/mridgers/clink) works well. It stays out of your way, and isn't clunky like the full shell replacements. I had even forgotten that cmd.exe doesn't do ctrl-r out of the box.
Once the police were there, he resolved it the best possible way for him; he stood his ground, got a little banged up, and will not be quite rich for the idiocy of everyone involved.
Isaiah is a newer prophet when Israel was conquered by Babylon. The Pentateuch is much much older. The argument of Isaiah is about the development of God of Israel was the great of all the gods to their is no other gods.

> Epic of Gilgamesh

The whole argument is to ask when was the Pentateuch was written. The scholarship for this has had many arguments with people placing it in 700 BCE (Which was just crazy especially if you read Hebrew) many are placing it to the discovery of written language. Prior to written language we had a very strong oral history. Both Gilgamesh and the Pentateuch have evidence pointing to the discovery of a written language. We have ancient Hebrew (What a pain to read) and it does show a strong relation with Egyptian discovery of writing.

Another interesting this is the uniqueness of the Pentateuch to the other writings from ANE (I had to read a ton of them). The academic discipline in these writing is really interesting and to say that one influenced another is pretty much impossible to do, but it has been shown since the 1860s onward that archeology have discovered allot of sites that date way before what people were thinking and we continue to learn more and more.
In the case of child porn, the typical argument is that even downloading/viewing/possessing it exploits the victim(s).

Personally, I'd prefer the law enforcement emphasis to stay on those creating/buying/selling/distributing child porn, but oh well.
I don't really go along with this post. I think the title is a good eye-catcher, but inaccurate. Terry seems biased toward working on the cutting edge of embedded firmware and I agree that is really important work. I also agree that a certification like the CISSP (I have one of those) won't prepare you for that sort of work.

I'll wildly speculate that some potential Tactical Network Solutions customers are asking about DoD 8570.1 security certifications. That may be a mistake on their part for something as far down in the weeds as embedded firmware solutions or the Centrifuge IoT Security Platform.

On the other hand, some of Terry's customers likely hold those 8570.1 certifications, so he might want to be careful about rubbing in how they wasted their time in acquiring them.

If he takes a look at SI-7 in the System and Information Integrity control family (found in NIST Special Publication 800-53) he might find some selling points for his products. A certified security engineer who had done a RMF audit would know that ;)
nice to see OSCP still regarded well. I got it about a decade about when our CTO had an initiative that everyone doing customer interaction (R&D team + professional services support for me at the time) should have a cert.

I vehemently disagreed, pointing out that those of us with meaningful degrees from well regarded programs shouldn't have to get one, but in the end I complied to keep the peace.

Have to say I enjoyed it at the time and even learned a thing or two. I wasn't exactly new to offensive work, but was nice to get things sharpened up and familiar with a few different approaches. I remember being a bit worked up about the final challenge at the end of it that I took the day off work, but iirc I was able to finish in just a couple hours. It wasn't the most cutting edge content at the time, but it was well organized and ensured that the person being certified could demonstrate some level of practical application and that is far better than most certifications of any sort.
OSCP for the win.
Think the bigger news might be blackberry is still in business..
Slightly OT: Peak and decline of VR related search queries on Google Trends:

https://trends.google.com/trends/explore?q=vr,psvr,oculus,ht...
> The EC actually works

Sorry that's absolute bull. Apart from an exception or two ECs have been sycophantic puppets, ever ready to grovel. It seems you weren't born yesterday, neither was I, so you would know this.

Even if EC intends to do good, he/she cant do much until there is a formal complaint raised by the district magistrate (many are simply bought out). So even if the opposition cries itself hoarse, EC does zilch.

I am not making any claims about the EVMs, just that the electoral process is no where close to as clean many of its proponents claim it to be. Tech alone cannot solve this problem. What we have here is the analogue of rubber hose decryption.
Well also, my preferred attire (work or otherwise) is barefoot+gym shorts+shirtless, I would enjoy nothing more than consecutive full days without human contact during the week, the ability to fart and pick my nose without hesitation, and not having to worry the bathroom stalls are full when I need to take a shit, but I realize most of those are unreasonable to ask of an office so I left them off the list. However, those are more reasons unrelated to an open office I would prefer to work from home on the regular.
Going by their financials, no, they made more money selling devices over the years. This is actually less than a year's worth of profit back aways.
Compare simple instructions on shader assembly, cuda and OpenCL
A standard database table isn't large enough to handle our large datasets. For example, the Hercules dataset was over 2 petabytes and even after optimization is almost 1 petabyte. Big data systems like Spark, Impala, Presto, etc. are designed to make the data look like a table, even though it is spread out into many files in a distributed filesystem. This is what we do. It's pretty common to reimplement some database features onto these big data file formats. In our case we have very fast indexes that let us quickly fetch data, similar to an index in a postgresql table.
Ah well, which other source would you then accept?

Except for Erdogans ministry of truth, of course ...
The central thesis of my argument is that the ins and outs of each side's claims can be litigated later on. At that moment, the cops probably don't (and likely in principle can't) know exactly who is right and who is wrong and in fact this isn't at all the role we expect the police to fill.
"Let's make everything fixed, it will look SO good on small displays"
United does too. They just stopped at $800 and then went the random route. They could have gone higher.
The category theory idea of a morphism is more abstract than a function. If functions deal with domains and codomains then certainly morphisms need new words to deal with the abstractions of those ideas that are specific to functions.