skysight-inc/HackerNews huggingface dataset:
What, everyone doesn't aspire to become an elite hacker speaking at BlackHat?

Seriously, you are spot on. It takes years and dedication and no small amount of coincidence of interests and skills to reach the elite levels. It also takes a kind of persistence and thick skin to do the research and get the skills to get your first real high end job for most people. I tried replying to the OP about how to get to where our senior and principal consultants are and.. it turned into a somewhat muddy word bomb. At some level the advice was basically, "Yeah, just get really good at... everything, then infosec is easy"

There are so many paths and skillsets required and you can specialize in so many areas (operating systems, tools, crypto, memory corruption, etc...). How do you even begin to convey the depth and variety to someone at the start of their journey? Ultimately there are just a lot of common patterns of elite hackers, base skills you use all the time. Get those skills, and keep trying to hack stuff :)
That really means a lot, especially coming from you. I tried really, really hard to accurately portray Shenzhen and the markets, and it's nice to hear from a local maker that I've at least partly succeeded. Thank you:)
It has been checked by others ( https://news.ycombinator.com/item?id=14099630 ) and looks alright. If the information contains factual errors, please point at least one of these out, instead of posting character assassination.
there were a few, i think park.io and then another having do with music, submithub i think? those are the two that came to mind.

there was another, machine learning for company logos, the title was something like "50k monthly run rate after 3 months" but it was based off of sales after running a promotion which amounted to a couple grand in a few days.

the shitty part is that all the stories are great, they don't need to be sensationalized, but he over sells them and then your left feeling let down.
Yes, it is possible to build checks and safety nets to overcome them. But it isn't easy.

The simplest example here is the one the Safe C Library is about: it's very hard in C to talk about memory buffers that know their own capacity. C wants you to think about pointers, often with implicit lengths (memcpy takes a single size parameter, strcpy takes none, tmpname takes none, etc.). You can write a library where you pass lengths alongside every pointer. But you've got to keep track of two variables for what should conceptually be a single variable.

Now, one approach is to make a struct buffer {char *ptr; size_t len;}. But then you run into C's problem that it has no encapsulation or operator overloading. You can't index into a buffer; you can call a function that checks the length, or you can just do the tempting thing of ->ptr[i], which you'll get wrong at some point. The compiler won't help you notice that you got it wrong.

And even if you do that, the C standard library is full of the unsafe approach to pointers. If you scrupulously avoid all functions that use unsafe pointers, you've also got to avoid the C standard library as well as almost all third-party libraries. This is not what most people think of when they think of using C.

C++ (and especially C++11 with good discipline) is a very good step forward in the direction of making C more safe, in no small part because C++ has its own standard library and the entire ecosystem tends to use that standard library. Due to the desire to be backwards-compatible with C, C++ retains a lot of unsafety, but it makes safer paradigms possible. If you're not bound to backwards-compatibility, though, there's probably no reason to voluntarily take the burden of dealing with the things that are unsafe in C.
I think a lot of us met him there :)
Threads is undoubtedly the greatest horror film ever made. Monsters can't come close to the reality of what humans can do to each other.
Vimy Ridge
So if the company goes belly up its possible that you'll end up holding the bag? That is horrifying coming from someone who has worked for mismanaged companies.
That's great to hear that it's accurate!

As an American, what differences do you see in the electronics community now that you're an expat in China?
IANAL but pretty sure there are some specific exceptions for employees en route to another location to staff a flight (deadheading). If airlines could not do this they would have to possibly cancel flights that they could not otherwise staff, inconveniencing dozens or hundreds of passengers instead of just a few.

That said, United utterly botched this in the way they handled it.

And I don't let the PD off the hook either. That police can use violence to settle what is essentially a business dispute is just wrong.
Amen my brother. Phenomenology and aesthetics is great medicine. We need to find greater purpose beyond just optimizing for/against pleasure pain.

EDIT: Or are you a sister?
Google turns off ads for blog after writing about Russia's anti-gay policies
Public Utilities Commission asks why it should not fine Uber for drunk drivers [pdf]
Skeptics should read the NakedCapitalism post (http://www.nakedcapitalism.com/2017/04/united-passenger-remo...) which not only brings up the Reddit post but also includes references from the FAA, CFR, and United's Contract of Carriage.
> IANAL but pretty sure

That means you are, even if confidently so, guessing? Or can you provide concrete details?
I'm not sure inhalable is a feature. Insulin pumps/pods micro-dose fast acting insulin throughout the day to cover your basal dose, you can't do that with fast-acting insulin via inhaler. You can't close loop your inhaler with a CGM to adjust your basal based on your current BG and automatically control for overnight highs/lows. You can't dose your kid from across the room from your smartphone.

Also there seems to be a a notable incidence of lung cancer which raises a bit of a yellow flag there...
Six years too late. Threw the Kobo out some time ago.
Funny, I've heard some of them too and they only made me want to apply there! I haven't given it too much thought but Jeff Bezos is probably one of the industry leaders I admire the most. ducks
Canonical CEO Jane Silber Resigns
Very well put, thank you for sharing your experience. Often O feel that depression in an "healthy" reaction to something wrong: there are good reasons to be depressed.
Apologies if I'm missing something--what is this doing in the front page of HN?

This person claims he can see spirits perturbing the mentally ill. He claims he has the cure for schizophrenia. What kind of science or unbiased analysis is going on here that is OT for HN?
"Monsanto Advocate Says Roundup Is Safe Enough To Drink, Then Refuses To Drink It"

http://www.huffingtonpost.com/2015/03/27/monsanto-roundup-pa...
Ask HN: Negotiation course recommendation
I'm looking at taking a course on negotiation. Anyone have any recommendations or experience(s) they can share?
We (Chrome) have reached out to PhantomJS to inquire if they're interested in collaborating: https://groups.google.com/d/msg/phantomjs-dev/S-mEBwuSgKQ/tU...

The DevTools Protocol is the primary API for headless Chrome, but we are excited for higher-level abstractions like PhantomJS & NightmareJS's API to manipulate the browser as well. Plenty of details to work out, but hopefully sometime this year you'll get a drop-in solution for some of your testing to upgrade from Phantom's older QTWebKit to the latest Chromium.
Type 1 diabetes is an autoimmune disease. The body kills all of its insulin-producing cells, often in childhood. No matter what sort of food you eat, you need insulin if you want your cells to use the building blocks!

As an aside, the story of how insulin was discovered is super interesting. Diabetes used to be an incredibly lethal disease (part of why there were so many nobel prizes given out for insulin research)
I don't disagree.

> If you actually care about memory safety ... then why not use an actual memory-safe language?

Many teams are stuck with established codebases that they can't afford to re-write entirely from scratch.

I think the proposal in the article is an interesting point on a continuum of mitigations for C, spanning from the really weak and/or hacky (but cheap/easy) all the way up to safe systems languages like Rust and Ivory. Other points on this continuum include Cyclone [1], SAFECode [2], and the fat pointer approach in Cello [3].

[1] http://cyclone.thelanguage.org/

[2] http://safecode.cs.illinois.edu/index.html

[3] http://libcello.org/learn/a-fat-pointer-library
This is madness. I recently fell off the second rung of a ladder onto concrete (shoe got caught), and even that hurt, third or fourth rung might have been a broken arm.

Falling from this thing is guaranteed serious injury or even death. It would be very easy to add some kind of simple automatic kickstand in case of tipping over laterally.
Seeking fulfillment through intentional discomfort
I don't know what algorithm they used to select him. But united does have a procedure based on ticket class, time of check-in and other parameters.
This reminds me of a story by Wynette Barton:

"When my son was four or five years old, he asked one of those interminable questions that children ask: 'Why does the sky get dark at night?'

"Eager to increase his understanding, I put a lamp in the middle of the floor to act as the sun, got down the world globe, and used a tennis ball for the moon. Then I walked around the "sun", carrying the globe and turning it, explaining how we are suspended in space, constantly moving. It was the universe in a nutshell - sun, earth, moon, stars, seasons.

"My son watched the production with silent, squint-eyed attention. When I finished, he said to me, 'You don't expect me to believe that, do you?'"

For a lot of people, the supernatural explanation is the simpler explanation. The so-called "scientific" (or more properly Scientistic[1] or maybe Naturalistic[2]) world view rests on explanation after explanation that takes years and years of education to even understand, much less accept.

[1] - https://en.wikipedia.org/wiki/Scientism

[2] - https://en.wikipedia.org/wiki/Naturalism_%28philosophy%29
"Hey Siri, erase all contents and settings." should definitely go into a TV/radio/YouTube ad. ;)
Thank you anyway for your efforts; I hope you interpret this as a validation of your having correctly identified a sorely-needed tool.
So laws evaporate for the sake of corporate efficiency? This kind of deference to authority and lack of empathy is alarming me.
No, the advantage is that the update process is in your control not your suppliers. Which was the whole point of the article if you'd care to read it.

You can disagree with the utility of having that control yourself vs having it controlled by your supplier. If people here believe that utility to be not worthwhile from their direct experience - that's something I'd really like to hear because I'd likely learn something from it.

I'm not sure I learn much from your response.
Pressure doesn't rely on most people.

Even a vocal minority can have a profound impact on things. Look at how people got mobilized to let their representatives know they didn't like the ACA repeal bill which did end up having an effect on congressional members. Or more recently, how groups mobilized and pushed an ad boycott of Bill O'Reilly. There's even companies who opted to drop Ivanka Trump's line of fashion because of public outcry.
Moderate success is usually earned: hard work + talent. Breakout success typically requires a lot of luck on top of everything else. The difference between a successful career and that billion dollar exit mostly comes down to timing.
If you structure things so you can change or revert your decisions later, it is also much cheaper to start executing them with not that much information.

Not always possible, of course, but once you start thinking in those terms, you can get good mileage out of that habit.
Classic. This could be the script for one of those animated videos that https://www.youtube.com/user/gar1t did.

Like the "Mongodb is web scale" one.
I mean honestly Electron running React-CLI with React-Arg-Router is the only way to write a cross platform CLI tools these days.
Bear in mind that "rocket science" is proverbial for a reason. Are you familiar with the THAAD (https://en.wikipedia.org/wiki/Terminal_High_Altitude_Area_De...)? What convinced me that it wasn't just corporate welfare was the part where one of the tests failed because the target rocket exploded in flight, so the THAAD rocket couldn't even be launched.

In general, SpaceX seems to be much more competent and much better-run than Tesla. My guess from thousands of miles away is that Musk is just temperamentally better suited to space than to cars. Space exploration is in its infancy, still a bleeding-edge field where every product is more or less a one-off, while car manufacturing is mostly about logistics, quality control, and the effective management of routine in general. I get the impression that SpaceX is the most efficient of all companies and agencies involved in space, even though Tesla is a strikingly inept car manufacturer; I just hope Tesla doesn't drag SpaceX down with it into bankruptcy...
Long term, yeah. The ensuing nuclear winter would effect the entire planet much more than was thought in the early Cold War [1], which would absolutely affect food production. Add in the fallout, and your long-term forecast looks pretty bad.

[1] - https://arxiv.org/pdf/1505.00246.pdf
AutoDraw – Fast drawing for everyone
How many hours would you actually be logged in? In an 8 hour work day, I'm lucky to spend 5 actually typing code or waiting for a build. 5/24 * monthly "always on" rate might make the constant factors work.

As an aside, I think the whole premise is flawed, assuming you are more productive if you admin your own box. Spend $500-$1000 on something you can shove under your desk, and rdp/ssh/vnc to that.

I think the price/perf on that still murders the cloud, though I don't really care, since I like my privacy and haven't run the numbers recently.
https://www.arpnetworks.com/
"I wanted to get my consulting company into PCI auditing and you need certifications to do that. One problem with the certifications is they aren't actually skill based."

http://www.rsync.net/resources/regulatory/pci.html
"pretty much everyone dies eventually, while rats, maggots, and the class system endure"

Well written. Love that the author groups these three. The class system and rats are the last to leave the UK.
I has home depot as well, if you have one nearby. You are right, it is integrating many stores.
We find that http://browserbench.org/Speedometer/ -- which is what v8 is optimizing against now -- is extremely close to real world Discourse (EmberJS, Glimmer) performance.

We always wondered why Android was so crazy ridiculously slow at our real world JS vs. iOS starting in late 2013 onward.. getting worse and worse over 2014 and 2015.. and "gee, we optimized for the wrong thing aka Octane" was a big part of that.

http://benediktmeurer.de/2016/12/16/the-truth-about-traditio...

You can read more about the history at https://meta.discourse.org/t/the-state-of-javascript-on-andr...
if you interview lottery winners, you're not going to get very good advice.
Wait, each client does its own round robin (if you have three servers, I will hit 1 then 2 then 3)? Is that common?
I'd say closed loop ish system. It uses the CGM data to make temp-basal adjustments. It's not like a full autopilot or anything.

Since modern fast acting insulin still takes time to kick in, you need to dose to cover carbs about 15 minutes before eating. So there will always be some level of involvement of you want to avoid actually going high and then coming back down (proactive vs reactive).

Don't get me wrong, it's great to know you're going to wake up at your target even if you screwed up your dinner-time bolus a bit.

That is, assuming the CGM is functioning properly. My experience with the Dexcom G4 with my kids was much less than stellar. Lots of '???' readings or having it off by over 50 points, extremely painful insertions and being mostly useless the first 24 hours and then sensors failing long before 7 days was the norm and ultimately we abandoned it.

Anxiously waiting for the auto-inserting CGM to come out of trials.
Thanks keville - I've poured my heart into this on nights and weekends after I'm done with my day job for a long time now but what you say is so true - hopefully we'll get access to a more robust solution compared to my modest hacks.
Rewriting a bunch of stuff to achieve a combination of less information leakage and better rate limiting, I think.

I did briefly attempt to understand the relevant chunk of C code, but my eyes crossed and I developed a headache.

So sorry if that's a bit vague.
A great talk from Strange Loop 2016 on this topic:

"Point-Free or Die: Tacit Programming in Haskell and Beyond" by Amar Shah
https://www.youtube.com/watch?v=seVSlKazsNk
Sure, but I'm not commenting in the discussion on the linked article, I'm commenting here, for which the factors I'm mentioning are relevant to lots of people. If you work at a top tier tech company and live reasonably close to work, working from home doesn't have much draw except possibly if your open office work environment is noisy and distracting.
I find that amazing that people manage to forget AA is way worse than United on so many levels.
Cool story.
You are simply mistaken. United should have handled this before boarding the passengers--when they would have had a legal right to arbitrarily deny boarding.

United screwed up by failing to follow the correct procedures, and the compounded that failure by sending security personnel onto the plane to manhandle their customers.
You're right, there's no silver bullet. But it seems like some people have the mindset of "Since everything is bad and (to some extent), there's no point in trying to improve."
Do wonder how it would look if we replaced the B with that new Zero W.
FFS! HTTPS please! It's a browser extension. No one wants MitM extension shit downloading onto their device.

https://letsencrypt.org/

https://www.geekytidbits.com/easy-https-with-cloudflare/
The client doesn't do it. You put your front ends behind a load balancer like an ELB, or use a reverse proxy like Nginx.

Edit: And yes, round robin is the most commonly used load distribution technique, and works very well assuming each request has a roughly equivalent unit of work cost.
I've seen a few people mention using check or debit cards and that is almost always a bad idea. You lose the fraud protection and you are giving vendors and employees direct access to your checking account.

For your particular situation I would probably just open a credit card account with whoever your startup banks with. Beyond that I would probably explore do the following (in rough order depending on your company size):

1. Using Personal Guarantee: If you are an early startup you probably cant get easily get a business card without a personal guarantee. In this case its really up to the founding team's credit worthiness and I would recommend Amex/OPEN, Capital One Spark, and Chase Ink. All of these will probably require a personal guarantee to start but these particular ones won't go on your personal credit report (Some other cards may).

2. Establishing Credit: Create a Dunn and Bradstreet account, update it, and make sure you have a good web presence. The easiest business credit accounts to establish are UPS, Fedex, Amazon, Staples/OfficeMax/Depot, Frys, Uline. Open them and pay your bills on time (and in full). This will all boost your D&B Paydex score even if you are only making small purchases from each.

3. Utilize your Bank: In SF Wells Fargo is actually quite good for a small startup, SVB is good once you have funding, and US Bank/First Republic are good alternatives. This is your best bet for first major business line of credit (LOC). A business LOC is almost like a credit card and could even have better terms for repayment. If and how you should actually use it depends on your company and your finances, however if you get one without a personal guarantee they will probably limit your expenses to business expenses.

4. Get Credit without PGs(personal guarantees): Once you are seasoned for around 3-9 months you can start looking to getting credit without a personal guarantee. Beyond your bank I would look at US Bank, Amazon, Amex Business, Cap One Spark. If by that time you have funding and more substantial bank deposits approval will be much easier.
> so had American or Southwest got to the point of needed to removing a non-co-operative passenger (it seems that point is less likely to occur) it would probably of been the same police team that actioned it

The process is quite different with other airlines

https://www.wsj.com/articles/how-united-and-delta-manage-ove...

Relevant quote:

"Last year, Delta had the highest rate of people without seats for flights by far and United was No. 2. But they handled those customers differently, according to DOT data. Delta was the most generous airline in voluntary compensation. On Delta, 100 times as many customers voluntarily took vouchers as those who were involuntarily denied boarding. United had 17 times as many volunteers as customers involuntarily denied boarding: 62,895 volunteers and 3,765 forcibly bumped."
> After more than half a century of living under a trade embargo, many Cubans have grown accustomed to shortages of basic household goods

Are there countries other than the U.S. with an embargo against Cuba? What's stopping them from trading with China or Mexico or Canada or the E.U. countries for basic household goods?
Thank you for being willing to work with them and not just rolling your own version of Phantomjs. I hope they respond positively to your inquiry
Cuda -> OpenCL transpiler:

https://github.com/cuda-on-cl/cuda-on-cl
Grew up in a household with an adult-onset type-1 diabetic whom had little remaining biological control, either high or low:

Interstitial monitoring has been "around the corner" for 30 years.

Let's hope some shop can deliver a reasonably-priced, accurate-enough interstitial or tiny implantable device that can replace daily/routine blood sampling.
That policy only applies before the passengers have boarded the plane.
he [Bezos] notes, when you disagree and commit, it's not about holding an "I-told-you-so" over other people's heads. It's a chance for people to hear an opposing point of view but to move ahead with action

I actually can't see it as anything other than a (potential) "I-told-you-so." Why are you specifically highlighting that you disagree, if you are then giving the go-ahead? You are the boss. If you approve something, ultimately it's your responsibility.

If you really trusted the person you would give them full authority on the decision without dropping your own agreement or disagreement into the mix.
How did you do this? I spend almost every waking moment fantasizing about ending my life
> Now, one approach is to make a struct buffer {char ptr; size_t len;}.

A "fat" pointer. That's essentially what the Cello project does [1]. The author has pulled together some crazy hacks to make this approach accessible in C. Including, apparently his own version of many standard library routines. Crazy, but very interesting. Discussed on HN yesterday/today: https://news.ycombinator.com/item?id=14091630

[1] http://libcello.org/learn/a-fat-pointer-library
My bus ride was an hour, riding a bike brought it down to half that [a], plus I got free fitness gains. Of course you trade the time gained for sweatiness etc. I don't know if that's an option for you, but just putting it out there.

[a] I only generalise because it's true for almost any chosen route in my town: bus time = 2x bike time = 4x driving time.