skysight-inc/HackerNews huggingface dataset:
>It's worth pointing out that the US model of taxation (US citizens pay taxes on income earned anywhere in the world), as much as people complain about it, completely negates the value in offshore income a la Panama papers

What's different about the US model is that worldwide income is taxed while not living in the US. So if you are an American who permanently lives and works in Germany, for example, the American government entitles itself to tax the money you earn in Germany (*in principle, at least; due to exemptions you've really got to be earning $$$$ to pay taxes twice).

Most countries as far as I'm aware would tax their residents based on income earned abroad, provided they are actually residing in said country. The difference is taxation by citizenship vs. taxation by residence.
>> Can we focus on renewables and stop trying to sell people hazardous waste that can last for millenia?

> No one I know is opposed to renewable energy, but advocates really do everybody a disservice when they try to argue that an intermittent power source without storage is a reasonable replacement for base load power. This comic illustrates the problem: http://www.smbc-comics.com/comic/capacity

The comic is a bit disingenious as it implies that all renewables are intermittent.

But many renewable energy sources are base load as well, e.g. hydro or wind. Yes, they have variations, but so does the load -- from the perspective of power grid management there's nothing new.

In fact this is part of the problem: renewables and nuclear (or coal) are competing for base load. If we build a nuclear plant, we need to run it for 50 years for the investment to make sense. This means that it will economically and politically impede the installation of e.g. wind power for 50 years.
Everyone is forgetting that Google can provide such tool because of Chrome (60% market share); they don't need to track you. They already are.
Google it's tightening it's grip on the web. Yesterday the announced that they will apply the Better Ad Standard by 2018. They said they'll ban intrusive ads that block the user from the content, ads that play sound automatically, and flashy ads... Now "flashy" is so vague.
I think he means that the authentication process itself is stateless, as you don't need to store any usernames or passwords. I don't think you even need to store the nonce since it will still be on the page by the time the authentication process is complete.
>it would be nice if CPU intensive algorithms could be written in it

It would be nicer if instead of trying to turn python into something it is not (a language for writing CPU intensive tasks), it was made better at what it is (glue code).

It would be especially nice if there were tighter, more seamless integration between python and rust so that hot paths in python can easily be migrated to rust.
Large late at Startbuck in London is £3.4 - which is close to 5 bucks I suppose. If you live in SF, London, NY, 5 bucks for a coffee does not seem outrageous.
SQL Server Dynamic Data Masking in Action
I really think a much better system would be for websites to adopt GNU Taler, and allow people to conduct micropayments using digital cash. The system is about as seamless as Flattr, except that the website can actually charge an amount rather than a fraction.

But, most importantly, Flattr guarantees the anonymity of consumers' transactions. So the big G won't have a log of what websites you paid to access.
SAP Hybris (www.hybris.com) | Java Microservices developers AND Frontend developers | Maidenhead/London UK | Fulltime | Onsite

Looking for Java developers (several positions open) with Microservices experience as well as frontend devs.

Great team and good atmosphere (think a startup atmosphere but with the backing of a corporate company), great products, great benefits and salary.

https://jobs.sap.com/job/Maidenhead-Software-Engineer-Job-LN...

https://jobs.sap.com/job/Maidenhead-Frontend-Software-Develo...
https://www.wsj.com/articles/google-plans-ad-blocking-featur...

https://techcrunch.com/2017/04/19/google-said-to-be-planning...
"I've just inherited a legacy software system and I've been hunting down every podcast episode I can related to handling legacy projects holistically and there is a dearth of material."

Might I suggest the book "Working effectively with legacy code" from Michael Feathers.
ZapWorks Wins Best Authoring and Publishing Tool  AWE 2017
Are you sure that's how CRE lending works? It's definitely not how residential investment loans work. There's no mechanism for a lender to periodically check your leases and decide that they're going to call your loan because you're charging less. And if there was, why wouldn't they be terrified that you're charging $0?
I personally couldn't care less, but it is contrary to HN guidelines:

"Please don't sign comments; they're already signed with your username. If other users want to learn more about you, they can click on it to see your profile."

https://news.ycombinator.com/newsguidelines.html
I vaguely remember ATP from GCSE biology - and in my head it's related to energy production in cells... I'm curious whether that's merely poor memory or not
Mine experience might not suit other's, but I kind of find an echo with skimming through product flyers and catalogs, aka junk mails in this case. This might partly be due to I am in academy, where quick development of new equipments often could help cut cost and speedup studies. This is why I still signup junk emails from those companies, ask for paper copies of catalog, and take some time read those product promotion pages of academic journals.
What I read from the article was that high-level models are more than just compression - a device for a La-Place-demon to cut on computation time.

But I also have a strong suspicion that this is not what they meant; maybe someone can clarify? In the other case (my interpretation being in line with the intent of the authors): How do they justify this?
IIRC the female developer stats were in the double-digits, varying somewhere like 20-40%. A 6% rate is therefore unrepresentative.
As an Indian, I am with Trump with this one. Per capita consumption would be the wrong way to look at it at this stage. If these people really cared about the environment they should have been promoting nuclear or promoting less(zero) meat consumption. India and China should have the same targets as everyone else. We don't need concession to set up coal plants. Removing restrictions on nuclear tech would be better.
Guilty of causing ‘Marketing Fatigue’? Fix it before it sabotages your business
FB is "where your friends are" not due to an inherent physical limitation, as in the connected hardware that network effects originally described

No, network effects was never about the hardware, it was a formula which valued a network by the number of connections on it.

Networks become more valuable the more connections you have.

The content is often orthogonal. See Snapchat, where the content is literally thrown away,
Mirror? Not available in Serbia, for some reason.
In that case I'd recommend "Quantum Mechanics for Scientists and Engineers" by D. Miller.
When I (a trained computer scientist) had to pick up a bit of QM, I first watched through Susskind's videos (saved my ass) and then took a lecture based on the aforementioned book.
Eat healthier with ZERO effort (not a diet)
This is amazing. One-man operation defeats venture capital backed product. I wonder how many paying users does pinboard have?
Montana Protects Communications Privacy, but Allows Gag Orders
Is FIDO something that I can use instead of implementing email+password register/validate_email/change_password/reset_password/change_email over and over again? Is it finally here, what Persona promised us?
To be "fair", on his divorce lawsuit, he said InfoWars was a character he plays, just like Colbert. That's because his wife presented his rants as evidence to get full custody of their children.
That depends on your university, I'm not in the US so all of my modules are focused on what would be called my "major" (which is Theoretical Physics, at least that's the name of the course).

"Mechanics" is a second year undergraduate textbook here. We only used it during the first semester, and didn't have a set textbook for the second. Goldstein and Arnol'd were favourites.

"The Classical Theory of Fields", "Quantum Mechanics" and "Statistical Physics" are all recommended reading in third year, but they're not the main textbooks for their modules.
Are you saying you don't believe Hillary drags children under their bed and eats them?
This looks great if you're using subscriptions, and put all data you can into Stripe. For most customers though who a) probably don't use subscriptions, and b) probably just make simple charges and don't put all the data they can into Stripe, I can't see much value here.

Certainly for us, ChartIO backed by our own database is far more useful, particularly as we want to join on account data, preferences, registration details, NPS data, etc, which is all in our database.
It's definitely not stateless in terms of web sessions. To implement it you'd need a cache of recently-validated nonces, which actually opens up an attack vector as far as I can tell:

1. User reaches login page

~~~ attacker MITMs the nonce (the hard part) ~~~

2. Scan QR, validate that nonce with a POST from the app.
It's now in the cache waiting for the login page to follow through.

~~~ attacker hits login button with the same nonce ~~~

3. User hits the login button, and depending on implementation, is either
denied access as nonce has been deleted from the cache, or logs in and
doesn't notice the attacker at all.

This is, incidentally, exactly what FIDO U2F was designed to avoid. Using a token generator has this problem, where MITM-ing the 6-digit code gives an attacker a <30 second window to log in. On the other hand, FIDO U2F is actually stateless, and the challenge nonce and its validity never has to be kept in a cache at all. You just send back the challenge with the signed response, and if your device did it, great. What's more, FIDO prevents MITM attacks that attempt to intermediate your session by showing you a different TLS certificate, by ensuring that the server's TLS channel ID is the same as the one seen in the browser. SQRL cannot do this.
PHP Developer for FinTech in Cologne, Germany – ONSITE Preferred, REMOTE Ok,
www.sapaso.de

sapaso is changing the way recurring payments are handled in non-digitized firms. We take on the gigantic "offline" market of Gyms, Schools, Electricity, Rent, etc. were Software Know-How is scarce and process efficiency low. We digitize the payment process as well as the communication to customers while preventing defaults for our clients.
The focus of our PHP work are APIs, Payment Process flows, security and credit scoring.

Recruiting process: phone interview (general) - onsite/ skype interview (technical) - offer
The problem with dang's wish stated in the linked thread is that the goal is most likely unattainable.

While the community as a whole has a collective memory, that does not mean that every participant has the sum of all that experience and knowledge, because individuals constantly join and leave the community.

This means that for some parts of the community, every new post (in this case by Wolfram) is one of "The first few times this came up" when it was "worth noting (and I confess to laughing at the same parodies that everyone else did)".

Because of the nature of Hacker News (the focus on individual stories (links)) the only way for new members of the community to be "nudged in the right direction", as it were, is to come upon one of these comment sections and either see the problem for themselves or see it called out (as here).
bitcoin at the moment supports 7 transactions a second.. that seems quite illiquid
What I think they mean by stateless is that the private key used for the website is derived from the master private key and the domain name of the website. So the only state to maintain is the master private key. There is no need to maintain a list of what key was used for what website.
Sneakers Made Using Algae
Should start a REPL. The `main` function looks like this:

main(){
C s[99];
while(gets(s))
pr(ex(wd(s)));
}

which is a very direct expression of read-execute-print-loop.
We can argue all we want, but it is clear that in 2016, blocking one Twitter account could alter the course of history.
J's commercially aligned cousin, K, is routinely encountered in financial/ trading backends. Part of job security, I presume.

I know some K, but I am not a particular fan of it. I admire the efficiency, though.
Per capita is the wrong way to look at it. As someone living in India we don't want us to aspire for that kind of emissions. I belive we should start with a freeze on top ten countries. India can grow in other ways.
Prime example: oracle
Under cross-examination, he spoke not only about George Soros and
overly potent marijuana, but also his taste for zebra meat and canned
exotic game hunts, and confirmed that a big bowl of hot Texas chili
caused him to forget details about his kids’ lives, which he’d referenced in his deposition.

Source: http://www.thedailybeast.com/infowars-alex-jones-loses-custo...
Why Do Mosquitoes Bite Some People More Than Others?
This is truly awesome! But I miss a single source that has everything users and developers need to know.
For SQRL to become mainstraim this is absolutely necessary.
Right now there is https://www.grc.com/sqrl/sqrl.htm (1), https://sqrl.pl/ (2) and https://github.com/vRallev/SQRL-Protocol (3) and some other sites.
(1) looks a bit out-of-date in terms of design and has no clear instructions how to integrate it into own websites.
(2) links to (1)
(3) could be more.

I am looking for a webpage like this: http://swagger.io/
And this: https://github.com/swagger-api

Besides, it would be awesome if browser plugins could make SQRL available for sites that don't support SQRL yet.

I haven't read the protocol specs yet - does SQRL allow metadata exchange between the authenticating client app and the website?
Especially for registrations this might be very useful. For example, the client could suggest a TTL for the session or provide an email address the website can use to contact the user.
> but someone is providing the service in the first place

And I'm paying for that too with my ISP charges. Why should I pay for the data usage incurred by viewing an ad?
Flipped Iceberg (2014)
Show HN: Startup Intelligence platform to help your business grow
Brutalist UX
I2P Summer Dev 2017: Performance Improvements
Single bungling IT engineer to blame for BA's £150M global meltdown
Give us nuclear, remove the restrictions on export.
Show HN: Manifesto Matcher – 'Tinder' for the UK Election Policies
Thanks, that's a good one!
Cancelled already:

https://en.wikipedia.org/wiki/Google_Contributor

Google Contributor was a program run by Google that allowed users in the Google Network of content sites to view the websites without any advertisements that are administered, sorted, and maintained by Google.

The program started with prominent websites, like The Onion and Mashable among others, to test this service. After November 2015, the program opened up to any publisher who displayed ads on their websites through Google AdSense without requiring any sign-on from publishers.

Since November 2015, the program was available for everyone in the United States. Google Contributor stopped accepting new registrations after December 2016 in preparation for a new version launch in early 2017.[1] On January 17th, Google Contributor was shut down. As of January 17, 2017 8:40 AM no replacement had been announced.
as a software developer it really makes me unhappy that this list goes from 1-10 and not from 0-9 ;)
We're hackers, too busy helping extract wealth from the population as efficiently as possible.
The Tools and the Tribute – Bruce Sterling
Let me point out that many people are not convinced that global warming is real, let alone related to human activity. You can easily educate yourself about this issue if you use the internet.
India already looks like a dump, we need a freeze.
Is the issue here really about problem solving, or about having to account for your time in excessively fine-grained increments? Given a coarser-grained model of dividing up tasks, wouldn't it be easier to solve the segfault and move on?
Reddit as a whole, sure.

The front page itself though? I don't know how others use it, but my frontpage is populated by my favourite subreddits, which are luckily mostly free of politics.

TBH I have no idea how the majority use Reddit, but don't confuse the front page with all of Reddit.

(As a side note, yesterday I went on /r/The_Donald out of morbid curiosity. I'm not sure what I expected, but it was rather shocking).
Note: This was first published in 2013 (or maybe even earlier).

It hasn't gained traction since, so it seems unlikely it ever will.
Lets all waste time virtue-signalling about things we have no experience or expertise in, that are dominated by charismatic dummies we can barely communicate with, and that we'll have no measurable impact on!

Or we can keep doing what we can do well and has actually, fundamentally changed the world for the better and made us rich.
It's a tiny interpreter. You can create vectors, add them, concatenate them, store them to variables, count their lengths, and so on. An example session:

x=~5
5
0 1 2 3 4
y=x,x
10
0 1 2 3 4 0 1 2 3 4
x+y
10
0 2 4 6 8 0 1 2 3 4

To understand the source, the key are the arrays `C vt[]`, `A(vd[])()`, and `A(vm[])()`, which maps the verb token to the dyads and monads respectively. `V1` functions are monads, `V2` are dyads.
It may be difficult to improve the world if you neglect politics.
I like the technology and pricing model, but I don't think that it is being put to its best use. I think a better use would be for news sites that require a login to view articles. At present I usually just go without viewing many as I can't afford to sign up to 10 different sites where I might view a couple of articles each week. If I could make a one off payment per article then I'd be all over it.
Rust Performance Pitfalls
The guy who will discovery satiety without calories will be millionaire in a week.
Ugh. Off the high horse, please. I'm not disagreeing with the author.

https://www.youtube.com/watch?v=o7a7ZAqWBIs&t=79 shows a butterfly manoeuvring in flight such that it stretches its wings forward. My statement was simply that if a butterfly is ever going to have its wings forward, it will be while it is in flight. Stop looking for drama where there isn't any.
We have poor People, country itself is quite rich. Both of them are top ten in military spending.
another hard fork coming? or maybe hard forks only allowed when founders of the coin are involved in the transaction?
No. FIDO 1.0 and FIDO 1.1 are more narrow in scope. This is not a federated login system. These are point-to-point authentication protocols that don't involve any third party.

It is a replacement specifically to replace password login and multiple second factor solutions. It will make it far easier to implement registration and authentication but not radically, you still have to do it.

It will also not replace your recovery flow. How to handle recovery is still up to you.

FIDO 2.0 will add some notion of tying together different authentications but still not solve the problem of federation (as far as I know).

For Federation OpenId Connect is still the best, if not optimal solution.
There is in fact a ratchet mechanism in it. It's not a useless accord at all and those who think they can just pretend they will follow it may be in for a shock. Especially once enough signatories give it momentum.

https://www.carbonbrief.org/explainer-the-ratchet-mechanism-...
Lets say, theoretically they block that one account. What would be twitter's recourse if the POTUS decides to Gitmo their CEO/developers/prod engineers in retaliation.
How to be rich fast
Check this out - it actually has implementations - https://securelogin.pw/
Based off a quick glance through Netflix's financial reporting, I'm not thinking they sell your data (https://ir.netflix.com/financials.cfm?CategoryID=282) Although of course they use it internally.
Data Scientist/Quant | MarketInvoice | London, UK (we've hired two people from HN)

https://www.marketinvoice.com/

We're looking to hire an experienced data scientist who can take the lead in build out our credit scoring algorithms.
Ideally we'd love someone with some experience in credit scoring but we're open to candidates with machine learning backgrounds who have a strong interest in finance (either from past work experience or otherwise).

This is a role that requires both commercial nous as well as technical skills.

MarketInvoice is the VC-backed peer-to-peer fintech platform that’s building the modern backbone of the economy. Imagine you’re a young company who’s just won a major contract but your client wants to pay you on 90 day terms when you need to pay your staff and suppliers upfront. That’s where we step in. Our platform uses the peer-to-peer approach to provide the day-to-day operational financing for companies as varied as mobile development agencies, food brands and construction firms.

We’re the largest startup in our space worldwide; last month we finance over £50m in deals. It's a £100bn/year market which is dominated by legacy lenders and banks with complex processes and shady practices. We’re bringing transparency and simplicity to the market.

All roles have equity options with low strike price and employee friendly terms.

Reach me at i.ghory@marketinvoice.com
If it's really CPU intensive, you can always fork.
> I wonder if eventually ad companies will just host the content themselves.

They are already doing it: Google AMP, Facebook Instant Pages.
Except 1Password - unless you want to use it through the browser only which is no where near as convenient.
Authorize.Net payment gateway for WooComemrce
I'm sad the posts about USA withdrawing from the Paris deal all got purged fro the front page yesterday. Yes, some political issues aren't relevant on HN, but this I think was.

Edit: Kinda ironic that this post is now having the title [FLAGGED] and being dropped from the fp as well. Edit2: Still flagged but back up, interesting
I don't know what kind of future you're talking about. U2F gained 0 adoption and are doomed. What did they expect with $19 sticks that require USB?
Because we will destroy the planet. We can't have everyone living at that level.
Dutch households trial using servers to heat their showers for free
The system should have been designed so the engineer could not have caused this. Thus its a system design fault.
Right. But are you comfortable with the fact that not all hackers will be on the same political side?

I wouldn't go as far as voting for Trump, but I am one of those crazy ultra-libertarians you occasionally encounter (I support tax cuts AND free migration). There are some well-educated people, even some with PhDs, who actually _did_ vote for Trump (I know a few), and most certainly, there are many Trump supporters right here on HN. Will you be comfortable with that, enabling political discourse?

Everyone wants to change the world, but not everyone is sharing your direction of change.
A really helpful edit would be the V1 and V2 macro expansions; then it's fairly straightforward C with an odd naming scheme.
Comcast appears to be blocking archive.org
>a small portion is kept by Google to cover the cost of running the service

This is incredibly cheeky.
Your source for [1] says that up to 4000 people may die, in total, not per year.
I read it as: Blocking that one account would have blocked Trump from becoming president.
EDIT: Please, before you get fixated on 'say', consider that perl already has 'print'. So, it has "print" and "say" - where "print" is "print" and "say" is "println".
Things learned in 5 years of Journalism++