skysight-inc/HackerNews huggingface dataset:
It looks like mainly kernel and drivers were leaked. WINE is emulating the Win32, which is distinct from the Windows NT kernel & drivers - kind of like how the Linux API is distinct from the Windows NT kernel, despite Windows supporting it.

This might be a boon for the ReactOS folks, who are trying to implement the NT kernel, except for seeing the Windows source code automatically disqualifies you from being a contributor.
Thinking about the recent HN link to the article about the toxicity of photoresisters. Would love to know the environmental / workplace toxicity ramifications (or if it’s just business as usual...)
neither, serious, why?

You seem to comment frequently here on HN where I consider most users to be above average in the level of intelligent replies so your trolling seems quite out of place.
Anecdata time - my tinnitus is way worse when my shoulders/upper back are tensed up. If I can get those to calm down, so does the tinnitus. The normal level is simply drowned out most of the time, but when I'm tense, I can "hear" it quite clearly and loudly.

The "head thumping" thing from a few months back also grants a short reprieve from normal levels of tinnitus, but it's definitely a temporary thing. It also appears to have no triggers that relate to sound, and is not associated with abnormal hearing loss so far (I've lost more high frequencies than average for my age, but nothing between that threshold and ~25hz).
Frustratingly, by reading my emails Google should know that I've bought something and so don't need ads about it.

But hey, they don't seem to have used that data.
The PDP-10's register set occupied the first 16 memory address locations, although they were not implemented as memory.

This made instructions simpler, as register instructions did not need a distinct addressing mode.
I don't handle it, as it's always hard, but it's easier to take a loss if you go into a trade knowing what could invalidate your thesis. This is either from further research or the price action. Once you can admit the jig is up, and you are convinced the price can fall further, then it's easier to cut the loss. Then, it feels like you've made the right decision and you can move on. A kind of moral victory.
> The quality of Atom extensions is good

That's debatable for the vast majority of them. "Clearly" is a strong word here. And certainly, regardless of how "good" they are, almost none are worth the hit in performance in the most basic of tasks for me.
I know that, with Racket's move to the Chez Scheme interpreter, bits of core Racket C code are getting rewritten in Racket (https://groups.google.com/forum/#!msg/racket-dev/2BV3ElyfF8Y...). I wonder if that might enable Racket to ultimately be able to run on other Schemes' infrastructure.
http://www.bbc.com/news/technology-40366823

Dead man's switch?
Hmmm. Yeah maybe 85db is pretty low. There is some threshold that I feel pretty confident about, but I don't know what number it actually is. Looking here: http://www.webmd.com/brain/tc/harmful-noise-levels-topic-ove... I suspect it's more likely 110db.

I'm also maybe grumpier because I went to a show last night and I've had weird hearing all morning. :/
Building profiles of senders can be necessary, e.g., for detecting spammer accounts.

Also, email is transmitted in plain text. Sending an email is more like shouting to your friends in the street, rather than putting a letter into an envelope mailed to the recipient. Thus, I don't think an explicit consent is needed.

That said, I understand that fair use of such information is a concern.
Thank you Niniane. Your courage is so appreciated.
People date in the workplace all the time, so I don't think your rules about "professional situations" are generally accepted.

I also reject the notion of "position of power" just because he is a VC. Nobody is forced to take his money. You could just as well say the applying women are in a position of power because the VC desperately needs somebody to invest in. I guess a startup should avoid seeking investments where the investor is "in a position of power", anyway.

I am also not justifying his behavior, obviously he made mistakes. But I reject the immediate interpretation of "man abusing his power to pressure women into sex".

The "boundaries" talk is also not really helpful - at some point, somebody has to make a move. If their estimate of the situation is correct, they are not "crossing boundaries". Otherwise they are crossing boundaries and need to withdraw.

Grabbing a knee under the table is of course not a good first move, but we might be missing context.
Indeed most major roads have adjacent bike paths. Certainly not all though. No highways do, and there are some other roads where it doesn't make sense.

Cycling on highways is a total no-go here. I've never heard of it happening, and I'd expect the police to be called whenever someone sees it.

You're right on the narrow streets and low speeds. That is a much bigger cultural / civil-engineering thing. It makes me wonder how cycling infrastructure is done in Rotterdam. It's city centre needed to be completely rebuild after WW2. The result is regarded by some as ugly or 'american'. Perhaps this has affected cycling, or perhaps that was taken into account in the rebuild.
Namecoin Resolution for Tor
> that's still sexual harassment by the letter of the law and slimy as hell every other way.

IANAL, but legally it's not sexual harassment because they don't work at the same company.

Something is only sexual harassment in two cases: 1) a supervisor offers something to a subordinate in exchange for sexual favors 2) a company is found to have created a hostile work environment. In both cases it's the company that's liable, not the person or people doing the harassment. There may be some extra rules that exist in individual states, but this is the general idea.

Certainly it's bad behavior, but because there isn't any real power imbalance between entrepreneurs and VCs the problem can mostly be dealt with socially (as has happened here) rather than being a situation that requires some specific legal intervention. (Or at least that's the general legal theory.)
Well, for what it's worth, that is an impressive looking game from a solo developer. Looks better than a number of (enjoyable) games by small teams I can think of. Tho I suppose that's a small solace, against the low sales numbers.
Throwaway account for obvious reasons. Does anyone have a link to the leaked data?

At this point avoiding links is pointless as the source code will be essentially public knowledge in matter of days/weeks. Damage control is the only strategy left. The sooner security researchers outside Microsoft can start analyzing and reporting vulnerabilities, the better.
A table starts out with zero rights, except to the user who made the table. Another user cannot even see its name.

You might first make database views, and grant only those to users, not granting any user rights to a table. PostgreSQL lets you run an update to a view and then translates it to an update on the table. So reads and writes on a view would both work.

PostgreSQL now has security by column and row. So you could do it that way too.
>...Further, not being static does not mean it was ever meaningfully increased.

The tax burden has basically gone opposite of what you imply. For example, the top 10% paid 49% of taxes in 1980 and paid 70% in 2014. (http://www.ntu.org/foundation/page/who-pays-income-taxes) The "top marginal rate" means very little by itself. What matters is the effective rate which takes into account the credits/deductions that are allowed, the other lower tax rates, etc.

>...Compare US GDP growth and a high top marginal rate seems to promote growth,

Those high marginal rates of the 1950's did not bring in some giant windfall to the government or somehow promote growth of GDP. Most economists are opposed to very high marginal tax rates due to the inefficiencies they introduce - compensation being moved to non-salary, money wasted on CPAs, lawyers and lobbying congress for special deductions, dead weight losses for economic activity that isn't done, etc.
Yeah it's all inevitable and we are just powerless peons in the face of the purely efficient and all knowing machine.

That's certainly the bullshit narrative Google wants you to believe.
https://ocw.mit.edu/courses/mathematics/18-098-street-fighti...
This works until the technique gets popularized, then it won't anymore.
I'm not seeing the issue here.

This kind of system is extremely common on the backend---Python's Django and Ruby on Rails, to name a few frameworks follow the practice of templates being given data and simply acting upon it.

Since these are dynamically typed languages, there's no IDE typing support in the template.

There's just testing.

As someone who uses Django regularly, I can say there's a huge swatch of territory between "small examples" and "large projects".

That territory can easily cover teams of 19, and multimillion dollar projects.
Explore the frontier of AI
Right. If you run on assumptions with what you think is true, or that you just assume you both don't need to communicate, then things will probably be really toxic! That's not really what I hoped to express though. Or, I don't mean to say that we can ignore responsibility and just "do what feels good" until it doesn't.

Would it be possible to discuss or figure out what's expected on each side without using existing gender roles? I don't think it's an excuse to be neglectful, but I feel like putting people into boxes by default so you have to do less emotional legwork seems a bit dogmatic. I can imagine a lot of same-sex couples have to define their relationships without existing guides, and I wish that was more of the norm for the rest of us.
The differences are subtle but I would boil it down to attention to detail. The user experience is excellent.
Encrypting email to a single recipient is (a weak) proof of work.

There's a big difference between sending 10k copies of a plaintext email, and retrieving a public key and encrypting to 10k recipients - not to mention that filtering out all non signed/not-signed-by-trusted-key should be a decent start for a whitelist/greylist.

I'd be curious if anyone ever got gpg-encrypted spam?
At my University, where I both worked and studied, we had a second semester senior post his automatic registration script to the school's Facebook group. This sent up alarm bells and I sent emails to warn the appropriate people, but it was the night before registration. The load immediately and totally crushed the system, and registration had to be rescheduled. They switched around some tags on the page (the script did very fragile webscraping), and that was enough that there were no more issues. The student had to fight an academic misconduct trial for it as well. A painful situation all the way around.
Totally agree. I think the upward scrolling plays into a theme of the game itself: "JOURNEY UPWARD TO THE SUMMIT". But yeah, not very intuitive.

It also takes a long time before you get to the video. I was just about the give up scrolling and thinking to myself, just show me a video when the video was there. Then I stopped watching the video half way through because it all looks a bit the same.

I really like the graphics style, but like others have said. It needs contrast to differentiate between playable and non-playable elements. It all seems to blend into one right now.
You haven't grounded your assertions on any logical arguments. I've worked on large code bases, both in statically typed languags, and dynamically typed ones, and the latter was a far worse experience than the former.

Even just in terms of reading and understanding what was going, there was no way to know the structure of objects passed to various function. A function would take an object foo, which had some arbitary strucutre and set of fields that were not defined or specified anywhere. Pure hell for readablity (i.e. understanding someone else's code). The absence of type system enforced structure on objects, means these objects could contain anything. Grr.

Everytime I get in production, a run-time JavaScript TypeError that would never happened had it been written in a statically typed language, I want to grab people like you by the collar (proponents of dynamically typed crap), and punch you in the face and give you a bloody nose.

I think you have to be slightly fucked up mentally to not appreciate the beauty, the power, the clarity, and the safety that high-quality type systems bring, in languages like Agda, Haskell, Elm, Swift, Kotlin, etc.

Dynamically typed languages are a bane.

This is not to deny that some statically typed languages have a poor type systems. Early Java had a disappointingly weak and primitive type system (e.g. no generics). Scala's type system is so complex that it's worse off for it. Etc.

But solid type systems are a huge advantage. I wish more people invested time researching and building more advanced and better type systems. We'd all be better off for it.
Whether you mean to or not you're trolling this thread hard. Please stop now.
Meaning to her you mean? Or meaning to people who pay her money. Surely (imo) not to the father.
Exactly. A few years ago the ReactOS developers had to stop all development for several months to perform a source code audit. This was meant to deflect accusations that they had derived code from disassembled Windows binaries.

If anything, this could make their legal situation more sticky.
Looks like there's some debate as to whether or not this has been exaggerated: https://www.betaarchive.com/forum/viewtopic.php?t=37282

So far I haven't seen any links to source code.

Quote from one of the admins:

> Yes I have no idea where they got the 32TB stuff. We had a big leak of Win10 builds yes, but these were all Windows Insider stuff that were collected over time available to all Windows Insider members at one time or another.

Edit: BA's official statement: https://www.betaarchive.com/forum/viewtopic.php?f=1&t=37283
When I was in college an 6800 derived embedded systems prototype board had 'really fast' in-package memory used for such a setup.

In the context of something vaguely like an SoC where you can make "0 page" memory registers fast with a small bank of high speed SRAM it can make sense, particularly for decoupling manufacturing defects or silicon production processes.

Of course for modern, potentially out of order and speculative branch predicting, pipelined instruction systems this is a horrid idea.
Some of the leaked data seems to currently only be accessible on a https://www.betaarchive.com/ , but your account won't be able to access it for a month or so.
NYT opinion pieces have been skewed for ages. It's bordering on pathetic that they let some of this stuff into print. Which are so hyperbolized as to be practically libelous.
I am a little curious as to how this factors into fundamental information theory.

In my mind, you are simply taking a 0-2khz signal and combining it with an entirely different 0-8khz signal that is generated (arbitrarily IMO) based on the band-limited original data. I can see the argument for having a library of samples as additional, common information (think many compressor algorithms), but it is still going to be an approximation (lossy).

"The loss function used was the mean-squared error between the output waveform and the original, high-resolution waveform." - This confuses me as a performance metric when dealing with audio waveforms.

I think a good question might be - "What would be better criteria for evaluating the Q (quality) of this system?"

THD between original and output averaged over the duration of the waveforms?
Subjective evaluations (w/ man in the middle training)?
etc...
Inverse square law. Yuuuge speakers to reach all listeners. Maybe smaller distributed speakers?
If you're using the Go (text|html)/template and you are not rendering any user or untrusted input... i.e. this is 100% a little blog where you are provably the only one providing content... you're gold. No need to do much else.

If you accept any user input and this will be displayed or processed anywhere (be it in HTML fragments, input to SQL, etc)... then sanitize it and use bluemonday or any other sanitizer applicable to your content.

For user generated content, like comments on Hacker News, there is a pretty rich policy provided by bluemonday so you don't have to think about it and are going to be alright.

That looks like this:

p := bluemonday.UGCPolicy()
htmlOut := p.Sanitize(htmlIn)

If you have custom needs beyond "I accept UGC"... then I'm afraid you're going to have to think about your needs and how to express your own policy, but even then, you can use bluemonday's built in policies as a starting point.
If the United States came together initially in many parts due to military conquest, then yes, I would say that's imperialist.

Just because they share an ethnicity you can't claim that the hundreds of years of expansion of the Zhou, which involved nonzero amounts of military conquest, or the Warring States period weren't imperialistic. Even outside of the unification attempts, there was plenty of conquest of tribes that had never been a part of any state.

In recent history, the PLC invaded Tibet in 1950, 37 years after Tibet gained independent via treaty.
I must be possible to determine when this code was collected by matching the files to version control time stamps.

I wonder if that could be used to narrow down who pulled the code during that window.
thank you for bringing your story forward.
I disagree with this definition, and even if I did agree I think this doesn't describe the article. As just one example:

> Beware of Big Data hubris. TheGoogle Flu Trends project, which claimed, with much fanfare, to anticipate seasonal flu outbreaks by tracking user searches for flu-related terms, proved to be a less reliable predictor of outbreaks than a simple model of local temperatures. (One problem was that Google’s algorithm was hoodwinked by meaningless correlations—between flu outbreaks and high-school basketball seasons, for example, both of which occur in winter.) Like all data-based claims, if an algorithm’s abilities sound too good to be true, they probably are.

If that's not a claim about Big Data, then what is?
I guess windows 10 is now open source!
> I also reject the notion of "position of power" just because he is a VC. Nobody is forced to take his money.

Nobody's forced to work for a boss that harasses them, yet making unwanted sexual advances against someone who reports to you is illegal as hell.

You have a poor legal understanding of sexual harassment. I strongly suggest that you educate yourself as to what kind of advances and relationships are, and are not appropriate in a professional setting.
How far did they go with the visa transfer, and what is the situation with the current employer? You shouldn't worry too much about the new company, but instead worry about keeping your current job (and, by consequence, your H1B visa).

Otherwise you may risk losing both, and have to return to your country of origin and start all over again.
You're all saying the same thing.

I didn't specify whether the sanitize occurred on receiving user input or displaying it.

I only said, sanitize all user input.
I don't understand this type of negativity.

It's possible for someone to be an expert in both JavaScript and OCaml. Or any language. The JavaScript language is both approachable and in wide use, attracting not only novices, but experts from many domains.

It seems silly to assume the "JavaScript community" is no more than its lowest common denominator of novice programmers, jumping on bandwagons without any historical context. People are jumping on bandwagons, sure. But every bandwagon needs a driver, who by necessity must be an expert in multiple domains.

The people pushing these trends are not naive to their historical context. They simply see practical benefits worthy of experimentation, and they don't let emotional attachments to their knowledge cloud their judgment.
> As others have said, I felt suicidal during those first few weeks. Thankfully, I've since learned to live with it.

An incredibly common feeling among those who have recently got tinnitus. I felt this way to and unfortunately no matter how many times I read that people learnt to live with it, I never really took it on board.

For anyone reading who has got it, it really does get better. Eventually (6 months min from what I have read) your brain starts to tune it out. Only a very, very small number of people are unfortunate enough to have it persist without some dulling. Try not to despair or panic, it almost certainly will significantly dull and fade into the background after a few months. At some point, it not being present will be normal again.

Nowadays I notice a mild shadow of what it once was, maybe 4 times a year for an hour after a severe initial case.
I think this article misses a key point. It's not all just about a lack of relevant role models.

Today, there are so many things competing for a kids' time - social media and messaging, mobile apps, video games, Netflix - that kids are choosing other activities instead of solitary, frustrating hours practicing guitar technique.

To become a proficient amateur-level guitarist, it takes around 2,000 hours of practice. That's equivalent to an hour a day, EVERY SINGLE DAY, for 5-1/2 years.

90% of kids learning guitar quit in the first 2 months (according to Fender) - most before they can play their first song well. The first few weeks are particularly brutal - it sounds horrible, it's painful on your fingers, and takes hours just get your first chord down.

In one sentence: it's just too hard to learn for the vast majority of people - and it's always been this way. But the difference is that these days, most kids would rather play Pokemon Go or Snapchat - and for kids who are musically inclined, it's so much easier and faster to become a DJ or producer than an instrumentalist, thanks to GarageBand and VirtualDJ and other easy-to-use software apps.

So a lot of musical kids are choosing that route. Why spend thousands of hours alone in your bedroom when you can be DJ'ing your first party in a few weeks?

So, how do we solve the problem of getting more kids to learn instruments, particularly the guitar? Some people have put lights on the fretboard (Fretlight, Gtar, Poputar) but in 25 years, that hasn't proven to make it much easier to learn. Others have gamified the experience (Rocksmith, Yousician) - but the learning curve is still extremely steep.

My company, Magic Instruments, has a different approach. We make it fundamentally easier to learn. Instead of starting by learning traditional guitar chord fingerings, we enable people to start playing chords using just one finger. This gives beginners an instantly positive musical experience - you can start strumming and playing your favorite songs from day one, and start jamming with others in a band in your first week. We then transition people over to learning traditional chords at their own pace.

We've seen 9 year old kids form a band in a few hours. Our hope is that we can inspire these kids to have a passion for practicing music, which will enable them to persevere for the thousands of hours of practice it takes to build the muscle memory to become guitarists.
As I recall, the issue they meant to address wasn't security but stability. Apparently a majority of BSODs were caused by faults in the driver taking down the kernel with it.

This means you aren't preventing drivers from having full access. You just need to prevent more unintended side-effects.
That should be an easy checkbox for any code reviews you do. If you changed the function, why didn't you change the comment?
If they did they personally lost quite a bit of money in the process. Just the initial sell resulted in a very large number of their coins selling for below the market average (because there's more exchanges than just Coinbase/GDAX). Those ten cent buys won't make up that difference.