skysight-inc/HackerNews huggingface dataset:
Our egress pricing (from all sources) is certainly higher because we operate a private backbone rather than just dumping your packets straight onto the internet.

Your site seems to be hugged to death (so I can't see it), but there are lots of gotchas with S3 pricing (like rounding up file sizes with Infrequent Access and Glacier) that in our experience means our customers come out ahead. Glacier and Coldline also aren't really comparable in the sense that GCS always responds within milliseconds. We only economics to discourage frequent access from Coldline, not delays. As above, our egress is more expensive because it's better (we hear you though if your response is "I don't care! Give me cheaper instead, then!").

Disclosure: I work on Google Cloud.
We have some notes on using differential privacy to slow down over-fitting here: http://www.win-vector.com/blog/2015/10/a-simpler-explanation...
IDK about the parent's school, but my at university (RPI), when I was there, students could simply opt to skip "CS101", and move to "CS102". I think it was also encouraged (but again, not required) to have taken one of the AP CS tests if you did so.

I think you could also opt out of "CS102" if you desired. It was on the student to determine how much they knew. The school just understood that a number of CS students had been doing this for some time on their own, and had mastered some of the basics.

I skipped the "CS101" course, which was mostly intro to programming, control flow, etc. I decided against skipping the "CS102" course; the first half wasn't that exciting (I knew how linked lists, vectors, hash tables worked) but trees got me (and some of the more exotic stuff at the end of the course), so I'm glad I took it.
Yea but a terrible look for the firm.
And now a "he also said", given his new statement admitting to the allegations.
I have a problem with price. $90 for about 20 personal emails per year and a bunch of useful newsletters?
Is there a $10 hosted mail that sends and receives reliably and doesn't sell my personal data on top of subscription (like AV companies)?
AFAIK in most of Europe you have to do a master before the PhD and typical (theoretical) numbers are 3 years bachelor, 2 years master, 3 years PhD.
But that's theory, usually it's more like 4 3 4, but obviously there are also people working on the master's thesis for 5 years ;).

I'm from Austria and we switched to the bachelor master thing just briefly before I started to study. Before we usually had 5 years diploma studies and a doctorate with at least 3 years.

Another interesting difference is probably that our studies tend to be completely specialized. So when I studied CS I did only that. If you're interested in history or whatever you just study that in parallel - no tuition and for long we also had no access restrictions - you basically just went there and said you want to study X. 10 minutes later you were enrolled.
One of the things I remember reading in the late 80's was that for IBM the 68000 was a no go because it would have doubled the number of DRAM's needed for a bare bones system. And Motorola didn't have the 68008 ready yet. Important because back then memory was a huge part of the cost of the machine.
> all of Google's partners who can purchase our data

I'm pretty sure that's the empty set.
Cool to have you here!
There's one interesting point. Until they said they didn't know that Lewandowski had Waymo's material they could basically claim plausible deniability (don't know how that work in a civil lawsuit). But now they admitted they knew Lewandowski had that data. To me, that's kind of an admission that Otto's tech was tainted. Yes, probably Google still needs to demonstrate it has been used by Uber, but it is a huge move forward...
And what's a FOSS?
Sure, it's a decent idea. You can even make it fast if you cheat.

I believe that the PDP-10 (well, some versions) had the first few memory locations equivalent to registers.

The AT&T Hobbit (Aka Crisp) chip had a stack pointer, and aggressively cached memory around the stack, essentially. Once cached, stack-relative memory operations were as fast as registers. (The Apple Newton was going to use the Hobbit, but switched to ARM when it became clear that AT&T wasn't truly interested in committing to consumer grade pricing of the CPUs).
Previously used Vue and switched back to React.
I have a few gripes about Vue for larger projects. Most have to do with a lack of 'namespacing' or ability to isolate functions.

1. Plugins - Eg. Recently VueResource plugin was deprecated, but i had a hard time finding out where all the plugin was being used. The dependencies were hard to figure out.

2. Functions introduced in Plugins added to a parent component are inherited in all the child components' 'namespace'. It was hard for me to determine if a function that I am writing has a naming conflict with a plugin function, until runtime.

3. Since this dependency is not obvious, a new dev looking at a piece of code that is using some functionality inserted by a plugin, needs to be aware of all plugins that have been interjected at any of it’s parent level components and the functions they introduce.

4. Mixins help with re-use code, but can lead to potential function naming conflicts.

Maybe I was doing things wrongly w/ Vue. If so, any recommendations are welcome.
> I didn't specify whether the sanitize occurred on receiving user input or displaying it.

I'm sorry, but you basically did. You said:

> You must sanitize ALL user input even if you don't think you're going to render it on a web page

Which implies that sanitizing input at display time, when you know you're rendering it to a web page, is too late. That's why people are jumping on you. Keeping a clean database is the absolute most important thing you can do. The database isn't contextual. The data it stores can find its way into HTML pages, REST responses, SQL queries, PDF reports, XML/JSON data exports and a ton of other formats. Each of these output formats will require a different form of sanitizing. Sanitizing before the data hits disk creates a nightmare for anyone displaying the data in a context other than the sanitization that was performed. So what you said originally is precisely incorrect. Only sanitize input when you know it's going to be rendered to a webpage. Otherwise, leave it alone.

Now, you should be using view-layer frameworks to make that sanitization easy, automatic and the default action. When rendering to HTML, the templating language should sanitize by default and give a way for template authors to opt-out when they know the data did not come from user input. Likewise, in the SQL context, prepared statements also make it easy for the developer to do the right thing. But at no point are you speculatively sanitizing all user input. You're getting user input to disk in as pristine a format as possible and sanitizing contextually depending on how the data is outputted.
Each scheme is actually much better than people realize at what it's targeted for.

Recently I have to give huge props to Guile + Andy Wingo for guile-fibers. It's proper concurrency, using delimited continuations in scheme. Just frickin' fantastic!
She still is from the snide comments about her ex.
Right. We might as well just compile our JS to Java.

Instead of using web tech to build native apps I think we should focus on improving browsers so that web apps behave more like native apps and have the same capabilities.
Browsers should be the cross-platform VM and webassembly is a good step in that direction.
Like stated higher up in the thread, non-testimonial proof is hard to come by in cases like this. Publishing a story with unnamed sources in such a case is very difficult to distinguish from a smear-campaign.

Not only does naming sources give more credibility, it also doesn't rely fully on the credibility of journalists. You can only say "it's true, just trust me" without being able to back it up so many times.

Testimony of anonymous sources are useful as corroboration, not as the main evidence. The sources here don't need to fear for their lives, nor are they able to produce documents to back up their claims.

I do not wish to diminish the courage that was needed to go on the record here. In fact, this is even more risky because hard evidence is so hard to come by in cases like this.
The prefixes are probably announced in aggregated form anyhow further upstream. The announcements and deannouncements are/were therefore redundant.

At least't that's my hunch. We could check the same monitor though :)
A crucial element that wasn't mentioned here was the lack of play-testing. Having a dozen people play the game and give feedback would have informed the makers that it was too hard, and where.

It ties in with the lack of time and resources too -- if you don't structure your development to have time to do user testing, you won't magically find that you have time to do it at the end, either.
This comment is a microcosm of 'ddoolin's point. Step back and read it a few times, and think about what you're saying: you've presented an alternative view from my own, so sexual harassment must be acceptable to you.
I look forward to their piece on blockchain.
I don't think this particular article is suspect at all, but it's kind of important to note note that observer.com is the New York Observer, a media outlet owned by Jared Kushner.
I was able to get auto-registration working with mechanize a few quarters ago (similar setup to OP); I got into two classes that way! I was just using SMS/emails from UW's provided notification system to trigger the script, though, so I don't think I was actually any faster than other students-just less stressed about watching for notifications.
Well, actually, once you buy into everything you need for O-O-O execution with synchronous exceptions, a lot of stuff that seems difficult at first glance becomes cheap because you can build on the existing O-O-O infrastructure. Anytime you can belly-flop onto the reorder buffer scoreboard the hard stuff just falls out.
Ok, I was confusing the prisoner's dilemma with game theory as such.
Ask HN: Are dating websites allowed to let search engines index the profiles?
I have used a dating app Ok Cupid 2 years back, I stopped using 1 mon after creation. What I didn't do is delete or disable my profile. Fast forward now, when a friend searched for my username on Google, OkCupid profile was being shown as the 4th result which shows my address and age.

I don't remember being explicitly asked to take my permission about making the profile public. After emailing the support today, I got a reply saying 'Google is showing profiles now, we can't take them out' which is ridiculous since all they have to do is don't allow in the robots.txt.

I don't find anything in their privacy policy about public profiles etc. I am not sure if I can send a DMCA to take my link down.
You should be worried about IAQ - indoor air quality.

This is because you spend 90% of your time indoors.

It is also because IAQ is far worse than outdoor air quality. The kitchens of most homes would be closed down by inspectors if they were commercial.

Correctly ventilating a home with a ERV/HRV, bathroom ventilation and oven hood (harder than it sounds because many designs are snake oil) solves the problem. Few people have gone to such lengths, not even the wealthy.

The "Building Performance Podcast" has more information if anybody's interested. There's a lot of good information online from US government websites.

Most American homes share a leaky wall with their garage. A garage with shelves of highly toxic substances that offgas through the wall when the weather gets hotter.

I intend to design my home so it does not contain these drawbacks.
http://www.greencarreports.com/news/1105404_tesla-gigafactor...

Last I read, no panels.
your mileage may vary, my brother will get an ear infection after a half a day with earplugs. I can wear earplugs 4+ hours a day every day a year no problems.
Perhaps an external headphone amp? I use an old one from my gaming headset days at work. Seems to help since I can set the laptop volume really low and use the knob on the amp to go lower.
Thought of mine was these early 16 bit machines were targeted towards the baby minicomputer market. But all the growth was in the personal computer market. In that market speed wasn't that big of a deal. However users were rapidly bumping up against the limitations of a 64k address space. And that's why they needed 16 bit machines.
On California, the drought and the 'yuck factor'
Culture is important. Having 12K employees all give an input is counter productive. I believe that's what he was referring to as naive. Companies with great culture didn't have every single employee in a grand summit providing culture input.
My first thoughts too, although my guess is that they did let other people play the game to find out if it's fun, but there's def a difference between that and a structured blind playtest with randos. It's super crucial early & late in development.
Job applicants over 40 filtered out by employers
First, a pitch meeting with a venture capitalist is generally accepted by our culture to be the kind of professional environment that is inappropriate to sexualize in any fashion. While I understand your basic point, you seem to be very interested in denying that there are many situations in life where notions and hints of sex and romance are just not appropriate.

* I hate to think that you might have trouble understanding this, but we're not talking about dating a co-worker. We're not talking about a pitch that didn't succeed followed by three months of radio silence followed by them meeting at a social event and realizing that they are attracted to each other.

* The mutual realization that you are attracted to a coworker is not the same as sexual harassment, it's not the same as being asked out by your manager, and it's not the same as receiving unwelcome sexual advances during a pitch meeting from a man who works at VC firm.

* Asking an available coworker out on a date, however unwise it may be depending on your place of employment and working relationships, is not the same as making remarks about her looks, clothes, or anatomy. It's not the same as denying her an investment or promotion because she rejected your advances.

I hope that clears things up for you.

>> But I reject the immediate interpretation of "man abusing his power to pressure women into sex".

Oh but that's exactly what this was. It was a man abusing his power to pressure women into sex.

>> Grabbing a knee under the table is of course not a good first move, but we might be missing context.

Grabbing the knee of someone you are not mutually involved with is not appropriate behavior in the workplace. Depending on the situation, it may be inappropriate even if you are mutually involved. But without mutual involvement, it's absolute inappropriate.
Yes, a lot machines of that era did. The Univac 1100 series did, and I believe the IBM 709 and 7090 machines did as well. The low performance machines used actual memory, the higher performance machines had backing registers in the CPU.
It's reasonable of them to be suspicious of our software and want to review it.

It's reasonable of us to be suspicious of ulterior motives.

Modern day mexican standoff.
In this case, I agree in the sense it defeats the point I made above, but for various reasons others may continue to push back on that pressure on principal rather than on the facts of the matter.
I truly hope you will succeed in your mission. It looks like it could solve so many problems that I've come across as a result of confusion and miscommunication when people with a common understanding step away from the whiteboard and start coding. It can be so hard to align the implementation with the visual abstractions we so desperately need to communicate as humans.
They do taste good. I have to admit though, after eating a lot of them, I suspect they have some brine added. Not a big deal, and not for sure, but I don't get them as much as I used to.
Making money online with paid survey
New FoldingHome Paper: Computational Study of a Brain Protein
> with Racket's move to the Chez Scheme interpreter,

Is there a wiki or an issue to track progress of this?
"I suddenly lost the hearing on one ear and it got replaced by a strong and permanent tinnitus. I quantify it as strong based on my talks with others with tinnitus.
What worked for me was stop fighting and start loving it. Now it's a perma mantra. Some somatic malfunction that enables me to ear the hum inside of me or whatever poetry works for you. Try it maybe."

Related re-post from here: https://news.ycombinator.com/item?id=13140256
Alex3917 is right that sexual harassment outside the workplace is not illegal, but it's incorrect to say it's not "legally sexual harassment." It is sexual harassment, it's just not illegal sexual harassment.

For example, catcalling on the street isn't illegal. It's still sexual harassment, it's still unethical, but it's not illegal.
Oops, my Google-fu is worse than I thought.
So after seeing the profile I immediately deleted it. You think Google would reindex and remove it from search results? or the stale link still exist?
I honestly think this is the real thought process behind things like these, even though it sounds a little cheeky.
Just out of curiosity, what about his comment is trolling other than it being a contrarian opinion in this forum?
I am curious about the downvotes. Do we really downvote people here for questioning trusting Google?

I didn't even say not to trust google, I just questioned the level of trust.
Uber's Self-Driving Tech Rolls On
I agree we could really use improved batteries, but- You may not have to beat chemical energy if you can improve aero, weight, and efficiency.
All the more reason to run Sci-Hub on ipfs.
As soon as you entered your personal information into their site you gave it to them so they could display it on your profile. You can't stop google from indexing their site. Its public period. Don't give away personal information if you dont want it to be public.
> But realize not all input winds up in a SQL database, not all input will be considered valid in all contexts, and not all input eventually becomes output.

That was the point I was trying to make: Sanitizing input is fail-from-the-start. There's no way to know ahead of time what outputs you're going to be producing 5 years from now. Conclusion: Store all input exactly as received. (We can do that these days with form/url encodings and whatnot).

Ok, so now you have the data stored accurately.

Next step: You need to output to, let's say, HTML. Ok, so you just escape/quote everything appropriately and nobody gets hurt. If you just do the escaping/quoting properly there is no XSS attacks. It's really just that simple.

However, it is NOT about sanitizing at the "input" point. Do you get what I'm saying now?

(I realize that that sounds aggressive, but I really just want to force this point home. Please tell me if you disagree or find some detail in my explanation confusing. This is important for the security of the web and either I'm wrong or you're wrong or I didn't understand what you said. Let's figure out which is the case.)

[1] There are caveats here.
(Just to be clear: This is just for argument's sake... and hopefully for edumacation.)

> But realize not all input winds up in a SQL database, not all input will be considered valid in all contexts, and not all input eventually becomes output.

That was the point I was trying to make: Sanitizing input is fail-from-the-start. There's no way to know ahead of time what outputs you're going to be producing 5 years from now. Conclusion: Store all input exactly as received. (We can do that these days with form/url encodings and whatnot).

Ok, so now you have the data stored accurately.

Next step: You need to output to, let's say, HTML. Ok, so you just escape/quote everything appropriately and nobody gets hurt. If you just do the escaping/quoting properly there is no XSS attacks. It's really just that simple.

However, it is NOT about sanitizing at the "input" point. Do you get what I'm saying now?

(I realize that that sounds agressive, but I really just want to force this point home. Please tell me if you disagree or find some detail in my explanation confusing. This is important for the security of the web and either I'm wrong or you're wrong or I didn't understand what you said. Let's figure out which is the case.)

[1] There are caveats here.
AWS also has their own backbone. Starting at about 7 min: https://www.youtube.com/watch?v=bqPfQgatMko
> but this really is the sort of thing that email alerts (or IM alerts, or IRC alerts) should also work fine for.

Except when you are asleep.

And when it comes to immigration, you are happy to be woken up in the middle of the night by a phone call when it means the difference between failure and success.
This is an absurd accusation. I've seen plenty of VCs try to recruit developers of companies that they've met with or even invested in. The Valley is tiny and it happens all the time. Moreover, not all this information is communicated to every partner, especially as it relates to seed deals.
Weaponized Narrative Is the New Battlespace
May I ask what PR stream you applied under that "opens randomly"?

After years of hard work I successfully got in via Provincial Nomination.
Can anyone recommend an air quality detector for personal use. My second floor office is in downtown Oakland by a busy road. The windows are closed and an air filter is always running. Perhaps the air filter is providing a false sense of security and not trapping any sub 2.5 micron particles.

My last air quality detector seemed questionable. I could leave the windows open during rush hour it would always just say the quality was good. Meanwhile there is soot on my window sill.
Definitely, I think this is the issue. You're definitely right that the problem with EUV is how to get a strong enough power source.
One of San Francisco's problems, from the perspective of being appealing to outsiders, is that there are a few small areas with lots of homeless and the other problems you describe. And those also happen to be the main areas visited by tourists, and people coming to the city for conferences: Civic Center, Tenderloin, Downtown, South of Market. But the vast majority of the city is more residential and much more livable. Of course it has the problems of any big city, but in my day to day life living here I manage to almost always avoid all of the problems you mention. I live on a tree-lined street a couple blocks from a park with a playground. I havnt been to fishermans wharf in basically my entire life. Locals just dont go there because we know its a terrible tourist trap.
It actually can be a very pleasant city with a lot to offer. There is a reason housing in SF is so desirable and why tech companies want to be located there. I wish it could be made more obviously appealing to the casual tourist though, because we're giving ourselves a bad rep.
Seattle Police Department Suspends Its Twitch Channel Following Charleena Lyles
I owned a TI99/4a as a kid and at the time I was interested in the TMS9900 archictecture.

I always thought the workspace-pointer-to-register-set could make for some easy multitasking context switches. You just change the workspace pointer and immediately you're working in another context.

In practice it was slow though compared to processors with real registers.
Yeah but isn't it amazing how cargo cult only applies to the things I don't like?
I don't know. I'm only familiar with it because of the Google Group posting and associated Hacker News story from a while back.
Or they're willing to take a loss on the ads -- which frankly don't make much money -- to go after the far more lucrative corporate emailing/calendaring market. The pricing is $5/$10/$higher per user-month, so walking away from an ads business that may possibly (but I doubt it) be earning hundreds of millions to avoid a cloud over your sales process for the aforementioned multi-billion dollar business seems like a solid trade.