skysight-inc/HackerNews huggingface dataset:
#payyourartists !

There's artstation, you could look around and commission/buy rights to images from there.
it's interesting that the 'rich' folks are government workers. maybe that's the employment model of the new normal in a LOT of places.

it makes me wonder if, really, that's the model that has always been the norm, historically.

i mean, when i think about the civil service jobs in the UK, or the true original civil service jobs in China going back centuries, i see a system where the brightest, most motivated minds compete for a limited number of government job posts - because those are the best jobs available.

occasionally in history, there are times when the private sector offers paths to affluence for the masses, but mostly, that's not what happens. mostly, we're trying to get a legally protected, high-benefit position in government. most of the time, historically, that's the most lucrative path.
2 different things.
This reduces the size of the HyperLogLog the other improves the accuracy.
This has actually never happened to me. I replay the games I played as a kid about every two years and they are always great. The game I reply the most are Kid Chameleon for Sega 16bit and Wonderboy in Dragon's trap for Sega 8-bit.

I might look into this but I cannot stand ads and I'm inapt at using mobile phones, so probably not.
> 90% of kids learning guitar quit in the first 2 months (according to Fender)

True, just ask anyone who's ever had a teaching career in guitar (or music).

It's hard, everything about it is hard. And I'm not only saying that because I feel confident with my skills; it's quite true. Only with lots of time do callouses form where it doesn't hurt your fingers every time you play. Volume and feedback is another beast to manage. And if you're playing an acoustic, you really need some light gauge strings and good action to ever have hopes for that thing to not feel like a knife to your hands.

My method with beginners was simply to keep them entertained. So many potential Guitar Gods walk out because they go up against a Hal Leonard method book and have all the fun of guitar sucked out of them. If you can get them playing music they want to play; they're much more likely to continue playing it, even through pain, so that they can learn the fundamentals over time.

Your method works really well too, one-finger chords is a great way to get people playing the strummy music they like without the frustration of coordinating all the fingers. In the same light, it's why I've tuned my 4-year-olds guitar to an open D, so that she can "write music and sing" without having to worry about getting a sound of the guitar. If the interest is there, the perseverance will continue.
Ask HN: Do I need a bug bounty program? Feeling a bit threatened by HackerOne
I got a sales email recently from someone at Hacker One and they said that "Teams who push code on a regular basis need continuous coverage on their attack surfaces. " and that, "If security is a priority for you and [COMPANY NAME], I want to make sure you and I connect."

I understand how the sales process works, but I'm kind of starting to feel after the second cold email that this is a bit mafia-like. I'm basically being told that my kneecaps are going to be bashed in by hackers if I don't respond to this sales call, at least that's how I'm reading this communique.

I was thinking a good way to respond would be to at least put something about responsible disclosure on our "Contact Us" page, and that we'd pay a bounty if someone finds something out of the ordinary. A security professional told me allowing responsible disclosure is the first step. We're a very small company though, I'm the sole developer. I know security is important, and I try to follow best practices - but has anyone else gotten these emails and felt a bit threatened?

I don't meant to insinuate that Hacker One is going to be doing hacking themselves, I'm not a conspiracy theorist. I'm just wondering how people are reacting to getting emails like this?

Thanks for any perspective.
Retrohack Your Old Computer Terminal from Dialup to Wi-Fi
I think that sentence implies they're using OpenSSH not that they're rolling their own?

--Edit--

A quick glance at the repo suggests they're using NaCl to handle the encryption + the SSH server for auth
I think this is the right answer, assuming OP actually wants to get better at bash and not route around his original question by learning stuff that isn't bash.

I use bash/shell scripts frequently and have many running 'in production' as cron jobs th at run various jobs or manipulate data for other jobs to run on.

One thing I really like about pure shell is that it's extremely portable and transparent about what it's doing.

I still have to re-learn control structures almost everytime I write a new script, I don't try and memorize [[]] vs [] and all the weird ways equality can work, I just google each time and answers are always on top (once you know what you're looking for).
Sounds to me like it's rather iOS's restrictive licencing rules that are strangling itself.
For Python, I've used the Faker package to generate dummy data. It was quite easy to use, and much better than the homegrown approaches I'd taken in previous projects.

http://faker.readthedocs.io/en/master/index.html
Seattle’s Minimum Wage Hike May Have Gone Too Far
>I have no desire to "click through" to anything. I want my piece of information, a raw fact.

Do you also want the original content creators to starve and die off and the only competent content source left to be either Google's archive or Google's lacklustre service for the same thing?
> No, there is such a thing as copyright.

Copyright is rightfully seen a problem on the Internet :). Personally I'm currently fine with both pirates offering bits in the "right format" and with Google offering information in a better format - especially that they don't have any monopoly for that, just enough man-hours and burnable cash to do it first.

(INB4: I do respect copyright (at least more often than not), but I still believe it's ill-suited for the digital age.)

> Well, that won't happen.

One can dream, though...

> Google is one of the fishermen, in fact, they are running the largest trawler on the planet.

I know. I don't want any form of Google monopoly. I don't like AMP either. My only point is that Google displaying content in search results is an example of a better interface to the Web than the regular site visit; it saves me time, clicks, and prevents me from being exposed to all kinds of crap I don't want to see. I'm definitely not arguing we need Google for that - just that I wish we'd all go much further into that direction, preferably with free and open-source tools.
U.S. defense contractor arrested for giving U.S. secrets to Chinese operatives
Ha you have no idea how hard chicago hotdogs made my life! There was a joke in the show about Dinesh having to stare at a lot of “adult” imagery for days on end to tune his AI, but my waterloo was chicago hotdogs — the stupid pickles end up hiding the sausage more times than not, which makes it hard to differentiate them from say, a sandwich.

For those of you like me that never knew they existed, here is what they look like: http://img.food.com/img/recipes/25/97/2/large/picMKCD0m.jpg
Yeah so supporting checks doesn't really mean you're not at the forefront of technology. If anything, the fact that US banks allow people to take pictures of checks, and have done so for like the last 5 years at least, is an example of the kind of innovation seen in the US banking system.

I actually have to write checks regularly to pay my utility bills, or I have to pay a $2.00 convenience fee to have the transaction processed by a third-party hired by the state. Not to mention, I randomly receive checks in the mail from events I speak at or for travel reimbursement or university reimbursement or the like. I love that I can snap a picture and wham my check is deposited.

Not to mention things like Apple Pay, which, without support, configuration, and advice from the banking industry wouldn't be a thing. Naturally they created the technology for the phone, but banks do the rest. How is that not innovation?
Introducing loadable-components – React code splitting for browser and server
AFAIK, there's nothing conclusive about supplementing brain functions. Examine.com has a good write up on creatine [1].

I've used creatine with the goal of increasing performance in strength training. I guess I'm a non-responder, 'cause there was no noticeable gains in performance for me.

[1] https://examine.com/supplements/creatine/
Un-Muddling Modeling, Part I: Relations and Relationships
>I'm increasingly more convinced that the best way to save open, distributed web would be to kill off Internet commerce. Think of it this way: when I'm searching for information, I'm like a fish searching for food.

Look at it this way: people doing internet commerce are also searching for food -- to put it on their table.
End of fixed prices within 5 years as supermarkets adopt electronic price tags
Sure, they don't force you to hand over your data and then delete it :) What a noble gesture.

But the version on Googles domain is the version they display in the search results. So it's the version that is seen by users. So it's the version that matters.
As with most nootropics, Gwern has done the research.[1] Summary: creatine probably doesn't do anything for cognition. It might help some vegetarians.

1. https://www.gwern.net/Creatine
There's gazillions of embedded processor cores in every device you own. Your SSD, network card, phone, motherboard, router, TV, modem, car, fridge, you name it all have multiple processor cores running some piece of firmware you never see. RISC-V has a pretty good value proposition for those: an open standard with no licensing costs with a rapidly maturing software ecosystem. To say that RISC-V will only succeed if you can attach a monitor to it only betrays a very narrow view of where processors are actually used.
I'm generally on board with this point - encouraging everyone to shoot for the top 10% inherently means letting down 90% of people.

But I think in this case, the issue might be that rather than one job being the first step to the other, we're talking about two totally distinct tracks. If a company is sufficiently shoddy and certification-happy, it's possible that they don't even provide meaningful experience for someone seeking the top-tier options. You might be better served by hardening systems at some general software job than getting an entry-level security job and blindly throwing Nessus at client's systems.
Show HN: “Crafting Interpreters” chapter, control flow and Turing-completeness
That's a list of places where SHA-1 is used as a hash function in cryptosystems.
At some point... god, most of a decade ago now, I guess, it seems like the kinds of people doing web design changed and this new crop didn't care about or understand bandwidth constraints like the old ones did. Strangely, this was around the same time "digital native" instead of "print influenced" design got big, so you'd think it'd have gone the other way, but it definitely did not.

In fact, I'd say the much-derided Flash aesthetic/inefficiency kind of won, right around the time we were all celebrating killing Flash. Everything's whiz-bang shiny and so damn slow and resource-hogging. Plus flat design is a disaster in all but the most capable hands, so I'd say UX generally has suffered over the last decade.
What I don't understand is that even when using a German card with multiple applications, online authentication, and online authorisation[0] it's quite fast in Germany – much faster than comparable or even simpler transactions in the US. On the other hand, the very same card is processed even faster when used in Sweden.

The difference is probably faster data connections and more efficient protocol implementations, I would think.

[0]: For some reason receipts here contain quite a lot of information on what happens behind the scenes if you know how to read it. I hope this link keeps working, it contains exercepts of receipts merchants give you here: http://docplayer.org/storage/33/16568026/1498495227/GbAKHYXN... With that information you can e.g. see which steps were perfomed offline.
We should absolutely not rename the profession. All it does it put it the title on the euphemism treadmill[1]. Instead we should look to break down sterotypes through positive role models and portrayal in the media.

[1] http://englishcowpath.blogspot.com.au/2011/06/euphemism-trea...
“One Fact About Olive Oil That Will Absolutely Shock You” – Make Money Online
HyperLogLog with up to 50% less space
> They certainly won't lose much revenue from fleeing customers

I don't think that's true. Sure, they wouldn't be out of business overnight, but depending on how serious this hypothetical breach of trust is, it'd certainly hurt them a lot.

> Warrants, legislation, and quasi-legal-but-hard-to-ignore orders from governments happen

My threat model does not currently include the NSA or the US government. I don't anticipate that changing in the near future, but if it does then you're right; I'll certainly need to stop using Google services. (And probably all cloud services in general.) Or at least "air gap" them from the portions of data I want to keep secret.

> pretend that Googles security is and always will be perfect [...] that no current or future Google employee will ever become disgruntled

While I consider myself to be more security conscious than the average citizen, I _still_ trust Google's security practices (against both internal and external threats) far more than I trust my own. If my data on Google's services gets compromised, I think it's far more likely that it'll be because someone stole my password and 2FA tokens than because somebody hacked Google.

As with anything, I realize there's certainly a security/usability tradeoff to be made. For the moment though I'm quite confident that the extra utility Google provides is worth the risk, at least for my purposes.
They're not great, but Elsevier deserves special opprobrium as far as I can tell; just see the longest section in their wikipedia article. They're just so antithetical to what science is about.

https://en.wikipedia.org/wiki/Elsevier#Criticism_and_controv...
Yes that's exactly the point! If a drug is only as effective as placebo then it's a failure. That's exactly why they don't just compare the drug to the control group who doesn't get any medication at all!

In a hypothetical but semi-realistic case let's say 300 people are taking part in a trial.

100 will be the control group that gets nothing. Maybe 20 people will get better on their own.

Next is the placebo group, who think they are getting some awesome new meds. Out of 100 people maybe 40 will get better on their own.

Next is the group that actually gets the medication. Now if only 40 out of 100 get better than they know the medicine is no better than placebo and doesn't actually do anything.

Notice that if there wasn't a placebo group people would assume that the drug actually helps people because it performs better than the control group.

You seem to be confusing placebo with someone randomly getting better (the 20% of the control group).

The whole idea of placebo is that you're more likely to "randomly get better" when you think you're going to get better (the 40% compared to the 20%). The implications of this is that somehow the brain is involved in healing the body.
I'm a user. I hate AMP as a user. If it didn't have terrible scrolling and weird navigation behavior and hide the information source, then I'd probably like it for the speed. And since I don't mind other walled gardens like the iOS App Store, I probably wouldn't mind AMP. But I hate it so much that I switched search engines, since I couldn't turn AMP off when using Google search.

I sometimes discuss principled reasons for disliking AMP in HN threads, but I'm coming to the realization that it's really just the experience i dislike, and those principles would probably be overridden by UX convenience, if it actually existed. I just think the AMP team has done a really bad job of implementation now.
The Knives Are Out for South Korea’s Robber Barons
known as "Big O Notation": https://rob-bell.net/2009/06/a-beginners-guide-to-big-o-nota...
Somewhat similar to Redis implementation in many ways: Redis also uses loglog-beta, sparse representations, and dense representations in packed format without wasting 1 byte. However Redis representation uses 6 bits registers.
I don't know about dedicated ones, but I would explore here:

Flickr: https://www.flickr.com/search/advanced/ (turn on CC image search)

http://creative-commons.deviantart.com/

http://source.pixite.co/

http://allthefreestock.com/
Just a tip: if you are specifically searching for papers, you can use https://scholar.google.com. this way you will find more than just American studies. Sci-hub helps with getting the papers if there isn't a source already.
Sorry, could anyone enlighten me on the "Avoid ElGamal" part? I thought it was pretty secure. Is it due to bad efficiency?
That intelligence-boosting powder that's the basis for super-findings of gym broscience?
Since I had to look it up out of curiosity/paranoia, I figure someone else might also be interested/relieved to know:

Betelgeuse has frequently been the subject of scare stories and rumors suggesting that it will explode
within a year, leading to exaggerated claims about the consequences of such an event. The timing
and prevalence of these rumors have been linked to broader misconceptions of astronomy, particularly
to doomsday predictions relating to the Mayan calendar. Betelgeuse is not likely to produce a gamma-ray
burst and is not close enough for its x-rays, ultraviolet radiation, or ejected material to cause
significant effects on Earth.

https://en.wikipedia.org/wiki/Betelgeuse#Approaching_superno...
I do not. Nor any other "brain supplement."
How to read and understand a scientific paper: a guide for non-scientists
SCOTUS allows limited version of Trump’s travel ban, will consider case in fall
That what you need to make RISC-V a popular success. But really, it's already a success in a research context. I really wish something like it had been around when I was doing my thesis and by all accounts lots of researchers are using it as a base design that can be modified in various interesting ways.

And there are lots of successful architectures out there that don't go into PCs. On the low end there's AVR, at the high end there's MIPS, and then there's ARM that's sort of eating everything. ARM started out as a desktop but it spend a long time as an embedded only processor before returning to popular consciousness. If RISC-V takes over cell towers or NAS boxes or robots or flying cars or whatever it could be quite successful without ever penetrating popular consciousness.
and keep a set of text files for yourself where after learning to do it the right way you write it down. I find that especially with bash/command line things I don't have to solve the same problem often (which would help with remembering) but often enough to be annoying having to re-learn it all the time, so it really pays off to have some documentation to refer to. org-mode and vimwiki are quite good for that.
And in the process they're trashing the Internet; shitting in their own bed, to be frank, because those same people who put crap on-line also want to use the Web to search for the information they need quickly and efficiently...

(Related, I wonder how many people in adtech actually use ad blockers.)

And in general: people need to earn their living, yes, but that does imply society should support any particular business model.
You presumably also don't write blog posts as your primary source of income. A lot of media companies do, and depend very heavily on search engine traffic in order to make money. Between Google and Facebook, their fate is entirely out of their own control.
Its heavily inspired by the rowdies implementation, fact is I looked back then how you did loglog-beta in redis and did a repo for it. Now I just added TailCut to it. Do you mind if I do a PR for redis?
I've been using a daily dose of 5g of creatine for several months to help with climbing. Maybe I'm a non-responder, or maybe the effects are too subtle, but I haven't noticed anything. Definitely nothing in terms of brain functions or what not.

It's cheap enough to continue to do it though, so I kind of keep at it.
On a related note I'd like to say that you should in general be very wary of any substance that people claim to be a "nootropic" or to otherwise improve cognitive functions. A lot of the studies that these claims are based on are 1) funded by groups that would see benefit from the claims (supplement industry), 2) not reproducible / are one off studies / show statistically insignificant results given the sample size, or 3) simply based on shitty science.

For example, in the article found at the link, note that they only examined 45 people, all of whom were vegetarians (who are much more likely to be creatine deficient due to their diets). Although the subjects were consuming more creatine than the vast majority of meat eaters would consume naturally, since the authors didn't experiment with other doses (e.g. 1-2g a day, more accurately mirroring the diet of those that consistently eat meat) there's no telling whether consuming extra creatine will actually benefit your cognitive abilities if you are already regularly eating meat.
I've sat through probably thousands of demos in my IT career and I must say this quote featured in the article is bullshit:

People don’t buy features, they buy solutions, trust, and relationships. -Rob Gonzalez

I can't count the number of times we (various IT teams) have selected products because they were the only one that had a feature we needed. I'm at the point in my IT career where if I'm watching a demo I politely let them do their little spiel for 5-10 minutes and then I'm like, "yeah yeah show us feature X" (because I want to see that it works and how it works).

What always destroys a demo for me:

* Sales people that don't know the technical details.
"I'll have to get back to you on that." (for nearly every question)
* Irrelevant use cases. "Schools use our product!"
* Can't actually provide a *live demo*. Only slides or,
"Let's watch this 10 minute video after which I probably
won't be able to answer any of your technical questions!"
* Complete failure to mention anything in regards to security
or if they do it's nebulous bullshit like, "we your data
in transit!". This one is becoming greatest concern lately.

Everything I've read about this sort of thing says that the #1 thing you can do to improve sales of any software product is to add new features. At least, that works once your product has been established. Selling it initially? No matter how you slice it that's hard.
Rumor is that the NES Mini was just a way to burn through left over hardware stock.
> ...I'd be curious to know how they get around laggy interrupts, e.g. cat'ing a massive file and trying to Ctrl-C out of it.

Presumably with the TCP URG flag. That said, I only read years ago that's how it's done, without ever checking myself. I've found references to in in telnet, but not ssh, so perhaps the latter uses some other mechanism.
This is not a Show HN.
Agreed. Which puts the claim that 'decreased competition in markets from flattened economies of the losers helped American manufacturing', in an equally foggy light.
I feel your pain. I once watched a single episode of Jeopardy 50+ times in pursuit of timings for a prototype app demo.

I could have a good half-hour conversion about the nuances of Alex Trebek's vocal inflections... shudders