skysight-inc/HackerNews huggingface dataset:
Sure, but you're missing the larger question. If presented 2 dishes, one is traditional mayonnaise and the other is HC mayonnaise. If you can't tell the difference in how they behave/taste/whatever, are they not both effectively mayonnaise?

I'm not arguing that you're wrong about what mayonnaise is, I'm adding a wrinkle to the concept of defining a food product.

I don't have much of a dog in this fight, I personally care that it "does what it says on the tin" rather than fits a dictionary or other definition. That said I understand the counterpoint, I just think it's not quite as black-or-white.
Do CTFs.
There is not actually much to do with respect to securing web servers. For the most part, you're at the mercy of their code and you really shouldn't try to mess with it or you are probably making things worse.

As far as securely configuring them, that's maybe 2 pages worth of material and should be in their respective manuals. Beyond that, your options are standard host hardening and network segmentation. I actually don't think that is really covered in any of these.

Securing the web application running on those servers, however, is a book worth of material. All of these are too old for any mention of nodejs, but Web Application Hackers Handbook will have some generic web attack coverage.
Previous discussion https://news.ycombinator.com/item?id=14714607 ( 123 points, 10 days ago, 7 comments)
> Taken to the extreme

True, so let's not take to the extreme. Risk-adversion is a quantitative, not qualitative, practise.

I'm not saying minimising risk is the only goal in life, but avoiding very high risks is - do you think cave diving is no riskier than driving a car on the motorway?
That's just semantics; of course everything in some way involves content. It just doesn't get you anywhere thinking in such broad terms. You may as well say every tech business is fundamentally about making money, it's true but it doesn't tell you anything interesting.

Understanding tech companies different business models and how paid-for content fits into that does.
Interresting project, So what's the long term view, to develop an AI agent that is as good as the best human narrators?
Structure and Interpretation of Computer Programs (in JavaScript)
Agreed. Wife and I were both skydivers. We have not jumped since my daughter was born. To be honest, it is not because it is unsafe (there is a risk just driving to the drop zone) but because of the life insurance that we now carry. That being said, even if I still jumped I would not do some of the other items around it like is used to (BASE jumping for example).
I would like to believe that the engineers working on building a nuclear reactor were not so easily fooled by an over-fitting problem; if that were the case, wouldn't that mean we now have actionable information on whether other nuclear power plants are designed correctly?
Before mobile phones were invented, no definition of the phone did include:

- can be carried in your pocket
- are wireless
- have high-resolution screens
- are supercomputers, by standards of 1984
- can send video just as easily as voice

Some words describe function, not a list of ingredients.

Some words change meaning over time.

Sometimes the thing described changes drastically, like bananas http://www.businessinsider.com/banana-fruit-changes-history-...

We didn't create a new word to describe iPhone.

Just Mayo has more in common, functionally speaking, with egg-based mayonnaise than iPhone has with rotary phone or Tesla with Ford's Model T.
I see a lot of mention of 51% attack; the selfish miner attack could be done with closer to 33%(!):

https://arxiv.org/pdf/1311.0243v4.pdf

https://bitcoin.stackexchange.com/questions/38273/have-bitco...
Ask HN: What is preventing rust from replacing c/c++?
"Behaves like the thing in every meaningful way" needs to include nutrition -- and even then, sometimes where it came from and how it was made are also part of what it is. (https://en.wikipedia.org/wiki/Appellation_d'origine_contr%C3...)
The other common example of the same phenomena is a test for a deadly genetic defect with a 1% false positive rate. If the incidence of the defect is .01% and you test positive, its actually more likely that you don't have the disease. (although this can be solved with bayesianism over frequentism).
Would love to hear out a better solution.

We cook because we enjoy it. Its the last part of the interview and meant as a meet and greet of the team, not as an assessment of your cooking skills. Knowing that you enjoy the people you work with, in my opinion, is better than going in dark your first day on the job.

In terms of other processes, I've got through much more laborious interview processes. In the consulting world we'd prep for hours and then go through several rounds of case interviews and getting to know partners. One of our team members is a lawyer with similar experiences. As a software engineer I like to showcase my work. Having the ability to give back to the community and the liberty to pick the project that I contribute to sounded pretty good to me when the team pitched this approach.
This is interesting, but I could see some possible issues.

It would be fun to ask the Devs some questions.

eg: if peers are able to select their arbitrators, how do you prevent a peer and & arbitrator from gaming the system. There is a secondary arbitrator but from the docs it looks like after the initial arbitration the funds are released.

Is there a way to protect against root DHT node hijack? Only refernce I see to this is a TODO: See how btc does this.
I usually do one file per CD. You can usually just cat .mp3 files together, although some apps that expect non-standard metadata can get confused (mp3wrap is a more robust solution). 'cat *.mp3 > disk.mp3' (assuming that ls order is the order you want. Or 'cat first.mp3 second.mp3 last.mp3 > all.mp3') Other formats (like m4a) can be stitched together using utilities like ffmpeg.
You just give a greater value to this life than somebody else does. And you give yourself a greater responsability about. Those are all moral choices, there is no good answer. Only the way you see the world.
That is simply not true. There are many factors influencing your credit score in the US, however as far as credit utilization goes, the lower the better. Your credit score is based on how much unused credit you have.

Your bank may not want to increase the limit on a credit card you never use, but that's about it. If you want a high credit score, get the highest limit you can, always pay it off, keep it around for a long time, and never miss a payment for over a month. You also want multiple lenders (a single credit card won't, or multiple ones from the same bank won't cut it).
But what's the difference?

Either it's risky, or it isn't? If the diver has good reason to think that it isn't, fair enough. But is that the case?
That's a good article - a nice overview. I have a conference talk I give on the same topic called Your Emotional API: https://johnksawers.wistia.com/medias/wnlr918xe7
> It is there on default Fedora installation.

Come on, seriously? That's seriously your 'big reason' for switching? Guys it's 2017, it's not that hard to apt-get install $FAVORITE_EDITOR and scp your dotfiles, it takes less than a minute.

To any of the newbs out there, here's an advice I'll give that I wish someone would have given me in my early years: IGNORE THE EDITOR EVANGELISTS. Vim, emacs, visual studio, notepad, all of those things are inconsequential next to an understanding of proper computer science concepts. I think I spent like an year getting good at vim many years ago. I'm fairly good at vim now, but my goodness do I regret having spent time on that, instead of, say, studying proper maths, studying data structures, getting practice CODING.

I say this because I distinctly recall going over vim exercises, taking my sweet time, and feeling good and thinking "Hmmm I'm really improving here!" True, it's not a total waste of time, I'm just saying don't mistake editor skill as a core skill. In other words, you can get a nice paying job if you can put together a reasonably simple CRUD application made in notepad... but you cannot get a job if you're REALLY GOOD at vim but are unable to do much with it. Don't make the same mistake I did.
That video gives me physical discomfort in my balls. I wonder what the evolutionary explanation for that symptom is?!
>Is anyone really trying to explain/predict all this almanac-of-cognitive-failings with Dual Process?

To my understanding, yes. That's basically what Dual Process theories exist for: to separate the brain into heuristic/bias processing as one process, and computationally expensive model-based cause-and-effect reasoning as another process. Various known cognitive processes or results are then sort of classified on one side of the line or another.

When you apply Dual Process paradigms to specific corners of cognition, they can be useful. For example, I've seen papers purporting to show that measured uncertainty allows model-free and model-based reinforcement learning algorithms to trade off decision-making "authority". This is less elegant than an explicitly precision-measuring free-energy counterpart, but it's still a viable hypothesis about how the brain can implement a form of bounded rationality when bounded in both sample data and compute power.

But when you scale Dual Processes up to a whole-brain theory, it's just too good at describing anything that involves dichotomizing into a "fast-and-frugal" form of processing and another expensive, reconstructive form of processing. One of the big issues here is that besides the potentially false original evidence for Dual Processes, we don't necessarily have reason to believe there exists any dichotomy, rather than a more continuous tradeoff between frugal heuristic processing and difficult reconstructive processing. The precision-weighting model-selection theory actually makes much more sense here.
Show HN: Thoughtwriter – a digital whiteboard for your thoughts
Behind the Velvet Ropes of Facebook’s Private Groups
It's ruthless because existing nation-state actors or other rich actors could invest in mining hardware to take control of the network.

Existing power structures (wealth & access to GPU) translates to power over BTC.
Taking Office Agile
I was hoping for something more like http://r.dakko.us/klange.7 [0]

[0]: https://news.ycombinator.com/item?id=8023258
The degree of engagement is always your choice. You can deem the choice less moral according to your values, but that's the limit of it.
Oh, yeah, it's a mess right now. Debugging especially sucks. I'm hoping that given 5 more years of work on server-side JS we'll get to something that's not miserable, and that transpiling will be a thing of the past
Headless Chrome as Alternative to Server Rendered React
Introduction to OpenAI gym part 2: building a deep q-network in Tensorflow
Thanks for the info. TBH, it seems like describing the process at a high-level is very easy, but each of those steps you listed probably has some education that is needed to set them up properly, know what to look for, research into brands, etc.

Or am I overthinking that part of it?
I'd avoid taking it with a grain of salt... that'll kill ya.
Selling software in the Aviation Industry
I created software for the Aviation industry that is flight safety critical. I have been approached by the company who is currently using the system (Monthly billing) to gauge my interest in selling the software rights to them. My primary concern is the potential liability due to the nature of the software once it is outside of my complete control. Any advice is much appreciated.
An open source protocol to create and explore shared experiences in VR
I'll clarify - I consider Security Engineering and TAOSSA to be landscape volumes - they cover a great deal of depth. Security Engineering is more on the defensive/development side while TAOSSA is on the offensive/assessment side. I agree with you that TAOSSA should be the one to read if you have to only read one.

With regard to malware analysis - TAOSSA teaches source code review to a depth that very few other texts approach in a useful way. Source code review - and the category of vulnerabilities that lend themselves to that assessment - is useful for malware analysis in turn because it teaches the reader what sort of issues malware might try to exploit in a system.

This focuses on the high end of malware - for rote malware analysis and incident response I agree it's not going to be helpful. Like I said, it's more of a foundational work.
It's a good question. Depending on whom you ask, we're either a few years away from this or 20. As of right now, we have no plans to develop our own TTS tech. With that said, it's something we keep a very close eye on.
In that case, we have to define "very high risks" - is it literally just anything more dangerous than driving? if so, why do we stop at driving, why couldn't we be safer? - and then compare "number of cave divers" vs "number of deaths", and then figure out the subcategories of cave divers who're most likely to die and figure out whether this theoretical person falls into them, and so on and so forth.

Taking a specific incident and combining it with "that sounds dangerous" is not likely to come up with anything meaningful.
"I would rather my kids grow up without a Dad than live without my adrenaline fix"

I am neither a father or a cave diver though, so I might be missing a piece of the puzzle. Would either groups of people care to comment?

It is easy to assume that this is the entire picture, but this likely is not true. Perhaps if he were not a cave diver, he would be an alcoholic or a drug addict or beat his kids. We don't know and even if the author does, he likely would not share such information. The world would absolutely not be more supportive of his choices if he tried to justify them with "It's either this or (something far worse)."

If he is actually an adrenaline junkie, this is a matter of brain wiring. It is not a choice. When you are born with something like that, the best you can do is try to channel it as constructively as possible instead of letting it lead to trouble.

There are plenty of people in the world who are criminals, alcoholics, addicts, shit-stirrers of some sort and various other bad things. Adrenaline junkies are sometimes firefighters, EMTs, or soldiers. Those who can't be those things have hobbies like this.

I am a parent. In fact, I was a homemaker and full time mom for a lot of years. I have special needs kids who still live with me, even though they are both adults. I am generally interpreted by the world as a very devoted mother, which is generally accurate.

But I learned long ago that I need to make sure to get my own needs met. I can't live for my kids alone. Doing that goes bad places. I can't be a good parent if I don't first deal with what the woman in the mirror needs to get through the damn day without going ballistic.

I don't need an adrenaline fix and I am not a cave diver. But we all need different things and that metric generalizes. I have seen lots of parents do terrible things because they failed to "put their own oxygen mask on first."
The definition of "washing machine" in 1800 would have mentioned hand-washing — are modern washing machines deceptive? The thing is, eggless mayo is readily identifiable as mayo, and even reputable food publications categorize it this way. I would posit that this definition of mayo based on the way it is traditionally made is flawed, as it fails to include things that are recognizably mayo.
That's pretty uncaring on Nintendo's part. I wonder how many original Nintendo Entertainment System cartridges are destroyed in natural disasters without backup whose owners can only now play ROM dumps of them from the Internet.

My entire Nintendo DS and 3DS cart collection was stolen in a break-in at my place. You can bet that instead of repurchasing I simply bought a flash cart.
Okay, here is my attack:

1. Find drone operators home addresses, information whether they have significant others, kids. Most of this is public or fairly low security information.
2. Send goon squad to pick up significant other and kids
3. Send threatening message with proof you have significant other and kids with the correct level of pressure for drone operator to follow your instructions very carefully.
4. Now disappear. Very quickly, yeah, the military doesn't like to demonstrate that it has glaring weaknesses in their security and tend to send goon squads the other way to solve the issue.

That said, ultimately I proposed a social engineering attack, there are quieter less threatening methods available that could be effective with enough planning. Ultimately the point here is, formal verification can't work, for it to work the model it is verified against must include every possible form of outside influence and the code at all levels must be 100% verified against that model.

So you need to verify everything (including the workstation doing the verification against absolutely every possibility) this is an exponentially hard problem. This is why formal verification is used only in small areas, and why it does not always work, please see the 1990 Arianne 4 launch failure, where while most of the avionics had been formally verified certain data tests had been removed for optimisation and when a sensor fed bad data meant the computer had a bad cast to different data type ditching important information.
Not possible, unfortunately
The topic variable came from awk; most of the whipitupitude variables are direct ports of awks.
Reminded me of the very sad story of Peter Verhulsel: http://www.upi.com/Archives/1984/11/12/Scuba-diver-lost-in-c...
Which chapter(s) of The Tangled Web do you feel would benefit a web server administrator? It is a great book, but it is almost entirely focused on attacking browsers. It's not clear to me what changes someone might make to their nginx configuration (for example) in light of the information provided in the book.
Why didn't you use one of the open source code freely available?
If you can play the audio, it isn't encrypted
If it has to be a general public language, I'm afraid it will have to be light on special characters and abbreviations or acronyms that made sense 30 years ago. I'd say a Basic or Python-like language, but modernised, and with strong typing to enable the IDE to help a lot the users with auto-completion and error checking.

But if you think about it, most business users are even intimidated by VBA. So it will have to be very fluffy, and I don't think you can spare the mandatory coding 101 teaching at school.
An aside - the brilliant Star Trek episode Darmok [1] shows the importance of the shared cultural context in which communication happens. [2] is a snippet of the episode where the crew is perplexed by the "language" of the "Tamarians".

[1] https://en.wikipedia.org/wiki/Darmok
[2] https://www.youtube.com/watch?v=3-wzr74d7TI
This looks like a really cool testbed for 5G. No tall buildings for you to put in 5G repeaters / femtocells. No bureaucracy for you to jump hoops. Small enough that deployment wouldn't be that big of a problem. Large enough to actually do real world tests with phones. Is Nokia (Alcatel-Lucent) doing the deployment because I wouldn't be surprised if they did.
And yet, if nobody ever threw away a job and started something of their own, there would be no jobs for you to have.
Correct me if I'm wrong but I don't see that with 'deep learning' we have answered/solved any of the philosophical problems of AI that existed 25 years ago (stopped paying attention about then).

Yes we have engineered better NN implementations and have more compute power, and thus can solve a broader set of engineering problems with this tool, but is that it?
I hope this means narrated versions of choice Wikipedia articles. E.g., listen to Wired's article "Luc Besson's Outer Limits", and afterward options appear to listen to the section from the The Fifth Element Wikipedia article about the film's production, or the sections from the Luc Besson article about his early and personal life. This would give you a big, royalty-free content pool, and is your hook to keep people engaged (cf YouTube's related videos sidebar).
Visiting any other URL on Elon Musk's new x.com shows Y instead of X
Mildly interesting, could this be a reference to the X and Y chromosomes?

For example: http://x.com/something
I'll echo what the sibling comment said about CTFs. Those are a great way of drilling the theory in the same way you need to drill problems to really cement mathematical maturity.

Practically speaking, read through each chapter and then try to find an example of this vulnerability in an existing web application. Try bug bounties as well to get a feel for where real world developers make mistakes. A lot of information security is learning to challenge assumptions.
Interesting. Previously, the only incarnation of this idea was, to my knowledge, NVO: https://nvo.io/
Besides restricting calories, limiting intake of orocessed foods, and exercising, maintain healthy social relationships and maintain a level of curiosity about the world
I would recommend this well written article: https://www.outsideonline.com/1922711/raising-dead

It's the story about the diver David Shaw and his attempt to recover the body of diver Deon Dreyer in one of the deepest sweetwater caves on earth. A bit of a read but well worth it.
They might already be in a context where they're going to get shot.

But yeah, superficially that doesn't sound like a helpful thing to say.
I'm not sure if it's economically possible to compete with Chinese Bitcoin miners for a number of reasons. To get around capital controls Chinese nationals invest in ASICs and mine to move money out. There is incredibly cheap power in China due to government subsidized hydroelectric and coal. Supposedly many miners bribe power officials and get free electricity. ASICs for Bitcoin mining are made in China and I assume are much cheaper there? It doesn't really matter where the miners are though unless they are colluding due to political reasons to reject transactions.
It's worth pointing out that this is a different star than the dimming / 'Dyson sphere' star KIC 8462852 which was covered in the press earlier in the year.

All very exciting!
Yeah, if it was more prominent that would be better.
"Vegan $NOUN" implies, from my perspective, to taste like $NOUN while being Vegan.

"Just Mayonnaise" implies to me, "This is just mayonnaise". The egg-free should be more prominent and "just" shouldn't be in the title. "Just $NOUN" usually means "This and only this without anything added (or, as I infer, removed or replaced).
Natural Ways to Stay Asleep All Night Long
In Response to “Is Decentralized Storage Sustainable?”
To be honest, its a fascinating scenario which leaves many questions. I'm going to have to ask my geology friends if there is such a thing as an air-tight drilling technique that would not have resulted in the scenario you describe - google-fu doesn't seem to produce results - but I imagine there might be some sort of air-tight sleeve that can be used at the head of the shaft, which may as well be rather thin diameter for this scenario, after all ..

What I'm curious about is whether these cave-divers used this procedure, because they were prepared for it in some capacity. I mean, they managed to start - and then abandon - the idea, in a few hours.