skysight-inc/HackerNews huggingface dataset:
This sounds somewhat unethical, I guess. IANAL but frankly it sounds like the biggest mistake are:

1) If the intern was released and promised money but was not treated or paid fairly according to the written contract, then they should contact a lawyer and sue. If they did not do this, then it's hard to make an ethical argument about the situation. You might be 100% correct, but how can the issues be verified?

2) What you describe is against the law. However, it is not an ethical violation necessarily. It could be that they were not aware of their legal requirement. You could have turned them in and they might have been fined. But it's very hard to judge intent. Maybe they made a mistake. Maybe they posted but you missed it. Maybe their are unethical. How do you prove it? As for the cultural effect, that's not unethical. That may have been their intent. Why would becoming 100% Indian be unethical? If you don't like it as an employee, leave.

3) If you feel that the stock was diluted in a way that was against the law or in some way against your contract, you get a lawyer and sue. If you were slighted illegally for $100,000.00 get a lawyer. Prove it in court then prove it is unethical.

Proving ethical issues is like proving defamation. It's really hard. I guess you could write to the the partners at YC but you might come out looking poorly yourself.
Look into Dwarf Fortress. The world generation is incredibly complex and realistic. The community-driven wiki is helpful as always[1]. Not only is the physical world generation impressive, the generated history and lore is amazing as well.

[1] http://dwarffortresswiki.org/index.php/DF2014:Advanced_world...
I'm imagining a material that can withstand the compressive forces involved.
To reply un-cynically now--you're right.
There's always a way to improve things.

A MD/PhD friend of mine is working on a grant to develop a phone app for third world medical treatment that will give simplified explanations of what drugs should be prescribed for what conditions/symptoms, with pictures. Feel like volunteering? :-)
1	905 9.05091% yarn
2	852 8.52085% git
3	658 6.58066% ls
4	504 5.0405% sudo
5	394 3.94039% node
6	380 3.80038% cd
7	332 3.32033% npm
8	254 2.54025% rm
9	191 1.91019% vagrant
10	185 1.85019% nano
Ask HN: How Google maps detecting real time traffic?
I am curious how google maps retrieving real time traffic details so fluently over the globe.
Bandwidth is obviously not the only cost of ISP. The volume of BW even though internal CDN has to get the data from somewhere. For example in the case of GGC (Google Global Cache), for each 1 Gbps of output 100mbps on average is pulled from the internet. So for someone who is serving 10gbps ggc traffic (not that high really) - they are pulling 500mbps from the internet. Of course, a large stack of GGC servers needs power / DC rack space - which has monthly costs. As per NDA with Google - you can't actually sell Google CDN bandwidth separately from your internet BW (though many do). Also because of this large volume of traffic depending on your setup, you may have to upgrade your internal network capacity including all the way to the last mile for a decent user experience. You also need to upgrade your fibre network - if you were previously renting data (100mbps) from your distribution core providers - for small medium and often large ISPs, now you have to either increase the capacity (can be very expensive depending on which part of the world you are) or you rent a whole fibre core capacity.

People often mistakenly associate the main cost of ISPs is BW. But it's the network equipment, the constant upgrading/replacement, an army of support (both physical and phone), and the last mile connectivity is the major costs. BW itself is a small part of the cost.

Getting both Akamai and Netflix cdn has similar issues, but are harder to qualify/get than GGC cache hardware.

Yes, all these CDN providers are providing us hardware and mostly excellent support in helping to set them up - in most cases, it's setup and forgets. But for them, it's a one time cost, but for ISPs it monthly recurring cost that we can't dump on users without losing customers, we can't charge the CDN providers, we just have to silently bear the cost and hope that in 15 years if we have enough customers, we might be profitable someday.

Everyone loves to hate ISPs, and I am sure a lot of it has some justification. But sometimes the cost and pain are real. That's why there is so little competition in this sector because it involves a huge amount of upfront and recurring investment and really long waiting time before you can hope to finally make some money. Then you have brain-dead regulations from the government (not all countries of course) and aggressive competition from well-connected existing companies with deep-pocket.

There is a reason why Google fiber doesn't roll out all over the country, because even with all their money cache and network expertise and well connection throughout the government - what a daunting task it will be for them to ever be profitable. Your Ad sales can only subsidize your last mile cost for so long.
Myspace was an XSS playground. You could embed javascript into anyone's profile, by leaving a flash applet (or for that matter a java applet) in a comment, and having it do an openurl to a javascript: url, which would execute in the context of the user viewing it.

I had fun replacing people's profile pictures after the page loaded, or stopping all of that annoying background music.

It was also possible to capture someone's document.cookie, as late as 2008.

Good times...
F. Kenton Musgrave has done work on that, starting with this paper in 1989 [1]. Here is a more recent paper which references his work (among many others) [2]. Also [3].

[1] The synthesis and rendering of eroded fractal terrains

http://dl.acm.org/citation.cfm?id=74337

[2] Terrain generation using procedural models based on hydrology

http://arches.liris.cnrs.fr/publications/articles/SIGGRAPH20...

[3] Large Scale Terrain Generation from Tectonic Uplift and Fluvial Erosion

http://dl.acm.org/citation.cfm?id=3028601
Automated Deployment for AWS, DigitalOcean, Other Cloud Hosts
Hey guys i would suggest you to avoid scams and things that are promising you online jobs. If you really want to start making money online, go to ►►►►http://mcaf.ee/4ngo1k . This is a step by step system that will teach you how to earn over 3k per week. This is what worked for me. It only cost a dollar.﻿
“On August First 2017, We the People will breathe new life into Bitcoin.”
After my wife walked out leaving me with two kids, I had no good job to be able to take care of me and the two kids. But this paid surveys at home has been a great assistance to me since then [Check Details Here⇒>►►►https://sites.google.com/site/sandralopz78/ I have been able to overcome all the financial challenges that single mum usually have﻿
Top Free Virtual Credit Card (VCC) Providers – EarnGurus
Why would they do that? To alienate the few people who are still using the website for some reason?
I wonder if strong international demand for American University degrees is why tuition costs keep rising.
> It sounds like you have far too few developers to cover those systems. My company is similar, although with much fewer individual systems. The biggest problem we have is that we expect developers to be familiar with all of them and it's simply too much ground to cover, especially when you add in decades of technical debt.

We definitely do. Unfortunately, it's difficult to hire in our area.

We've settled into our specialties, but that gives a terrible bus factor---the more senior the employee, the more the company suffers if they get hit by a bus. And goes back to the concept of theory building. We do what we can to try to mitigate certain aspects.

> The second you aren't working on something your knowledge begins to fade. If I have to pick up something I haven't touched in three months then it's pretty close to being a new product to me.

Yes---it's very useful to have people who have been there long enough to jog eachothers' memory. There are some core projects that are touched frequently enough to stay mostly fresh in our mind. It's always fun to look back 5--10 years and think about the history of the projects, or joke about the hardships. That's where the real knowledge lies.
> Although sounds like you already have a headstart by knowing Mandarin

I'm currently learning Mandarin, mostly for fun, but I do have this fantasy that it will make me more employable in future (currently an anglo-australian monoglot).

Of course it's total fantasy, because if you want someone technical who speaks both languages, you just hire a Chinese expat, who not only speaks both English and $chinese, but also understands China far, far better than I ever could. And if you're wanting someone who can speak the language, a deep understanding of the culture is obviously also desirable.
I wish someone would make a production ready and resilient version of this as it looks really nice - having all your config in a standard key-value store makes management so much easier.
Too bad that has nothing to do with the topic at hand, namely end-to-end communication between two individually-operated clients.
Python 3.6.2 has been released
Sure :-)

Objectively speaking, the most dangerous moment I've ever had scuba diving was in a straight-sided sinkhole, with no overhead environment at all, doing a refresher course, for the first (most basic) level of cave diving, after a few years off! Some unexpected things went wrong, and I suddenly realized that I was seperated from the group, 40 meters deep, silted out, tangled up, and the scary part: hyperventilating like crazy, and absolutely about to panic. It took every ounce of 35 years of diving experience to keep it together, which I only just managed to do. It was amazing how quickly it went from totally cool, to totally about to panic - it felt like only seconds. It taught me that I'd got MUCH TOO COMPLACENT, and needed to refocus things. This was quite a few years ago, and I felt the effects for several years afterwards.

A later expeience was when I went through a small restriction that I and my buddy had been through several times before. For some reason, my buddy couldn't get through this time, so I turned back - and couldn't get out! Try as I would, it just wasn't happening. I'd go in, get stuck, back out, check my gas, close my eyes, wait for my heartrate to go back down, then try again. After maybe 10 minutes trying, I eventually managed to wiggle out. Now I wear my tanks "side mounted", so I can unclip one or both of them to reduce my profile.

A few months ago, a buddy and I were diving with another pair. We were in front, they were behind. Then they disappeared, so after waiting a while, we turned back to see what had happened. I then found that the tunnel we were going back through, was completely silted out (perhaps 6 inches visibility), and the fixed line seemed to disappear under a rock, into the ground! I couldn't find where it came back out. In our part of the world, you're hung drawn and quartered if you touch the cave - anywhere - at all; but stuff that, I heaved that big sucker off the line, which happily sprang back into place, so we continued into the murk!

The last two examples might seem a bit scary, but those kinds of situations are just part of the learning process in cave diving - every competent cave diver is equipped and trained to handle such things. The first example, mundane as it may sound, was the one that really scared me.

Shall I book you a place on the next course? :-)

[edit: spelling]
It's linked in the grandparent's comment. https://fivethirtyeight.com/features/trump-noncitizen-voters...
I Lived in Airbnbs for 365 Days. Here’s What I Learned
Artificial sweeteners linked to weight gain over time
The fundamental problem is that practically all exchanges are credit-based, and decentralized credit doesn't make sense.

When you want to purchase bitcoins on an exchange, you start out by depositing e.g. dollars on the exchange, thus converting your dollars to that exchange's dollar token (IOU x USD). You then sell your dollar tokens for bitcoin tokens on the exchange, which is super fast because it centrally controls token ownership, and when you want to get your bitcoins out you sell/redeem your BTC tokens for actual BTC.
This system, which is how all large exchanges work, is inherently centralized, because it uses a central debitor (owes USD/BTC to customers) to handle token ownership, which works really well because it puts no limit on performance (as opposed to a system where we use a blockchain to define ownership).

One partial solution is to separate the debitor (funds holder) from the actual exchange: instead of exchanges issuing their own tokens (bitstampBTC, bitfinexUSD, mtggoxBTC, etc.), there would be dedicated issuers (lots of them), and an exchange would constitute a central meeting place, which accepts a specific set of issuers, and to whom people can sign over their tokens in order to engage in a trade. So, for example, a buy order would constitute signing over a token worth the buy order's value to the exchange, which immediately matches it with a sell order, swaps the owner of the matched tokens (after deducting a small fee), and sends the tokens to the buyer and seller.
You may find World Machine interesting: http://www.world-machine.com/about.php?page=features
> The model's intuition doesn't work like a human's

The model doesn't have intuition, it is just a series of computations.
1) Government data https://opendata.stackexchange.com/questions/1767/data-of-ve...

2) Waze, Google Maps turn-by-turn
Note however that several services/exchanges are part of the NYA (segwit2x supporters) too. That's one thing that makes this hard fork much different than previous attempts.
It took me just few minutes to get started as a paid member on this site [Check Details Here⇒>https://is.gd/qKRnJt ] and I work few hours a week but make enough money to last me for a whole month. Talk about less effort and more profit. Paid surveys at home is the best site to join for online surveys. What a great site!﻿
I'm actually having trouble. I do admit that I have a hard time reconciling the empathy expressed with the brutality of murder but I've tried to get at the core of what's trying to be expressed.

You're trying to bait me and I think that's unfair. The story itself about the juxtaposition of caring for an animal that can be clearly empathized with while planning a per-meditated murder (White's words). White literally calls it murder. This is what the story is about. You think it's unfair of me to try and discuss it?

Before you judge me to harshly, notice some of the other comments to my original question aren't saying that they have a hard time reconciling the murder of animals with their emotional attachment, they're saying they love their animals while not caring that they kill them. It's almost as if they're saying that their empathy towards their animals gives them moral latitude in killing them. Is this what White was trying to express? I don't think so but that's what half of the comments to my question seem to be saying.

Was this what White was trying to say? That people should feel better about killing animals because they empathize with them? Or is he saying they should feel worse and work towards a world that doesn't kill animals? Or is he not examining this at all and just expressing an emotion without any introspection? I really don't know and I wanted to see what other people had to say about it.
Photo Grid – Photo and Video Collage Maker APK v6.24 for Android
If you believe people are essentially predatory, government can't save you from them, it just makes it easier to do predation on a mass scale.
Techstars begins it's first Asia Pacific accelerator in Adelaide, Australia
That's another fundamental problem in itself: your car doesn't have much reasoning ability or knowledge of the world, so it can't tell if it's a flying plastic bag or a large boulder.
That may be true but tech-wise no casual game I'm aware of needs Metal so the logic doesn't follow. (Specifically casual games that I've played are not pushing performance so a more performant low level API doesn't help.)
No less secure than most people's bank accounts.
A Norwegian social site back in the days called Nettby ("net-city") also allowed some html, but did it by just removing unallowed tags. I realised I could write <scr<script>ipt>, and after it did the removal of the first script tag I still had one.

This trick still works on surprisingly many sites. Allowing custom html is hard, so think long before rolling your own.
DL/ML == Wisdom of Crowds
I think Google is doing that "mark all cars/street stigns/etc" style of captcha and using the data for ML training and stuff
it asks juust a little too many it comes across as them using the captcha a little too eagerly to collect data.
Just tectonics:

- http://davidson16807.github.io/tectonics.js/blog/

- https://sourceforge.net/projects/platec/

Tectonics with simulated weather:

- http://experilous.com/1/blog/post/procedural-planet-generati...

Just fluid dynamics:

- http://www.fracterra.com/wilbur.html
Exquisite use of the English language. Thanks for posting.
Logicchains, you are aware of how many students are turned down by UC schools yes? It might just be that those folks they turned down would fill those seats.
Mine bitcoins, see content.
I used to think this way, until one day many years later I realized that, (a) using a second language is very cognitively demanding and (b) if you've had to work hard to keep up with the English based instruction all day, it's even more demanding to get yourself to go use that language that's exhausting to use, after hours for socializing or group work. Not to mention that most second language learners of any kind (ex American learning German) will feel dumb/childlike in their inadequacies in their second language.

So imo we'd do well to have empathy towards their situation.
Ads in a text editor? Wow.
I've looked heavily into implementing this. It would take some years, even with a team.
Eating Clean is Useless
IMO, what these adversarial examples give us is a way to boost training data. We should augment training datasets with adversarial examples, or use adversarial training methods. The resulting networks would only be more robust as a result.

As for self-driving cars, this is a good argument for having multiple sensing modalities in addition to visual, such as radar/lidar/sonar, and multiple cameras, infrared in addition to visible light.
In Praise of the Very Best Programming Language
Just to add to this point, with something that Yuval Noah Harari said in an interview with Sam Harris:

"If tensions, conflicts and irresolvable dilemmas are the
spice of every culture, a human... must hold contradictory
beliefs and be riven by incompatible values. Cognitive
dissonance is often considered a failure of the human
psyche. In fact, it is a vital asset. Had people been unable
to hold contradictory beliefs and values, it would probably
have been impossible to establish and maintain any human
culture."
I am not sure about the accurate data, but I feel most universities here in the United States are non-profit organizations (i.e. created not with the goal of distributing excess revenue to members or leaders).

If it is the demand drives up the tuition cost for those non-profit universities, then why not build some for-profit universities here to cater the additional demand?(such as Trump University, or University of Phoenix)
Once upon a time is said once, at the beginning of a story. Okay, so it says "the following is a little or longer story". But what does e.g. "um" several times per sentence say? "I should slow down but I don't wanna"? Even there being nothing inherently bad about them, they're by the same token also not inherently good, though I agree that the example in question is a bad one for a bad one.
The Consumer Price Index versus Your Bank Account
The Promise of LSD Microdoses and Other Psychedelic “Medicines”
This is definitely impressive, but most of it could be done with commodity hardware and open source software. Let's say I have a task queue with objects like (1, 2) and my task is to add them together and push the result in a new task queue - what's preventing me from doing that twice to make sure the end result is correct?

Sure, I have to implement it manually, but at least my screen will no longer covered in vomit because of all the buzzwords.
How to Make Professional Recording Microphone from Broken Headphone at Home
If you want to automate it just use unattended upgrades for security updates within the container.
I'm a huge fan of the Tangled Web, but if you leverage stuff that modern browsers give you, you don't really need worry about most of the content discussed in the book. (I'm still a fan of the book from a web security history point of view).

Specifically, if you have CSP headers you can pretty much ignore XSS risks. Add something to handle CSRF (e.g. Original header or the more traditional cookie/post param) and you are golden.

I haven't read the web application hacker's handbook but I bet I'll reach a similar conclusion.
Fair enough, not worth more discussion.
Ask HN: Is adding money to FOSS contributions toxic?
(Repost of previously buried submission)

Dear HN,

I run a commercial FOSS project and I've been wanting for some time to financially reward contributions from external contributors.

My idea was to set a "bounty pool" and add some money to it (based on the previous month's revenue and what we feel comfortable investing on).

Each contributor would be able to make a "contribution claim". On this claim, the contributor tells what he/she did that month, linking to PRs or screenshots that corroborate such claim.

Then, a maintainer assigns a number of "tickets" to the claim. The number of tickets depends on 1) the relative effort of the contribution(s) and 2) the impact that contribution had to the project.

(The relative effort would be calculated as "if one of our team members were to do it, how many hours would it take?").

After the month has ended, we run a small "lottery". Random tickets are selected, and each selected ticket is worth, say, $50 that the contributor can later cash-out using Bitcoin (or wire transfer with fees deducted).

This idea is well-intended, but my biggest fear is that it could make my community toxic. Contributors could possibly get overly competitive, or maybe upset because a claim did not reward as many tickets as one expected.

I do not know any open source project that does something like this. Things like Bountysource do not apply because they are centered around specific issues. Within our project, a contributor may help in different ways that do not necessarily translate to issues.

I have several questions regarding this "experiment", but maybe the most important ones are:

1 - Do you know any project that implements such reward system? Or maybe failed attempts?

2 - Do you believe adding money to open source contributions could demotivate contributors or create a toxic community?

I feel that's an interesting subject and I'd love to have HN's take on it. Cheers!
nice article
a good content security policy goes a very long way towards allowing workable custom html
I completely agree with everything you've said. The only thing I'll add is that Blockstream's CEO was replaced. It was originally Austin Hill and the current CEO Adam Back replaced him. Not an improvement, but it was a change.
Interestingly the FT's paywall is immune to this in my testing. Device fingerprinting?
Sucks, since Kite looks pretty neat.
>Can you use that system as a security alarm and send push notifications to your phone?

Yes, you can. https://github.com/witnessmenow/push-notifications-arduino-e...
is this a rhetorical question meant to show that blockchain is not the appropriate tool for financial clearing?
Sure there's a subsystem for win32.
How the Tech World Apologizes