skysight-inc/HackerNews huggingface dataset:
It feels like the de-facto network policy design methodology, which I am yet to see implemented in open source, is one in which CI/CD test processes observe network utilization in test environments and automatically implement restrictions for deployed instances.

For example, and ingress-only static content webserver would not require any outbound internet access.

The same approach could and should be used for other observable and manageable layers (filesystem access, syscalls, language interpreter-specific function call whitelisting, etc.).

I am waiting for a security-focused CI/CD tool to own this space. Even a light touch implementation would surely improve greatly on the status quo.
I am curious, if the SEC investigated and issued a report on DAO...why not investigate the Ethereum Foundation/Blockchain itself for the ICO of Ether? I'd like to see the SEC issue a written finding on the factual distinction and legal analysis how one is a security and the other is not, it may be as simple as the way the DAO tokens were marketed vs how the Ether ICO token was marketed.

The FileCoin ICO will be the first CoinList ICO, seeing as it was set for 2 days from now I wonder if it will be effected. All the major crowdfunding websites seem to offer equity funding options now, and I'm curious about how they pull that off legally, but if they do, I imagine CoinList will jump through the hoops so FileCoin is compliant.
the specific people who are most hurt by bad law enforcement also tend to have the least power to "get some new servants."

so who's fault is that? usually not the victim. or at least the most direct victim, since obviously, society as a whole is hurt by this sort of thing (just not as much as the person who's wrongly harassed/injured/killed by the cops).

but maybe your point stands, because is that really a "legitimate democracy"?
People love feeling like they have something. Karma points, for example.
There's another side to that, too: Highlighting shippers that are unreliable or hostile to drivers. E.g. shippers or facilities that have disorganized staff, incur egregious waits, etc.
I have the feeling that the fact that imperceptible peturbations changes the labels, means that our networks/models don't yet look at the "right" parts of the input data.

Hopefully, this means research will focus on more robust classifiers based on weakness identified by adversarial approaches!
I would agree, but I think the problem with trains is you have to load and unload the containers onto railcars.

I've seen UPS and FedEx semis pulling 3 short trailers on interstates. I assume they're only limited by current regulations on weight and length.
That's gotta be some kind of pick and choose fallacy (availability bias?). Those two happen to be high-status individuals from old high-status science disciplines so they tend to get whatever they say amplified. I wouldn't use this kind of reasoning to figure out what opinion AI professionals as a class have, but I do know there are more celebrities outside of AI than inside of AI.
I'm not so sure Adobe failed. It was ahead of it's time, and the slowly but surely the market caught up. And then Jobs put the nail in the coffin.

Some technologies are meant to come, leave their mark, and then go. That's just the way it is sometimes. But that doesn't mean Adobe failed.
Show HN: Detailed analytics and reporting for your Mailgun transactional emails
I've got a copy of P,P&Z, and to be honest I like it more as an aesthetic piece to go in the book collection than a serious read of any sort. It's got a nice hardcover, looks nice in the collection, and it's not too bad as a conversation piece.

Agree, it's hard to read through. But I don't regret buying it for it's own silliness.
Ask HN: What are the obstacles to bootstrap Lisp machine on Cello's bio Verilog?
In "Nexus" by Ramez Naam, the central protagonist builds an operating system that runs on nano tech and interfaces with his brain. I know we're obviously a ways away from that spectacular hacker fantasy, but I've noticed some interesting projects the last few years that have left me wondering if they might constitute a path towards building a biologically based Lisp system.

First off, Cello ( http://cidarlab.org/cello/ ) is a way to build genetic circuits with Verilog.

Secondly, there is a lot of prior art about building Lisp Machine's on FPGA's and with Verilog and it's cousins:

https://github.com/lisper/cpus-caddr

http://www.frank-buss.de/lispcpu/

http://www.aviduratas.de/lisp/lispmfpga/

https://github.com/jbush001/LispMicrocontroller

It's seems to me that Lisp Machine's died out for a variety of market and hardware reasons, but if it's possible to bootstrap them in biological systems this could be Lisp's last laugh!

I don't have the chops right now to take this idea further than speculation, but I know that y'all are definitely the folks to ask for more direction. Is there a clear path here? How would you go about building a "shell in a cell"?
33% on dedicated servers, 35% off VPS hosting and 34% off HIPAA Compliant Hosting
For me the biggest influences underemphasized in other sources are to be alert for relentless simplification, for 'mechanical sympathy', for ways changing your problem could make it much simpler to solve -- and that there's an agility in using a simpler programming system like a Forth which you grok and can change as you need to, which can sometimes outweigh the leverage of a big one that comes with lots of stuff already done for you. These are useful points of view even with Forth being almost never the most practical tool now. Its day was already passing when I learned it in the 80s.

Also, though I don't think this was quite in the book, it helped lead me to the idea of refactoring and its synergy with automated testing almost a decade before the idea started spreading.
It doesn't take much AI to create smart weapons. A smart drone can do a lot of damage. I don't even want to think about a level 5, completely automatic, car, which is what tech visionaries are aiming to create.

Tech creators look at the bright side of their creations. They have tunnel vision and can't foresee the harm. If they can't others need to.

The criticism that Musk does not know enough about AI ignores the fact that he is trying to create a fully automatic car with AI and has experience with its limitations. Yes AI(a catch all process for making computers do things that require intelligence when done by humans) is a process and it has no intelligence in itself but you can say the same thing about C++. It's just a language but look at what's possible to do with it.
I spend most of my time writing in Swift, The rest of the time I'm JavaScript, talk about a schism. I greatly prefer Swift, which is why I'm installing Typescript this week. Maybe because I'm less experienced with JS, but I make too many silly mistakes in it.

I know a lot of people love the freedom of JavaScript, but I also know lots of people write crappy code.
Angular Services = singelton city
> I LOVE the pattern-matching/deconstruction/guards stuff. It eliminates SO much boilerplate logic.

I recently ported some simple plaintext operational transform code to Go and Swift to compare the languages, and this is so true. A lack of parameterised enums and a decent match block resulted in the Go code being about 50% larger than the swift equivalent. And the extra size bought me nothing! I find the Go code to be less readable and it had more bugs out of the gate.

IDE screenshots:

https://twitter.com/josephgentle/status/876639761166770176

Its a shame too, because I adore Go's concurrency features and APIs. Server side swift seems barbaric, and I lust over Go's scheduler and networking APIs.

Maybe its time to give Elixir a try. It sounds like it might be at a nice sweet spot of modern language features, concurrency and a mature ecosystem.

(NB: I'm new at both languages. A more experienced Go programmer might write that code differently. I don't find myself wondering that with Swift because its much more idiomatic.)
With all the DAO hacks and criticism of Solidity, why would one use Ethereum?
What's the cause of "unreliable truckers"? Is it that their ability to be on time is unreliable because of uncertainty in the travel time and traffic, or that the humans themselves do their job unreliably?
Robustly synthesizing and delivering adversarial input to cameras in the wild in real time is a very different problem.
Easier to just blind then with a laser. Which you could also do to humans, if you're adversarial enough.
I strongly disagree with you and I'm guessing you don't have much experience hiring.

You reference lawyers and doctors but they have already spent years in dedication of knowledge and experience. That's simply a bad comparison.

This is about a junior developer not mid-level or senior. At some point as another comment says you have enough experience to not focus on it outside of work. In the beginning if you don't have passion and a desire to learn which your time at work won't be sufficient for, it's probably a good indicator you won't be a good engineer.

Further your eight hours a day 260 days a year number is hogwash in the real world. No one gets eight hours of coding a day done unless they're prototyping in a cave isolated from the world. Communicating through pull requests, ticket systems, emails, slack, etc drive real productivity to somewhere between 3-6 hours a day depending on the company. So what it really means is you're talking 1.5x-2.25x the amount of time. That's assuming all learning is equal and the you're given tasks which linearly increase your knowledge (which is just nonsense). I for one would not want to hire someone who needs three or four years of work experience to overcome their "junior" title.

I'm also in no way advocating they work more than 40 hour weeks or donate their time to the company. They need to be passionate enough to push their knowledge over a series of plateaus.

A lot of people go to "code schools" now but lack passion. They want the pay thinking it'll be easy because of shitty and evil marketing campaigns that make false promises. That passion will prevent them from excelling at the work.
React Native free training book and video
Reddit is an entertainment platform, not a news outlet
> 3) those officers should not be officers anymore AND they should be held to some level of personal responsibility for their actions

yes. that. that seems so obvious, but it also never seems to be the way things actually play out.
I love it. Let's go a step further: make one set of boy and girl scout badges from the union of both sets.
This is probably the most positive "more girls should do STEM" initiative I've encountered yet.

> Financial Literacy badges prepare girls for a financially sound future.

This seems exceptionally progressive.
> Levine agreed that research into potential causes was needed. Numerous possibilities have been mooted, with research suggesting links to body weight, a lack of physical activity, smoking, and exposure of pregnant women to chemicals found in myriad household products, known as endocrine disruptors.

various prescription drugs?
Sure, but that isn't JavaScript and isn't needed at runtime anyway. It's literally stripped out, not even compiled (unlike TS)!

Flows type system is amazingly powerful, too, which I adore. So I'm biased; being able to emulate HKTs with real type checking gives me the dynamic power of JS with the type safety I want; and it's an easier sell than Purescript ;)
Your comment reminded me of this talk https://youtu.be/BuFTHOgsgAY especially the conclusion that something that rely on access patterns can't be trusted because it's almost impossible to validate all code paths.
In my limited and non-lawyer understanding, that's not the SEC's modus operandi for investigations like this.

They want to leave themselves room to study the market and issue definitive guidance later. Also, these investigations cost time and money. So to discourage bad actors, they go after the most obvious offenders but it's not really in their best interest to present a positive counterpoint.
> If the latter features are of interest to our Government, we shall be pleased to take up the matter either on a basis of providing machines of agreed specification, at a contract price, or, of furnishing all the scientific and practical information we have accumulated in these years of experience, together with a license to use our patents; thus putting the Government in a position to operate on its own account.

I took this to mean that they were inquiring whether the government would be interested in a system manufactured according to specifications agreed to by both parties (or just providing the IP according to a license agreement), not necessarily for a pre-existing system. Necessary modifications to a system do not make for a fully developed machine.

If you're implying that the Wright brothers are not looking for R&D funding like Langley, I agree. They made that explicit in a later letter to the government. It's too bad that the government gave funding to Langley yet somehow rejected contracts to complete a working system with the Wright brothers, despite their initial successes.
are we sure they weren't talking about apple sauce?
He's talking about how the government systematically Rob's from the future through inflation - in particular hurting the poor the hardest and creating lost decades and millennials along the way.
> Sigh...the one hundred years before 1990 was really a period of giants, with Claude Shannon, Kurt Gödel, Alan Turing, John von Neumann, Emmy Noether, David Hilbert -- as well as Albert Einstein, Paul Dirac, Louis de Broglie and the other quantum guys...

Most of giants of that period are giants in hindsight. We can see the results of their work and how those results still hold up today. I imagine those in 2117 will have their giants between 1990 and 2090 just like we do today.
No, pick every advancement/breakthrough in technology and you'll see it either enhanced a weapon or created a new class of weapon. No cherry picking. If it can be used in society it can be used in war.
Yes:

> Adversarial training seeks to improve the generalization of a model when presented with adversarial examples at test time by proactively generating adversarial examples as part of the training procedure. This idea was first introduced by Szegedy et al. [SZS13] but was not yet practical because of the high computation cost of generating adversarial examples. Goodfellow et al. showed how to generate adversarial examples inexpensively with the fast gradient sign method and made it computationally efficient to generate large batches of adversarial examples during the training process [GSS14]. The model is then trained to assign the same label to the adversarial example as to the original example—for example, we might take a picture of a cat, and adversarially perturb it to fool the model into thinking it is a vulture, then tell the model it should learn that this picture is still a cat. An open-source implementation of adversarial training is available in the cleverhans library and its use illustrated in the following tutorial.

http://www.cleverhans.io/security/privacy/ml/2017/02/15/why-...

https://arxiv.org/abs/1312.6199

https://arxiv.org/abs/1412.6572
No. It's not the new smoking. There's an uncomfortable process involved with acculturating to social media and it will continue to evolve, but there is far more upside when used well which is hard to say with smoking.
Fascinating stuff — off the top of my head I can see this being used in: user research, political campaigns, crowd control. Imagine applying this technology to a political campaign to see how people respond in real-time... A Black Mirror style future where the politicians who use this technology dominate in elections because they're a/b testing what to say and how to say it.
Flow doesn't require you to write what's above at all for the most part, and it's type inference and flow analysis is amazing. Your applications code will have few type hints if that's what you want, and your core libraries can have the extremely specific types as what's show in the parent post. I dunno, I like TS and Flow, and gradual typing with excellent inference means it rarely gets in my way, even when calling out to JS libraries that are as dynamic and loose as you can get.
Containership Launches Its Fully Managed Kubernetes Service
There's not much to remove. You install Flash on macOS separately and Safari will load that in as a plugin. It seems obvious that Safari will remove that plugin functionality on or before 2020.
Typing with Pleasure
Ha! Bum-Proof-Bench, another turd making existence worse for everyone.
A flow is defined as a unidirectional sequence of packets with some common properties that pass through a network device. [...] for example, flow records include details such as IP addresses, packet and byte counts, timestamps, Type of Service (ToS), application ports, input and output interfaces, etc.

From here: https://tools.ietf.org/html/rfc3954
IMHO the "holy grail" of decompilation is to decompile the compiler, compile the decompiled decompiler, and get back a functioning decompiler that can also decompile itself ad infinitum. After several iterations, it may reach a fixed-point... this is essentially the exact opposite of what's customarily done with compilers: compile the compiler with itself, and repeat with the self-compiled compiler until a fixed-point is reached.

Thus, I naturally tried this one on itself, but that didn't work so well --- it spent several minutes analysing, then crashed.

Then I picked something slightly easier, upon which it did manage to decompile successfully, but the output is... not exactly what I expected. Copious void pointers of various levels of indirection (plenty of "three-star-programmer" code...) and reinterpret_cast sprinkled everywhere --- I have the original code and it was written in C, so it amusingly enough decided to automatically convert it to C++, along with the inability to recognise accesses to local variables leading to long sequences of -4-4-4-4+4-4-4+..., mean that for me it's not really all that better than reading the Asm directly.

The latter test was with a binary compiled with a very old compiler, so I suspect something with the newest optimising compilers will produce even more confounding output.

That said, it's great to see plenty of decompilers being written and released publicly; I remember around 2 decades ago when any mention of decompilation would be met with disdain and chants of "that's impossible!" Hex-Rays and IDA may have spurred a lot of this development; but speaking from experience, cracking groups have always written their own private decompiler-ish tools, mainly featuring dataflow analysis.
ServerlessConf NYC: Back Again
How I gave up alternating current (2015)
People click on this because they are scared(fear) and outraged about fear and outrage being used for monetary purposes. How ironic!
I saved the recent "Terminal and Shell Performance" article [1] in the Wiki for my shell [2], and I saw that I had saved this great article on a similar subject (editor lag vs. terminal lag).

In this article I examine human- and machine aspects of typing latency (“typing lag”) and present experimental data on latency of popular text / code editors. The article is inspired by my work on implementing “zero-latency typing” in IntelliJ IDEA.

[1] https://news.ycombinator.com/item?id=14798211

[2] https://github.com/oilshell/oil/wiki/Interactive-Shell
The GEDCOM file format is basically nested documents, and uses graph like pointers for linking things, so it is not that bad.

The actual data model is terrible though, as it was created by the church based on their 'traditional' style families.

However, most programs do not use GEDCOM to store their data (they might use an SQL database for example), but merely as a way to transfer data between programs.

Also note that there is always someone working to make a replacement for GEDCOM. Some of the latest efforts are GEDCOM-X (made by the church again), and the work by [FHISO](http://fhiso.org/). A lot of such projects, eg BetterGEDCOM, get bogged down in 'internal' politics, and rarely get anywhere.
Show HN: Musikcube, a terminal-based music player, library, and streaming server
I created Suet because I wanted more detailed analytics of transactional emails I send for other projects. For one, I would love to be notified of failure deliveries and complaints. Then view performance in terms of opens and clicks and see who my top recipients are. These, and more, are the features of Suet.
it's just a raw human-readable ascii file...much less scaring than a usual QR code...

(a while ago I was wondering if I put up a sign with a QR code by the side of a pedestrian road, then how many passersby would simply scan it without thinking?)
No, quite different approaches and goals.
Interesting. I worked on a larger project that used Oracle and a similar approach. The maintainers of PG actually advocate for this abstraction as well (maybe not the multiple responses, not familiar with that aspect) but most developers and frameworks ignore it.
""[Shannon] didn't have much patience with people who weren't as smart as he was." It is telling that Shannon's few friends were themselves some of the era's greatest intellects: Alan Turing, John Pierce, Barney Oliver, Vannevar Bush."

Did Shannon ever meet von Neumann?
I saw that too with the standalone binary --- it seems to be a failure to understand local variables on the stack.
The case for private ledgers is coordination among a moderate number of non-anonymous mostly-untrusted entities. (Whether this case ever exists is left as an exercise for the reader.) They can't use a central database but they don't need mining either; variants of BFT can be used that work as long as (n/2)+1 entities are honest.
How to Wipe Android Phone Completely Before Selling
So I see CoinList uses AngelList, which I think verifies accreditation via financial accounts.

From what I've read, the SEC doesn't mandate any particular method to verify net worth. In this space, wouldn't it make sense to accept a signature proving ownership of a large ETH balance?
> Social networks, contrary to smoking, are built on the very nature of human beings: being social animals.

I can’t think of much less social than sitting by yourself, in your own little world, consuming an endless feed of nothing on a web site. If there’s anything Social Media isnt, it’s “social”.
Sure!

One of them is hooked up to a button on a humidifier in my house. I pulled it apart, and just solidered it to one of the buttons and just have the esp8266 respond to some lan rest commands. Using Hass I hook that up to the nest's indoor humidity sensor and it auto turns on when needed. Then I grabbed a small load sensor and hooked it up to the ESP8266 to every hour or so send the load value back to Hass for the water tank in the humidifier.

So now I also get notifications when I need to fill the water reservoir!

Most of them are little things though. One is solidered to the light in my oven that shows if it's on or not, and it can notify us if we leave the oven on, another uses a very hacky (literally 2 paperclips!) Short sensor to say when I open a drawer next to my desk. If I haven't opened it by 9:30 and work is on my calendar, it will notify my phone reminding me to take my medicine!

Once you have the major components setup in something like Hass, and you've worked through the headache of setting up the esp8266s, it becomes really quick, and there are so many uses for them.

My next idea is to put a load sensor in the center post of my chair and notify me if I've been sitting for too long (and maybe of the sensor is accurate enough, maybe weigh me every day? I'm like 90% sire it won't be though...)
Not to accuse anyone of laziness, but on mobile the UI is clearly not optimized to see the comparisons, assuming that wandering the directories is the intended method.
Biologists reveal the hidden history of ancient gospels