skysight-inc/HackerNews huggingface dataset:
> “In 2017, leaving your crypto algorithm vulnerable to differential cryptanalysis is a rookie mistake. It says that no one of any calibre analyzed their system, and that the odds that their fix makes the system secure is low,” states Bruce Schneier, renowned security technologist, about IOTA when we shared our attack.

Indeed
Sorry, didn't mean to make it sound like that! Just didn't want to stray too far OT.

But I meant what I said.. we work with a lot of larger companies that need to integrate Userify into docker, ansible, terraform, chef, cloudformation, etc. There's so many different ways that people prefer to manage their systems that we don't want to push a single One True Way(tm).

We instead try to cover 80% of the use cases with a simple script that can be deployed in a typical cloud scenario which is open sourced at github -- and then customers can customize when necessary or even provide pull reqs back if their customizations are generally applicable.

Some of the parent's complaints are themselves a result of issues that customers have run into, and if this buried in an RPM, it'd be a lot less transparent on what it does and how it works. For example, we force a pip upgrade, because the version that's built into RHEL6 is too old and can't build cryptography, etc. We also don't forcibly add pool.ntp.org -- we run ntpdate against it to get a quick clock set. We have to add EPEL because RHEL6 and RHEL7 don't provide Redis in their own repos. This is designed to be run, as the docs clearly state, on a clean RHEL7+ or Ubuntu 16+ instance with defaults. How you customize it, either before or after, is entirely up to you.

Anyway, Userify is certainly not for everyone. A lot of people still prefer to manage their keys with shell scripts or Chef or something, which usually works great for small teams with flat perm structures.

Sorry for sidetracking the discussion about Atlassian. Even though we don't use their software, I'm a big fan of their success story. Mike Cannon-Brooke's deck on how they scaled Atlassian from $10k on a credit card is really quite awesome.. I can't seem to find the video of him presenting it at a conference, but the deck alone is great:

https://www.slideshare.net/mcannonbrookes/scaling-atlassian-...
Amazon has "frugality" as a core cultural value. They take pride in not doing any better than "meh" if anything more than "meh" costs more money.
Yup but coverband doesn't do code coverage during tests (like simplecov); it does code coverage in production by sampling requests and profiling them.
Project M36 allows for storage of functions: https://github.com/agentm/project-m36/blob/master/docs/atomf...
I think healthcare causes a big split. Lower income would-be full time jobs get split into multiple part-time slots when employers don't want to pay healthcare. That drives even lower compensation on already low paying positions. It would be interesting to see a graph over time of hours worked by income deciles for example...
More money is always tempting.

Are you really working 3 jobs and not able to guarantee making rent? I can't imagine what that must feel like.
If we didn't tie the acceptance of statements which can be supported or dismissed by evidence

* climate change is a measurable effect

* humans have a non-trivial impact on climate change

with and particular blame or course of action

* The coal industry is *bad* for contributing climate change.

* We must immediately reduce our consumption of meat and oil.

then I think we would have a lot people suddenly be in agreement about the facts.
By OCM you mean a one-click miner?
The latter example you gave will still not type-check in Dhall, although I'll still answer the spirit of your question

You can write expressions in Dhall that will take a long time to evaluate (see the Ackerman example elsewhere in this thread), but it's harder to do so by accident. Totality checking is worthwhile for the same reason that seatbelts are worthwhile: they don't protect against all accidents, but they do protect against a lot of them
Ryanair's been criticized for safety issues over their 25-30 minute turnaround times, which don't count taxiing time.
A Few Bad Scientists Are Threatening to Topple Taxonomy
In general, I find 1-10 rating systems too much, it's just too much granularity when the measure is purely subjective anyway.

I like 1-5 better, but the descriptions are the best, "Hated, Didn't Like, No Opinion, Liked, Loved".

At the end of the day, if your sample is big enough, I think the new Netflix approach is really the best, liked or didn't like, and then you can draw from that what you want based on demographics, etc.
How does NAT create this limitation? Maybe I'm confused by your use of "connection" here but a device behind NAT can handle multiple connections just fine, and the common techniques for poking through NAT are not limited to a single connection either.
I do this by bringing samples of my code and documentation.
As if we didn't already have enough tools to judge & categorize people based on cursory, inconclusive, and superficial information.
I haven't found any embedded interpreters or runtimes here. Quite the opposite, I see they have libraries they ship with other languages that a user has to use in order to receive http requests.
Tasers need to go, it's bad enough to treat animals like that. At least before they shoot someone they think twice, and getting into a baton fight means risking getting hurt; this is not a bad thing in itself; the goal should be to de-escalate any situation and avoid violence.
Patents ? Then sell the leftovers to Lenovo.
12 Essential Books on Typography
Its simply not as cool when its legal, and grandma does it.
> word length as a proxy for difficulty

Frequency of words by string length:
https://www.researchgate.net/figure/229065838_fig1_Figure-1-...
Other airlines tried the same thing (https://twitter.com/AirlineFlyer/status/905433106475311104) but had to turn back.
IPv6 doesn't officially support NAT, so it's a stretch to include the port numbers as host identifiers the way IPv4 NAT can.
Oddly, this is the ONLY thing I think HipChat has ever done sanely.

I've been using sed expressions for almost three decades to alert my fellow chatters of an error in my previous message.

The first time I did that in HipChat... It edited my previous message. I nearly fell off my chair. It was and is probably my favorite HipChat feature.

s/favorite/favourite/ for my English fellow humans. :)
Irma made Barbuda 'inhabitable'
It actually has an okay rotten tomatoes score.

You see this kind of voting on anything where people get angry at it. Look at games that have their audience scores drop massively because they make something some portion of their audience decides is just absolutely awful despite the fact that they still play it (e.g. Playerunknown Battlegrounds is massively popular but has a mediocre score because they pissed off some people with some DLC thing).

I do agree though, all the complaining about rotten tomatoes is misplaced.
Then my first step would be to check the logs, or start logging if there are none currently.

You get a nice structured logging format set up, log every request, and feed that into something you can graph and query. Leave that on long enough (long enough being a length of time that depends on what the endpoint does and how critical it is, as well as how much traffic you see regularly) and you can figure out what's being used pretty quickly.
WebBreaker: Build functional security testing into your release pipelines
On a related note there was a paper presentation on the economics analysis of the blockchain from the Toulouse School of Economics a few months back.

[1] Presentation
http://econ.sciences-po.fr/sites/default/files/file/melissa/...

[2] Presentation
https://www.tse-fr.eu/sites/default/files/TSE/documents/doc/...
Improving Linear Models Using Explicit Kernel Methods
Go does shortcircuit to sendfile where possible.
For the purposes of evaluation, it's still an improvement to have a total language. As I mentioned in another thread, using a totality checker is like wearing seatbelts: it doesn't protect against everything, but it's still a huge improvement.
Totally agree that there are real downsides and complications. I didn't mean to diminish those. My point is that the post I was replying to (and a lot of people I talk to in the US), operate under the assumption that it has to be this way, because this is the way it is in the country we happen to live in.
Commercial pilot here, currently flying transatlantic routes. I avoided Irma last week while flying to Buenos Aires (it was not this big yet). I have partners in San Juan at this moment, bunkered in the hotel.
We see this as a crazy move, very well executed, but too risky for the plane itself (not so much for the crew).

Let me explain, the metar and tafors (the airport meteorological reports we use) during the flight in San Juan show that the flight was doable. No crazy winds during landing, and worsening during take of but well within the limits you may find in a local thunderstorm.
The predictions allowed them to see the window to fly in and out. If arriving the weather was too bad or you see the hurricane getting too close to the airport,they could have got away without landing.
For take off either you have the right conditions (under the legal limits) or you don't.

What they risked IMHO is having some kind of technical problem or delay once in San Juan and having to stay there to weather the hurricane. That could mean heavy damage to the airplane while on the airport, even a total loss.

That said for me the most amazing of it all, is not the short stay at the ground. While very fast is not uncommon to see them with an experieced team, the slower part is the disembarking and embarking of the passengers, and they surely were all motivated to hurry.

The most impressive is how they followed the quite thin alley between the hurricane arms till they were clear of the bad weather. In a situation like that you only see red and magenta in your radar and a narrow black or green zone where you can fly safely. That's surely was the most scary part for them beyond the adrenalin of a fast and potentially dangerous operation.

Looks like the typical movie scene of a spaceship passing between closing doors!!
Certainly brass balls.

Edit: some typos and a "don't" that I left behind and was changing the meaning of a sentence. Sorry written from the cellphone.
Warning: Autoplaying video ad.
No audio, so that is a plus.
I don't have to. They're pretty vocal about it, and it is widely reported in the media (because liberal democracy with free press). Not all 'natives' necessarily agree (quite a few work in the industry). There are also a wide variety other Canadians who live and work in the area who have strong opinions, on multiple sides of the argument. This is hardly surprising, as it is a controversial issue, and it certainly won't stop being one.

I bet that if I asked people (native or otherwise) about local fracking operations, coal mines, tailing ponds, power plants, refineries, offload and storage facilities, etc, etc, in any country I will find a bunch who would really rather they were somewhere else. I'm not sure why that's important to the discussion.

As for the reported "straw man", you seem to be under the impression that I argued that tar sands were wonderful and that Canadians truly enjoy living near them. Which is, of course, a straw man. I made three points: (1) The assertion that Alberta bitumen mining has twice the C02 impact of other sources of petroleum is provably false and (2) If you do not change the demand for petroleum products and do not want to source them in Canada, you have to source them somewhere else. (3) Other sources aren't necessarily much more palatable, especially if you include factors like support of the economy of the country of origin and the source producer.

Where's the straw man?
San Marcos already has the SAT2 fulfillment center, I'm not certain the city would benefit from another big Amazon presence.
http://www.shakirm.com/slides/DeepGenModelsTutorial.pdf
And how many criminals resisting arrest have you dealt with, this year?
I was looking through the literature to see if there was good evidence for this, but didn't find much. This paper seems to address the issue most directly, but fails to find much of a causal relationship; indeed, the increase in heroin use predates the reversal in opioid prescription trends.

http://www.nejm.org/doi/full/10.1056/NEJMra1508490#t=article

I don't doubt that prescription opioid abuse is itself a problem, nor that it may exacerbate the heroin epidemic, but the evidence suggests that it does not play a large casual role.
The team based compensation is interesting but I don't think any company other than some startups would go for it. The main reason would be falling afoul of discrimination laws. The teams would be highly incentivized to exclude people that they thought would be less productive, say a pregnant woman who the team thought would be out for a long period, but the government will be holding the company accountable and not the team itself.

It's the same result of you get what you measure
Introducing PDFXKit – A Drop-In Replacement for Apple's PDFKit
Three UK Mobile Internet Outage
Fauci’s Zika Bomb Fizzles
Having lived in Indianapolis for about 15 years, I also say it is unlikely. The talent pool is too shallow, because tech employers just haven't been there. I had to move to Chicago after graduating in order to get a [decent, career-advancing] job as a software professional. The majority of my high school friends also moved out to find jobs after college.

And parent confirms some of the other problems I have with Indy. Unigov overwhelmed the urban core with township voters, so city-county government is atypically conservative for a Midwestern city, which has a major impact on statewide politics. (Still less conservative than where I am now, though, and trust me when I say that being liberal or libertarian in a conservative state is like rubbing a cheese grater on your soul every time you visit the polls--no good options, and sometimes you don't even get two whole evils from which to choose the lesser.)

If you want to fly anywhere, you have to connect through ORD (American, United), MDW (Southwest), or ATL (Delta, Southwest). The direct flight to anywhere probably only runs once a day or less.

Also, all the tech people with kids will undoubtedly cluster in southern Hamilton county, and Washington or Lawrence townships, which won't be great for traffic, because there's no limited-access highway to downtown from anywhere on the north side. And what public transit? I might have seen a bus once or twice, while visiting downtown, within a 5-block radius of the circle. And the hospitals have a monorail since the merger, I guess. Beyond that, you're driving or walking.
"We serve and protect."

"We serve ourselves and protect our own."

Some police forces have procedures where they do things like

--keep their distance from agitated people.

--warn them several times and try to talk them down.

--then say "taser taser taser" before discharging the weapon.

These seem like good procedures to follow.

If I were to assault a person suffering from a condition such as "excited delerium syndrome", and that person died as a result of my assault, I would be guilty of a crime known as "felony murder." I'm pretty sure the legal priniciple is stated as "you take your victim as you find him." It's not a valid excuse to say, "I didn't know the guy had a heart problem" if he has a heart attack right after I assault him." And, if I say, "I knew he had a heart problem," then that makes my crime worse.
Just in time for Xcode 9? :)
From Sex Object to Gritty Woman: The Evolution of Women in Stock Photos
> The fact there are no laws against that is evil.

Except that is not a fact, at least in the US.
Litecoin Semitechnical Primer
'High Stakes, No Prisoners' by Charles Ferguson is very good on the early 90s and the dawn of the web. Ferguson was a government technology policy analyst who realized very early -- around 1990 -- that the web was going to be a big thing. So he started up Vermeer, which made a web site building tool that eventually became Microsoft FrontPage. Lots of period detail about tech and business in the eary 90s. Ferguson spent vast amounts of time, energy, and frustration explaining to VCs what the Internet was and trying to convince them it would be important. Lots about creating FrontPage at Vermeer with early 90s tools practices and people, then much more about the acquisition by Microsoft. Lots of vivid portraits
of particular VCs, tech people, and Microsoft people.
Yes that Flock
Ask HN: What happens when an expert touches a noob's code?
Vs. when a noob touches an expert's codebase. What are realities vs expectations?
Which is how election results should be handled. Sealed letters are cheap and extremely hard to forge.
I'm surprised the article makes no reference to the worst of this phenomenon: 2016's The Promise: http://www.imdb.com/title/tt4776998/ratings?ref_=tt_ov_rt

* 52.9% 10/10
* 42.6% 1/10

For a total of 95.5% polarizing votes!

Interesting that The Ottoman Lieutenant is top of the 538's list and it deals with exactly the same subject matter.

Turks really need to grow up and stop being such babies about their history. Face it, don't go spamming down the ratings for movies that dare talk about your history.
>Why would a company like Amazon move to a state who's already so wrong on human rights issues? That's just asking for boycotts and mass resignations.

Amazon is more concerned with regulatory and tax burdens, labor costs and what kind of deal they can strike with a local government than with "human rights issues." Their labor practices are already infamous, and they have warehouses in Texas already, and no one cares enough about any of it to boycott them.

To this end, Texas is attractive because culturally it's pro-business, anti-regulation and anti-labor (and very much pro-kickback.)
Probably a good thing TASER changed their name to Axon.
> > I'm not saying that gerrymandering isn't an issue

At least two of the districts you mention represent suburbs and not the city proper, which is what I was talking about.
I think that's too negative. Is Unicode perfect? Of course not, but it's the best we've got for now. Just as Morse, Baudot, or ASCII were the best approximations at one point in time.

It's a hard problem and will take decades to for the right solutions/implementations to present themselves. Surely one day there will be an improved successor to Unicode. Things are a lot better than they were even ten years ago, however.
The above comment is not a snide joke at Ryanair, here's an article citing their turnaround times from the early 2000s: http://news.bbc.co.uk/1/hi/business/2962698.stm

This is still the case.
$257M: Filecoin Breaks All-Time Record for ICO Funding
Weather: cloudy.
The police shot someone with a taser for doing graffiti on an abandoned building? That is completely insane.

You can literally rub graffiti off a wall, why would you risk killing someone for that.
Vagrant is also used as an easy way to spin up development environments e.g. for embedded systems via virtualbox. I am not aware of a simple way to create a GUI with docker. With vagrant it is just one line: v.gui = true
> The recent high school grad and aspiring art teacher collapsed on the sidewalk in cardiac arrest.

Also forgot "vandal suspect"
That argument is already being made, if people were open to this line of reasoning they would have heard it a long time ago.

I think the longer term and overarching issue is that we don't have a shared reality. Science is not a method of finding truth for a large proportion of the American electorate. Academia, scientific institutions, and journalism might as well not exist if people don't believe in them.

If that's the case, then it's requires a much more in depth answer than "well look, we might do some good if we spend billions in (perceived) cost". I don't have the answer and perhaps there isn't one.
HP and other companies on the hook with banks for $200B
> There's something wrong with the internet...

When you need an 3rd-party provider to "get in" the internet. FTFY.
Isn't it interesting that such a minor (and misconstrued) comment could have such a lasting effect on the man's career while the guy now in power spews far more outrageous falsehoods daily and it just doesn't seem to matter.
And NAT is required for networks that are behind too few IPv4 IP's.

With IPv6, users can put their devices out on the wild-west open internet without needing any kind of NAT or firewall for protection.

The large number of open access points in the wild points out the danger here -- most consumers know nothing about network security and will set up their home network with dozens of IoT devices all on the public internet behind their ISP's non-firewalling router because they can, and everything works.
The Go standard library has most of what you need for basic API servers. However as has been stated here, some things are not worth spending time crafting yourself.

Also for modern Docker/Kubernetes ops environments you need some additional infrastructure for table stakes. Here's my standard Nulladmin.com stack:

Routing - https://github.com/go-chi/chi

Command flags - https://github.com/spf13/pflag

Config - https://github.com/spf13/viper

Logging - https://github.com/Sirupsen/logrus

Metrics - https://github.com/prometheus/client_golang/prometheus

SQL helper - https://github.com/jmoiron/sqlx

OpenTracing - https://github.com/opentracing/opentracing-go
I thought COBOL is being used because of legacy code and technology, not because it's the best option, and new code is written in Java?
Dandelion starts digging in New York
Patriots vs. Chiefs Live Stream
Funny, that's what an Afghani co-worker and I talked about during the last election cycle. We just obfuscate things with lawyers.
Sure, because killing someone is a totally acceptable response to vandalism.
What exactly is this about?
Your question reminds me of this github example:
https://gist.github.com/weakish/7428608
who are producing bad movies that no one wants: endless sequels, remakes, and adaptations of successes in other media.

How do you square that belief with the fact that 8 of 10 top grossing movies so far this year (and 7 out of 10 for last year) is a sequel, remake or adaptation? Obviously someone seems to want them
Can you give some examples? I have never heard of this.
They Whiteboarded Me
Tasers are a really effective way to neutralize someone violent. If a 200 pound man on drugs is charging at you screaming with rage, a taser gives you a good chance to survive without getting hurt and without shooting anyone.

I'm certain that tasers have saved many more lives than they have cost simply because they have as much stopping power as a gun, and sometimes you really need that much stopping power.

We need to treat them as dangerous, because they are dangerous. But they have a place in the law enforcement toolkit and it's a very important one.
The default configuration for many firewalls (software, at least) approximates "allow all outgoing connections but no incoming". Assuming all your connections pass through the same box (which they usually will, for a home network), there's no reason why it shouldn't have such a firewall even if it's otherwise a router that doesn't do NAT.

Denying the ISPs trivial inspection into the structure of home networks, OTOH, is a major benefit and maybe a concrete downside to adopting IPv6 locally.
Homestead is wonderful! I've been using it for years for Laravel development. Thanks!
The use of force to detain someone suspected of graffiti is disproportionate to the crime. Especially if the use of force could foresee-ably result in death.
If you have that level of certainty that you should have no problem providing proof.
Yes. For those who have worked remote before these tools, it's like night and day experience.