skysight-inc/HackerNews huggingface dataset:
You mean to say that the outdated requirements of FIPS-140-2 aren't the best practices for designing a crypto system? That the lack of TMTO attack resistance in PBKDF2 makes it a sub-optimal choice for storing passwords? Surely not! NIST would never recommend anything but the strongest cryptography!
BlockSci: Design and applications of a blockchain analysis platform
The link in the GP says that 120 of Fortune 500 general counsels - not the equivalents of partners but of the heads of firms - are women, which I'm guessing is a far higher proportion than their major law firm equivalents. I always assumed that was because there is less discrimination in the Fortune 500 general counsel offices. I know a woman who is an attorney in a U.S. federal court; a large majority of her co-workers are women; is that because they face less discrimination than in firms?

(Note that on HN we often have to speculate about the experiences of women; there are so few here who can talk about it. I expect to find male attorneys on this thread, but I would be happily surprised if a female attorney appeared to share an on-the-ground perspective with us.)

It reminds me of Justice Ginsburg (obviously from a different era) who said she was a judge mostly because, despite her elite law school credentials and talent, she couldn't get a desirable job in a law firm.

EDIT:

> Having a 25%-33% chance your boss or client will be a woman creates the kind of culture necessary to attract a gender-balanced pipeline. A woman going into law hoping to make partner is signing up to be in a (large) minority, but the ratio is nothing like a woman going into tech hoping to become a Senior Engineer faces.

That culture isn't working well (as you said, 'challenges remain'). Per the link in the GP, over 80% of equity partners are male.

But I agree, it's still nothing like tech.
Please explain why the Federal Reserve is doing nothing about it?
Well, the entity who needs to verify an entry is typically a miner who'd also be interested in contributing their own entries and being compensated for those contributions. What's the incentive for a miner to stay online in a read-only environment?
This is going to need a lot more text to justify.
Because they are losing on tech front side!
> It's a principle of the US criminal justice system that is derived from a moral intuition of justice.

Morals are about value systems. Moral intuition is a paradox, as there is a multitude of moral value systems. Innocent until proven guilty is an American ethical precept.
Agree. People will spend $1000 (or more) for relatively minor features on their cars. A phone is with you 24/7 - it's less like a tool, or even a digital assistant, and more like a cybernetic implant.

The amazing thing isn't that phones cost so much but that competition is such that you can get an excellent product with top-of-the-line CPU, radio, RAM, screen, everything for $1,000 instead of $100,000 or $1,000,000.
It's pretty trivial to convert from BTC to Monero and back. There are even services that will send a specific address BTC automatically if you send them Monero. So unless the exchange is going to ban mixed coins and Monero-based sources, that won't lead to Orwellian-style undodgeable monitoring of every transaction.

It's an option to do that, of course, but it would be precedent-setting. No one else bans BTC that came in via a Monero service.
Added to list, thanks! +1
Photo Mechanic 5.0 Cracked Serial for Mac OS X Full Download – Crack4Mac
A BSD license without a patent grant gives you less safety than a BSD license with a bad patent grant.

If you're not ok with Facebook's BSD+Patents, then you shouldn't be ok with BSD alone either.

There are licenses with a decent papent grant (notably, Apache) but BSD and MIT aren't among them.

If you're all up in arms about Facebook's OSS licensing and at the same time use OSS that is licensed without a patent grant at all then you're a hypocrite.
The same could be said for any export they produce in China doesn't matter if it is Bitcoin or tube socks.
Isn't this a bit contradictory? If the government really wanted to protect people from harm they wouldn't allow ponzi schemes that urge people to invest in boxes of ants to advertise on state television. Oh, and:

> “The company was endorsed by Chinese government officials, and Wang, now the chief executive, was photographed with the former Minister of Commerce of the People's Republic of China, Bo Xilai.”
Fair enough on Google and Facebook, but my traffic with NYT is pretty uni-directional.
I'm extremely skeptical.
The Chinese aren't stupid. And they are corrupt.
The typical mining operation in China likely involves every government official in the region. Profits that are made from mining and/or trading are no doubt moving through the hands of members of the government - why would they give up free money?

This is probably bullsh*t put out by the Chinese government to screw with the market for fun and profit.

Also realistically how exactly would you enforce this? If they shut down Chinese exchanges, many savvy Chinese will just use international exchanges and trade IRL with paper-wallets. Unless one of the commentators is right and this is all to make way for a government run super-exchange (which wouldn't surprise me).
How often is commit bad enough to require revert, yet made it through testing and got released?
which, now that I think about it, isn't that different from using the electricity to produce widget, export the said widget, and get dollars in return
What amused me most is that the market share of Roku differs A LOT across sources:

(I own a chromecast so I just compare Roku vs Google.)

18% vs 30% https://www.valuewalk.com/2017/09/rokus-ipo-will-worth-watch...

8% vs 16% http://www.businessinsider.com/roku-hits-a-new-milestone-as-...

36.9% vs 38.9% http://variety.com/2017/digital/news/roku-apple-tv-chromecas...

I can understand these are sensitive numbers and can be difficult to get. But these agencies strived to reach completely different results. How can this be possible?
Nation states could already do this, but they've been remarkably uninterested. Yao Ming is the only example I know of.

You don't need DNA tests, or even knowledge of the concept of DNA, to participate in a genetic arms race. DNA tests were not necessary to produce dogs that would rescue drowning humans or cows that would produce incredible amounts of milk. They also aren't necessary to produce "good genetic" humans.
It's funny coming from a guy who has a bit of paper stuck over his laptop's web cam.
It looks lightweight, but it's actually 3MB and uses JavaScript as a necessary dependency (so browsers without JavaScript will probably break it). The list is meant to include only websites with less than ~1MB of content and no, or very little JavaScript.
There is evidence that they haven't reached their limits with vertical scaling as Amazon apparently has.
That's what's funny about PCI scope. The JS is controlled by the server, so that the server doesn't presently see the card number, should be irrelevant.

I assume exposure is equal to passing the card to a merchant gateway on the backend as it is for passing the card to a merchant gateway on the frontend. It's nonsensical to assume the threat profile on the two are any different.

Certainly it matters if the backend is storing the card number in any way. Or if the backend is transmitting the card number in any way beyond the established TLS channel.

The card number be encrypted as quickly as possible and shoved off. I always find the best place to do it is on the backend. If you can afford it, you get the PCI audit anyway, because not having it is just an excuse to be sued, right?
Do you think that's generally true? Or is it a facet of your experience running three of the most important Python packages around?
'iPhone X' confirmed in alleged leak
what ICOs has to do with bitcoin?
My real point is that the chances of law firms breaking the law over paralegal compensation is basically nil. Paralegal salaries make up an itty bitty fraction of the money that moves around these firms.
Exactly! I have yet to see a solid walkthrough of how my situation is made worse because of an explicit patent grant.

I believe the fear of a grant revocation also revoking the BSD copyright license has been thoroughly settled. If that were the case that would be an issue but FB themselves have put in writing that that is not the case.
Wow - no chargebacks? Do people buy crypto coins this way?

This is a huge benefit to the merchant if it's true. There's no direct benefit to the customer, so you have to overcome that somehow.
How? This seems to say otherwise. https://www.bjs.gov/index.cfm?ty=pbdetail&iid=812
There's only 3 mining pools, and the dev team has acted anything but democratic.

The reason for the fork to cash was because the dev team wanted to keep the network inefficent to benefit miner rewards at the expense of users, along with justifying the lightning network, with Blockstream having 9+ bitcoin core developers on their payroll.
Just turn off your network while using the site
I would take this with a huge grain of salt. This appears to be a rehashing of news from last week that China planed to ban trading of ICO tokens. The news was thinly sourced and it seems like people misconstrued the rumored ICO ban to mean a general crypto-currency trading ban.

Historically there have been more stories like this than I can count where some random source claims the PBOC is going to "ban Bitcoin" and it has always proven to be false. The worst that has happened is the tightening of regulations on Bitcoin exchange providers. There is even a common meme that has been going around for years.[0]

[0] https://www.youtube.com/watch?v=Ry6PpRXk0dQ
This article doesn't really say how to design a two-factor authentication properly.
"Disruption" doesn't eliminate rent seeking; it only creates a new class of rent seekers.
On your point about less discrimination in federal courts, I think it’s less than 30% of federal judges that are women. I don’t know the staff composition.
I'd like better stats on why you should write tests first. You can't test everything anyway and writing all your tests first eats up time when your architecture and code is still in a high state of flux because you have to keep refactoring your tests.

I've worked on TDD projects before that had huge numbers of tests for the smallest pieces of behaviour and refactoring them can be such a hassle you sometimes avoid it (but to be fair you knew when you broke something). The cost of writing some tests sometimes isn't worth it either when you weigh up how likely those tests are to catch a bug that wouldn't be caught by an integration test or during normal QA and the impact of that bug.

Strong typing to cut down on writing tests is also much more preferable to me when it's an option.
The header of your blog reminds me of a post by Eliezer in his Fun Theory sequence. The summary of the post:

"Living By Your Own Strength: Our hunter-gatherer ancestors strung their own bows, wove their own baskets and whittled their own flutes. Part of our alienation from our design environment is the number of tools we use that we don't understand and couldn't make for ourselves. It's much less fun to read something in a book than to discover it for yourself. Specialization is critical to our current civilization. But the future does not have to be a continuation of this trend in which we rely more and more on things outside ourselves which become less and less comprehensible. With a surplus of power, you could begin to rethink the life experience as a road to internalizing new strengths, not just staying alive efficiently through extreme specialization."

Full text: http://lesswrong.com/lw/wz/living_by_your_own_strength/

Fun Theory sequence: http://lesswrong.com/lw/xy/the_fun_theory_sequence/
> This feels like a false comparison to me. When you write ASM you pretty much know what it's going to do.

This is because it's an excellent layer of abstraction on top of the machine code which is interpreted by the abstraction of microcode which sends it to the abstraction of a physical processor that's itself just an abstraction on top of transistors that themselves are an abstraction around manipulating voltages on a complex network of circuits.

Nobody bats an eye at these levels of abstraction. And they're not perfect! Modern CPUs have hundreds of errata. Skylake's alone is almost 40 pages long, at 3-4 per page.

But you take them for granted because they're several layers lower than what you have to deal with on a regular basis.

Even your example of adding two registers required compiling through an assembler, scheduling execution by a time-sharing operating system that fakes the concept of running hundreds of parallel processes by rapidly looping through running processes, and on and on and on.

We are awash in a sea of abstractions more deep and complex than even a dozen of the world's best engineers put together could hope to fully understand. And yet people earnestly defend language design decisions that prevent a single function from comparing two values of any arbitrary numeric type as being too complex, when issues like that are less than a hundredth of a hundredth of a hundredth of a percent of the complexity that are modern computers.
You are evil!
Being a better interviewer is important.

As stated, some types of questions aren't good judge of skills, like implement mergesort. If you can implement mergesort, you probably studied up for your interview. You're not testing anything, other than did the candidate care enough to study.

Interviewing should test the candidates ability to write code that is:

1. Correct (solves the problem)

2. Efficient (solves the problem without unnecessarily wasting resources)

3. Understandable (goes hand in hand with maintainable)

4. Maintainable (can be modified by another developer, or even yourself after a few months)

Coding on a computer can lend itself to all of these (no brainer there), but you lose a key aspect of whiteboarding that I think is really important--how a candidate approaches solving a problem.

Knowing how to implement merge sort, or memorizing every possible linked-list question isn't all that valuable--but having a concrete approach to tackling problems is, and I want to understand that process from my candidates. I want to know the design tradeoffs you make, how you think about optimization, how do you reason about constraints as you learn about them.

It seems that explaining your process while coding on a computer would be difficult to do without practice--and if you're going to practice, why not instead just practice whiteboard coding, which is how most tech companies interview.
There's better and worse tricks, and then there's real communication. Scott Adams is like Hillary Clinton — both full of mediocre tricks, although there's a big difference. Adams seems to really believe what he's saying and so comes across more compellingly (despite lacking real substance and intellectual rigor). Clinton seems to be obviously deceptive and bad at hiding it (even as she's deluded herself much of the time).

The New Republic article aged better than almost all the other press out there. I referenced it because it's correct and clear.

I'm not sure why you brought up Clinton, but let me make this completely explicit: zero of the insights or persepctives on Trump need to describe him in contrast to Clinton, and there's no basis to think that critics of Trump have anything good to say about Clinton necessarily.

My point mostly wasn't even about Trump. I'm not saying Trump himself is a pickup-artist and that's it. I'm saying that SCOTT ADAMS has an ideology comparable to that of pickup-artist culture and his (Adams') admiration for Trump is based on seeing Trump as a master pickup-artist who also can be assumed to just have the best of intentions for everyone. Adams and Trump are different types of fools.
Thanks for the clarification. Interesting stuff (just skimmed the Wikipedia page). Seems pretty thorny to me.

In this case, with uncontacted peoples, I can't imagine having them persist for hundreds of years (or more) without us trying to communicate some medical knowledge, at the very least. However, there is likely no easy way to do so.
> competition is such that you can get an excellent product [..] for $1,000

The really interesting part is that for ~$1000 you get the best product available at any price.

That's the magic of economies of scale in consumer markets, especially technology. It's so incredibly expensive and largely fruitless to step out of the economy of scale, that practically speaking no-one does it.

I don't have a yacht like Paul Allen, I bet my house isn't as nice as Bill Gates' and my bank account looks nothing like Zuckerberg's. But it's quite possible I have the same phone!
Aren't phones supposed to get cheaper every year?
That landlord is allowing you to move into her property and if you decide not to pay your bills (or to airBnB the place out for drug parties) said landlord will be out of pocket somewhere around 6 months of rent (eviction takes a long time) plus legal fees and repairs.
Modern living is necessary for the survival of our species. Otherwise we'll suffer a catastrophic event and die. Therefore it is objecyively better to be working and living at our means pushing those limits of capital.
> if they can pay all their monthly bills and have some money to enjoy themselves. Envy really isn’t in the national character until our lives are sucking.

I know a few people that cry poor despite the fact they own a horse, or paid $2,000+ for a child's cubby house, or own a quad bike, or own a jetski.

Low level envy, or "keeping up with the Jones'", is raising the level of what people feel entitled to as basics for "enjoying themselves".
You might want to stick a debugger on your assumptions about who does and does not have children and/or a spouse.
300 mph tornados tear up everything except some roadways, foundations and deeply-driven steel pilings. 500 mph would just make a messier mess. If that were multiplied over continental size, that would definitely extinct some species.
Analysts say more activity is moving underground, where individuals can send virtual currencies to each other using private addresses, which serve like safe-deposit boxes.

Regulators will likely to have to tolerate noncommercial trading of virtual currencies. “The government also doesn’t have the power to control” that.

---

Centralized exchanges have always been the achilles heel of cryptocurrency ecosystem.

Better to keep it distributed with (a) smart contracts and (b) lightning network.
Can't it be both? Apple sells upmarket but also mid-market phones, like the iPhone SE. Features are introduced on the high-end models and then migrate down. Of course Apple will continue to compete in the mid-market range.
Am I the only person who suspects this is a work of performance art?
Does the actual price matter? I thought about buying one outright when I bought mine, but it worked out more expensive than buying one on a plan, I can't think of anyone who bought their's outright
DuckDuckGo has gotten so much better.

I didn't think it was possible but I switched and I don't miss Google 99% of the time.

The biggest exception I've found is that the maps from open street map don't have street view.
The medallion system pretends to regulate the taxi industry, but in actuality it’s a scheme that allowed people to buy into a monopoly. This unusual arrangement has insulated the taxi industry from normal market forces at the expense of pretty much everyone living in or traveling to New York.

Riding in a New York taxi is unpleasant and expensive, but since it was a monopoly it had no incentive to do better and there were never any real consequences for failing to provide decent service – even as it became increasingly aggressive in soliciting outrageous tips and jamming advertising down its customers throats.

But it’s not a monopoly anymore and that’s a good thing for New York. I won’t shed a tear for the taxi industry.
I'm reminded of the 2005' Man Push Cart movie about a Pakistani immigrant that sells coffee from a rented push cart in New York. His only dream is to save enough to buy his own cart one day.
Honest question, what does the rating actually mean? The Galaxy S7 was IP68 certified but did not survive immersion https://www.consumerreports.org/smartphones/samsung-galaxy-s...

This might be a case of under-promise, over-deliver.
I am suggesting that "Why not try and go on some interviews?" is a silly, and potentially offensive, thing to say in response to someone describing their difficulties with the interview process. Especially when discussing a field where there is considerable ongoing debate about the usefulness and sensibility of various common interview techniques.
As an Android dev, I see the total opposite sentiment. Most new phones are pretty damn good, even the mid range.

I assume things will go the same way as the PC. Cheaper hardware for most, Apple still holding onto a niche in the market.
“Serving a lot of 503 responses right now and it's Sunday and I'm at IKEA.”
Wasn't that the point?

Also, the wage suppression is related to the fact that the paralegals produce far more value than they are paid, not a legal issue. You might say, hey that's a common feature of the economy. You'd be right.
It wouldn't be a "grant" if the user didn't have a choice of not taking it.
Consider if somewhere in the repo there was a file called GOATS which conditioned the right to use react on having goats sacrificed to facebook every new moon, would it make react BSD+Goats licensed ?
I think much of what the WSJ is reporting was reported over 24 hours ago, and there was a bit of a dip at that time. Most movements in BTC happen before MSM reports on it.
A multiple of 100x the cost to fix a bug in production compared to development is very context dependent. These examples always assume your working on a large project with many developers and complex testing and deployment processes.

But there are many developers, like myself, that work on relatively small projects in small teams. The multiple is more like 5x or less for these scenarios. My current project is developed by two of us and deployed to just a couple of dozen users inside our company. I can walk to a users computer, be shown the bug, fix and test it on my machine and deploy it in minutes. Do I need TDD and Code Reviews? Will it pay back all the extra time? I would argue not. One size does not fit all. Sometimes it is appropriate but sometimes not. I hate this type of article, claiming their way should be adopted by everyone all the time. Context is everything!
Unfortunately there seems to be no reference to the study and how it got to its conclusion. I know in the embedded world, that factor can be a lot higher, in the web world, it can be a lot lower.

Also this article multiplies a number of stats together, but It doesn't look to me that the stats referenced are super solid. In fact it seems the stats are all over the place trying to measure the benefit of TDD and live in the realm of "That's really interesting, further research needed"
TrustZone Downgrade Attack Opens Android Devices to Old Vulnerabilities
The ID instruction for me was one ID from a selection of government issued IDs. I brought what was asked for. Weirdly, they also accepted a US passport where the address is written in pencil, by the holder!

http://faq.usps.com/documents/Informed_Delivery_Sign_Up_Guid...

Visiting the post office was easy. Getting them to accept my ID document was not.