skysight-inc/HackerNews huggingface dataset:
There's a kernel of a good idea in this article that I want to know more about.

> I realized that my idea needs to be seriously reconfigured. I learned this through pitching ... I wish I had realized how valuable this step would be earlier on.

The author says they learned a series of lessons, but doesn't elaborate on them beyond some bullet points.

If you're on here Matt - please, more info!
Just a cool thing to notice:

> I'm going to the third place if they're all the same distance (and probably even if the third place is farther than the first two, to an extent).

By distance, you probably meant time to get there.
I am very thankful to HiDimensional for helping me out throughout my interview process.

The feedback provided by Pradeep and Stefan helped me understand my week points and work on them to be better at cracking interviews.

It was next to impossible for me to be interviewed with startups like Rippling without the much needed help by HiDimensional.

Even after my interviews, HiDimensional personally helped me in deciding my next career move which was awesome.

I salute the HiDimensional team to give such a personalized interview experience and never backing out from helping the candidates. Kudos to the HiDimensional team! You guys rock...
The fact that you are a K-5 teacher makes me doubt your story in its entirety.
I hate to be a Debbie Downer / conspiracy borderline, but nothing will change if all of this is true. Some apologies, "it's an oversight, we'll do better", "we take security seriously"... and nada. Maybe some provisional solutions which seem good, but in the back - things will remain status quo.
I mean, it's likely because it is really hard to differentiate in the smartphone market. The things that change y/y are kind of minute details in the scheme of things. (It's not like a competitive smartphone today would release without a GPS chip, for example)
"30 January 2009: DHL ends domestic pick up and delivery service in the United States, effectively leaving UPS and FedEx as the two major express parcel delivery companies in the United States"

https://en.wikipedia.org/wiki/DHL_Express
They did, and they’ve been doing that on iOS. The first 64-bit devices came out for years ago.

I was actually thinking of when they left 68K and PowerPC though. I had PowerPC apps that worked through Rosetta for a while and then that was removed when Apple decided it was “time“.
Do people not Google for alternatives? I can think of at least 5 competitors to Ticket Master. There's even one that only charges 5% seller fee and no buyer fee.
In fact, turning off Wi-Fi can hurt battery life. LTE requires more power, GPS kicks on more often, and if you have an Apple Watch, data transfer is forced to use Bluetooth which means both devices remain in a high powered state for longer.
I honestly believe that he was trying to prove a point and not phish. I'm cautioning that I think it's a dangerous game to play.

A website doesn't need to have a "backend" or make a POST request or use a submit button to transmit data that you enter on it to another party. You should assume that ANY ACTION you take on any website is being transmitted to the server or to any third party. Key strokes, mouse moves, time on page, info about your browser and location, all of it.

A bad actor could mimic this sort of "prove a point" site and actually harvest information from unwitting people, all while feigning concern and saying they're proving a point, but carefully disguised JS could be encrypting page events and sending them in cookies to other parties. If we normalize this kind of security grandstanding, we open the the door a little bit wider to phishers.

Browser maintainers were right to mark the site as a phishing site. Because it is. It doesn't matter if it transmitted data or not. I guess you could call that "catch and release".
You're not Intel's customer. Dell, Lenovo, Amazon et al. are. And they want management systems, because the large companies who buy from those guys also want management systems. This isn't some super conspiracy, (even if it's something the three letter organizations try to take advantage of it) this is pure business. Pwning a computer across the internet that your dumbass sales manager left on a train is a feature.
You’ve probably heard this before, but the security angle is important. “I haven’t had these problems in my code” really means “I haven’t triggered these problems in my code”… that is, unless you’ve had a security code audit done. Testing isn’t enough: even well-tested codebases can and do have vulnerabilities. In practice, they’re usually triggered by input that’s so nonsensical or insane from a semantic perspective, not only would it never happen in practice in ‘legitimate’ use, the code author doesn’t even think to test it. For a simple example, if some binary data has a count field that’s usually 1 or 2 or 10, what happens if someone passes 0x40000000 or -1? As a security researcher myself, I think it‘s actually easier to audit code with less knowledge of how the design is supposed to work, up to a point, because it leaves my mind more open. Rather than making assumptions about how different pieces are supposed to fit together, I have to look it up, and as part of looking it up I might find that the author’s assumptions were subtly wrong… For this reason, it’s really hard to audit your own code, at least in my experience. I mean, you can definitely keep reviewing it, building more and more assurance that it’s correct, but if your codebase is large enough, there may well be ‘that one thing’ you just never thought of.

I’m not actually sure how frequent iterator invalidation is as a source of vulnerabilities; I don’t think I’ve ever found one of that type myself. However, use-after-frees in general (of which iterator invalidation is a special case) are very common, usually with raw pointers. In theory you can prevent many use-after-frees by eschewing raw pointers altogether in favor of shared_ptr, but nobody actually does that – that’s important, because there’s a big difference between something being theoretically possible in a language and it being done in practice. (After all, modern C++ recommendations generally prefer unique_ptr or nothing, not shared_ptr!). And even if you do that, you can’t make the `this` pointer anything but raw, and same for the implicit raw pointer behind accesses to captured-by-reference variables in lambdas.

You can definitely greatly reduce the prevalence of vulnerabilities with both best practices for memory handling and just general code quality (that helps a lot). But if you can actually do that well enough - at scale - to get to no “major safety difference”, well, I haven’t seen the evidence for it, in the form of large frequently-targeted codebases with ‘zero memory safety bugs’ records. Maybe it’s just that C++’s backwards compatibility encourages people to build on old codebases rather than start new ones. Maybe. It’s certainly part of the story. But for now, I’m pretty sure it’s not the whole story.
All 6 parts have already been written/published - https://jeiwan.cc/
Can you suggest any good books on this? (or perhaps just the textbook your class used?)
How much longer does its head have to be held under before it's dead?

Do you actually believe that all people have an equal stake in the future of the country? To me it is blatantly obvious that a party animal of an adolescent, say, does not have the same stake in the future a country than a land-owning parent of three children. I would much, much prefer a system wherein those that have sacrificed real, tangible resources in order to secure voting rights have a voice in the governance of the institutions of state, and those that have not do not.

Thankfully, examples of institutions that function this way abound: It's simply how all modern corporations are structured.
Or just place it in Airplane Mode and enable Wifi or Bluetooth selectively. At least that's what I do in iOS 10. I hope it's still possible in 11.
I think that the modified Etherium browser they propose will help a great deal towards visualizing / seeing the Urbit network "in action."
Becoming vegan, becoming decent
Tesla currently sells less than 100K vehicles per year, but they have ambitions to scale that up very quickly (1M/year by 2020!)
Spain is for all the spaniards. All have the same basic rights as the right to move freely inside the entire country, to work and live when they want inside its frontiers and to decide together about the destiny of their country. With logical exceptions (like requiring granted access to private areas); this super-basic concept is in use in all free and democratic countries of the world.

New York people can't wake up some day, like a single man, and decide that Texans (or Floridians, or afroamericans), can not enter in the state anymore, their basic rights are expired and they have 48 hours to quit the place leaving its properties behind. Some people would point to the fair "self-determination right" from Newyorkers. Some even would shamelesly call this situation democracy, but it isn't. Would be a huge scam. NY are only a small part of the people that are USA citizens, and the other people have the f*ing right to express their opinion about that. No matter how peculiar, colorful, or different than other places is the city.

In the same way Barcelona can not wake up some day and decide that people from Sevilla aren't allowed anymore to decide about the future of Barcelona and must quit the place. Unless of course we would aim to happily nuke the basic rights of 39 millions of citizen that are non-catalonian spaniards (to improve the chances for the 1-2 million of people than want Catalonia out of Spain). Is also a scam. Is a riged game. Democracy is the rule of the majority, and this constant actitude of I'm holier than thou so I must be allowed to speak but you can't is incredibly upsetting.
Not too bad, but the search needs to be less literal.

When I search for "sandwich", my neighborhood Subway should show up, even though the word doesn't appear in the name.

When I search for "convenience" or "store", my neighborhood convenience store should show up, even though those words do not appear in the name.

But I did discover a Whole Foods location that is even closer to my house than the three others in town that I knew of. Cool!
I think the obfuscation is an elaborate hazing ritual that makes it optimal to cooperate with the existing community rather than defect and launch your own competing "land" registry.
https://raptorcs.com/content/TL2WK2/intro.html
The ME "chip" is the Platform Controller Hub. The ME core on that chip is basically your "real" CPU: it initializes your devices into the correct modes at boot, and does things in response to BIOS interrupts, manages DMA regions according to the ACPI DSDT, virtualizes IRQs, refreshes DRAM, etc.

The modern Intel socket CPUs are more like application accelerator cards for this hidden "mother" core. Until recently, you could think of your Intel computer more as an ARC[1] PC with an embedded Intel support slot, than as a pure Intel PC. If you wanted to, you could write a custom BIOS that would boot a Haswell-era motherboard with no CPU inserted, and it would run just fine—because the motherboard already ships with all the CPU it needs to act as a functional computer. (And with the hack on the article, you could run your own software on such a PC, too!)

[1] https://en.m.wikipedia.org/wiki/Synopsys#ARC_International

So no, you can't really remove the ME; it functionally "is" the computer in a lot of ways.

Of course, you could remove its ability to run software other than its kernel—but this doesn't make it "brain dead" or "switch it off"; it just makes it do very slightly less. There's still a lot of (necessary!) stuff going on in there.
This is similar to what Khan Academy did back at the start of the application. There was a mathematics skill tree and you started at 1+1=2 and ended at the Stokes Theorem.

It worked well but was a bit overwhelming. The other challenge was that many skills were interconnected and so the progression wasn’t strictly linear.
Puerto Rico Energy Infrastructure Is 'Completely Down,' Governor Says
Author of the article here!
Thank you for the kind words and thanks for sharing!

I was wondering why that entry had a huge spike on reads yesterday :D (1500 reads against a daily average of 200).
Kodak is dead because of the MBAs outsourcing to Japan for short-term film profits...
No, it hasn’t been “looked at.” “Looked at” would imply some sort of intellectual rigor, and there is none there because there is no causation analysis. The other way to look at it this: he says Goldman contributes $31 million *over 20 years.” If lobbying yielded that kind of ROI, companies would do a lot more of it.
China’s market size is much bigger even accounting for the fact that it’s more of a potential market size than an actual one (1.4 billion population for China versus 66 million population for your example of Thailand.... a 20x difference so that should answer your question about why not Thailand.)

That makes makes western companies do remarkable things in China. Not just partnering, but also opening branches in China and training up local staff with the latest techniques. Before long the leading edge technology is being developed in China, not elsewhere. This isn’t a made up scenario; it’s what has been happening for a couple of decades and now it’s getting pretty hard to ignore.

Tim Cook (Apple) said: “The U.S., over time, began to stop having as many vocational kind of skills,” Cook explained. “I mean, you can take every tool and die maker in the United States and probably put them in a room that we’re currently sitting in. In China, you would have to have multiple football fields.”

So the skills move there, the techniques move there, and pretty soon it should no longer be surprising that they also have the ability to make stuff well there.
I would recommend against spending your money doing a uBiome tests. The research is showing that where you sample in the stool highly affects the results.
Earlier models as well, the t450s for certain. I tried to buy a 2242 in the UK about a year ago and gave up in the end (though amazon may have had stock, I don't shop there).
this isn't a question of being less literal, it's a question of building a search taxonomy and synonym database and tuning it for relevance, in this case, in the restaurants vertical.

this is something a lot of people don't realize about search engines i.e. yelp, angie's, etc. - they are tuned to fit the humans to the data, not vice versa.
I think you're making my point for me. You appear to be more interested in categorization and distinguishing what is and what isn't normal and healthy than simply acknowledging that gender is not binary, whatever medical category might be applicable to a particular person.

People exist who do not fit into either-or gender boxes. It is just reality.
Agreed, that's pretty much what I meant.

Although even the few times when I received questionable products the issue was resolved pretty quickly and painlessly with either the merchant or Amazon.com

Contrast that with booking.com where all communications between you and the merchant(hotel) have to filter through booking.com and take 24 hours at a minimum to get a response.
Well he’s calling for more education and awareness. It’s like Big Food. The entire CPG industry has been stuffing people with sugar, salt, and fat for decades, exploiting human nature. We are finally seeing society resist this as we have become educated about the dangers of sugar and salt consumption. Meantime, putting ethics aside, all the major food and beverage companies made hay for a long time until recently. What is ethical and what is money-making can be at odds for a long time before they converge (if ever).
Isn't that exactly where Clinton went wrong, though? She (and most pollsters) assumed far more states were safe than actually were, and Trump swooped them.
> Multiple large projects under the same directory

Sorry to be snarky, but everything, eventually, is under one directory. "/".

There seems to be two kinds of folks working with Go: those who want to do it their way, and those who want to do it the Go way. I'm in the latter group.

> ... I separate the projects into their own directories

So do I, but I just don't get to pick that directory. Everything is in $GOPATH. $GOPATH/src/github.com/:org/:package is my directory for any given project. That project has a /vendor directory with its dependencies. Everything is contained within my project's directory. It is in source control. Everything just works with the Go tooling.

> ... use a Makefile to set gopath ...

If you don't fight the system, you don't need to set GOPATH per project. I totally get there is something that maybe I just don't understand or am totally missing, but in _years_ of working with Go on many dozens of applications, I've never had to alter my GOPATH (aside from the one application that a team at our company did where they put their source control at the $GOPATH/src directory, which was a pain in the butt and is not the way to do things).

> Still trying to figure out why golang tried to be innovative here...

Yeah, it was weird for me at first. I accepted it as the way of things and my life got better.

And to harken more back to the heart of the thread: makefiles. While I just don't understand the need for separate GOPATHs, I can see some value for complicated build or test commands. For the most part, `go test -race` and `go build` is what I need 90% of the time. Mostly, it is the build system that needs the equivalent of `make test` and `make build` to ensure flags are set and such.
Because since people's tastes differ, if a site has a small inventory, it's very likely they will have nothing at least some of the time you want to book. If some small site has nothing that's a fit for you even, say, 10% of the time, the vast majority of people would choose a site they know will have something all of the time.
OK, thanks for clarifying. I read that line a bit too fast.

As to the core of what you're saying -- between the lines, the value proposition seems to come down to this: "Yeah, everyone knows by know those whiteboard sessions are mostly bullshit. But hey, if you're willing to swallow your pride and suck it up like everyone else, these companies might throw a little bit of money your way. Coz that's the name of the game, yo -- in case you haven't heard by now."

At some point one gets tired of basing one's life on considerations like that.
> “Do I think ICOs are silly, bordering on scams? Yes, they are,” he continued. “But, there are a few that are important, and the blockchain is more important than not… ICOs need to be regulated.”

> At the same time, it could mean working, for the first time, with investors who are not “accredited,” meaning high-net-worth investors — an idea that appeals to Altman.

I guess he sees blockchains as a vehicle to getting the regulatory framework he wants for securities, and (I assume) doesn't feel he can get for traditional stock.

> Added Altman of the appeal of ICOs in particular, “People are watching their friends get really rich and it’s making them [frustrated and wanting to get rich, too].”

> “One of the trends that bothers me about Silicon Valley,” he continued, is that “more and more of the wealth creation here is not available to most people, and I think that’s very bad in a society with already so much wealth inequality. If there’s a way that new technology can make it practical and possible to democratize this, I think that’d be great.”

I mean, he just said he recognizes it's a bubble. Doesn't a bubble usually suggest wealth transfer instead of creation? Of course it's frustrating to not get in on that money. It's even more frustrating when you see the situation as ethically gray, and here's Sam signaling that YC should jump on board.
How does Urbit team feel about Richard from Silicon Valley(the show) seemingly getting his idea to "invent a new internet" from Urbit?
Don't they practically have a monopoly on ticket sales, though?
I did, so the site is in Google and is crawled by Google (Analytics I believe has the option to do that). I also went through various SEO suggestions, set up Google Analytics, added meta tags, improved load speed (it's a pretty minimal static page anyway), among other things.
If I have a hello.c and hello.h in the same directory, and hello.c #includes "hello.h", I can "cc hello.c" and it always works just fine.

In Python, you have to add some empty __init__.py files to your project, but once you've done that, local imports work just fine, no environment variables needed.

GOPATH is unusual and not like other programming languages.

Once again, the two major use cases for imports are "stuff local to my project" and "stuff I've installed". GOPATH covers a third case, "other packages I want to use, that I haven't installed and haven't vendored". That doesn't seem important enough to warrant making "stuff local to my project" irritatingly fiddly.

If I download some Go program from Github, even if it has all its dependencies vendored, it doesn't work unless I put it in ~/go or set GOPATH. That's strange! Why wouldn't you want it just to work out of the box, wherever you put it?
Yes, the problem with lack of clarity is more often than not the fault of the API designer, not the language. Non-traditional method names like ~%>$ or whatever should be done in a very clear and easy to understand way; if not, that's a feature of the language that was used poorly by the software engineer.

Scala actually has a very consistent and simple syntax which after some initial learning phase is very easy to follow.

The standard library on the other hand, like many APIs which are written in idiomatic Scala, can be difficult to understand, especially at first. I don't admit to understanding it anywhere near as well as I do the Java standard library.

But the issues with Scala in this area is more akin to finding issues with the Java standard library (there are tons!), rather than Java as a language or a VM (two other things which are also correctly referred to as 'Java')

One of the biggest humps I had when getting into Scala full time was getting my head around the fact that many of the features of Scala actually occur at compile time, which as a Java veteran was something that took getting used to.
Actually it hasn't been done before. That CVE required elevated privelages on the host already. They didn't break out of a jail.
Solve large jigsaw puzzles using genetic algorithms and OpenCV
Photography seems to be one place where the exchange rate between better skills and better tech favors skills.

I have a friend who makes rock documentaries and his boss will often rent an $8K camera. My friend sometimes shoots on a $500 DSLR, and once mixed in some of his footage. His boss could tell the difference, but it wasn't significant, and it made him wonder why they even rented the nicer camera.
what ever happened to the principle of least astonishment?

people are currently used to disabling wifi meaning disabling wifi.
My point is that there's a small window of time remaining in their day once school is out. And my wife picks them up right after school. Most kids are in after care until 6pm.

How can we make the 2 hrs of actual free time he has feel like 3? That's what I'm asking.
Um, you're talking about using s3 as a storage backend (I think?) whereas im talking about exposing data over an s3 compatible API (like minio does)
Joke's on them, my computer's never turned-off.

But seriously, I take it we won't know the attack vector until December, however if remotely exploitable they would surely have used the word "remote"? Is any mundane malware with admin rights able to update Intel ME?