skysight-inc/HackerNews huggingface dataset:
Sure. I'm struggling to understand what utility your questioning. Is is it the fact that they are using a hardware based random generator or the way in which they are using a hardware generator (e.g. lava lamps)?

If the former - my question would be - surely you, as a security expert, would agree that a hardware random generator is more secure than a software based one (PseudoRandomNumberGenerator or DeterministicRandomBitGenerator)?

If the latter - why does the way in which they use a hardware generator matter as long as it provides some utility and advantage over a software-based one which has a deterministic set of numbers?
While I agree with you that Dominos is terrible at estimating delivery times, it's because the pizzas always arrive in about half the time estimated. This has been my experience in Wichita, Las Vegas, and about half the time in the Seattle suburbs.
Why not just use a browser with an ad blocker?

That's a viable option indeed. I don't do that because the Instagram mobile website is significantly less nice than the app-each tab of the app is a separate web page that loads fairly slowly for instance. So in the end, I use the app, report the ads I see as not relevant, and suck it up. I usually only see one ad per day so it's not the end of the world.
I did go to Berea high school for a short time. 9ths grade I guess. I hung out with the nerds :D
There are 50 states. Pick whichever represents your idea of “freedom”.

Or any country for that matter.

There is no homogenous USA and there never has been.
There's a big difference between hero worship and just choosing to be entertained. It doesn't somehow diminish the creative capabilities of the people in the crowd to take part in the shared enjoyment of someone else's.
Yeah when I first started going clubbing was before the whole superstar DJ thing really took root. To me it should always be about dancing first, so I get that.
A question for which the true answer ("as high as possible") is never the correct answer.
Using the Blockchain to Fight Corruption
Given the state of the world, hopefully we technologists will consider using our prodigious collective talents in meaningful ways in 2018.
I view a fear of being judged as feminine as being more unmanly than being green. Now what you gonna do macho man?
Ooh! Can you shine a laser into the camera to blind it? Burn the sensor to a crisp and then let that seed the CSPRNG!
"When you strike at a queen, you must kill her."
To all the kernel programmers out there, can we get a HN-level ELI5 for this?

It looks like a total system compromise is possible. Under what conditions? Any ways to ensure we don't get pwned?
"tenet" (principle), not "tenant" (occupant of a dwelling)
> Unfortunately, a combination of forces in the world make nonprofit long-term research a tough sell right now. It doesn’t matter how good we are at what we do. Everyone is overextended trying to solve all the world’s problems at once, and we’re in the unpopular space of being neither for-profit nor directly and immediately philanthropic.

http://elevr.com/elevr-leaving-ycr/
An habitation without hot water doesn't qualify as liveable in first world countries. You should have disputed only on that, leave on the first day and ask for full refund.

If possible and necessary, deny the charge on your card.

I've been on both sides and seen all sort of claims. Disputes are always messy, AirBnb seem to read them and try to deliberate.
That may be done (even offline), to prevent buyer's remorse and to reinforce your choice of having bought that product — so you don't return it or give it away with a negative view of it. It's all mental manipulation.
Your use of "vegetarian" and "cannot eat" is incongruous.

It would be more correct to say "choose not to eat." Being a vegetarian isn't like being afflicted by a disease. It's a lifestyle choice.
What Depth Psychology Can Tell Us About Victimhood Culture
OP doesn't get any revenue from it. He's not Dominos Pizza.
if i could wave a magic wand, taxes would be strictly progressive. I understand the difference between income and capital gains, but i find Buffet's comments about 'lower rate than my secretary' frustrating.

I would support Paul Ryan's original promise that 'you can file your taxes on a postcard'. With the caveat, every other person and corporation also files their taxes on a postcard.

This, of course, strips a fantastic amount of subtlety and control. Subsidize what you want and tax what you don't is standard tax policy.

On the other hand, i prefer scheme to c++. so simple as to be completely transparent is better than fabulous complexity. But, it turns out that's not a particularly popular world view.
"The Day Today" covered this pretty well in their pool supervisor skit -

Pool Supervisor: "This pool's been open nearly 40 years, and, in all that time I only slipped up once, to my mind. I was engaged in a particularly tricky word puzzle and 40 people had broken in and were in the pool, playing around, ducking, bombing and doing all manner of prohibited activities, and eventually someone was killed."

Interviewer: "But given that your sole responsibility is to maintain the security of the pool, isn't that an indictment against yourself?"

Pool Supervisor: "Well, I would say this - I've been working here for 18 years, and in 1975 no one died. In 1976, no one died. In 1977, no one died. In 1978, no one died. In 1979, no-one died. In 1980... someone died. In 1981, no one died. In 1982 there was the incident with the pigeon. In 1983, no one died. In 1984, no one died. In 1985, no one died. In 1986... I mean, I could go on."

Interviewer: "No."

Pool Supervisor: "Right."
I am going to guess they are using: https://github.com/RIAEvangelist/node-dominos-pizza-api to order. :)
I remember reading at least one case study of someone standing up an online poll related to a sporting event that got 100k's users over a few days on GAE, really impressive at the time. You can still do that of course, but now you're dealing with load balancers and instances, a lot more admin overhead. It is/was a total walled garden, but for scale and ease of use like that, it was really worth the sacrifice. I really don't understand why everyone wants to be wrangling containers/instances nowadays.
> this is not done in 2017

If you can choose not to eat certain things, the rest of the world can choose not to be bound by your artificial social constructs.

/ "Not done in 2017"... SMH.
You're correct, but I think it's worth going into a bit more detail about some of the tradeoffs involved in the concept of "Responsibility" as it applies to security research and exploit discovery, because there are a few clashing objectives that shape what the right choice is each time if we're considering how to minimize harm to all parties (if someone just wants to sell it to the highest bidder none of this applies). On the one hand, a vendor provided, well tested full patch is of course the ultimately desired permanent fix.

But what I think many people forget when they get "responsible disclosure" in their minds is that there are often bandaids users can do to protect themselves immediately regardless of whether a patch is ready, so long as they know about it. And since it's always possible and generally unknowable as to whether someone else might have already found the exploit and be using it, there is extra hard to calculate risk. Releasing it without a patch may lead to some users getting exploited, but it could also actually protect some users from being exploited or at least allow them to minimize the harm. Once it's known about in the wider community, it is also easier to check whether it's been selectively deployed anywhere. The lag time between notification and vendor patching is itself a risk (and of course there is lots of room for perverse incentives in all this).

So the real core issue with Coordinated Disclosure is that there is not in fact a Right Answer in general, any choice may help one group at the expense of another. Many researchers and organizations try to split the difference with standardized policies that seem to strike the balance, perhaps with occasional exceptions if it's serious enough. But ultimately it really is up to the discoverer and it's wrong to insist they conform to what the vendor finds desirable, particularly since ultimately the responsibility for the blunder lies with the vendor. It's a hard area and researchers should be respected for the work they do on their own terms.
Does "automation" mean immigrants?
> but they are not practical or necessary in any production environment

But do they provide any greater advantage or greater utility to your "science projects" other than being cheaper to run? What do higher rates and higher reliability have to do with being able to create a non-deterministic and thus truly random bit? In other words, how on earth would a hacker even conceivably be able to hack the lava lamp setup?
I'm currently working on a postmortem on my recent data scientist job hunt.

As I found out during my job search, the new 2017 trend for tech hiring is companies giving both a take-home assignment and an algorithm test before the on-site. And it's never a weighted average where doing well on the take-home can account for a weaker algorithm performance; it's always pass/fail.

This gets very annoying very quickly when you keep passing take-home assignments (that has questions actually related to data science) easily but fail the subsequent Leetcode-esque algorithm questions that aren't related to data science at all.
Also see it’s predecessor, Indiana Jones and His Desktop Adventures.

[0] https://en.m.wikipedia.org/wiki/Indiana_Jones_and_His_Deskto...
On the other end of this emotional spectrum I have always loved watching games evolve with me and what you think is now the best is kids stuff compared to what comes next. Mortal kombat and doom enraged parents at the time and now the stuff we can render at 60+ frames a second would blow people away in the 80s. Part software evolution and part hardware coming together each year to push the envelope, more sprites, more triangles more pixels more frames. I can afford whatever system I want now but when I was a kid a 180$ sega was like winning the lottery.
Very true, but Dominos is a lifesaver in Japan. In my experience, it's one of the few places where you can order a pizza online in English and be certain that it will actually be delivered.
To be fair, Detroit more or less conformed to the hype, a la Robocop, at least for a while. Cali is doomed long term with the water situation (Caddilac Desert is a great read), the future of Louisiana is unclear, and so on. The predictions have been off as to timing, but the trajectory seems accurate.
Toshi: A Dapp Browser for the Ethereum Network
Oh no... a woman has purchased a bra before. Stop the presses. That must mean every ad she sees should just be barely clothed women.
There's a place by me that makes a very good $32 pizza.

It's also 40 inches across, so I have to borrow the neighbor's truck to go pick it up.
> "Does "automation" mean immigrants?"

> "we minimised low wage work long ago with automation. As a business you want to AVOID employing people at all costs."
Not sure about Google but other companies I've interviewed at made me sign an NDA about disclosing interview problems.
Vegetarians may not eat meat products anymore. They have a severe, painful reaction to eating meat. You’re essentially revisiting a decision made in the distant past. You might as well be asking people to change who they married.
Ha! This means no one should take any user feedback! Ha! But nope, the parent comment was not meant for you anyway.
The article is really eye opening for non-os guy. Love mac and worry. But sometimes you do appreciate in a sense Darth xxxxx.
Yeah the interview process is kind of a mess sorry. If anything getting 3 offers out of 14 applications is a pretty good offer rate imo.
> The DJ isn’t doing anything there, though. That’s just the breakdown of the four tet remix of Eric Prydz — Opus. He’s just playing it straight.

I think that's the problem with trying to explain this stuff. I don't go to shows like this; to me, a DJ clicking "next" in iTunes is indistinguishable from someone practicing a craft. I just don't know enough, and I think a lot of other commenters in here don't either.
A coworker of mine used the technique to port the company's application from using an old object database to Oracle. People certainly use this in real-life code.
I can attest to this. I filed a ticket over a week ago because I'm locked out of my account. It took them 8 days to reply with a canned response, then 5 more days to say they don't have an answer for me yet because they're so busy.

This isn't acceptable for what is essentially a bank that just raised $100M at a $1.6B valuation.
Call them "free range Atlantic micro branzino" and see if that works!
You are right, my usage of the term static does not go back to a well defined notion, I used it for brevity. What I meant is to make a distinction between entities describing the (runtime) system's state (classes, methods) vs. the entities used in the system's execution (stack frames, message sends).
If they don't support ACH, how could you do an ACH transfer by mistake?
Triboluminescense is not a new phenomenon. This is a novel way to create a stable plasma structure. This is precisely what patents are for.
I don't see what this has to do with Project Oxygen. They gave me only one soft-skills question in a five-hour session. It was straightforward and I had no indication they were unhappy with my answer. My WTF is referring to the fact that the outcome is at 180 degrees from the feedback I received at the time.
>I think 2/3 of the world's shipping industry is controlled via Smalltalk for example

Which system?
I started consulting and interviewing prep startup for engineers who want to become PMs. http://bit.ly/2q5APCD
isn't that how Vim would have worked if you SSH from a physical TTY _anyway_?
Seattle, Vancouver, and other cities with abundant hydroelectric power have had electric bus fleets since at least the 1960's. Probably earlier. The only difference now is that instead of running wires overhead, you have to install charging stations.
I drive an EV (not a Tesla, but a dorky Leaf), yet own a lot of guns. Maybe I should buy more guns to compensate.
> You don't extend cell phone coverage across millions of acres of protected national park space for edge cases like "saving someone's life".

Safety of life is not an edge case. Distress signals have been consistently regarded as the most crucial traffic (and have been prioritised and released from requirements (like the duty to use the least power needed, licencing requirements) that apply to other users) on radio links for more than a century.
>I haven't been to a gas station more than a dozen times in the last four years.

Where do you buy your Andy Capp Hot Fries?
No, their bug bounty only extends to iOS.
They're trying to say Google's more likely to reject you for a soft-skills deficit, but they're incorrectly drawing any conclusions from "I can't tell you why". It could have been anything from discrimination to a simple mishap of hiring for a position already filled and the recruiter/interviewer saving face.
2018 blockchain trends forecast 丨 big talk
Wouldn't each and every person use it were it available? But we accept risk when we go into national parks. They are intended to be wilderness. They are not your town park and this is posted many times throughout them.

The idea that it might "Save just one" makes it a viable option is false. Danger is a beautiful part of nature and destroying the last vestiges of Earth as close to beyond human influence as possible in order to cover edge cases is ignorant of the realities of life.

We don't mourn the wing-suiters who crash into mountains on their flights. The same for the people who venture into dangerous territory. Otherwise, where is the limit for abdicating the responsibility of our own safety?
Exchange EXMO reported a DDos attack
I'm 27 and I did the similar thing last year. Having plenty of time for personal development is indeed great. But to be honest, I'm anxious about the limited social networking in smaller town from time to time.
$30 a pie for freakin' Dominoes!??!
If anything this has a severely negative downside for dominos/the pizza vendor with “business as usual” as an upside. Doesn’t seem like something they’d like.
The why amounts to you knowing a special incantation that nobody in the US has otherwise stumbled upon. The assertion remains less compelling than the rational explanation that I first heard in the 80s (the context of that is important). Computerx didnt just originate that thought, further demonstrating your lack of knowledge.
> protocol designers to fine-tune incentives and punishments

This is an interesting phrasing of one of the questions I have about the "decentralized" aspect of cryptocurrencies. I get that the context of the term is that it attempts to bypass the centralization of a fiat currency. But isn't it still centralized to those who develop the protocol itself?

Or is the agreement of the community a requirement of the protocol?

My heuristic seems to be that the precise protocol implementation decisions are analogous to the precise laws enacted by the centralized governments who provide the value behind mainstream fiat currencies.
What is unselfish faith? Can you describe how do you perceive faith as a concept?
Ask HN: Should I market my consulting work as my name or a brand/business name?
I'm starting to do some consulting targeting businesses with $10 million+ revenue for $15k+ engagements. Do you think it makes more sense to market myself as my name (e.g., johndoe.com) or a brand name (e.g., superconsulting.com)?
Good to see police practicing net neutrality.
Nope. I did a wire. I have called my bank and coinbase's bank and neither have seen the wire.

There's plenty of people online complaining that wires in and out of Coinbase from December 12-18th have yet to process. There's even a class action lawsuit being formed about it.

My worst fear is that Coinbase is insolvent.
I don't think it makes the argument completely moot, especially for single-player, serverless games like TIS-100. I agree Steam is the most convenient platform out there. If they just took a little extra step to make sure DRM-free games would behave as expected (something like a download link to a guaranteed standalone installer that you can just back up and feel reasonably safe about having forever) in addition to the excellent convenience they already provide, no one could ever beat that level of service. Well, maybe someone could match it and not take 2 weeks to resolve an incorrectly flagged account issue that's immediately obvious to human eyes, then they'd have some competition.
Are Australian police trained and measured on their ability to resolve civil disputes on the spot?
I am fully verified.

Only Coinbase seems to have this issue. And at least the other exchanges have working support.
Apple's bug bounty program does not cover macOS.
I've been hosting a service on GAE since the beginning.
Pretty much 100% uptime, just had to update a .yaml file twice in... a decade? Amazing service.
Improve my attractiveness by 10x.
Money? My passion drives me!
What is my passion? Money!
Doesn't mean you can't email product-security@apple.com with your bug anyway.
Dupe of https://news.ycombinator.com/item?id=16036268
Set Chart Axis Properties and Handle Text Before/After Switches During Mail Merge
Went back to being an Emerging Markets hedge fund manager after taking 5 years off to research ASD

Created www.ananas.org.uk to map the worlds belief systems using AI and data science incentivised by tax deductible crypto (closed ecosystem Veblen good model supported by ERC-721 sponsorship of scripture)

Worked on finalising specs for www.symmitree.com to give every refugee access to free android smartphones and data in the next two years using functional distributed ledgers combined with biometrics and lots of great partners. Blockchain bonds too based on the IFFIm program, the legal side has been really interesting, as has delving into self sovereign ID with zero knowledge proofs.

Has been a great year, hopefully 2018 will be an even better one.
There is a correction to the article. They omitted a "not" before "be considered".
The one key problem is that if your preferred partner is themselves a homebody with mostly-asocial interests, you’re unlikely to meet them by going out, because they aren’t going out. Meeting people in real life implicitly filters for extroverts (and introverts with a lot of willpower to burn being temporarily social.)
Hi,
I've replied to wjossey's comment but no response so far, did you just woke up one morning and decided enough is enough (without any inner monologue and stuff like that?). What do you think about trying to quit right there just like that?
> If automation starts to displace a huge number of people, and there is no job to transition, the social contract will break.

Can't we hope that the transition is progressive, so that the unemployment rates are compensated by lower prices, leading eventually to everything being cheap as dirt?
VBA and VB are very different languages that share a syntax. I agree wholeheartedly with your assessment of VBA, but in VB you had much better type support (by no means perfect still), better tooling, better static analysis, proper compilation (It's been a while so I can't remember how it worked under the hood, but you'd at least be aware of type errors early).
> The topic of this article is Google App Engine (GAE), which is a PaaS.

PaaS & FaaS are quite related; so it is not unreasonable to discuss in this threat. e.g. see informative comments by @indigodaddy on the same threat.

p.s. article also talks about other non-PaaS topics e.g. Data Store, Memchase, BigQuery, etc.

> Comparing GAE to AWS step functions (which is some wrapping around AWS Lambda) is moot since they are different categories of products solving different problems.

Many of the problems that they solve are the same; but they do so in a different manner.

AWS Step Functions is a lot more than "wrapping around Lambda"

> For "serverless" products * , AWS Lambda/Step Functions are comparable to Google Cloud Functions.

AWS Step Functions has no comparable service on Google Cloud
> My worst fear is that Coinbase is insolvent.

Surely they would have to be thoroughly pwned for that to be true? They claim that 98% of customer funds are in cold storage, and they ought to be raking it in on transaction fees and with BTC being up 1372% this year. They also raised a $100M Series D round in August. It's not impossible, but highly unlikely.
I personally am fine with the inconvenience of using the web browser on mobile, instead of using apps. That way, I have more control (not complete control though) on what information these companies get. I don't think that would work easily with Instagram (which famously doesn't provide a web interface for uploading content and interacting within the platform, AFAIK). But it works with FB (which I reluctantly use for certain purposes to reach certain "for the greater good" audiences), Google products and such. Firefox Focus, private windows and tabs, content blockers — they all help to a good extent in preventing more information from being collected and mined. For all we know, mobile apps that interact with photos on the device are mining metadata even from photos that are not uploaded (from EXIF information) to "provide a better experience for users". When I use a browser, I know for sure that I'm giving the site access only to the photos of my choice and only during the span of time I actually do the act of uploading photos, and not to everything and not at all times while using that platform.

Apps are a lot more convenient, and most users wouldn't do what I do. So this is a compromise of sorts.
I am in a similar but pretty worse scenario, unable to withdraw a lot of funds and id is expired, waiting for renewal.