skysight-inc/HackerNews huggingface dataset:
The Living Computer Museum is indeed fantastic. I’m partial to the mainframes but my daughter hates the loud noise in the cold room so we spend more time playing old PC games.
There are lot of data where white students are admitted with lower scores than Asians on average. Without these handicaps, Asian Americans would have even higher rates. The exact same thing happened to Jewish students a generation ago. I thought everyone knew this?

"Writing in the New York Times, Harvard political theorist Yascha Mounk points out that Asian students must outperform their white peers by 140 SAT points to win admission to elite universities." [1]

"Today, according to a survey by The Harvard Crimson, Asian-American freshmen had higher SAT scores than any other ethnic group. It's not enough for them to be as good as everyone else: To get in, they have to be considerably better.

The problem seems to be that, in the absence of measures to limit their representation, there would just be too many Asian-Americans. So, from all outward appearances, Harvard has a quota to prevent that unwanted result." [2]

There are tons of results. [3]

[1]http://america.aljazeera.com/opinions/2015/10/the-asian-disa...

[2] http://www.chicagotribune.com/news/opinion/chapman/ct-asians...

[3]https://www.google.com/search?q=asians+and+white+sat+scores&...
Great towns near great cities are the best compromise, IMHO. Cities are too noisy and stinky for me. But I need to have one close by for events that only a city can host. And for better air transport.
Idealist.org
> Twitter is not an effective discussion platform imo.

It doesn't need to be effective for discussion to be valuable. It can be an effective broadcast platform, or research platform, or...
I’m the CTO at Sqreen and I do love Matasano (cryptopals... awesome crypto challenge https://cryptopals.com/).
Realistically, security audits or bug bounty are not doable in seed startups - where most of the time no one has any security knowledge, and no money :)
Thanks for the missing things we will update! By the way this is open source, feel free to contribute: https://github.com/sqreen/CTOSecurityChecklist (not sure this is 100% today with the version on Sqreen.io, we’ll get there this week).
Twitter account exposing the extensive election manipulation in Russia
Those are CSP violations not CORS violations.

There are different levels of maturity with your security headers, and Sqreen's cookies are scoped to a completely different subdomain my.sqreen.io versus www.sqreen.io. It looks to me like they are doing everything right.

There is no shame in having your CSP header in Report Only. It's complicated to manage your assets, especially when using a tag manager where it's not obvious what the hell the URI/hosts are that will be loaded.
There might some "eco-consciousness" going on, but it seems to me most Tesla buyers would fall into the car/tech geek category.

The car is viewed as so bleeding edge that it attracts a lot of these folks.
Digitalis aka Foxglove is the source of cardiac glycosides, which has been used for many years to treat cardiac arrhythmias.
https://hn.algolia.com/?query=powder%20mountain%20utopian&so...
I do; occasionally, and mostly when they run additional 20% off coupons.

- Valentine's Day Activity Gift

- Activity in the city in January

I've recently been exploring for some things in Vegas.
Is this not the same argument people use when talking about bad software security practices? Seems odd to flip when the discussion isn't about tech. Physical security is still a spectrum and depends on what kinds of threats you're trying to prevent. There are certainly a number of arguments against the TSA but "a sufficiently well planed and executed attack could get around the checks" isn't one of them.

Just because you can't defend against state-level adversaries doesn't mean you shouldn't have a password on your phone. Just because your door could be broken down with a battering ram doesn't mean it's pointless to have a lock.
The concept of a mind is not the same as an instance of a particular mind, any more than a algorithm is the same as a running process, or the idea of 3 is the same as a set of logic gates designed to represent a 3 in binary.

Mistaking our own internal representation of our own mind (our consciousness) for our actual mind is what Dennit is arguing against.
The name slug in Heroku is a reference to Quake's Railgun
I wish frameworks included 2FA support in the default auth systems. While there are third party packages to add 2FA support, adding support at the framework level would help drive 2FA adoption in a major way.

Question : How would you add 2FA to a django website? Ideally TOTP + yubikey + backup code, but TOTP + backup code is also fine. The website I plan to add 2FA support will be open source and is meant to be self hosted by users, so I want to avoid SaaS solutions. I came across a couple of packages : django-two-factor-auth [0] which is based on django-otp [1]. There's pyotp [2], which will require me to integrate it into the login flow (not a good idea to be writing login flows). If anyone's using the mentioned packages in production, would be interested to hear about your experience.

[0] https://github.com/Bouke/django-two-factor-auth

[1] https://django-otp-official.readthedocs.io/en/latest/

[2] https://github.com/pyotp/pyotp
I wouldn't be so sure.

Let's see what happens in the mayoral election. If London Breed gets elected, I take that as a signal that the city wants something different.

Politics in the Bay Area has changed noticeably in the 7 years I've lived here. Guys like Wiener are getting more of a voice passing sensible common-sense solutions without getting shouted down by head-in-the-sand idealists that won't see things for what they are. Long-term, I think SF is going to become more like NY, a place with plenty of traditional progressives, but also a healthy share of pro-business, socially liberal conservatives who just want the trains to run on time, and don't give a damn about political correctness.

Or maybe I'm just dreaming.
I'd add to this that there is also a culture of security that is being created from day one. It is unrealistic to purposely let things slide security-wise with the idea that you'll care about it later, and expect a healthy culture to emerge.

Going back to layer on security can be challenging, but it's even harder to retroactively layer on a way of thinking about and prioritizing security. For instance, it literally has to be that every engineer is thinking about the security implications of every design/implementation choice with the same urgency as the product features themselves. And there has to be a sense of standards, accountability and direction coming from the top.

Equifax is a good example of a company that failed in this. You look at the original incident, then consider how they made it so much worse in their response. At a certain point you start to think "is anyone even thinking about security there?" and you realize their culture is fundamentally broken in such a way that their entire organizational mindset will need to be clean-sheeted. That's a tough road.
These are both fair points, my perspective is from high scalability and some of the public technical marketing about its scalability wound me up.
YES to that LBJ quote. I seem to recall also reading a similar observation backed up quite thoroughly with statistics in Michelle Alexander’s The New Jim Crow.
Three Heroes at My Lai
Wirth's compilers generated reasonably good code: 80% of the performance of optimizing compilers with 20% of the effort.

The first Java client jit compiler, was developed by Robert Griesemer (former PhD student of Wirth). The design of the compiler is described in the paper "A compiler for the java hotspot virtual machine", published in the same book: "The School of Niklaus Wirth: The Art of Simplicity".
As someone who has worked with many of the various tools out there, I have a lot of respect for the way the EmberJS team handles upgrades. I personally wish more teams learned from their success. Their mantra is “stability without stagnation.” While it is not perfect, the team appears to try hard to move the framework forward without breaking backwards compatibility. When it comes to a major release, I.e. the just released 3.0, the team released no new features, but rather just removed the features that had been depreciated in earlier releases.

Like or hate Ember as a framework, the team has developed some very good release processes and practices a lot of us could learn from.
Many people suggest returning the carbon tax to the people in the form of basic income to prevent it from being regressive.
Would be amazing... but realistically I think the only way we could do that is with a material like graphene/graphite and that probably is several decades away.
> (because nobody wants to check bags any more because fees)

I don't check bags because it is a huge hassle. Being able to walk off the airplane and right of the airport is nice. Not worrying about lost luggage is nice. Not spending an extra, worse case, 20-30 minutes at the airport is nice.

Airplanes that board back to front also load a lot faster, but people think it is "unfair" that people in the back get to go on first.

Heck all sorts of different loading patterns are better than the "front to back" system most often employed now days.
at some level it's similar to instagram/snapchat stories where you can get brief updates from people you know

in other cases entire subcultures that used to exist on forums have mainly moved to twitter, like the fighting game community or somethingawful-style humor

then a lot of people like to use it to follow celebrities, musicians or industry leaders
Google already allows you delete your account-linked location data: https://myactivity.google.com

Just be aware that deletion isn't instant though. From the TOS:

>We aim to maintain our services in a manner that protects information from accidental or malicious destruction. Because of this, after you delete information from our services, we may not immediately delete residual copies from our active servers and may not remove information from our backup systems.
Yep - and to extend on this, when you wash your hands after handling lead you should use cold water.
Cooking with Henry Phillips
What’s the use case?
win32k has nothing to do with active desktop which was mostly shell level.
> Assuming too much retweeting will clog my followers’ feeds.

You can choose to mute retweets from an account without muting the whole account, so that's not too much of a problem. If you retweet too much they can mute your retweets.

Recently something changed though, and now things you Like can also show up in your friend's feeds, and I haven't found any way on the default twitter site to mute those. So Likes can actually be more spammy than retweets now!
I'm curious. How will we know when documentation has caught up?
I don't know if there's a larger conspiracy, but media companies are probably retaliating against news feed changes. After Facebook rolled out their news feed change, news media have gotten fewer clicks and less money.

https://techcrunch.com/2018/01/28/how-publishers-will-surviv...

https://digiday.com/media/facebook-news-feed-changes-will-im...

https://www.sfchronicle.com/news/article/Letter-to-Mark-Zuck...
Ignoring transaction costs, that system is equivalent to a tax where the revenue is dispersed on a per capita basis.

All it does is increases transaction costs for no benefit (that I see). Also, it's pointless to care about the distribution effects of individual policies rather than overall government transfers.
The machine that turns CO2, sunlight, and water into sugar and oxygen is already invented.

Unfortunately, we're poisoning the most important instance (in the oceans) and clearing another (in developing countries) wholesale, leading to less biomass where there needs to be more.
Hacked together a car website with just HTML
Sure, people can reskill, but it is quite hard to do as life goes on and poverty makes it hard to justify going back to school for four years of CS that many of these people probably can't make sense of. Don't know what the solution is, other than encourage people to retrain. People seem to perceive big companies talking about people needing to learn to code as a way for them to reduce wages, when in practice most software companies would hire as many competent developers as they can and you just can't find the people with the skills.
>Has stolen clothing
>First term, sentenced to two years, three months

Holy cow, that's a really long sentence for a petty crime. Reading between the lines, the court might understand that they're doing it on purpose and are sentencing them with longer times.

Wouldn't be cheaper to just build them a community and put them there then maintaining a prison?
Oh I see. I didn’t get the “American companies in japan” subtext. Yes, that makes sense.
Really curious how previous societies dealt with opioid misuse when opium and related products (e.g. laudanum) were far less regulated. I’m just confused why a substance that’s been a cornerstone of medicine for centuries (millennia?) is causing so many problems now. Is it less about the drug itself and more about the state of society? The cultural or legal context?
GDPR, Sentry, and You
> What they do is figure out what about the plant actually works, simulate it with other chemicals, and then sell that

That sort of presupposes that what 'works' about the plant is a single, potent 'active ingredient' that can be identified/refined/purified/synthesized; in other words, this requires you to assume that what is convenient for an industrialized pharmaceutical industry is also an accurate reflection of how human health and nature work.

But what if it were the case that the whole plant extract that is actually the most effective, and depends on some synergistic spectrum of phytochemical compounds?

Note that I'm not saying this is necessarily true, but the way the system up we have a chicken and egg scenario here:

1. If it were true that whole plant extracts were more effective for some conditions, you'd need to do a lot of research to prove it, but the research funding presupposes the potential for profit

2. There's no incentive to change the profit incentives currently (where 'find, extract, patent, synthesize is the default assumption), since we don't have much evidence that we should change those incentives

This is a self-reinforcing set of norms, and changing them would require 'extraordinary evidence', except the norms themselves discourage looking for that evidence. Just look at the state of marijuana research over the last 4 decades as one particularly egregious example.

> if tea tree oil really did cure cancer, they’d refine it and patent that shit in a heartbeat

Not if the pharmacologically active ingredient is present in sufficient quantities in the raw plant as well.

You can certainly patent it, but you won't be able to make a profit since people can just go buy/grow the raw plant.

And if backwards induct from that fact, you find that under under very few scenarios would it be rational to dump research money into it since the people paying for it would never (directly) see a return, even if society as a whole benefits.
I worked on this checklist and your feedback is very appreciated.

You're right on all your points from a pure security point of view. We should be doing security as soon as possible. Unfortunately, the reality of building a startup is about finding product-market-fit. Entrepreneurs are not incentivized to do security early on. The fear strategy our industry is using for the last XX years has failed.

As security professionals, we need to help entrepreneurs and educate developers find a good balance between building a business and building good security practices. This is the goal of this checklist.

We can't expect developers to spend days implementing security best practices before even having a business.
Yes, these are all possible explanations, but the specific symptoms observed - development of spots and smaller cranial capacity - are well documented as common effects of human domestication across a broad range of mammalian species. That the same mechanism is driving the changes observed in these mice would be a simpler explanation than various disparate, piecemeal effects combining to produce them.
That's not how pricing works.

Marketing is a volume play, not price.
Pensions are ok as long as they're (a) fully funded and (b) managed well. Politics makes both hard.

(a) because it's much easier to promise benefits without fully contributing the present value of future liabilities. Ask the average taxpayer how much a pension costs, they'd have no idea how to even start thinking about all the complex financial math this requires (life expectancy, discount rates, return expectations, etc) so it's too easy to play games. Especially when game playing=lower taxes and more benefits.

(b) because pensions are huge pots of money and it's just too hard not to touch that. Though CalPERS seems to have resisted this temptation to some extent, which I find impressive.

Believe me, I wish I was wrong, but we're talking about basic human nature here, which I don't think is something you can really change.
> Its reliance on Webpack or Browserify for optimal use really gave me pause.

Mind elaborating on what you mean by "for optimal use"? For example, I use Brunch with Vue 2 and it seems to work fine.
They are. People sometimes take money from multiple parties at the same time. However many times largest spenders get the max votes. It is just not money, gifts including alcohol jewellery etc are given, so it mix of relationships with grassroots party representative(inc caste equations) and the gifts. If the sentiment is really against candidate no amount of money help.
Just like git tags, release notes, makefiles, etc ... Documentation is one of those things that needs to be updated as part of a new release.
By now, the documentation should have been updated in my mind as they are on version 4.1.1 (https://github.com/webpack/webpack/releases/latest).
There is nothing anywhere on an airport that is properly called "tarmac".

Stop using the term.

https://aerosavvy.com/aviation-terminology/
Not really. This is pre-ASLR, so all you need to do is push a string pointer on the stack and call an address. Probably less than 15 bytes of machine code you'd need to hex-edit into an existing exe.
It is good for the environment if it reduces the amount of beef eaten, but, on its own, it is not good for the environment. It is easier on the environment than beef. Chicken and turkey are easier on it than pork. Fish is easier on it than chicken.
Hello. Webpack team member here. The webpack@4 release was, well, interesting. I can't add much that hasn't already been said - but I can say that we're working to make sure there will never be another webpack release that suffers from the same kind of documentation shortcomings. There's a metric poopton of good stuff in the release, and we're still working to get all of it written down. That said, look for future major releases to be far more proactive than reactive with regard to documentation, announcements, and migration details.
Not a tarmac.

https://aerosavvy.com/aviation-terminology/
Facebook desperately needs this feature.
resorted to putting codecs into the housing at the end(s) of the cables

AFAIK that's just DisplayLink and one Apple dongle and it's more due to backward compatibility than data rates.

Can flexible circuits switch at a high enough rate to perform these signal processing tasks?

Maybe, but I don't think the economics work. It's probably much cheaper to just use a proper high-speed PHY in the first place.
I completely agree. Something strange is going on here. It reminds me of how hundreds of short, poorly written articles hyping bitcoin were released just before the bubble grew. Of course, that sort of thing creates its own news, but there was obvious paid help to add to the frenzy. It’s sad that we can’t trust much of what we read online because content publishers are so easily bought and sold.
I recently actually decided to give up coffee for a time, after drinking it almost daily since high school.

For the me the biggest changed I noticed was how much more strict I need to be on my sleep schedule. Before I could have an extra espresso shot or three if I didn't get enough sleep. Now I have no way to compensate for my tiredness. So in response I've been way more aggressive at getting to bed at a good time.
>That some genetic features may be dropped or changed if not required anymore without the pressure of a higher death rate / lower reproduction ... darwinism doesn't seem to explain everything

If the results of a newly-introduced selection pressure can be explained by darwinism / natural selection, then surely so can the results of a removal of selection pressure.

For example, if there are genes that result in lowered fear or agression, and that leads to fewer offspring for wild mice, they will have a lower frequency in a wild mouse population than in a population where they don't lead to fewer offspring. I'm no expert, but it doesn't seem like this particular article requires any additional mechanisms beyond natural selection.
Some of it is, but some of it is that many VIetnamese went to the US after the at and so their family is there and they can see firsthand the benefits of living in the US.

Also Vietnamese are fiercely capitalistic. I've never seen a more go-getter attitude in any other country. That also colors their perception of the US.
If it's "Tom's", then I would take this as another sign to switch to a toothpaste that actually cleans your teeth instead of your wallet.
The first link has a great content but the UI could be so much better. Some suggestions:

1) adding a sidebar to give an overview of the tips and help to navigate to the ones I'm interested in

2) grouping the tips by category to make the list shorter and easier to read
It's not a huge stretch since they can write. Have you seen the Eat Mor Chikin signs?
That's really the crux of it. Remote work is a cultural problem, not technical...

I've worked on very remote-friendly teams, the tendency to work in isolation was a constant problem. But properly using tools like email/slack/wikies was sufficient once we addressed the cultural aspect.
How George Boole’s zeroes and ones changed the world (2014)
Did you expand the read more? That’s exactly what it says.
If you're using straight passwords, sure, an ssh key (ideally in a directory) is going to beat a password-only login, but that ssh key is still subject to credential theft. I'm in the process of migrating an environment off of ssh-key authentication over to password+otp based kerberos (FreeIPA, though AD makes this easy too). A single password+otp login gets an 8 hour (non-renwable, in this environment) ticket. At the end of those 8 hours, users have to obtain another ticket with a password+otp. What's particularly nifty about this scheme is that it's useful for not only ssh access, but internal https services as well.
> What I do not understand is how they let defective cars get into the hands of some press people.

That is something that puzzles me too. However, since I have been in the market for a car recently, it seems that it happens regularly to all the brands.

Some reviewer even mention the fact the car is early production model and has some quirks that will be fixed later.

In any case, car reviews before a car reaches general availability are highly biased anyway. There is a press package that comes with the car and you can clearly ear the same words used in every review. And then they fly reviewer over to a special testing location, put them in nice hotel, feed them well and the actual "test" looks like a corporate team building event. (youtuber are now invited too, which lead to a lot a video behind the scene of those events)
‘Rewilding’ Missing Carnivores May Help Restore Some Landscapes
presidential communications?
The same should be applicable to MP3s. Also, the continuity measure could include derivatives as well.