skysight-inc/HackerNews huggingface dataset:
My understanding of this paragraph [1] was that it was the Russia's saying he staged his death, not the Ukrainians or the journalist himself. I could be wrong though.

1- The Russian foreign ministry said in a statement it was happy that Mr Babchenko was alive. Spokeswoman Maria Zakharova said the staged murder was done for "propagandistic effect", Russia's Interfax news agency reported.
K-Frequent items in a data stream over a sliding window of X seconds
I'm trying to solve a problem where my program would read a log file containing IP addresses and UNIX timestamp. at any instant of time, I need to find the top K IP addresses with the highest number of hits over a time period of past X seconds. I see there exists an algorithm which is nothing but sorting the entire log history based on frequency count and extract top K elements from it . The complexity of this algorithm would be O(N + NlogN) where N is the number of log entries. I'd like to know if we can do better than this?
Plenty of gyms offer PT and have registered dietitians, you have to convince insurance companies to pay for it.
Introduction to the gfortran array descriptor / dope vector
I saw it on CNNs site before HN
Fascinating.

My first thought was, is this inspired by the zfs video demo of hard drive throughput disruption caused by yelling at the hard drive? Brendan Gregg's video IIRC. But alas, no mention nor reference of it in the paper.

Then I see in the references that this is a well studied field. However, the idea that one could disable cameras remotely seems new and scary. The threat seems real, albeit perhaps overblown since don't most surveillance cameras have physically separate and isolated (from the camera body) recorders?
Is it something you really want or is it expected of you?

Do you really want to enrich debeers? Buy a 2K wedding cake?
Out of curiosity, is there a point in using a connection pooler if your application does not follow the PHP approach to things?

That is, if you don't create a new DB connection for each HTTP request, but instead create one (or a few) connections at webserver startup time, which can serve all coming requests?
Loading UI Files in Qt for Python
"Aliens gave it to them". This puts panspermia in a new light, thank you.
Note: I haven’t read the source code so I’m not sure how it’s actually implemented, this is off my personal knowledge of WebAssembly and Spectre.

WebAssembly isn’t assembly. It can only refer to memory offsets within its allocated block (so it always does *(baseAddr + offset)), so to generate assembly for it, you already need to add checks. One way to prevent some spectre-like attacks is to mask the offset after those checks. Another way is to use virtual memory to keep program spaces very far apart and only use int32 displacements in memory loads (since they’re always relative to the base memory address).
If you're working for a company whose business is to transfer massive files, the IT department should be more than willing to pay for CloudBerry. They would need to set up the AWS account and S3 permissions.

It should be a lot easier sell to an IT department an AWS + Cloudberry solution than an unknown company's solution.
Bonsai (YC W16) is hiring a growth lead (Remote OK)
FWIW: I had geothermal in my house in maryland, and loved it.
The system consistently beat the listed performance specs, which were detailed and complete and easily findable.
See the submittable data at https://www.waterfurnace.com/residential/products/literature

This is compared to air heat pumps, where they give you a single number with no factors, and your system rarely will get that number given your set of variables. You can get the full performance sheets if you nag the crap out of them or you are a contractor and have access to the service site.

It is significantly more common in areas on the east coast (which has a good climate for it) and also areas where wells need to be drilled anyway.

It's less common in areas with city water/sewer.

When i talked with the well drillers, they were doing a bunch of residential geothermal installs each week, so ...
The consensus I've seen has been that you can't keep around server logs, especially not forever, just for abuse monitoring. GDPR considers IPs PII.
I don't know why this never occurred to me. Thanks for the idea. I've always exited i3 when I have the rare need for something from gnome I don't know how to do without the UI.
My grandmother was born in the 1920s. There was a self-enforced 'femininity' back then, wherein women told themselves that they couldn't, shouldn't, or didn't need to understand things, and that their husbands or fathers would take care of things.

I'm personally very grateful we have moved past this. My grandmother would break down at the slightest hint of technical discussion. She never understood computers as anything more than a fancy typewriter.
> Can’t all this GDPR stuff be abstracted away into a framework? Or at least some kind of pattern/generator tooling?

I understand why you think this way! It's an obvious approach, where there's a bunch of stuff that needs to be done and it's the same everywhere. Why not just have a framework that handles it all for you? It's so clear!

It's perhaps possible that many of the requirements of GDPR are beyond the scope of what any kind of framework or code pattern or generator might be reasonably expected to handle. Code cannot readily become a Data Protection Officer or respond to inbound requests. Code cannot address the need to identify and inform users affected by any breach. Code will likely struggle to do the vendor assurance required of all your Data Processors.

You're absolutely right! There's excellent reason to have the technical requirements handled for you by a framework so you can focus on the important parts of your business. It's just perhaps possible that this could be less than the whole of GDPR.
With nothing but an IP address it’s possible to purchase data append services that reveal a user’s email address, physical address and more. Large sites sell login data to data brokers, keying user account info to IPs. Marketers upload lists of IPs and get back an enriched list with a full profile. Obviously it can get fuzzy with multiple people under the same IP. But in many cases it’s all that is needed for identification.
Well, congratulations are in order, if this is the first step towards throwing out most of the OS.

Face it. Linux had its time, its conception of the world reflect a developers wet dream from the mainframe era, with many users, few resources, and the soon to be extinct dictator, err, universally hated system administrator.

Who needs elaborate permissions when you're the only user on the system? Which user still shares data without sending it, manipulating permissions? Who likes managing installs and incompatible dependencies? Hell, just copy the data, that's what we all do. The file-system dedups it anyways if necessary.

The list of unused and unwanted features goes on, but developers just keep reincarnating this same old fantasy of an anachronistic OS. It seems to me nobody but Linus can make them see again..

Linus, there's so much pain. What's the use case these days? Do you see Linux going over its own horizon, how? I suspect your answer involves a server OS.

PS, this idea of course also reminds of Microsoft's Singularity OS.
CTET-2018 – Syllabus – New Exam Pattern |सीटीईटी-2018 |सिलेबस|नया परीक्षा पैटर्न
I suppose you don't count strangers having my personal data as "concrete"?

But I can't think of any internet regulation that's ever harmed me. Which ones are you talking about?

Edit: I can think of a small number of regulations (much less than one per year) that cause problems, but they still don't meet the personal concrete harm threshold you've proposed.
"Agile" is completely independent concept from "full stack" or "homogenized" development.
Elizabeth Warren thinks it may end up making money for Equifax:

https://www.marketplace.org/2018/02/28/tech/sen-elizabeth-wa...
Why does harm matter to the question raised?
A Sausage McMuffin with Egg does it for me.
Yes, they take the state of the video every 16 frames and look at its embedding. These were made into checkpoints.

The AI is rewarded if at each checkpoint the state vector its produced is sufficiently aligned with the videos.

I guess that's the initial training to deal with sparse rewards.
I'm very interested as to why this phenomenon - not having an authoritative way to vet third party libraries - seems to be a uniquely frontend concern. What have the dozens of other, battle-tested languages done to solve this? How do I know that a Maven package or Rust crate is legitimate, useful, and sans-malware?

It seems like this is a question fundamental to any programming ecosystem, that _must_ have a reasonable solution which balances developer time assessing a potential library with the utility of that library. I'm very interested in some strategies the JS ecosystem could take to foster a culture or platform with well-known, well-supported standard libraries.
Yeah, if they had been planning for two months, likely the gun shots were staged.

Then it wasn't really going to fool Russia, they hadn't attacked him. Was it an attempt to influence Western countries?
How is an entrepeneur with a sense of ethics supposed to compete in the current environment? When there is no regulation, the people with less scuples are the winners, not the people with better product.
To call Musk an extreme optimist in these cases has become a big understatement these days. He's a visionary at the cost of jumping the gun all the time. It's like he's so desperate to achieve his visions that he mentally lives in the future. That being said I do hope these current issues pan out soon enough.
Why haven't you told your manager that you are willing to do your job plus the product owner's job for only your pay plus half the product owner's pay?
> Which means it's essentially a free-for-all. If everybody is your enemy, then you still have enemies.

Being a free-for-all doesn't make it enemies, just a game. The two prisoners in the prisoner's dilemma aren't enemies.

Employment is just another case of game theory. There are times when the best outcome for you is to collaborate with your employer, other times is to play against them. And so on.

A reductive vision of me vs. the world, or us against them is naive and counterproductive. Particularly because you'd do the same in their shoes.
Say, their signals people picked up a shortwave destined to an agent, but they had no idea where to look for him.

Or if the disposable and deniable hitman was employed, and the agent himself was out of their reach for whatever reason. They may have wanted to intercept him, and have their own man to reach Russian agent once the execution order was "fulfilled"
A previous company I was at worked this way and it was a dream. That said, it does require very selective screening processes and maturity from those you do hire.

However, it was the most happy / least stressed I've ever been in my life. I still get beers almost weekly with over half that team. This "strategy" really built comradery because we were always talking and discussing rather than leaving comments on some Jira ticket (which we did for async or when necessary).

Seriously.... give it a shot if you can
I refuse to believe this is not satirical. "I have few new needs. Gnome is cool. I store my config in ansible.".
PixelPin: Cyber security beyond commonly used textual and biometric passwords
Why is this getting downvoted? I don’t interpret OP’s comment as lambasting the company itself, but something more general.
Is China Crushing Silicon Valley?
It's not a narrow and pedantic difference at all! It's the entire thing!

You seem to be under some mistaken impression that you can say whatever you want whenever you want in the United States. You can't. There are many categories of speech that are banned in the US as well: if I think to myself "Tom Smith is a liar and a drunkard and he's cheating on his wife", that's perfectly fine, but if I communicate that to a large group of people in order to stain his reputation, that's illegal.

See the difference? In neither the US nor the EU is thinking things illegal, but in both countries, expressing stuff can possibly be illegal. It's true that the US and the EU has slightly different categories of banned speech, but that's a difference in degree, not in kind. but neither region has anything close to "thoughtcrime". You have a poor understanding of these issues if you think that is the case.
Online reviews by patients are almost always useless and have near zero correlation with actual evidence-based medicine care quality. Studies have shown that patient satisfaction is most impacted by whether the doctor writes a prescription, regardless of whether the patient really needs one. Apparently patients like to feel they're getting something for their money.
Current guidance, although not definitive, is that IPs and similar identifiers are personal data iff the processor/controller can identify a natural person by combining them with other data it can legally access.
I think his point is that its not and artificial barrier because not having to replace someone in 12 months provides a real value to the employer.
So, agile improved outcomes? I'd love to have 1 big win a year and 11 cheap losses, than 5 expensive losses and then bankrupt before a big win.
Investment worthy? Video demo for Off-the-plan property sales
But... if you never commit the transaction in pgbouncer you don't need to roll it back. It'll just auto-rollback on server connection drop.
The problem has been always the temporal scales. But if you change that, the odds are not so bad.

If all the civilizations started more or less at the same time that us, it's not so weird that we have not found anybody else. If you add some other factor (maybe civilizations are only possible far from the center, so there is a big spread between them) the probabilities improve.

It also would mean interesting times ahead for humanity.

Of course, all this is only idle speculation.
Investment Portfolios Connected to the Mormon Church
I'm comparing Scrum to customized, situation-specific workflow practices created and adopted by the team that will use them, based on what works for that team. What about Scrum uses evidence to convince a team to believe it should deviate from that?

> "No one cares whether you approve of Scrum or not."

If you don't want to participate in a discussion about it, why are you? Statements like this are useless. We're talking about high-level evaluation of Scrum.

It's like you would read the original post in the OP, which is a qualitative discussion. And instead of formulating reasonable discussion points, you'd just leave a comment saying, "No one cares what you think."

At that point, I mean, your opinion's decided. Why are you even here? What is the goal? To shoot down anyone who tries to analyze Scrum in a bigger picture sense and just give them a raspberry?
As far as I understood (I speak both Ukrainian and Russian languages) it was necessary to gather solid evidence against the organizer of the crime, who paid for the assassination of the journalist.

The would-be assassin was an undercover Ukrainian agent, and he’ll be one of the key witnesses in the criminal case that will follow.

Locking the organizer up will save more than one man’s life, both directly (other people who’s killing he might have organized in the future) and indirectly (because of the media coverage of this case, the price tag might raise a lot).
Diamonds were the original bitcoin.

Knew a bit about the diamond business from growing up.

- Required huge proof of work.
- Few practical use cases.
- Store of value.
- Highly portable.
- Price a function of liquidity.
- Clustered around use cases like capital flight, high denomination cash, opacity, and black market transactions, asset protection/hiding.

I would argue blockchain has done more harm to the diamond market than synthetic diamonds have. Between the two, it's been a perfect storm.
The player who scored is identified, but it doesn't really matter because it goes to the scoring team regardless of who scored it.
> Access logs for one thing are pretty unreasonable to force people to avoid storing.

Store them for a limited time, it's not hard.
What? Apple's stance on user data privacy is a selling point in the market. They're not really hurting against other companies.
I was thinking about this the other day. Didn't the HIPAA regulations create a whole new industry around the handling of patient records?
> The problem AI runs into is that with too much faith in the machine, people STOP thinking and believe the machine.

See https://youtu.be/R_rF4kcqLkI?t=2m51s

In medicine, I want everyone to apply appropriate skepticism to important results, and I don't want to enable lazy radiologists to zone out and press 'Y' all day. I want all the doctors to be maximally mentally engaged. Skepticism of an incorrect radiologist report recently saved my dad from some dangerous, and in his case unnecessary, treatment.
Andrew Mao, research scientist at CTRL-labs.

Here's a video describing what we're doing (keynote from the O'Reilly AI conference): https://www.youtube.com/watch?v=5Z5aZK2C3ew
Assassin was cooperating at the time of "assassination", they were going for the customer.
Equifax breach and stolen identities? Cambridge Analytica and the 2016 US Presidential election? Ashley Madison and affairs being revealed?

We can go back and forth about the best way to deal with this, but it's crazy to think that this systemic gobbling up of personal data doesn't have real consequences.
It depends what data you had; why you had it; whether you knew you had it; and how it was hacked.

https://ico.org.uk/about-the-ico/news-and-events/news-and-bl...

> The data was taken from an underlying customer database that was part of TalkTalk’s acquisition of Tiscali’s UK operations in 2009. The data was accessed through an attack on three vulnerable webpages within the inherited infrastructure. TalkTalk failed to properly scan this infrastructure for possible threats and so was unaware the vulnerable pages existed or that they enabled access to a database that held customer information.

> TalkTalk was not aware that the installed version of the database software was outdated and no longer supported by the provider. The company said it did not know at the time that the software was affected by a bug – for which a fix was available. The bug allowed the attacker to bypass access restrictions. Had it been fixed, this would not have been possible.
Nothing protects against toxic management.

"Evidence Based Scheduling"

https://www.joelonsoftware.com/2007/10/26/evidence-based-sch...
Second that. It's probably the best hard science fiction out there.
BBC yesterday: http://www.bbc.com/news/world-europe-44296672
BBC today: https://www.bbc.com/news/world-europe-44307611

NY Times yesterday: https://www.nytimes.com/2018/05/29/world/europe/russian-jour...
NY Times today: https://www.nytimes.com/2018/05/30/world/europe/arkady-babch...
Site is pretty poorly optimized for desktops. Responsive design should take the basic spread of form factors into effect.

On a 1080p screen, only about two thirds of the image is visible, and I have to scroll down to even realize there's text below it. (I initially wondered if each page was just the picture.) Also, a hamburger menu for three buttons is an exceptionally poor choice on a desktop.

Finally: What does being a PWA provide this site, feature-wise? It seems more or less the same as you could do with plain HTML circa 10 years ago.
Why is a stack machine bad for security? The JVM also had sandboxed execution as a goal and also uses a stack machine. But perhaps the stack machine was choosen because it tends to produce smaller binaries (which is important for things you send over the net) and not for security reasons?
Nonsense. Bizarre behavior is a known side-effect. Ambien is dangerous. Ambien + alcohol is even more dangerous. Google "Ambien Zombies." "Ambien Murder" "Sleep Eating" or "Sleep Driving"; or the Tom Tuduj case in Chicago. There are dozens, perhaps hundreds of these cases.
That doesn't apply to this discussion. What program verification or analysis were performed on this system?

My position about defense in depth is not a fallback argument. It was my original point.
> some plan which would guarantee some people would investigate and kill everyone in any substantial way affiliated with the kidnapping -- and to loudly communicate the existence of this policy in advance. [...] US citizenship largely serves this purpose

I'd like to call this the "little madman theory".
I work in healthcare, I assure you you dont know. Because it depends on the service you are going to provide, the time you have, the procedures you are going to do, and that is done during the visit, no before service.

When a doctor has to file a claim with an insurance,he has to pick between 10s of thousands of codes and then out of different procedures, that have different values based on how much documentation is gathered, that changes per insurance, and then the insurance will renegotiate.

I am in the business, I can tell you its impossible to know what the insurance company is going to pay.
Show HN: Kitten – Tiny multi-server automation tool
We Fight, Get Beat, Rise, and Fight Again
It's not so different from writing a Qt app in python. The C code does all the heavy lifting with JS doing the UI bits. That setup is way faster than the DOM because the JS is manipulating native widgets. While that's not as efficient as writing everything in C, it is much faster to write and bugfix and results in more stable and secure code.
> The combined value of each company at the filing of their most recent year end 13F is approximately $32,769,914,000

This is just their cash/stock holdings and doesn't account for the value of the many businesses they own.

For comparison Harvard, the richest school in the US, has a $36B endowment fund. Yale is at $25B, and Stanford is $22B.

The Mormon church has always been extremely secretive about its finances, and estimating their holdings has always been very speculative, so it is rare to see concrete numbers.
Cambridge analytica is a good example. I guess considering this abuse may be different from a US customer point of view, but for my european sensibility, this is definitely abuse. Furthermore, that Facebook could harvest ghost profiles that could be used in this manner is problematic.

I think it is certainly possible to find cases of identity theft resulting from PII that were leaked in security breaches, made easier by overreaching data collection.
I can't count the number of times tcpdump has made debugging a problem a zillion times faster. It's my go to tool for any network related issue.

I tend to end up using wireshark for analysis of more complicated SIP issues but I always start with tcpdump.
Making Sense of Sensu
Depends on how you heat.

If you live in a climate where you need to heat in the winter and cool in the summer, ground source heat pump are cheaper to operate than oil, gas and A/C. Solar will contribute to reducing your A/C electricity bills and also all the other power you use year-long, so they work together.

If you live in a climate where you occasionally turn on an electric heater for those really cold days, this will only help during cooling season, while solar will contribute all year long.
The Least Likely Places to Be Struck by Lightning, Mapped
If such a daemon does not use cycles unless called out to, then the only problem is that it's one more attack vector. Oh wait.
Smartphone shipments to hit 1.7B by 2022
Yes but it has to replace your desktop with a checkerboard of launchers, which might be a thing whose effect ranges from unnecessary but harmless to annoying and confusing, especially when it lags.