skysight-inc/HackerNews huggingface dataset:
Absolutely.

If your system is doing "all the right security stuff" and then nobody knows about it - sure, you're secure - but nobody knows that or how you are secure. And that's a very significant problem both to a bureaucracy and to its customers. It's also an issue in terms of maintaining those controls over time between changes to staff and business direction.

There's a whole "secondary market" (within an organization) for security assurance, and it tends to be much more measurable than security posture.

Policies and summaries of those policies go a long way toward feeding that "assurance feeling" secondary market without draining resources from ongoing investments actual posture.

Essentially the way it works is that you develop security controls toward an ideal end state/direction and describe your direction as your policy. Any gaps auditors or your company find then become fuel for making actual changes to the underlying security posture at a technical level.

The danger of not having your policy really be disguised summaries of your actual implementation is that the various security staff become free to debate over fictional security and can convince themselves that if they mandate some changes on paper to the policy (with there being nothing technical associated whatsoever) that this has or should have some kind of real affect.

It's more dangerous still if the internal security assurance program uses its own policies or some measure of "adherence to the policies" to then measure security. What happens is that the compliance operation becomes authoritarian about adherence to policies that don't exist outside of (otherwise non-discoverable) mandate, and the company and its auditors are able to "measure" their posture by their policies and convince themselves they are secure.

The worst version of this is where its done on purpose for fraud.
Mozilla BrowserQuest – A HTML5/JavaScript multiplayer game experiment
You're thinking of Spectre. Meltdown doesn't need to share cache, a thread can just read kernel mappings into its own L1. Kernel mappings typically include the whole physical memory (on 64-bit machines where virtual address space is huge).
While I do agree in your comparison the second version looks better. At the same time, and this might be a tad too subjective to have much merit, it feels out of place to me.

Instead, I'd use one of the various approaches where I can create a style = {} object and then apply it to the element, which would just fit better within the rest of my javascript.

(which particular approach to use, .cssText, looping through props, or Object.assign, I'm not sure, but my point is any approach that applies a POJO to the node instead of chaining strikes me as more idiomatic. this is not a hill I'd die on though...)
That's good of them. I mean, that's just good customer service and they'll probably keep you as a customer for far longer by not nickel and diming you at every chance.
I believe C, C++, and Java depending on which niche you look at, according to the job ads I've seen.

Actually, I haven't seen and Ada ads sin a long time.
Isn't that just a side effect of frontend devs being able to use their existing JS knowledge serverside?

I'd expect the reverse to happen as well to some degree since currently backend devs are somewhat "forced" to take on JS if they want to do any frontend work. Or does that seem less likely to you?
New Tesla Patent Shows a Safer, Rupturing Battery Solution
We'r building lightning-fast video conferencing app, it's in beta, need feedback
Also people with schizophrenia very probably have fewer children than average.
So if it has a genetic component, it would be mainly their 'carrier' siblings who would pass on the trait to later generations.
> In my mind, this is a good thing. Browsers should do one thing well. ... As a *nix guy for three decades, I simply cannot escape the "do one thing well" paradigm.

As with every tool, what counts as that “one thing” is entirely subjective, in the eye of the beholder, highly personal, often arbitrary.

Why should Firefox support tabs? Shouldn’t my window manager do that? Why does a browser keep track of history when my operating environment should keep track of a history of things I’ve seen recently - documents, files, URLs?

It’s the exact same debate about whether programs should do any of the things that can be handled by tmux / GNU screen / readline / whatever.

For you, the “one thing” browsers should do maps exactly to what you think counts as “one thing.” To others, that might include Firefox’s RSS support, and leave out something you consider essential, calling it “bloat” and against the spirit of Unix.
This looks good. And double points for having a simple site with RSS feed.
It's nice that iTunes never grabbed the opportunity to lock in podcasts to their own system. They probably could've done it ten years ago. Instead we have their good solution of a few optional extensions to the mandatory RSS feed.
Facebook, Inc. - the company behind the stock - is more than just Facebook.com. They also run Instagram, which is doing great and WhatsApp which still has huge potential as wel [sic]

What are you getting at? Facebook, Inc. itself is obviously worried about Facebook.com fading, and is not content to rely on Instagram and WhatsApp for its future. If it was, it'd rebrand itself as Instagram, Inc. and maybe sell off Facebook.com to a private equity fund for disposal. These ads confirm its anxiety.
> X Window has a good design?

X does. "X Window" might not, but it probably isn't in widespread use.
For a long time I've wished more apps would focus on getting you to the real world as quickly as possible.

Now, I'm trying to do my part. I'm working on building Mutambo (https://www.mutambo.net) which is focused on helping everyone play recreational sports. To avoid becoming the Facebook for sports, a high priority goal of ours is to minimize the time you spend in app – to get you to your sporting events as efficiently as possible.
Machine Learning and Artificial Intelligence: A Historical Approach
This for me also.
> X Window

X.
I was going to post a link to that first one, and you beat me to it. It's my favorite of his photos, because it's not just pretty, but actually gave me that eureka moment when I genuinely understood, on a deep level, the relationship between the first and second stages.
For me, the most surprising point in the article was this:

> Our analysis reveals that the global marine biomass pyramid contains more consumers than producers, thus an inverse food pyramid.

I didn't understand how such a thing was possible until I read the explanation further down:

> Such inverted biomass distributions can occur when primary producers have a rapid turnover of biomass [on the order of days], while consumer biomass turns over much more slowly [a few years in the case of mesopelagic fish]. Thus, the standing stock of consumers is larger, even though the productivity of producers is necessarily higher.

There's an analogy in the "human world": Farmers were 90% of labor force in the U.S. in 1790, but only 2.6% in 1990.[1] Farming has become so much more efficient that a small group can feed the whole country.

[1] https://www.agclassroom.org/gan/timeline/farmers_land.htm
E-Commerce Branding: Collect Feedback
Can't say I was even aware of it, much less used it.

I have a perfectly serviceable FOSS application to be my desktop Feed Reader (Liferea), but to be honest I never really use that, either. Wading through my news feed is now an activity that I do almost exclusively through Feedly on my phone or tablet, usually either while I'm having my morning coffee or as I'm winding down for bed.

I suppose if Mozilla had done a better job of advertising it I might've given it a second look. FWIW, Firefox's "Reader Mode" is fantastic, and if they had somehow combined that with the RSS reader, particularly on Firefox Mobile for Android where I do the majority of my reading, I probably would've been all-in. I don't believe Feedly is open source, so having one that is would be preferable in case Feedly ever decides to go the way of Google Reader and/or Pulse (which just went to garbage after LinkedIn bought it).
The people most likely to use these features I imagine are also the ones most likely to turn off telemetry. Making decisions to remove long-standing features based on telemetry seems short-sighted to me because of this reason.
EnergyBot – online energy marketplace
Leadership and decision-making through Banner Saga.

How to be social through New York Nights and Miami Nights (mobile games).

Anthropology/History through Civ... Obviously :)
Why users do what they do? Find out with Userfeel.com Remote Usability Testing
They do. It's a data gathering platform for better ad targetting of people who don't know Whatsapp belongs to FB (= everyone minus few nerds)
Office, ours
They use a combination of GPS, terrain recognition, and IMUs.
I think distributing the weights will give you guaranteed reproducibility. If your users intend on retraining the network, another idea would be to set performance expectations on a validation set within ballpark. So you could tell them, "we got 90% accuracy on this dataset, if you re-train and get below 80 you've probably made a mistake somewhere." The scary thing to me would be the very small test cases where maybe different trained neural nets end up having a lot of variance because there is barely more than noise to learn.
Plus the gyros would have to be powered at all times -- that's not gonna work on mobiles.
This is not ELI5
Tangentially related, but if you're an Emacs user, you can check out a package called GNU Hyperbole [0], with a component known as the Koutliner that has apparently been inspired by the Augment system. If you review the manual [1] under the Koutliner chapter, you'll find the quip below, apparently on importing files created through Augment, however one would do that.

"Files exported from the Augment system as text often have alphanumeric statement
identifiers on the right side. You can import such files while maintaining their outline
structure. Use {M-x kimport:aug-post-outline RET} and you will be prompted for the
Augment buffer or file to import and the koutline to create."

[0] https://www.gnu.org/software/hyperbole/
[1] https://www.gnu.org/software/hyperbole/man/hyperbole.pdf
Publii GitHub repository is now open
DTrace on Linux: An Update (July 2018)
I’m pretty sad to see it go, although to be honest I’ve been using elfeed for awhile now. I wish that the promise of RSS & the open web had been fulfilled.
This article is amateur.

> And despite what Donald Trump, the Kremlin’s Executive in Charge of U.S. Operations, would have you believe

It's hard to take an article seriously when it uses a tone like this (even if there is some truth behind it).
I remain shocked that voting machines are not open source and publicly auditable.

I'm also surprised the NSA isn't specifically tasked with a regular, detailed, high-resources code review of the codebase.
How to Implement Log Loss Detection
Rquery: Practical Big Data Transforms for R-Spark Users
http://www.flexboxdefense.com/

Really appreciated this back when I was first introduced to CSS Flexbox.
That's an explanation but not a justification. People like celebrity gossip too, but newspapers feel a duty (due to both external social pressure and an internal code) to not include updates on the opinion of the Kardashians as part of their war coverage. Although the upteenth description of a random postdoc's laboratory life (an example used elsewhere in this thread) seems less trashy than the Kardashians, I think they have similar news value.
Break news! Team uses filtering feature of Play Store to avoid installing app on devices where it doesn't work!
Cool! I always loved Reason.

Probably! My approach to start would probably be to just add anything that roughly fits the maker/creative theme.
Asteroid. Clathrate gun hypothesis. One-in-a-billion solar event. Planet-wide nuclear war. Random destabilization of the Earth's core.

There are a lot of things that wouldn't kill you on Mars.
Yeah, I feel the same sentiment you described, too. When building a web application, I'd prefer to use more powerful tools than JavaScript, and maybe a sane(r) set of libraries for user interface. There's also value in cross-compiling applications and games to web platform, because of ease of end-user deployment - for instance, games playable without explicit installation (of the game, runtime, and support libraries).

So I have really mixed feelings here. On the one hand, I appreciate the power WASM gives. On the other hand, I don't trust the majority of companies on the web to use that power responsibly.
Whether an app is the best way to provide such training is a different question

This. I have received excellent workplace training, but never through an app. Actual human instructors can do things that apps can't like discuss the experiences of individuals in the class, or respond to questions about subtle nuances in behavior.

Doing training via an app is IMO, a way for the company to check off that you've been trained, whether or not it was useful. Online training is good for those things that don't require much thought like fire safety or office ergonomics. It's all but useless for things like harassment training.
If you are at all interested in software verification, as an alternative to dependently typed languages, GNAT, SPARK, and the GNAT IDE (whose name escapes me) make the best environment for it.

Dafny is probably the best language, though, if it gets any documentation.
They could have done this when they got rid of the RSS icon in the URL bar.
In terms of learning hacking, there are CTF/wargames that teach through puzzles.

Gracker: https://www.smrrd.de/creating-a-hacking-game-part-1-introduc...

Overthewire: http://overthewire.org/wargames/

Exploit Exercises: https://exploit-exercises.com/

PicoCTF: https://picoctf.com/

P.S.
I would love to work on making educational puzzles. If anyone is similarly passionate about it, please message me.
I had a similar workflow, except icc for release, which still outperforms gcc on certain types of codebases.
A lot of editor integration will handle reloading and test-running for you (including VSCode's calva extension, Cursive, and Proto REPL for Atom, although it's less "automatic" than the others).
Yes, builtin CDN offload is actively under discussion as part of v2 protocol changes, but there is nothing currently available in released versions. The "repo" command that comes with Android dev tools uses the clone.bundle approach (which is basically what we're implementing on git.kernel.org for a handful of core repositories). I would guess "repo" is partly why nobody added anything like this directly to git -- for Google, that particular itch has been scratched.

Anyway, here's hoping that the coming protocol changes will have a native solution to this problem.
It made me think, "I wonder if you could modify whatever bacteria is growing in my bathroom to emit a fresh lemon scent, so it would always smell freshly cleaned."
Ask HN: Why aren't more startups focused on the problem of garbage waste?
IMO the prospect of less of my bandwidth, memory and CPU cycles being waisted is a pretty big deal. It's silly how much overhead there is with standard web technologies given the fact that it's how most people spend most of their time on their computer.
You don't need your liscense (or other id), if you're not driving. (Often, it's a good idea to have, but it's not required for citizens in the US).

Another thing is I can give $20 to a reasonably responsible child and ask them to fetch me a burrito. It's not a good idea to do that with a credit or debit card; I would have authorized them, but if challenged they may not be able to complete the transaction and may have trouble bringing my card back.
Microsoft software engineer – stuck in old salary
Hello, I'm a L64 software engineer in Microsoft (Redmond), with a tenure of about 10 years in Microsoft (windows org). Below is my compensation:
Base: 160K
Stocks: 22K
Bonus: 20K

Questions:
I know that my salary is on the lower side as compared to my friends in my level. But, I like the work life balance I can get in Microsoft, therefore hoping that I can spend more of my career here..

What are the strategies to increase my pay in Microsoft? Some ideas in my mind are:
1) Go find a job in a different tech company around Seattle. Come back to Microsoft after a year, to get a better compensation package. Does this actually work? Will the Microsoft recruiters tie me down to my old salary?
2) Slog it hard in Microsoft to get a promotion and thereby get a better pay, but my old salary saddles me with a lower salary range even in the next level.
3) I've spoken to the manager, but they suggest that there is no way that they can adjust the salary, unless a promotion.
SEO is too big of a concern nowadays for a resurgence of black-box websites, specially if they depend on large audiences and ad revenue.
As a person who has an autoimmune illness (so I'm biased), I believe that immune system research is woefully underfunded. I lot of literature I've been reading recently is showing it's involvement in a whole host of "non-immune" diseases and many autoimmune illnesses (MS, Lupus, CFS, etc.) are shrouded in mystery.

I think that given the immune system's involvement in so many other diseases, basic research into its workings is really underfunded when compared to many other diseases that might derive benefit from more immune system research.
I would suspect that there's also some amount of refuse biomass from terrestrial sources that helps supply marine consumers, though it may be trivial in the grand scheme of things. I wonder how much biomass relies on sewage dumping as a food source?

Edit: And how are tide flats and their flora categorized?
Reading the article, I think this was not a good faith experiment. I can easily see many ways to improve the accuracy of the results, and I think the authors should have done a better job of following up on that.
Great you had a legitimate issue, can you trust each and everyone of such api users to behave in good faith?

That’s the problem. It only takes one bad actor.
Refinery29,  and the Denial Underlying Millennial Financial Resentment
> On business, joshkaufman recommends Kaufman's The Personal MBA: Master the Art of Business over Bevelin's Seeking Wisdom and Munger's Poor Charlie's Alamanack.

What a rat. Recommends his own book over two others. This is exactly what is wrong with University textbook selection. They're often just picking their friends, or someone who picked their textbook. Crooked and corrupt.
I use Pocket, but I think these sorts of things (Feed readers, tagging bookmarking services, etc.) should be outside of the browser by default.

From there, you can have addons that may be more first class citizen than others in that they integrate incredibly well, but regardless, they should be addons.
CSIndexbr: Exploring the Brazilian Scientific Production in Computer Science
BuzzFeed News website launch teardown
UI looks nice!
Have his results been replicated? It's been 3 or 4 years since his work was published (per https://seniorplanet.org/can-a-controversial-new-treatment-r...).
From following various soccer blogs, it seems that defensive stats aren't as polished and explored as offensive ones. I'm curious what stats beyond things such as tackles/interceptions are looked at. For example, Maldini has the reputation of being one of the top defenders ever, but also is known for his quote "If i have to tackle, then I have already made a mistake" (paraphrased). His tackling stats seem to support that style of play in that he made fewer challenges than most. Perhaps he made tons of interceptions, and in that sense, never had to tackle? I'm unable to find a good source of his playing stats.

Anyways, what sort of things do you look at for defensive players? It seems that its when I look at things such as WhoScored's statistical team of the season, it has players such as Mustafi, who generally has a negative reputation for his play. I suspect he is so high because the rating metric used by whoscored overvalues offensive contributions of defenders, vs. pundits more likely look for a defender's defensive contributions. Are there any form of 'advanced stats' for defenders beyond the basic measured stats of challenges, interceptions, etc, that you and/or the industry looks for?

https://www.whoscored.com/Statistics
Can you provide a link to that research? I'm somewhat connected to Alzheimers research professionally, I study dementia and delirium in the elderly. I have not heard of that and it honestly sounds impossible. If such a simple solution were on offer and so wonderful, surely blinded randomized clinical trials would bear the evidence needed to support your very strong assertions. Keep in mind over 5 million die from Alzheimers each year in the USA, and that will triple over time. It's not something to speak lightly about or spread misinformation about.
I liked Human Resource Machine for brushing up on Assembly language concepts

Microcorruption is a fun resource for learning about reverse engineering, assembly language, and cybersecurity (the concept is that you're going through the assembly code of dev kits of different versions of software-controlled locks to find vulnerabilities that can then be exploited to get into warehouses full of MacGuffins). I've gotten through about half of the stages so far--they get really tough, but it is extremely satisfying to successfully complete one!

I also really enjoyed the couple of Zachtronics games I've played (I've done the first 5 stages or so of Konstructor: Engineer of the People and I managed to get through all the main modules in TIS-100)

Lightbot is a cute app for initial programming concepts through puzzles (program a robot to walk around a grid and light up various squares)
Croquet Project
War is peace. Freedom is slavery. Ignorance is strength.
There are a whole lot of reasons why space exploration could help the poor. Off the top of my head: infrastructure spending and asteroid mining.
Strategies for blockchain data marketplaces fighting incumbents
By that logic, they will also stick to JS instead of using WebAssembly. So, same result.

I think the “backend dev migrates” case is less likely, in a purely math sense. The number of backend devs forced to do front end is smaller than the number of frontend devs.
Micropayments is another possible solution that comes to mind. Say, pay one tenth of a penny every time you want to look at weather data. Assuming that we can come up with something that works for insignificant amounts and is fast, cheap, and secure to transact. If that is the case, you would just have to send a confirmation token with your first HTTP GET request to access a website with no ads. Competition would hopefully drive prices down and quality up.
That’s really interesting. Do you have a link?
Show HN: Aecius – Website Recommendations based on browsing history
Roughly, because the experiments have gotten too expensive, so new data is coming in too slowly.
The influence of alcohol, or any drug, should be a kicker during sentencing for all violent and negligent crimes.
"John Doe, R-ND"

It's part of their name, like a title.
That's a fair point, and a prelude to a much larger discussion about business models on the web. Suffice it to say, I'd happily accept some deal for compensating the data provider - be it ads, micropayments, or even regular subscriptions - if the resulting data was available in a) machine-readable form, and b) decluttered form on the webpage, so that I could read it efficiently (possibly with support of userscripts/userstyles). As a bonus, such sensible data display will save the provider's bandwidth costs, as on the typical site, 90+% of transferred bytes are not part of the content.
You could run flash on android.
'Premier' meaning the England soccer competition
Probably could have used a more clear disclosure, but it is probably one of the best books for a solid overview.