skysight-inc/HackerNews huggingface dataset:
Related story from an earlier time:

Planet Poker, one of the earliest online poker sites, had about the least secure shuffler one could imagine, including:

1) They used the default pRNG library that came with their Borland C++ compiler.
2) That pRNG generated only 32-bit outputs (slightly smaller than 52!)
3) They reseeded it for every shuffle, with the current system time, in milliseconds.

A former consultant eventually took advantage. With a reasonable guess for the server's system time, it was sometimes possible to identify the entire deck ordering based on one's first two cards, and almost certainly after seeing 5 cards (hole cards and flop, in holdem).

Even without source code access (as in the consultant case), 1 and 3 might have been sufficient for someone to guess their way into this exploit.

The original paper isn't loading for me, but here's a recap detailing even more problems than the above: http://www.lauradhamilton.com/random-lessons-online-poker-ex...
>> slow down in growth predates any of the scandals.

Not only that, but growth was inevitably going to slow down. They have literally capture a large part of the global population [that has access to network and phones/computers]. It is a fascinating problem -- when you stop growing because you have saturated the market.

Now, not capturing the youth is a different issue, and one they should be more worried about.
Nick goes to jail, but his promotors remain free
I mean, do you really think some hacker compromised @shinnn's account, solely for the purpose of sabotaging a new installer that had only been published for 8 hours?

I mean, I'm all for benefit of the doubt and such, but it's pretty obvious what happened here.
The title is overoptimistic. This only work if you have a good understanding of the of the function to have a good enough guess of the integral.

There are many integration methods that use guess or try to explote the similarity of the integral with the integral of a simpler function. Relevant xkcd: https://xkcd.com/2117/

In particular, this method use some intuitive version of substitutions, i.e. the integral of f(3x+5) is somewhat similar to g(3x+5), for any 3x+5 out there. I strongly recommend to study the usual substitution method to get enough enlightenment.

Integration by parts is more tricky. It is useful in a lot of elemental cases, and has a lot of applications in advanced mathematic and physics, but I still didn't reach the enlightenment phase.

You can try to ignore integration by parts if it's not in the midterm, but substitution is too important to be ignored.
But it's easy to connect to domain name control. Allow uploading to maven central only after domain verification. Java did not do that, AFAIK, but other languages can do that.
That's not a "solution". That's just shifting the trust to a different (smaller) group of people.
Bart trains are very custom due to them using a track with not used anywhere else in the world, for unknown reasons.
That comes at a cost of lots of volunteer hours. I’m not sure if it would scale to NPM’s massive size.
Great post mortem. Well detailed, good work ethic there.
> Mostly because the vast majority of JS developers don't seem to be aware of the rest of the software universe

Do you have any evidence to back up this statement, compared to developers in other languages? Or is this just business-as-usual JS bashing?
So what do you label someone who does most of the work while other contribute little to nothing? How to they profess that and not be labeled an asshole?
In October 2016:

* Do you think Trump will win the US Presidential election?

* Do most voters think Trump will win?
Could you please not post in the flamewar style to HN? We're trying for something different than that here.

https://news.ycombinator.com/newsguidelines.html
I should've been more clear about what I was saying with "control". The recommendation is connected directly to domain names you control. What was not done at the time was enforcing that, or using that as a basis of authentication or distribution, which is part of why I said more could be done, today.
That crosses into personal attack, which is not allowed on HN. Please don't post like this.

https://news.ycombinator.com/newsguidelines.html
55% of Amazon sales are from 3rd parties, which are largely small businesses.
But, judging from the graph in the article, the top quartile actually under-estimates their ability? Only lower 3 quartiles overestimate it, so for experts it doesn't seem to be true? Unless, of course, I misunderstand DK effect completely and am not aware of it...
Some notes:

In England there's no difference between prison and jail. Some prisoners are on remand -- they haven't yet had a trial and they aren't convicted. "Nick" - Carl Beech - had a trial and was convicted.

The sentencing remarks for the Carl Beech trial are here. It's worth reading because it sets out what he did and the effect it had on his victims. https://www.judiciary.uk/judgments/sentencing-remarks-of-mr-...

Here's a detailed run down of what Beech did, but also how he managed to spread his blatant lies (apologies for the shithole Quillette): https://quillette.com/2019/07/25/the-many-lies-of-carl-beech...
It's been tried, perhaps indirectly. There was one kennel that got quite famous for breeding police dogs using the best workers - both drug spaniels and German Shepherds. That was shortly after WW2, but by the sixties and seventies they were first choice for about half a dozen or more police forces, including the Met.

No idea if they're still going, but I haven't heard anything of them for ages.
cargo, at least, does this for the reason Fellshard gives - the Rust team essentially commissioned a copy of Ruby's bundler, without considering whether there was anything to learn from any other language's ecosystem.
To me, kubernetes is basically containerization for infrastructure. So it makes sense that if containers are here to stay it is here to stay (or at least something like it).

Sure you can use AWS autoscaling, but that will only work on AWS.

I can tear down my kubernetes cluster on gke and without too much trouble, launch the whole thing on someone else's hosted kubernetes or run my own on bare metal.
I believe not. This was the citation given in the problem: https://arxiv.org/abs/1308.4526
This comment thread is confusing because HN users have edited the article several times today.

https://en.m.wikipedia.org/wiki/Special:History/Surprisingly...
How would that have helped things in this case? If we go with the hypothesis of an angry maintainer getting revenge, would they not be just as angry at their project being forked by the community, and just as able to sabotage it via other libraries still in their namespace? (And perhaps more willing, since their original name is still around.) If we go with the hypothesis of a compromised account, people will still be installing the package from the original maintainer's namespace, so they'll still get the malicious code.

And in all likelihood, because the story here is that the maintainer intentionally (though begrudgingly) transferred ownership, they would have intentionally (though begrudgingly) given other people access to the package in their namespace, simply because people value the namespaced name. (If they didn't, and everyone was immediately happy to install anyone/purescript, then namespacing doesn't solve any problems and also creates some!) And the situation would have played out as given.
Please don't take HN threads into nationalistic flamewar. We definitely don't want that here.

https://news.ycombinator.com/newsguidelines.html
I can imagine if such a person actually treated everyone like they were talking to a 2-year-old, you would actually find it disrespectful.
We had one growing up, she was lovely but a complete handful, basically trained herself though, fetch took about a minute for her to figure out.

She used to fetch her bowl and whack your knee if you had tea and she wanted some, runt of the litter (though she grew up normal size) and endless energy.
> That's just shifting the trust to a different (smaller) group of people.

Practically speaking, shifting trust from a large, anonymous group of people, to a small group of people who are known and trusted by the community is a pretty good solution.
Barely qualifying as fiction, but very focused on the beauty and entertainment value of mathematics: "Surreal Numbers" by Donald Knuth.
>Notably, those employees who reported being victims of rudeness were largely perceived by their managers as perpetrators of rude behavior.

The article and research abstract [0] doesn't appear to address the most interesting point. I want to know why the victim blaming persists.

[0] https://www.ncbi.nlm.nih.gov/pubmed/30640491
Supervisors Driven by Bottom Line Fail to Get Top Performance: Study
Well, okay, if your point of view is that behaving like multiple other major languages and specifically taking the lessons (good and bad) of a specific existing language ecosystem into account before doing your own thing is the same as disregarding other languages and reinventing the wheel, I'm not sure what words mean anymore.
I've wanted one for years, but I'm just not in a place where I can properly care for them. I don't even think I can handle a less intelligent dog, since my spare time is taken up with hobbies, my spouse, and my young children, none of which want to consistently care for a dog.

I think far too many people aren't aware of just how much work taking good care of a dog is. I'm grateful for some co-workers that explained the time needed to properly care for a dog, which helped me realize it wasn't going to be a good fit for me.
Internet School of Medicine
After 3 prime ministers and government re-shuffles, i would say yes.
best to go and just follow a bunch of cool people on twitter. Know this is not optimal, but better than dead community
SolidRun has a MiniITX board supporting up to 2x32GB for around $1000 [0]. They also have a preproduction units for another board for $550 supporting as much RAM [1].

They probably had their reasons, but I'm just showing what's available.

https://www.solid-run.com/product/SRLX216S00D00GE064C13CH/

https://www.solid-run.com/nxp-lx2160a-family/honeycomb-works...
I recently read a book (Behemoth [0]) about the history of the 'factory' and I can tell you that burnout is omnipresent throughout the entire narrative. Particularly, the 18th century textile mills were a brutal and oppressive place to work. Burnout, financial ruin and pressure, and worker unhappiness were persistent elements of the book. To this day, we still have manufacturing settings that heavily rely in oppressive and abusive labor practices.

I think that what is "new" is burnout in the context of the office and knowledge work.

[0] https://www.theguardian.com/books/2018/mar/14/behemoth-joshu...
It's not a summary/reduction, it's a a better article with more information.
Belgian Malinois as well, similar breed bit lighter but incredbily fast, agile and smart, used by militaries around the world.
I ran OpenBGPD about 15 yrs back for peering access to a Metropolitan Area Network. My first/last/only experience with BGP (thankfully hehe).

OpenBGPD itself was solid and looked at lot easier to configure than the alternatives. Can't remember whether I looked at Zebra or Quagga or both though.

Haven't used OpenBSD itself since those days either, but OpenBSD originated software tends to have that straightforwardness I miss sometimes.
What do you currently use for deployment when dealing with multiple nodes?
Some people have a really inflated view of their understanding of the Dunning Kruger effect.
Its big fish eating smaller fish. Most commerce goes like this: Person A buys from person B who buys from person C. Put yourself in between and take a cut, or run a service to make the chain more efficient/convenient. Or add a link to the chain.
Summarization used to be a built-in feature of Microsoft Word, but it was taken out.
Other states have no income taxes, and Dunleavy ran on protecting and growing the Alaska Permanent Fund. And as to your UBI FUD comment, why do we need to find a reason? Cutting public education is well inline with right winged US policy.
The paywall is easily circumvented by opening a private window.
Your equity shares should be much more equal. You should have had legal docs in place, been getting paid.

My experience has been people from the professional services (docs, lawyers, RE) have no clue about running companies or being fair to their partners. If they aren't helping, they aren't really partners. Ideas are worthless, execution is what counts. Does not sound like these folks are executing or going all in on their ideas.

Negotiate or run. They should be full time too, with equal equity, or give you the majority stake.

If they insist on their current terms, they will likely never succeed with anyone, so you should move on.
“Might have more difficulty cutting them out..”

Pretty sure this is why amazon created amazon basics. To go that last mile on cutting out the high margin products they can’t source themself.
I have been installing purescript using Nix from https://github.com/justinwoo/easy-purescript-nix for a while now. It works quite well and I get to avoid npm.
The belief I'd like to change is whatever belief leads them to seemingly vote agains their own interests. My point is that just because I find their actions reprehensible doesn't mean I support aggressive confrontation. I support whatever ethical approach will yield the best result.
Aye, it was more that for a spell their shepherds were first choice for many forces over anyone else's shepherds, anywhere, and they had a permanent waiting list.

Can't, for the life of me, remember the name of the kennel though.

Malis seem to be becoming more popular as police dogs too, as there's so many hip problems in shepherds.
> We live in an a-rhythmic world where in the evening the morning events feel like yesterday

I seriously think this is causing mental dysfunction - depression for instance. Of course I don't know of any way to prove this other than experience - we react to same situations in the same way and we feel stuck/frustrated when we experience repeat cycles of the same thing - that has got to have some negative impact.

I think we can do some things to make it work better but ultimately lot of things are determined by your workplace culture.
If you're into free routing software, also for *BSD, Linux and Solaris:

https://github.com/frrouting/frr
This is not the first time this year we see an npm issue, and it could have been much worse than this. All package managers in general create risks, but how the community etiquette evolves around package managers is just as important. Something is wrong with the latter here.
This is rhetoric without substance. How much more should we be doing? The poorest among our country will suffer the most with the proposed austerity measure. If it's a global problem, more than one country has to address it (not just the one doing 15% of emissions; focus on the 80%, not 20%).

https://en.wikipedia.org/wiki/Pareto_distribution
I'd like to highlight this quote from the article: "fear that white people would become a minority and thus be treated poorly, because that’s how you treat minorities"

It then goes on to mention ways, derived from literary analysis, in which becoming a minority is nothing to worry about. I suppose we will see if the US will be the first where it turns out this way in practice.
You case dose not match the parents claim, but i get that your situation seems tricky. I will also say this sounds like a management failure if 1 person is so critical they can get away with being disruptive to others. The leader of that person should focus on getting anyone else up to speed and co-ownership of the knowledge that makes the disruptive person so valuable.
Very interesting. I was trying to think on how to refute premise 2, and came up with:

- A real catastrophe is worse than an imaginary catastrophe

Then not all real things are better than imaginary things

- An imaginary outcome in which my country's team wins the world cup is greater than a real outcome in which it doesn't

Then not all real things are greater than imaginary thins

Not sure if these are valid, since I'm not familiar with philosophical reasoning.
assuming a binary question (very important) if you aren't sure, if you thought most people thought differently from you, why would you hold on to your belief that lacks both primary and secondary support?

"My best guess is X but I believe most people would contradict me" suggests that you consider yourself an expert who knows better than most people.
I evaluated wordpress plugins this way, a good way to check if something strange had crept in.

By the ignored files do you mean non-code?
This sort of thing casts doubt on the formal logic in question more than it makes a case for God.
Obviously everything depends on what court has jurisdiction, but aside from the fact that such disclaimers already have little weight, even signed waivers will not protect you from malice or neglect in many places.
Tldr anyone?
What are you talking about? This is the string diagram version.
What I´ve never understood in all these arguments, is why do economists think that the laws of supply and demand supposedly (given that from this article it´s clear that they´re not), suspended for debt?

If for whatever reason (and having a moderately stable currency is the answer there) there is more demand for bonds than supply, then the price will fall. This has nothing to do with economic reality and everything to do with market pricing mechanisms. Whether it´s good in the long term for the government to increase its lending this way, is a completely separate question.
Since we're on HN : does this mean good news for start up creators ? Is this the best time to actually raise a lot of investor money ?
Lol at the dog eating down voters. Sick third world fucks.
Haven't lots of breeds been bred for intelligence, long before modern police/military dogs?
Privacy is a lost cause for the masses. Government don't what privacy for citizens, corporations don't what privacy for consumers and ordinary people are being misled.

Thing is, criminals will always have privacy because encryption will always be there. But ordinary honest people will not have the right.

And big tech will just be surveiling me talking to my wife and kids.
Why a service and not a library?

It looks like a great way for you to discover URLs but like a terribly slow way for people to avoid implementing robots.txt rules.
sad that this didn't get any discussion here on HN.

To throw my few cents in favour of going solo:
https://twitter.com/mikekarnj/status/1111219803635834880?s=1...

You can go solo and give 2x shares to your hires
I don’t know if that is true or not but rider enter/exit flows are open data provided by BART in their web site, in case anyone wants to settle the debate.

I will say that Warm Springs is one of the least-used stations so I somewhat doubt this story of full trains departing. It only has 4400 pax/day.
An amazon business story from Germany. I’ve opened a brand new amazon business account for a brand new company (VAT number present, HRB number present). I wanted to link a bank account to this amazon account, as one would do in Germany. This did not work, for whatever reason.

However, amazon offered my company a €1500 credit line. I had to immediately buy a printer and a couple of 27” screens. I used the credit line. I also used a director’s home address as a delivery address because, you know, why would you sit at an empty office and wait for shipment.

They have shipped the order, the invoices have been paid. One day after the invoices have been paid, I received the email that the business account has been suspended because of “reasons”.

Obviously, they did not say what the reasons were. They asked me to FAX to them director’s personal information (passport scan, proof of address), without giving any info on what are they going to do with info. I contacted them via their support website, because there is obviously no number to call or an actual person to contact. I have no idea how do they run their business in Germany without this kind of info, their business unit has an office in Germany, Regensburg, I believe.

In response to my contact, they sent me just blanket emails repeating their requests.

I just dropped it and stopped buying via Amazon. No more personal or business purchases anymore. Bye amazon.

The best was 6 weeks later, their business manager sent me a request for feedback on what my experience with amazon business is like. Well, they never came back to me after receiving a sour, detailed comment.

I avoid doing any kind of business with amazon AND aws since then. I give money to German businesses. I will never send them any official documents via scans. All the info they need is in commercial register but they are too lazy to figure things out.

Bye amazon, only when the hell freezes.

* Edit: I’ve been a loyal amazon and aws customer for 7 years. Burned thousands of Euro with amazon and aws over the years through different ventures. However, their attitude and behaviour regarding the info which only governmental organisations should be asking for, turned me completely away.

I understand they have a fraud department and what not, and maybe they have a good intent. However, this being amazon “business”, I expected them to know how to do business. Companies have registered addresses, phone numbers, list of shareholders and names of directors are publicly available. There are more suitable channels than blanket emails, faxes and scans.
I'll try not come off as snide but I have to wonder what types of ailments Border Collies are prone to due to the inevitable inbreeding that every AKC dog has--hey they gotta look pretty in the ring.

* Our German Short Hair Pointer had seizures which in time led to him having to be put down; despite having him treated at the Animal Medical Center in NYC amongst other places.

* Our English Cocker Spaniel (a found dog that was living on the street) had terrible dermatitis which caused him to lose much fur and I'm pretty sure was no fun him.

* Our Yorkshire Terrier had kidney disease, also with seizures, though much less common than the Pointer's until later in his life; he too eventually had to be put down due to kidney disease.

That was it for the pure breeds, I told my partner next dog get a mutt. Indeed she did, and he seems like a good dog so far--smart and happy.
There are many edge cases on dimensions other than product.

I live on a small island that enjoys US Postal Service by boat. Amazon will ship to me. The high number of mom-and-pops that aren't set up to ship to me creates a situation where, if I need something Amazon doesn't have, I usually have to send it to someone in the US and once enough stuff builds up, they ship a package to me. This holds true even for international shippers (e.g. an Etsy seller in Europe is more likely to ship to the US than to me).