skysight-inc/HackerNews huggingface dataset:
There are conditions when vaccines kill children, but there is NO situation where the sensible choice is to not vaccinate your healthy child. The same with seatbelts.

Edit: Added "healthy".
Responded on the real thread.
They appear to be starting as 'driver aids' on new cars. Today's higher-end cars have adopted technology that alerts you when you drift out of your lane, watches your blind spots, safely follows the car in front of you, performs emergency stops, parallel parks itself, and adjusts vehicle dynamics in a multitude of ways.

My assumption is that this is a first step towards driverless cars, as it provides the manufacturers a way to test critical technologies in a safe environment. If the dealerships aren't downloading data from these systems, and sharing it back to the engineering groups, thats an enormous wasted opportunity.
I understand that you don't mean to complain to open source projects, and that's good :)

It feels like whining to me mostly because these stories are often brought up, but rarely without any mention of the alternative: Without the wealth of open source software to build upon, we startups would either have to license the software/service or make it ourselves at great expense.

By saying that the "pro open source" argument makes no sense, you're implying that the risk exposure is more or less equivalent whether you depend on an open source stack or a proprietary web service. And to me, that's clearly wrong. There's a world of difference between someone killing your product at the flick of a switch and some piece of software becoming unmaintained a few years down the line.

Would you be a smarter businessman if you had chosen to build your software on a proprietary, well maintained programming language which would only run on Google App Engine or an Amazon web service? I certainly wouldn't think so. Still, a lot of people do something very similar, and they become surprised when they discover that the big companies don't run charities.

I'm guessing Digium would have liked it if the Skype protocol was open, _even_ if it was changing every 6 months), but it's not. Now they have to discontinue their Skype for Asterisk product because Skype changed their mind.
Perhaps we should eliminate the concept of 'author' entirely.
I suspect that this kind of "risky" technology will be deployed first in more adventurous countries, like China.
All curious over here. What other commodity a reserves/production ratio of at least 5? (the usual ratio is, at best 1)

So?
Exactly, Python is a "prototype-based" language with first-class classes as sugar; similar to Coffee. I gave a link below where kinds of classes are described.
Recommendation engines tend to suggest more variety than what your friends would. The whole argument rests upon silly anti-tech fears.

The vast majority of people get more political diversity in their Amazon recommendations than the NYT can produce.
FTA lawnchair_larry linked to:

He said the initial RSA attack was followed by malware and phishing campaigns seeking specific data that would link tokens to end-users, which meant the current attacks may have been carried out by the same hackers.
They fail to understand that this small group is actually the first portion of the bell curve: early adopters. Our friends buy based on our recommendations.
I think this is an example where C++ really shines. The code is not much longer (44 vs 33 lines, although the output in python version is much nicer) than the python code and on my computer it is about 140x faster than python 2.7.1.
The network rules are such that the difficulty is adjusted to keep block production to approximately 1 block per 10 minutes. If miners drop out, the difficulty is reduced.
Yup. If you plan to enter the internet-/affiliate-marketing space you'll want to keep tabs on what this crowd of folks is up to. You'll learn that this is a space inhabited by an interesting spectrum of people...from clever, helpful people displaying an inspiring amount of hustle to straight-up criminals.

Also, careful clicking any links in those forums. Lots of disgusting, immature people over there.
This is a wild idea, but there is precedent in the example of the dual-graphics systems.

That said, I'd be very surprised if Apple implemented this initially in the MBA first. Maybe the MBA will move to A5, then down the road, the high-end laptops will go dual Ax/x86. One approach might be to expect a multi-core Ax machine with a single Ax core dedicated and custom designed to emulate an x86... Might be worth keeping an eye on Apple job ads, since we know they have used emulation techniques in the past, such as Rosetta.
While most popular penetration testing books only scratch the surface of the topic, they are still a good resource for beginners. "Gray Hat Hacking" is on it's 3rd edition and offers of good intro into many tools of the trade. http://amzn.com/0071742557
A bit off-topic, but do you think that's the right approach? A niche field like that can be really good for a company, and if you want to broach another field, don't you think it's a good idea to start a separate brand and image for that field instead of generalizing away from your niche?

McDonald's bought Chipotle but didn't rename it "McDonald's", neither did they rename McDonald's Chiptole. McDonald's is for hamburgers and Chipotle is for burritos even if the money ends up in the hands of the same people.

It is almost never beneficial to merge existing brands (unless one of the brands has a horrible reputation), so why should someone generalize away from a successful niche application and lose the associated branding instead of just starting a new brand for the new field?
Your definition of open source must be different than mine - "we will drop the source if and when we feel like it" doesn't smell like an open source project to me.
This is very likely how Google measures site speed for ranking, as well as anonymous submissions from the Google Toolbar. Google Analytics also lets you filter this data by other metrics such as browser and geographic location.

As for the W3C timing spec, it looks like Firefox is planning on implementing this too: https://bugzilla.mozilla.org/show_bug.cgi?id=570341
Indeed. What is the point in having comment scores if I can't see 'em?

If I'm looking at a thread on a subject I don't know much about, and I read the top comment, how do I know whether this comment has been approved by hundreds of users (and thus is probably correct) or whether it was just submitted a few minutes ago and the algorithm has stuck it at the top? (I guess I can look at the "submitted at" and guess, but still...)
So does a French metro line and others :) .

But it's not the same - as one Frenchman put it: "it's like an elevator, only it goes horizontally instead of vertically".

That is not the case with driverless cars - not that I'm against them.

The use cases put forth in the article are quite compelling, but we still haven't been able to eradicate "elevator operators" ("ascensoristas") here in Uruguay, it will be far more difficult to remove drivers' unions !
Citation for "real"? All of the papers I have read on the topic are theories and most every known side-channel attack is relatively benign and not specific to virtualization. Do you have evidence of a side-channel attack on Xen or KVM being performed successfully in the real world outside of an academic environment which led to cryptographic compromise?

It's easy to say things are "very real" when we don't know if the NSA can do them. Watch: mind control is very real. Assume the NSA has it.

Going from academic to accusing Amazon Web Services of intentionally exposing their customers to NSA side-channel attacks is libelous at best.
I want them to add categories and monito them. Why are chess, bubble popper games, and mole poking games in the top of the sports games categories?????
I don't know if this is why, but my sales are up about 10% today over compared to the last week's average, so I don't know how niche this really was but my guess is that emulation may have been curbing the gaming needs of many. Not sure though.
I couldn't get past the (unclosed parenthese in the second sentence. It's like my inner programmer went into OCD overload...
This argument (while good) won't apply to cars for simple economic reasons. Having a human pilot or subway driver costs 1 marginal person for hundreds of people. Having an extra driver per car costs 1 person per person. I will strongly bet that the two orders of magnitude difference in cost will overcome the bureaucracy.

Additionally, once cars become sufficiently advanced, it will be much cheaper to insure a self-driving car than to insure a human.

Once the change happens, it will be breathtaking how rapidly it occurs. Social stigmas are hard to sustain towards a large portion of the population. In 2000, if you were wearing a helmet skiing, you were crazy. Now, you're crazy not to. You used to be a loser if you were on a social network. Now you're a loser if you're not. Both these changes happened over perhaps one to three years. Critical mass may only be ~5% of the population. You only need enough to avoid individuals being singled out as odd.
The Secret War Against the New Age
I would argue that ELIZA, and the chatbots that have been programmed since, are not solutions to the Turing test.

Have you ever tried holding an actual conversation with a chatbot? They almost invariably fail the real-life Turing test within two or three messages. They parse natural language incorrectly, they can't keep track of the topic of conversation, and they often reply with non-sequitor errors.

Certainly, chatbots can appear to act with intelligence in certain situations. Given enough back-and-forth communication, however, a human will always realize that the bot is just parroting words and phrases that are statistically relevant to the human's questions.

I don't think it's unreasonable to define Turing test success as the ability to consistently fool ordinary human beings through intelligent communication- and that, so far, has not been accomplished.
Anyone knows an equivalent for linux?
Given the looming energy crisis, the coming climate crisis, and the "peak everything" crisis, we'll get there sooner and later.
I appreciate the rest of your comment, and I'm not sure exactly what you mean by "illegal" but if you mean "breaking an actual law" it is not "illegal" for a pilot in command of an aircraft "to read". Having said that, if you're doing something in the cockpit as pilot in command that doesn't pertain to piloting your aircraft, you're doing it wrong.

Autopilots are adjunct flight controls. They are not...the pilot in command.
It's incorrect because he said "From Honeycomb onwards...". It is not an ongoing change in policy, but a one-time exception that was made specifically in the case of Honeycomb because Honeycomb was not really ready for distribution. Ice Cream Sandwich (i.e., Honeycomb+1) will be open like Froyo and its predecessors.
The Skytrain system in Vancouver is all automated. I don't recall if it's had any accidents, but I've never heard of any.

http://en.wikipedia.org/wiki/SkyTrain_(Vancouver)
Betting on the Weather
That's why you write a C-extension to CPython when you need the performance. And if you don't need the performance you stay sane by not having to write stuff in C++.
Looking for female intern interested in venture & entrepreneurship
Looking for female intern who is interested in learning more about venture capital, angel investment & entrepreneurship & is willing to assist in project on the shortfall in funding for women. Email me with your info pemo at ezebisdotcom
So what you're saying is that your fee for side-channeling the private keys from a neighboring domU or dom0 without root dom0 access is $500,000? How long to deliver?
Given informed consent for seatbelts, what do you think the ratio would be between people who choose not to wear one because they have completely informed themselves from reliable sources and calculated that they're more likely to survive without one than with one, versus people who will just leave their seatbelt off because it's uncomfortable?
Agreed. This IE bug does seem to have some interesting behavior though:

https://twitter.com/#!/superevr/status/73920079921815552
Emulators themselves do not constitute copyright infringement. For instance, if I wanted to write my own software to run on a Super Nintendo I can do so and run it on an emulator or build a cartridge and flash it on there to play it on the real system.

The copyright infringement starts when you're making unauthorized copies of the data on game cartridges.
That's a good definition.
It says my name is not a valid input, that's pretty harsh.
On the other hand a beach also is part of a shoreline, and thus you will not find a beach at Great Sand Dunes National Park

http://en.wikipedia.org/wiki/Great_Sand_Dunes_National_Park_...
Shakespeare's Vocabulary Considered Unexceptional
This is the ASUS PadFone
Same with the jaguar XJ since 1988. brake pads low is neat to see show up in the display. The XJ has more sensors so it gives more than just check engine.
"Social stigmas are hard to sustain towards a large portion of the population."

Over 90% of Americans have used illegal drugs, and yet there is still a strong stigma there.

http://www.monitoringthefuture.org/pubs/monographs/vol2_2009...

(C.f. page 101, as well as the methodology.)
Just because YC invests successfully doesn't mean this research will be good. It's possible that finding common traits to successful entrepreneurs is achievable, but just wasn't achieved by this team.

NOTE: I'm just pointing this out. I haven't read the report, and even if I had, I still wouldn't be even close to qualified to talk about whether it is valid or not.
The pilot should be there when the Software fails, and that's why he shouldn't be busy with something else. It adds to security, and it's worth it (from my point of view) whatever is the cost.
It's not a big secret at all ;)

tptacek has a list of books on Amazon, linked to from his news.yc profile, which cover a wide range of application security topics (http://amzn.to/cthr46). I own The Art of Software Security Assessment and The Web Application Hacker's Handbook and I can vouch for them as quality resources, although I'm not sure how accessible they would be for a beginner.

In terms of a more practical introduction, Google Gruyere is an application deliberately built with security vulnerabilities for the purposes of learning (http://google-gruyere.appspot.com/). There are plenty of other projects along those lines: WebGoat is another good example.
I remember seeing a real-time analytics demo piece on HN a few days ago (http://chatteranalytics.com/). It's a single page that displays a live stream of all the actions by various viewers on the page as you viewed it.

While your solutions probably differ (and may in fact be complementary) it might be worth building a small portion of your analytics solution into your signup page, in the same fashion, to give the clearest indicator of what your analytics could do, and then you can SHOW people why they need it.
[Edited in response to your repeated edits.]

VMs are bad because they make it much easier for an attacker to get a process on the same CPU as yours; nothing more, nothing less.

For VM-specific material, read e.g. http://cseweb.ucsd.edu/~hovav/dist/cloudsec.pdf, in particular section 8.4, and note that keystroke timings are usually enough to recover plaintext (passwords are more difficult, but it should still give a good guess). The cache-based covert channel is interesting as well, mostly because it suggests that other cache-based attacks are possible.

Side-channel attacks work just fine outside of academic environments, but the people performing them are testers under NDA (consider Common Criteria for smart cards) or working for various intelligence agencies; they're unlikely to run their mouth on the internet.
The GPL and LGPL components have been released. The Apache License is approved by OSI, making it an "open-source license" by that organization's definition. Copyleft is not a mandatory component of open-source. Do you want to argue that *BSD is not really open-source because of its non-copyleft license? It may not match Stallman's definition of Free Software, but it does match OSI's definition of "open-source".

Google has a right to withhold the non-copyleft components if they don't feel they're ready for distribution. Open-source doesn't mean that you can force someone's hand if they're not ready to share. Can you call Theo de Raat and compel him to release an unpublished branch of modifications to OpenBSD and then accuse him of not really developing open-source programs because he only releases source "if and when he feels like it".

Google's hand was forced on Honeycomb and it wasn't really ready for distribution. If you're upset about this, you shouldn't buy a Honeycomb product because it doesn't come with a full stack of source. That's a great idea. Honeycomb+1 will have source like its predecessors.
The world you describe sounds pretty reasonable, but don't count on it reflecting reality.
We did a distributed N-queens solver to test the Gifu Prefectural Computing Grid that an ex-job helped to develop, and that was literally all ~35 of my lines of production C code ever. (Though most of the grid turned on "graphical" mode, which both a) solved in Java and b) solved in Java at the speed of the Swing ability to update the visual board... which, after realizing, I patched to sleep frequently and run the C in the background anyway.)

This was ~5 years ago, and I don't remember the exact magnitude of the speedup on Java vs. C. I do remember it being rather less than I was expecting.
Using a library for computing the permutations I guess? I haven't touched C++ for years but I'd be surprised if the 44 lines include a permutations implementation.
Maybe we could concentrate less on picking out useful comments by themselves, but instead try to pick out useful conversations instead. So, for example, high-voting activity on one thread could move it up to the top of the comments page. This wouldn't necessarily mean that a comment with the highest score is automatically at the top, and would encourage discussions rather than trying to score points. Just a thought.
Hence the caveat: "and hope/trust that the entropy you observe is unique, not copied to any other instances".

I suppose it would take a centralized web service to detect correlated unrandomness between servers. I am not personally willing to implement such a service right now.
How is FourSquare doing nowadays? I never used it, but it was a big deal about a year ago and I haven't heard much from 'em since (I'd pretty much forgotten about them).

With competition from facebook checkins, isn't FourSquare more or less doomed right now?
I have no inside knowledge, but I'm betting that the ARM version of Windows will strictly run .net user applications. (There's already precedence for this with Windows Phone.)

Microsoft already tried to support Windows on two different architectures (x86 and Alpha) and failed when application developers never bothered porting to Alpha. They're not about to repeat that.
Your reasoning is wrong. There is a crucial difference between believing that a computer can simulate a brain and believing that a windmill can do so. That is, that a computer can, in principle, simulate mills as well as city-states and all the other objects you listed.

"It would be the most surprising thing of all were we to find out that evolution produced a kind of technology before in fact that technology as a human tool was ever produced"

Evolution has produced technologies long before humans invented them. For example, bats and whales use sonar, humans use lenses, plants use photosynthesis. In fact, one could argue evolution does not much else than to invent technologies.
So this is kinda cool... I guess?

Eh, I'll be honest, this is just a bit out there to me. Facebook/Twitter/etc all offer different types of data; if you really see this space as maturing, you'd realize this and not write an API that tries to be an end-all-be-all.

I'd never want to use an API like this either, since I'm essentially lumped in with the usage rates of everyone else (or butt up against the alternative, which is to deal with them not having real-time data - what's the point of that?).
hear hear! if there is a tried and true formula for successful entrepreneurship, then VC returns would not be as miserable as they are. it is not youth per se, it is not even naivete that is required for successful entrepreneurs, but unremitting and relentless optimism. people with optimistic outlooks can be found at every age cohort, but will not be found in every Stanford engineering grad. as winston churchill said, success is measured by our ability to maintain enthusiasm between failures. some young people haven't learned that yet because they haven't really failed enough times. some old people have that in spades. thanks for posting.
next_permutation is in standard library (header algorithm).
As your story illustrates, humans and machines both have failure rates. Sometimes the presence of humans actually makes a system less safe. The meltdown at Three Mile Island, for example, would not have happened if a panicked human operator had not overridden the automatic emergency cooling system.
Possible shot of next Google Nexus device leaked, LG or HTC?
Still waiting on W|A to incorporate basic usability improvements I proposed back in 2009:

http://codingthriller.blogspot.com/2009/05/fixing-wolframalp...
What languages did you start on?
Of course it's not neccesary. It's no more neccesary than being multicellular.
The top 50 passwords you should never use
"For instance, if I wanted to write my own software to run on a Super Nintendo"

That is not the same thing as writing a Super Nintendo emulator and selling it. I can think of lots of things that could be copyrighted about Super Nintendo's "OS".
Great paper.
Just thinking out loud: How about a device like the Nintendo DS (normal screen above, touch screen below) scaled up to a normal laptop size?
Really simple written! Too simple...
Joining a church or other group such as a volunteer group can be a good way to increase your social support. These are groups where other people are going to take on the roll of initiating conversations and where there are regular meetings over time so that longer term relationships can form. Even if you're not super religious many churches are open and friendly.
> VMs are bad because they make it much easier for an attacker to get a process on the same CPU as yours; nothing more, nothing less.

The paper cites less than 25% of the time which is specific to EC2. With more cores on the host this attack rapidly becomes impossible as domUs rarely share cores. Which is why I asked for actual evidence of cryptographic compromise in the wild and not yet more papers. You suffer from academia. Written in a paper and demonstrated to enable the same timing attacks that having network access enables (with reference to extracting passwords) does not mean "any cryptographic algorithm I use is compromised".

You said "assume the NSA can break your crypto". Since everybody likes to bang on EC2 I would like evidence of how that is accomplished since you used the words "very real". You bring up a good point in that if it is being done it is under NDA and, without realizing it, admitted that you have never heard of it being done.

Which begs the question: how can you say "very real"? Have you ever observed cryptographic compromise via a CPU side-channel exacerbated by virtualization or have you merely read about it?

At any rate, I look forward to your results in a couple of months after you side-channel a neighboring domU and compromise their crypto. Once you're ready I'll give you a couple of my own domUs to demonstrate on free of charge.