skysight-inc/HackerNews huggingface dataset:
Scientists tend to publish papers that aren't yet peer-reviewed

I see you are being severely downvoted, and disagreed with specifically on the quoted point. Did you perhaps mean "Scientists tend to issue press releases about studies that aren't yet peer-reviewed"? I can think of several examples of that, which have been posted here to HN. The most notorious recent example was the "arsenic-based life" example,

http://www.washingtonpost.com/national/debate-over-arsenic-b...

the subject of several HN threads. Jumping the gun on the peer review process by issuing press releases before peer review does seem to be a common failing, and altogether too many submissions to HN on science issues are based on such press releases. But as mechanical_fish points out, it would help the situation for the general public (and journalists) if the actual peer-reviewed scientific literature, with all its faults

http://www.plosmedicine.org/article/info%3Adoi%2F10.1371%2Fj...

were readily available to members of the general public.
I'd disagree with your last statement. I enjoy the mathematically simplicity of the address into your array being pointer+size(index) as opposed to pointer+size(index-1). Now I will agree that it's probably because of too much math, but it just makes sense that if I want to drop out a term I can multiply it by zero. It's like finding roots of polynomials.
The most common implementations of WebGL on Microsoft platforms are actually Direct3D wrappers under the hood.
Sorry, but (coming from a 40-years-of-software-development grizzled veteran), I don't see any new pattern here. Just good old-fashioned modularity.

Perhaps I missed the point?
If the goal were to make it so the layperson could read and understand the paper itself, then yes, that may well be an impossible task.

But the OP's goal is simply to increase interest in his own work. Recurring concepts could be explained once somewhere and referred back to as needed, and the research and its implications could be elaborated on in far more detail than that given in the abstracts. This should not only be possible, but would likely be quite successful.
Those constitution free zones only apply to stops and searches of people, not searches of property.

Your post is high on hyperbole and fear but low on content.
I personally haven't felt any sluggishness. But then I am always in the wifi zone and dont really use phone for videos and stuff. Also, you can download Quick Settings app to make your phone as wifi hotspot. Turns out VM has just hide the option and not actually disable it. I will take a look at your app. Thanks!
I'm pretty sure you save nothing by driving this car. Think about this:

1. Energy and materials for manufacturing the batteries

2. Energy for recycling the batteries

3. Energy to charge the batteries

4. Energy to mine the coal (most common fuel in the U.S.) to produce the electricity

5. Energy losses on the power lines, transformers, etc.

If you are after saving the environment, buy a used Geo instead. However, Tesla makes damn cool cars.
Well, as a currency, for it to 'increase in value', it needs to be more broadly accepted. That would increase ability for people to use it.

But currencies are also dual-purposed as commodities (c.f., forex traders).
Could someone detail the process of "sharing a masked password", or at least how it would theoretically be implemented as a feature? I'm not quite sure I get the scenario. Is the masked password to access passpack user account? Or is it to access some site passpack is managing a password for?
You definitely missed this part in the second paragraph:

"This leads many seasoned programmers to respond with, “well, duh” when first confronted. Design patterns are derived from scrutiny of best practices in the real world (not your old CS prof’s black cauldron)."
My suggestion for that would be to change it, either before or after.

This entire idea of 'sharing a masked password' is completely ridiculous.
Things are changing. Now all publicly funded research in the USA and UK must lead to open access publications. This does not mean that the actual final version of the paper will be available to everybody though: normally it's the unedited copy, the manuscript as it was submitted to the journal before publication.

This is definitely the case with all bio/medical research; isn't like this in computer science and other sciences too? Is the publishers lobby so powerful?
Sounds like a very black hat way of taking out your unprepared competition. I'm sure you can buy this sort of service somewhere - get a hit on a datacentre/rack by security services in response to highly illegal activity perpetrated in the open in order to cause the most possible disruption.
And under OS X you can change your keychain password (independently of login), though yes, you have to do it manually and it isin't "secure" by default.
You can create additional different keychains with different passwords than the login one.

For most people, having a password manager + random-generated passwords are _much_ better than using one simple password for all.
It seems to be some sort of utter nonsense imagined by someone who has no idea how any of this works. Well written article, but I don't see why it's worth taking the time to address this.
yep. because webgl is designed to work on platforms that may have to fully unroll loops in shaders (because of its mobile baseline), webgl shaders are not turing complete in and of themselves.
LulzSec uncovered
One thing that seems unaddressed is how quickly the car recharges. For example, if I am going on a road trip in a gasoline car, when I run out of gas, I can quickly fill it up and be on my way. With an electric car, an electrical recharge probably takes several hours.
You might change it again to "no programmer of language without direct access to memory pointers". Then again, even that would be hard to prove. I definitely didn't see anything wrong with starting at 0 and it made perfect sense for C arrays.
Electric swap stations (eg. http://www.youtube.com/watch?v=yfdYU7gk8fs) strike me as one of the most promising concepts for electric vehicles. Imagine if rather than ever owning a battery you're just perpetually rent the use of one (perhaps with a small per-swap fee). Alas it would seem we're still many many years away from seeing anything like this rolled out in a real way.
Do you have any examples of these late 90s early 00s solutions that consistently failed to work at scale? Can you point me to any of the 'several dozen' event-based frameworks before JavaScript did it? I don't seem to remember these very well, and if Node.js is just a throwback, I'd love to see what it was a throwback of.

Also, do you have any examples of these trails Haskell is blazing?
I actually meant programming student, as in, student learning programming for the first time―naturally, once we reach a certain level of proficiency, more of the esoteric concepts seem intuitive to us; I've edited my post accordingly.

You're right that it is convenient that the address of an item is first index + current index * index size in memory, but things like that comes at a cost of making indeces completely unintuitive.
This joke PAM "happy hour" module became reality: http://www.brendangregg.com/specials.html#pam_happy_hour
There's no "hack" to get pinned tabs to re-open in Chrome, they just do.
I'm glad that someone demonstrated Microsoft's FUD and their double-standards for security with a simple bit of code.

Even if Microsoft fixes this particular issue, they either can't fix every possible variation or the same techniques that make this fixable can be used to fix it in WebGL.

As long as you can send an arbitrary shader (which is essentially a small piece of executable code that GPU executes) to a GPU, you can overload the GPU. This capability is available in WebGL, Silverlight 5 and Flash.

You don't want to remove this capability, because it's the core reason GPUs can do some things so much faster than a CPU.

You can try to sanitize shaders as much as possible (and I'm sure both Silverlight and WebGL implementation will do their best) but it's not even theoretically possible to decide a time complexity of arbitrary assembly code.

Writing code is about features vs. risk trade offs. Microsoft clearly has decided that the risks are acceptable for Silverlight but somehow the same category of risks is not acceptable for WebGL.

And if you ask me, I agree with WebGL folks and the Silverlight part of Microsoft. The worst that can happen is slowing down your computer. This is an annoyance but also an issue we encounter daily: both my Mac and Windows software, including the OSes, crash and misbehave rather regularly. I accept that because the annoyance that it causes is much less important than my desire to use the software.

It's also an annoyance that can be generated with technologies that already are part of the browser. A web page can exhaust any computer's memory (causing swapping) but sending arbitrarily large images. It's easy to write JavaScript that will eat CPU cycles. It's easy to DOS a browser by creating arbitrarily complex DOM and update it frequently enough. All those issues can be mitigated by browser implementors but none of them can really be fixed. And yet we happily use the internet and we'll happily keep using it after WebGL is implemented.
The nice thing about the 7" is that I can hold it in one hand close to my eyes when sitting back or lying down (it's more comfortable than I can make it sound). It works without my contacts in, which is my yardstick for good enough. I'm sure my eyes don't love me for the close work, but my back wouldn't love awkwardly using a laptop more, so it's all a tradeoff.
There doesn't appear to be any evidence.

People on the Mt.Gox forums are sceptical because the amount traded appears to be equal to the entire Mt.Gox trading volume (from the little I've read).

The speculation is that it is either Mt.Gox himself/themselves, an account representing the entire volume of all Mt.Gox traders or some other buyer who has been in from the start and has somehow escaped the notice of the other traders (this last option also accounts for the ability to break in as the account security apparently was very weak and hasn't been forcedly enhanced).
> You can't sensibly object to rent-seeking and then give the rent-seekers a free pass when they kick back some of their extracted rents in the form of political lobbying.

I'm not objecting to rent-seeking; that would be like objecting to gravity.

I'm objecting to folks who set up opportunities for rent-seeking and then complain when it happens. I'm blaming folks who set up said opportunities for the rent-seeking that occurs.
I know, I was referring to exactly whether OpenGL vs Direct3D is implementing WebGL.
If cramming is illegal, why don't people go to jail for it?
It seems to me the guy who reported the issue to Microsoft is doing the only thing that he can effectively do to help them.

My complaint isn't with the bug report per se. I think filing bugs is a very valid mechanism for handling defects.

WebGL is a standard developed in an open way. If someone wants to contribute, including Microsoft, they can send an e-mail to a mailing list and that will reach other people working on WebGL and hopefully a productive conversation would ensue.

My point is that open standards shouldn't be blazing new trails with somewhat unknown security surfaces (etc). Open standards should take what works and say, "This is now the accepted way to do it, we have good evidence that this way works best in practice."

They made no effort to improve the security of WebGL and didn't leave any opening for the discussion. They just communicated a decision.

They just communicated their decision. Just as Apple said they wouldn't support Flash. In fact MS went into a fair bit more detail why they wouldn't. Honestly, I think that was a mistake. They simply should have just said they wouldn't support WebGl, and left it at that.

But my broader point is that I don't like standards bodies trying to bully organizations into supporting a nascent standard that AFAICT hasn't really been vetted or sufficiently thought through yet.

The C++ standards committee ran into this last time with export. They pushed in a feature no one had used in practice and hadn't really been vetted by thousands of hours of testing. The end result, a dead feature, and lots of wasted person hours.

Take the time, do it right, let the vendors push forward first, and learn.
This doesn't make sense. If you count out twelve packages: zero, one, two, three, four, five, six, seven, eight, nine, ten, eleven; you have used twelve number names, hence: twelve packages.
Tesla seems to be going in the opposite direction, making the battery pack a structural component.
Twisted Python and Ruby's EventMachine would both be examples of evented IO frameworks that predate Node.js's popularity, and possibly even its development.

I think even C++ had one.
Two different hosts separated by a distance.
> and the feds likely fear that just taking virtual disks would lead to evidentiary issues at trial.

Honest question: why are physical hard disks more valid as evidence than virtual ones? Aren't they equally easy to tamper with?
And even if you have ACM digital library membership, sometimes the paper refered to in the ACM DL is hosted over at Springer or the like and you must pay 30$ or more to access the paper.
> It's Node.js that needs to worry about how it's going to "stay relevant" as it walks a dead-end path

Yes, I believe that was the implied punch-line of the submission. http://mobile.twitter.com/kirindave/status/83252128575004672
I doubt mathematicians commonly use zero as an index of the first element of a collection. Matrices and vectors which are closest to arrays are indexed from one. In the aleph notation aleph null is different from all the other alephs because it represents the cardinality of an infinite, but _countable_ set, so the notation makes sense and it doesn't have any disadvantages.
LA to SF is a long drive and not comfortable to do in one day. Yes it can be done if you take i-5 and drive like a maniac for ~6-7 hours.

However, I'd much rather take the scenic route via 101 and stop over in Paso Robles and get the car charged up while at a nice B&B, wine tasting, etc. ;)
Yes, obviously he made a mistake :-) and the mistake he made was starting from zero but assuming that the last number he said out loud ("eleven!") was the number of objects he had counted, which is only correct if you start from one.
Yes, because China has been so stunningly unsuccessful in its attempts.

There will always be ways around censorship. But by making it difficult, they can prevent the majority of people from doing so. And that's enough to make a lot of changes.
Definitely. Better place does this, and charges on a per mile basis (in Israel) http://en.wikipedia.org/wiki/Better_Place
Except MS says this is fixed in SL.
Q34-40

Job title, Occupation, Employees managed.

You didn't look very well ;0)>

I remember particularly as this sort of question is hard for me as I don't really have a job title, my occupation is extremely varied.
My understanding is that the CBP and immigration officers can work anywhere within 100 miles of the border ... or of any port. Which includes airports and general aviation fields capable of receiving flights from outside the USA. Which means just about anywhere.

However, that particular issue is not germane to the case in point, which appears to involve the FBI rather than immigration/border patrol.
I think it's equally important in those situations to get at why the user wants to do that and coming up with a solution to their problem in your framework. One thing I've learned after years of supporting users is that they often ask for something because "that's how they've always done it," but if you find out what problem that they are trying to solve, you can come to reasonable solution for both parties without having to implement whatever "feature" it is that they are asking for.
Nitpicking. Either way, usually using this way to report (what Microsoft claims) is a security bug would be more stand up way to do it but in this specific case, given Microsoft's FUD designed to kill WebGL (with the consequence of Flash and Silverlight having an upper hand wrt. 3d graphics in the browser), doing it publicly was the right call. It nicely shows Microsoft's double standards which is important to the overall discussion.
iCloud stops routing Apple e-mail when 5GB limit is reached
From a security perspective, a shader-based DoS is annoying, but not a huge issue. Arbitrary code execution, potentially in the kernel, is. There are just too many moving pieces, too many un/poorly-tested components, and too little standing between a webpage and the kernel for my liking. While I want WebGL to become huge (I really dig it), from a security standpoint I simply can't support it in its current incarnation, and won't for a long while most likely. That said, these are not inherent design flaws, just realities of the stack it's on.
Can you guess the trending news topics?
I think that adherence to codified change control is really not the cause as this article suggests. These issues are management issues - claiming a framework for managing the chaos which results from bad management is poor root cause analysis.

Poor management results in both poor testing and underdeveloped project understanding.

If you have solid, well funded (with both money AND time) testing - the impact of change is minimal.

Further, the propensity for IT to say no stems from their understAnding of how poorly upper management allocates resources to IT as it is historicLly been seen as a liability/cost center rather than integral to business. (obviously this is far less true in silicon valley).

Clearly though, having good IT managers and staff are important and you find a lot less 'no' with good staff.

IT organizatiOns typically report to the CIO/CTO and are overshadowed by the CEO. If the CEO is of the typical Sales/Marketing DNA (or the "I used to be a developer - we don't need that much redundancy!" DNA, which can be worse) then they typically underfund all infrastructure projects.

Finally, IT gets the blame for all downtime, so it's their asses if the shitty managers decisions impact service.

So, ITIL is not the issue. People are. IT needs competent leadership to succeed.
> The greatest concern seems to be with the way OGL handles various buffers. For example in WebGL it is possible to create bufferData stating that it's of size X and provide Y values with Y much smaller than X. What you get is a buffer full of stale data from the memory. Bad idea.

Please at least check these things before asserting them. Assuming good will, I can see how it might be easy to assume that some things that are true in desktop opengl will be true in webgl, but both the linked blog post and the webgl spec explicitly state that all buffers are initialized upon creation, and all access calls are bounds checked. Tests of this are also part of the webgl conformance suite.

If you want to see where it is specified, see here:
http://www.khronos.org/registry/webgl/specs/latest/#4.1
MSRC is generally used to report security bugs for released products only. They do now patch some prerelease products, though.
Hello all, thanks for your interest. To answer some of the comments --

First of all, my interest is not so much to increase interest in my own work. My work is pretty modest compared to the likes of Tao and Gowers, so really I would be happy just to represent the mathematical community and discuss the field I work in as a whole.

I think kragen's comments are essentially correct. I could do a good job of explaining what I do, and why it is interesting, to someone with an engineering background in about five to ten pages. IMHO that is a lot of effort required to either write or read. Of course my impression of HN is that there are indeed people who would not begrudge the effort to read it!

The suggestions have revolved around blogging. I confess that I don't have so much of a taste for this -- I spend a lot of time at a computer as it is, and there are already outstanding math blogs online as pointed out by tokenadult. I would be much more excited to do something that involved face-to-face talk. So perhaps my request is more difficult than the initial impression I gave!

Thanks to all.
This is a really good point: if you are going to buy a car anyway, it might be better to buy an electric car (though I, personally, doubt it, and would love to see the actual environmental impact), but if you want to help the environment, buy a used car. Almost any used car will be better for the environment than the best new car.
I've decided after 12 years of writing PHP to move to Scala. My (very limited) experience with it so far is that it is rock solid awesome.
It wouldn't take that many lines of elisp to capitalize first word in sentence before gnus burped it out over NNTP.
OK, but why are batteries expensive? 20 years ago rechargeable AA cells were very expensive, now they are cheap, plentiful, and work better than ever.

Will electric vehicle cells follow the same curve? If not, why not? Is it because they contain precious materials? Lack of economies of scale? ???
That's also not true.
C++ has asio, now part of boost.

i have a bit of experience with twisted and must say it's pretty world class. it has great streaming APIs, really convenient APIs for working with processes, in addition to a solid networking library where you can either build your own protocols or use existing ones.

to say "it failed at scale" is ridiculous. i can point to a number of institutions with plenty of twisted code in production, moving hundreds of GB a day of data.

the only reason it would seem "failed" or "obscure" is that node.js has a huge fad aspect to it where people blog about and evangelize it constantly. most things in software don't have a fraction of the hype or exposure but that's not really due to technical shortcomings or lack of use.
> because regexpes are heavily optimized C code

AFAIK, the python re module does not have a C language component. It is a pure python regular expression implementation.
>The C code implements parsing by partying on char pointers.*

That's an excellent quote. And it describes a lot of C code I've seen (good and bad).
LulzSecurity Down
You can obtain that sort of info, by dumpster diving say, but not in anything like the scale.

Imagine that you can get this info and a pretty good idea of salary and lifestyle by running a db search in a few seconds. You can easily focus your attention on the most lucrative propositions and get info from even those that are careful to not put such info out there. Census completion is a legal requirement, everyone should be on one.
I read it as 'MS DOS' and thought it was backward-compatibility gone rogue.
Google and Mozilla would not consider it "nitpicking" if I posted a security flaw to a public bug tracking site, then claimed "that's the only place to send them". All three of those vendors went out of their way to establish and communicate the method needed to safely publish security flaws in their products.

The appearance of this report is that the reporter ignored that process out of spite. Is that the message the Web GL people are intending to send? I doubt it.

Moreover, who's being punished here? Microsoft? Actions like this score PR points for Microsoft. It's users who pay the price of casual disclosure. I know that because that's what Google effectively says with their disclosure policy, and what Mozilla says with theirs.

I think this was a bad call.
The high end Mercedes luxury sedan is the S-class, for which the low end price paid is about $90,000.
Inside the architecture of Glimpse - Goodbye /Glimpse/Config, hello /Glimpse.axd