skysight-inc/HackerNews huggingface dataset:
> Soon after Steve Jobs returned to Apple as CEO in 1997, he decided that a shipping company wasn’t delivering spare parts fast enough. The shipper said it couldn’t do better, and it didn’t have to: Apple had signed a contract...But the lesson here might make us uncomfortable: Violate any norm of social or business interaction that stands between you and what you want.

I've heard that many Chinese regard contracts more as guidelines than as iron-clad rule sets to be interpreted like bytecode. The relationship between the parties and their needs are more important than the letter of the law. (Or the letters on the contract.) By this set of norms, the shipper was the transgressor in this case, and Steve did the right thing.

Take care of the customer, or someone else will.
Glad I'm not using Kaspersky AV anymore.
The lower levels of a company are like undergrad... you go there for the reputation of the company/school.

The upper levels are like grad school... you go for the reputation of the boss/professor.
Bummer, I was really interested in Fortress. There really seemed to be some interesting stuff going on there. Ah well, maybe some of the research will help with Java or something else down the road.

Or, perhaps some plucky startup will pick up the technology and next week we'll see a headline "Startup raises $4M to develop Fortress" or something of that ilk.
I like how the author feels the need to "dress up sophisticated" to steal merchandise. How very old school.

We need more of these gentlemen thieves here in the states.
I understand he wasn't actually armed when he went in. Only when he returned through the emergency exit.

Hopefully people will think ahead far enough to downplay the effectiveness of such security measures.
I was going off of this: http://www.google.com/publicdata/explore?ds=d5bncppjof8f9_&#...

Where did you get $265.911B?
Actually, for something that is going to be fixed in stone, using units based on the length of the arm has a lot of historical precedent. See, for instance, the great buildings of ancient Egypt.
I wonder how much this adjusts for natural fading in prints.
A new "hero" is emerging to tackle the evil of spammy untargeted emails.
Then you'll need to tell me why use this instead of the other currently available, often free, CRM options :)
That's a good example of stopping a robbery, however what I'm really looking for here is an example of where armed men came in with the intention of killing people and were stopped by someone carrying, as that's the scenario we are discussing.
"Just need to determine the amount a cell is occluded."

That's the trick isn't it? How do you determine the amount? That is more or less what I set out to figure out when this started. Sure you can do a calculus/math-based approach, but it is slow and done entirely on the CPU.
Will you complete blogging – You must see before you start
bought, thanks
> A generation of people are going to try really hard to emulate a cult status figure's personality but at the end of the day that's all it really is: a bad fidelity copy.

Reminds me of what happens when I use Pandora. Instead of revealing a bunch of bands I like, Pandora gives me a bunch of bands that sound like bands that I like.

Don't imitate. Attune yourself to value.
If they were scanned in recently, doesn't this just prove that print materials do indeed yellow over time?
Git Crashcourse
I never got the prompt, just a broken reply button that took no action. Searching for others with the problem revealed it's due to wanting my real name. I went through my settings looking for an option to use my real name, since I don't care, but couldn't find one. On a screen that was supposed to contain that option for other people, it was not there for my account. Solution? Delete all G+ data and log out and back in to Youtube.
We use insightly over here at Namella! Fantastic product.

But we reallllly need integration with Unbounce. :)
I'm pretty sure there's one in French. Can't remember what it is off the top of my head. On a sort of related note, anybody know what software was used for the early Minitels? http://en.wikipedia.org/wiki/Minitel
they have explicitly said that they think the "feel" of an online community with name-shaped userids is qualitatively different from the feel of one with handle-shaped ones.
What exactly are the economics of sub-dollar charges? I'd imagine the CC charges exceed donation amount
Cube loves Geckoboard: tracking metrics at your startup
Comparing Factor with Lisp
Internal Control Auditing
Vitalics - An Affordable and Simple Solution to Segregation of Duties with a complete database of internal control checklists for small businesses.
A certain segment of Norwegians reacted to terrorism by being enthusiastically for it. These included the leaders of the Labour Party, including the leaders at the Labour Party's Utoya youth camp.

http://zalmi.blogspot.com/2011/07/utoya-not-so-innocent-yout...
http://www.debbieschlussel.com/40472/karma-2-norway-utoya-ca...

This is a factor that seems to go unmentioned in all discussions of the Utoya massacre, but is necessary knowledge to understand the event in its entirety. It adds detail to Breivik's motive, and it raises the question of why there has been no condemnation of the Labour Party's support for similar massacres elsewhere being conducted on racial and religious lines so long as they happen far away and are done by a faction that the Party approves of.

This is beside the point that Schneier makes, so I apologise for going off topic. To that point, the US overreacted (an understatement) and Norway faced little threat of further attacks. Norway did consider fudging its laws to give Breivik a life term as a mental inmate rather than the statutory limit of years as a prisoner, and that can be questioned as an expansion of security. More generally, no one in Norway could argue a need for greatly expanded security since the threat ended with Breivik's capture.
what makes your world view correct, by your definition and man who would not have sex with another man is sexist.
Twitter could beat Google+ to the punch at social search
edit: title changed to be more direct about the relevance of the post.
http://news.ycombinator.com/item?id=4281781
I guess I'm still confused why that matters to Amazon, unless it's part of some world-bettering mission. Wouldn't it be logistically simpler to say employees can enroll in any course offered by the state community college system, and wash their hands of it past that? I mean, they're just offering a perk as part of a compensation package, it's not like they're supposed to be their employees' parents or career counselors.
thanks! let me know how postbox works for you. any info on it's search ability?
Passing Pointers
Processing fees are usually around $0.30 per charge + 3% of the amount charged.
Great to see (hear) the show is back! Even though there were only 3 shows in April, it had already become among my favorites.
I was at this hackathon. Sure, if you micromanage every single aspect of the event, you're going to achieve what you set out, but getting people to hack together over a weekend does not create a culture in which men and women can collaborate and work together after the event is over.

Specifically, as a guy, I found some of the marketing material distributed at the event pretty offputting. Most of the stuff was color-coded, either pink or blue, and that was the first weird thing. Why would you reinforce the traditional gender roles like this if you are truly trying to change them?

Second, I didn't keep the materials, but as I recall there was one that was making the suggestion that "every fairy tale starts this way." Well, maybe, but that suggestion is not really welcome in a professional setting. I wonder if that's the right approach to encourage guys to start taking women seriously in the work setting.

Bottomline, the motivation of the event is commendable, and I am all for adding more women to the technology sector, but adding sex into the promotion of a hackathon, and so badly, will not get us there.
http://news.ycombinator.com/item?id=72952 <- Comments

http://news.ycombinator.com/item?id=715044

http://news.ycombinator.com/item?id=1316242

http://news.ycombinator.com/item?id=2602065

http://news.ycombinator.com/item?id=3588792

And then there's v2.0:

http://news.ycombinator.com/item?id=720151
There is the possibility of being dragged through a lawsuit, and/or the company one works through being dragged through a lawsuit. I don't know if that is applicable here, but I have been involved in a responsible disclosure where I gave the information to a colleague, who then disclosed to the company, and the company then sent a letter threatening a lawsuit, whereas my colleague nearly got fired (the fact that he didn't was the one time I can remember the union stepping up to do something useful by defending him). Whether or not such lawsuits would hold merit, they'd be expensive for all involved, and lots of listed companies are more than happy to put the lawyers on you for invalid reasons.
Steve Wozniak Q & A
The poor hacker's alternative: http://www.youtube.com/watch?v=WAkJRpKeyYg&has_verified=...
An unplugged gamer's cross-country pilgrimage
another kind of art: caves. People were not allowed to use a tripod. I think the idea was that you had to buy the official photos because without a tripod there is no way you will get a decent picture of a cave, even with flash.
I had an interview with a YC company. They were going to bring me on board with a low salary, lots of equity, and a seven day work week, with what seemed to be 8-10 hours a day. But hey, they have a cool office and free food!
I never made that connection but that indeed is why I don't use Pandora anymore.
Are they also working with sub-par equipment? If so, put in a request together with them. Otherwise, put in the request yourself. If they turn it down, look for another job and put this one down as a contracting position. In my experience, employers in this industry pretty much never ask for references anyway, in the UK at least.
I've also never seen non-english languages, but I imagine porting a programming language would be a simple matter of replace code words with their corresponding code word. This seems like a much simpler possess then porting most applications to other languages. (Of course, the apis of common librarys would also need a port for this to be useful.) I would also imagine that if something interesting happened in such a language, it would be ported to english even quicker.
Awesome, I signed up, but how do I change my username? I don't want to use the one supplied to me by logging in via Github.
Under what circumstances are you okay with giving up 3x performance? I find the while-loop code ("Version 2") as readable and idiomatic as the one using count(). If you can write fast Scala code (and you've already shown that you can), why not do it? Have you measured how much readability is impacted by slightly more verbose (or C-like) patterns?

Also, hi Russell!
As a long time Linux user, I think this would be very tough.

Linux users are used to free software and having everything available through our package managers. We generally don't purchase and download software, mess with serial numbers, licenses, copy protection, drm, etc. There is no standard method for delivering software outside a package manager. Anything you do will likely be somewhat hackish and will not work on everyone's system.

I rarely ever stumble on Linux software that must be paid for. Off the top of my head I can think of: Mathematica, Sublime Text 2, IntelliJ, and, perhaps soon, the Steam client. These are all obviously multi-platform projects that also happen to be available on Linux (which is nice but probably not wildly profitable).

It would help if there were a Linux app-store, but there is not. I think there may be something for Ubuntu along those lines, but the fact that it is only for Ubuntu seriously limits the number of potential customers you have in an already shallow pool. And since Linux desktop users are spread over a wide variety of distros and configurations, a general Linux app-store is unlikely to ever exist.
I understand this is the way it is done, however, it all feels a bit hand wavy and not how my gut tells me to do it.

I'd get the entire dataset, set columns as variables, assign weight to each of these variables and process each weight in 0.1 increments. (So the final number of passes is 11^n where n is number of variables). I'd have something at the end of the row to know what was predicted right (+1) and what was predicted wrong (-1), sum this column. Hit run until optimal weights for each variable are found. I'd use the entire dataset to do this.

Is there any mathematics on defining what % of the dataset should be training vs. testing or is it left to the analyst (like with confidence intervals (95% hypothesis testing etc.))?
Did no one ever pull back and just punch him in the face? If not, why? Even the worst possible repercussions don't stop some people. And if so, did it have any effect?
Security tools aren't readily obtainable by independent contractors.
Interesting that the challenge they felt particularly worth calling out wasn't about solving hard algorithms or design problems, but rather making those solutions function on the limited JVM platform. Perhaps this will give pause to the next language developer tempted to target the JVM for no reason other than its popularity.
Mac computers are no longer safe Mass switches to PC -
Do libertarians not believe in the concept of natural monopolies?

Many don't, and many others only admit of very special cases. Arguments against the idea can be found with a search on "rothbard" or "mises" and "monopoly".
In case you're interested, the same story, from other sources:

http://news.ycombinator.com/item?id=4278142 <- Comments

http://news.ycombinator.com/item?id=4279457

http://news.ycombinator.com/item?id=4280887
"my data stores and yours are practically collocated".

Truth. Every time I ping from my server and get ridiculously low response times, I have to pause to think before thinking "Thank you AWS".
Exactly. And that's what I was trying to say. He created (or recreated) bot Apple and Pixar, but his role at two companies was completely different.
Ah the American conquer, might is right arguement. No wonder your country ranks pretty high on the misery scale... There's more to life than "dominating" industries.

Edit: I should qualify this a bit more. If it does make you happy to basically have no life outside of a career, then go for it. Everyone's happiness is something only they can answer for themselves. Some people can tolerate being lonely, and I'm pretty sure Steve Jobs was a lonely person (after reading the Isaacson book), despite having people around him.
As you can see, we slowed this past week, to be honest. Looking for advice on getting back to ~doubling each week. :-)

I'm afraid you're probably going to be looking at a plateau until you can get the payments thing straightened out permanently so that recipients can depend on getting an ACH every Friday (or Monday, whatever). Closing that loop will instantly motivate every open source hacker to put a "Help fund my work @ Gittip" button everywhere. Bummer the BalancedPayments option didn't pan out.
> "Startup raises $4M to develop Fortress"

Nope.
They give you automatic proxied/intercepted objects for things like Transaction management, asynchronous execution, general AOP, etc. If you're not using any of that, there's probably little to no advantage to using pure Java DI. But those things are really nice to have.
Would be nice to get a sense of how this handles large volumes. I would be wary to try this for anything serious as it might not be set up properly for large volumes 100k, 500k etc. Maybe speaking to this concern would help business.
No one owns a Treasury bond: they just rent it on borrowed money.
In both cases at your link the vital part of "and takes the goods" can be avoided whilst still testing the method as several have already pointed out.
Originality is the only antitdote to obscurity
It is childish. I think it would be nearly impossible for a normal adult to act that way, because part of growing up and becoming an adult is learning to repress emotional outbursts like that and most people are not even going to feel very strongly about design details in the first place.

The lesson is that design details do matter, and when you pay attention to them it has a cumulative effect that results in a much better product. You do have to develop a certain amount of callousness to pursue your vision. You don't have to scream and berate people, but when you're sending a design back for the tenth time, you're bound to start thinking "Gosh, this designer is going to think I'm an asshole." A lot of people will just accept something that's not exactly what they want just to avoid potential bad feelings from someone else.

The emotional aspect made it easy and natural for Steve to pursue the design until it was exactly what he wanted. Indeed, it probably made it nearly impossible for him to do anything else. The rest of us have to consciously override social impulses that value getting along and being liked higher than small details. The upside is that we get to manage our response so we can motivate with something other than fear.
They seriously had not heard of the leading zero zip code problem until now?

Fulfillment is KS's big hole, and an opportunity for them to make even more from projects as an optional service. I have done this kind of stuff before so was able to plan my mailing week fairly well, and KS do have a good list of tips on the site.

But too many projects crash on these rocks. Sourcing, packing, and shipping are hard work and can be a distraction from the real goal, which is whatever it is you just got paid to make.
Until everywhere has fiber to the curb, the internet backbone is going to be orders of magnitude faster than the last-mile speeds
For the baby's sake, let's hope so!
AFAIK, Guy Steele is in this project. What'll happen to him?
Going to use it to send a couple of thousand of emails with attachments like, tomorrow. Up to now it works great in my tests.
Deploy a web app in one step
Get an RSS feed reader and attach it to the websites. It will pull down the headlines and let you read them quickly.
At tumor board a few weeks ago a patient presented with a massive, benign head tumor that had been partially resected.

resident presents the case and asks for surgery's opinion
Surgeons: No, it's better to wait until the cavity heals(from the previous surgery) and then evaluate.
Resident: His mother is insisting.
Surgeons: We're not going to do it because his mom insists.
Me: How old is the patient?
Resident: late 30s.
There is ChinesePython http://www.chinesepython.org/english/english.html
Not domestic at all. Were those responsible for the tube and bus bombings not immigrants with training elsewhere? Hardly domestic in the sense that 9/11 was domestic.

Norway's atrocity was a committed by a lone wolf. The only connection is that he was a fundamentalist, in the same way the American ultra-right party and the Taliban are. That is the global threat to open democracies, now and in the future.
good example of mac shop don't know much about them but it looks like they do cool apps "only" for mac
http://www.belightsoft.com/company/overview.php
"So if you like constructor injection you have two options: component scanning or XML."
I totally disagree with this limitation. I do favor constructor injection and I am always using it with Java based configuration, I never use setter injection (maybe sometimes for optional dependencies). Why should it be a problem that you need an instance for satisfying a dependency? It's only a problem if you have circular dependencies, but then something is wrong with your design.

All the rest is flavor we could discuss about for hours without getting to an end, but Spring's Java based configuration definitely doesn't have a problem with constructor injection.

Regards,
Tobias
VMware buys Nicira
When your whole model revolves around it, the effort that goes into evaluating the prospects of serious research topics will perhaps undergo a massive change as well.
Yes. That will make it tougher to figure out. Your assumption that timing attacks are impossible because they are hard to trace seems optimistic, though.

This is specifically a security problem. Saying "I'll sweep it under the rug" and considering it solved is historically a bad idea.

This chain of "I'll just do X", "no, X isn't enough", "then I'll do Y", "no, Y isn't enough", "then I'll do Z" are typical of these problems.

Unfortunately, each "I'll just" is code for "I'm not going to think through this problem because I think it's easy." As with X and Y above, Z is likely to have serious problems.

Example problem with the queue approach: hacker puts in lots of password reset requests for his own domain(s) and sees that the queue workers have delays of 0.22 seconds between sending back responses to his domain, with gaps which add 0.37 seconds or 0.22 seconds, to within some error. Inference: a wrong email takes slightly longer because it often has a retry, and the 0.22 second entries are other correct password reset requests to valid domains.

Now he can send back a stream of passwd requests to his domain interspersed with three or four requests to a given email address. Now he knows if it's valid or not. ("I'll just block his domain?" "He'll use a botnet, he is anyway" "I'll just rate-limit password resets!" "Good idea - now, do you really believe that that was the last hole in your swiss-cheese security?")

Now you could fix this, too. But see how we've gone through yet another "I'll just?" You can make sure to do the delay in lookup and email sending on each entry in the queue (by the way, you've slowed down all your queue workers and likely increased your hardware costs), but trying to not think about this and sweep it under the rug is really hard.

When patio11 says that timing attacks aren't trivial to fix, this is what he means.

Is the "put it in a queue, add a delay to the queue" method perfect? That is, is "I'll just do Z" the answer? No. Having the queue sleep() is less load on other components, which an attacker can check for by pinging other services. Having it busy-wait is a different load profile than receiving an email. That's the microsecond-precision thing that patio11 mentions where an attacker can get another instance on the same Rackspace network and measure with a side-channel attack.

This is a really hard problem because there are an almost unlimited number of side channels here, and your OS doesn't try to keep information from leaking out on them.
McDonald's Reveals Why Burgers in Their Commercials Look Tastier
Yes! I really hope more people catch on to why this is an excellent idea.

Urls as pointers are not needed in a world where Facebook controls everything and has access to everything by id in it's backend.

A world where services provide and consume urls is a world where it doesn't matter what server something is on, everyone can participate.
If you click on through you can see Guy's blog post that this article is based on: https://blogs.oracle.com/projectfortress/entry/fortress_wrap...

He seems to imply that he'll be moving on to some other project at Oracle, but it's not really stated explicitly.
I think we're disagreeing on definitions and words, not what's going to change. We already have "high security" psychiatric wards, but they want to increase the security and have specific people placed in those "especially high security" wards. People can be placed there if there is a risk of "attacks against the patient themselves", which is as far I know not (directly) caused by mental disorder in the patient.

Take a look at http://www.regjeringen.no/nb/dep/hod/dok/regpubl/prop/2011-2... - esp. § 4A-8, which states the new changes in the law.
IPO Advisor