skysight-inc/HackerNews huggingface dataset:
"The lower shoe is almost perpendicular to the camera. It measures 149-151px from heel to toe. (I measured 149.91 pixels and added slop for inexact measurements.)"

Interesting article, but could have benefited from some basic trigonometry.

1) The shoe is not "almost perpendicular", if you view the larger image, you can draw a selection box of roughly 50px in width by 150px in height (his shoe is tilted more than 18 degrees), so his shoe length is closer to around 158px. That puts his shoe "size" around 10.3".

2) His toe extends several pixels beyond where the "sole" ends, I don't know how that factors into shoe measurements.

3) The author always refers to shoe size in inches, then comments that, "Since shoes don't come in quarter fractions, this is likely a 9.5" shoe". I assume he is referring to US Men's Shoe Sizes, but a size 9 1/2 shoe is not 9.5", it's 10.5" (inches), and a size 10 shoe is 10.69", a 0.19 inch difference. (http://shoes.about.com/od/fitcomfort/a/men_inches.htm)

Since the original problem was "an associate of mine who asked if I could identify a person's shoe size from a photo", assuming the other math is right, 158 pixels would be make the correct answer closer to a size 8 1/2 or 9 (in US Men's Shoe sizes).

Of course, I could be completely off base here, since I only spent about 3 or 4 minutes thinking about this and didn't write an entire blog entry.
Being a very experienced game developer who tried to switch to Linux, I have posted about this before (and gotten flamed heavily by reactionary Linux people).

The main reason is that debugging is terrible on Linux. gdb is just bad to use, and all these IDEs that try to interface with gdb to "improve" it do it badly (mainly because gdb itself is not good at being interfaced with). Someone needs to nuke this site from orbit and build a new debugger from scratch, and provide a library-style API that IDEs can use to inspect executables in rich and subtle ways.

Productivity is crucial. If the lack of a reasonable debugging environment costs me even 5% of my productivity, that is too much, because games take so much work to make. At the end of a project, I just don't have 5% effort left any more. It requires everything. (But the current Linux situation is way more than a 5% productivity drain. I don't know exactly what it is, but if I were to guess, I would say it is something like 20%.)

That said, Windows / Visual Studio is, itself, not particularly great. There are lots of problems, and if someone who really understood what large-program developers really care about were to step in and develop a new system on Linux, it could be really appealing. But the problem is that this is largely about (a) user experience, and (b) getting a large number of serious technical details bang-on correct, both of which are weak spots of the open-source community.

Secondary reasons are all the flakiness and instability of the operating system generally. Every time I try to install a popular, supposedly-stable Linux distribution (e.g. an Ubuntu long-term support distro), I have basic problems with wifi, or audio, or whatever. Audio on Linux is terrible (!!!!!!), but is very important for games. I need my network to work, always. etc, etc. On Windows these things are not a problem.

OpenGL / Direct3D used to be an issue, but now this is sort of a red herring, and I think the answers in the linked thread about graphics APIs are mostly a diversion. If you are doing a modern game engine and want to launch on Windows, Mac, iOS, and next-generation consoles, you are going to be implementing both Direct3D and OpenGL, most likely. So it wouldn't be too big a deal to develop primarily on an OpenGL-based platform, if that platform were conducive to game development in other ways.

I would be very happy to switch to an open-source operating system. I really dislike what Microsoft does, especially what they are doing now with Windows 8. But today, the cost of switching to Linux is too high. I have a lot of things to do with the number of years of life I have remaining, and I can't afford to cut 20% off the number of years in my life.
>When -- if ever -- your startup grows up, DMCA and patents are how you stay in business. It has to be easy and cost-effective to protect your creations, or else the incentive to create is greatly diminished and the ROI for R&D is zero. Intellectual property protection is the keystone of a modern knowledge economy.

Hmm. Then explain to me why the GPL and other free and open source software licenses have been booming and Creative Commons has been getting tons of attention, because I just can't seem to connect the dots.
The paper is quite clear about the methodology used, they only extracted exact 4 digit sequences. I repeated that much of the analysis, I wanted to examine the patterns, not just look at the frequency plot. I got the same ~1.7 million sequences using a regex that excluded 5 digit sequences.

The blog is less clear.
"Using unhelpful skepticism as a reason for hiding the fallibility of science"

I'm not suggesting that, I'm suggesting a de-emphasis on framing it as a matter of "science" and leaving folk wisdom and all other assumptions of perspective and "trusted sources" untouched.
Honestly, being downvoted for being clear does not show a great intelectual clarity. Really: do you people check all the hashes of your software? Do you trust all the certificates in your browsers? Have you really honestly checked all the ssh fingerprints of the servers you connect to?

I repeat: security is not abstract, it depends on the problem and the trade-offs.

If this hurts please check your mind.

And feel free to downvote OF COURSE.

Be happy.
Silicon Valley Slowly Awakens To Android (On Samsung)
"I seriously doubt that many of those actually do anything reasonable with audio."

Actually, serious audio work on Linux is done with JACK. PulseAudio is completely inadequate for serious audio work.
Macs have always had pretty good longevity, and that's been even more true for the ones produced in recent years. I usually get 5-6 years out of Mac, and even then can usually sell it for not too bad a price to someone who will surely get several more years out of it.

I would say that the likelihood that most of the growth in the Mac line in recent years has been "switchers"; now they're all enjoying a computer that can actually last you 10 years potentially, so sales of course will stagnate.
I have always imagined that github would be a huge target for the chinese... for industrial espionage. they could get the source for private repositories for many startups and successful companies.
I don't see him making that assumption. It's the other way around: using DX means Windows, which is correct. Even so, he is asking if this could be the reason and I don't see how this is a stupid question.
How Facebook will kill the phone as we know it
I guess it was a planned public test or technical verification of certain larger project about live traffic decryption on national level. There really isn't a plausible political reason of github being targeted. Maybe targeting github can get data about user response or verify scalability of the infrastructure given recent high https traffic volume from China to github.
How do you know Intel cpu can be trusted?
Looks great! I have little experience in this market, but regarding plans/pricing:

1. 5 projects seems like a lot of projects for a "Free" plan

2. Nothing differentiates "Basic" from "Pro" other than numbers. Google analytics and custom backgrounds / white labeling seem like "Pro" features to me.

3. Pro should cost more, and possibly just include "Unlimited" images (if someone actually ends up abusing this, that might be a good problem to have).
> Someone needs to nuke this site from orbit and build a new debugger from scratch, and provide an library-style API that IDEs can use to inspect executables in rich and subtle ways.

LLDB[1] can do this, but I'm not sure how far along it is.

[1] http://lldb.llvm.org/
As I've said before, MySQL's data handling is very much like VB's "On Error Resume Next".
Where's "there"? (Presumably not Canada?)
To clarify, this looks more like someone turning off SSL access to GitHub than a proper MITM attack in the traditional sense.

The certificate in that link is just a self-signed certificate, not something signed by a CA:

Issuer: C=US, ST=Some-State, O=github.com, OU=github.com, CN=github.com
Subject: C=US, ST=Some-State, O=github.com, OU=github.com, CN=github.com

So your browser will warn you that you are not making a secure connection. Firefox users, for instance, will have to make 5 clicks to get through that warning and visit the page.

I think "China turns off SSL access to GitHub" might be a more appropriate title.
Looks good! What icon set are you using?
Show HN: FileStreet API now available.
It's a coroutine. Not exactly revolutionary.
The WikEmacs Experiment Is Over Long Live EmacsWiki
I also believe that the giant marketing push for making Macs trendy is dying out. They are accepted as mainstream computing platforms now.

Maybe it's just my location or demographic (I am a college student now), but I, honest-to-god, never saw a single Mac in person my entire life until I was 14 years old (this is about when the "I'm a mac, I'm a PC" ads started playing).

Now that the message has been propagated, the surge is dying down.
I was wondering when Github was going to start supporting HSTS and 2-Factor Auth. I'm betting that it gets bumped in priority after this event. Nothing like an incident to move along security requirements!

http://dev.chromium.org/sts

https://www.duosecurity.com/features
There is always a single point of failure if you zoom out far enough.
http://fortawesome.github.com/Font-Awesome/ - it's actually a font face.
3 Reasons Why Your KickStarter Project Needs Outsourced Order Fulfillment
Laser cooling of semiconductors by annihilating excitations
Yes, that's why we built it as well. The basic use case is knocking up maps quickly during a meeting. Please vote for folding on the site if it's important, we aim to invest as much as we can on working on the top voted feature group.
>Someone needs to nuke this site from orbit and build a new debugger from scratch, and provide an library-style API that IDEs can use to inspect executables in rich and subtle ways.

perhaps LLDB will solve this?
I studied Spanish for 10 years taking courses at Berlitz (not recommended), The Spanish Institute (http://spanishinstitute.org/ - pretty good), a private tutor (a lot more enjoyable) and finally immersion at a language school in Antigua, Guatemala (http://www.spanishschoolplfm.com/).

I found immersion to be orders of magnitude better. After a few months in Antigua I probably learned as much as the prior several years. You get so much more out of spending your day just talking in another language. I remember when I stopped trying to translate from English to Spanish and just spoke in Spanish. It's quite a trip to speak so much Spanish that you find yourself hunting for words in English when you switch back. Spanish sometimes came first.

Unfortunately, you'll lose it quickly. My weekend project is to take what I learned and put it on the iPhone and iPad for both myself and others. Shameless plug:

https://itunes.apple.com/app/id388918463

I've got more content that I used to create a rather ugly website, which I'm about to turn off that I will eventually put in the app. I'll spare everyone that link. :-)
Quirky response to OXO
The reason everyone covers Cale's version of "Hallelujah" is not licensing, it's that his arrangement is so compelling that he made it impossible to hear the song any other way. If he hadn't, few would know it existed. Cale reinvented that song. In the annals of aesthetic justice he gets a cowriting credit beside Cohen.

John Cale is a classic under-the-radar genius. Drastically reworking songs has been one of his specialties for decades; he did it to "Heartbreak Hotel" twice. But "Hallelujah" was a freakish success. It used to bug me that no one ever mentioned Cale when that song came up (only Jeff Buckley, who copied him) but that has finally changed.

What screwed Cale is that his version was replaced on the Shrek soundtrack by Rufus Wainwright's carbon copy, because the record label wanted to promote Wainright at the time. Your point applies to that maneuver.

Curious factoid: of the few covers of "Hallelujah" that existed before Cale reworked it, one was by Bob Dylan. It's easy to see why Dylan would have singled that one out, but still, kind of amazing.
It can also be enlightening to study 1-bit architectures. The lower limit of processor complexity.
This wiki-page http://en.wikipedia.org/wiki/Motorola_MC14500B has links to the data sheet and a high quality applications handbook.
I wouldn't say OpenGL is ugly as hell. Modern OpenGL (using vertex buffers and such) isn't too bad. But politics, platform-compatibility and corporate hating aside, Direct3D is the better API.

OpenGL suffers from a lot of the same issues as HTML -- designed by a committee of mostly competitors. It should surprise no one that while systems that come out of such arrangements can be vital for the industry, they are very slow moving when compared to an SDK defined by a dictator (benevolent or otherwise) and much more hesitant to allow for the massive changes that new technology would otherwise allow.
Very nice. How does the blog integration work? Is it limited to certain platforms?
> who watches the watchman?

There's this paranoid viewpoint that Science is this exclusive club shrouded in secrecy, a little like the Masons. They hold on to their established views despite conflicting evidence from the fringes, thus continuing their tenures, fat paychecks, international fame and ultimately control over the world.

There is no watchman. There are scientists. Scientists watch each other with a tenacity that could almost be seen as dogmatic, but really it's because errors help no-one. To become a scientist you do science. If you have a concern about a particular field of science, study up so that you're as knowledgable as those in that field and discourse. That's it!
I'm on the otherside of the fence. HATEOAS just seems obvious, as in why would someone do it any other way.

I recently wrote a client to spider legislation data published as WSDL. Were the reply/result documents HATEOAS, the spider would be trivial. But I have to basically do ETL between every reply and the next request (walking the children of a parent).

At the day job, some of the RESTful APIs (written by others) are mostly HATEOAS. It's a pretty big win. Clients are easier, inspection and verification is easier, non programmers almost kinda grok them, etc.
Should You Buy Samsung Galaxy Grand Duos?
I think the parent is making the same point as you are.
He's clearly talking about people new to databases who choose MySQL because of its ubiquity, not seasoned engineers and large companies operating legacy applications.

> Facebook ? Twitter ? Amazon ? Flickr ?

I imagine none of these companies would choose MySQL if starting from scratch today.
The Doomsday Preppers of New York
You mean the star wars type font? It's pretty bad, I assume it's only there as a play on the whole "rebel" spin.
That's not exactly helpful if you don't know what coroutines are and how they work.
This is a problem far more deeply engrained than just the public's perception of science.

I think the primary problem is the inability for most people to self reflect on what they know, and most importantly, whether they even know it at all, to critically evaluate their assumptions about the universe and the extra meta level of how they came to those assumptions. It is painful to mercilessly question yourself and your entire belief system and in today's world it is probably harder than ever to build a coherent picture of reality due to increasing noise and complexity of ideas.
For now, there is a markdown blog editor included after login where you can save drafts and publish them later on.
DeLorean Ipsum - The Back To The Future Lorem Ipsum Generator
Why use duosecurity over something like RFC 6238 and RFC 4226?
Speaking from a shop which is heavy Mac, we were at our wit's end with Apple last quarter. For the first time that I can remember, and certainly the first time in my company's history, we could not by a new iMac if we wanted to. And we dearly wanted to. We snapped up any refurbs we could, and that channel quickly dried up as well. So for us, at least, we were forced to push sales of new machines into the next quarter.

Seriously, what company does this? Cancel one product line, months before the replacement is available. It staggers the mind. Release after release we could always get the current model until the new one was ready.

In our local market at least, the demand for the new iMacs was so huge that it is only just now recovering from the supply shortage. Custom builds are still 2-3 weeks out - which we need if we want a machine with 16GB. So I am forced to purchase 8Gb models to meet our demand, knowing full well that they cannot be upgraded without voiding the warranty, and without a great deal of labor and the risk of shattering the front panel glass.
"Not MySQL" is good advice. Look into alternatives, there are many good ones.
Fortunately, it looks like Chrome prevents users from clicking past the ssl errors. This Chinese chrome screenshot[1] shows that there's only a back button (for English versions of this page, see [2]). Unfortunately, it appears that IE allows users to click past the errors[3]. I'm also interested in how the 360 browser[4], which has been gaining market share in China, handles the error.

Does anyone have any theories why China would use a self signed certificate when it's very indiscreet? A lot of users will just click through if given the opportunity (around 60% in chrome before new security measures prevented it[2]), but I doubt many users with truly sensitive private repos would do this.

[1] https://twitter.com/GreatFireChina/status/295236912594186240...

[2] http://www.imperialviolet.org/2012/07/19/hope9talk.html

[3] https://twitter.com/chenshaoju/status/295139636718743552/pho...

[4] http://news.ycombinator.com/item?id=4499168
They conveniently missed the fact that the consulting provided was operational consulting and not management (read: strategy) consulting.
تحميل برنامج الفوتوشوب
يعتبر برنامج الفوتوشوب هو الرائد في مجال تعديل واضافة تأثيرات علي الصور Adobe Photoshop ينتمي لمنتجات شركة ادوبي الرائعة التي تهتم بالعديد من المجالات كبرامج الفلاش وتعديل الفيديوهات والعديد من البرامج الرائعه الاخري
And the crypto sigs on WU don't matter because you can compromise the boot process.
400k hotels * 200 rooms/hotel average = 80M hotel rooms in the U.S. That's one for every ~4 people in the U.S. That seems way too high... even if these rooms are only filled 25% of the time (which the article indicates is way below the 70% these businesses desire), that would mean the average American would be using a hotel room one out of every 16 days (and that assumes that people don't share rooms). Am I missing something, or are these stats wrong?
I don't think either would help in this situation. HSTS helps prevent SSL stripping attacks, which whoever is denying SSL access to GitHub doesn't need to bother with.

2FA serves as an annoyance to phishers, but whoever is doing this network attack has direct access to your session cookie.
Yes, there are some self correcting mechanisms. And of course, sometimes the problem is not in the scientific method but in the people working with it.

This discussion can go on and on, but I'd like to point out the scientific method is not applicable to several things.

String theory like you pointed and other things still in the realm of speculation are one thing (even though their foundation is scientific work)

Getting the best page for 'Cat pictures' on Google is another thing. Or translating a phrase to Japanese.

The success of the scientific method in Physics is due in a big part to the issues I pointed out, physics is constant. The LHC repeats collision experiments thousands of times, so you can get a result with as little variance as possible.

However, it is not possible to test a new drug in millions of people and see what happens, not to mention the results are going to be different for each person, so the best you can have is a statistical answer.
You work with Pharo ?

I've a strong feeling that it's not a language matter anymore. People behind Smalltalk and Self are still active. Idioms are spread everywhere and such ideas will re-emerge.
I believe I'm still missing the point.
> PostgreSQL is pedantic with data insertion

Better to deal with the exceptions up-front, than to discover months down the line that your database has been silently chopping long strings, silently casting types and coercing values into useless junk.
Other amazing Python answers by the same guy:

What is a metaclass in Python - http://stackoverflow.com/questions/100003/what-is-a-metaclas...

Understanding Python decorators - http://stackoverflow.com/questions/739654/understanding-pyth...
As someone who's never done any game development at all, can you give me some sense of the work that would be involved to port a Windows-only OpenGL game to Mac or Linux? What pieces of it would need to be redone or significantly overhauled?

I would have expected it would be quite minimal compared to the work involved in developing the game itself, but I guess I must be wrong if there are "many" Windows-only OpenGL games.
Thanks, Moxie -
The original article in China (by top-notch geeks) wrote
中间人攻击
which translates directly to "man-in-the-middle attack".

Appreciate your insight - thanks for weighing in on this.
I use yield and generators regularly. They just make sense, but I never knew what a coroutine is in an academic sense
You're correct. That was my mistake. Here's the updated version:

for x in range(1,101):print"Fizz"[x%34:]+"Buzz"[x%54:]or x

I basically just removed the extra colons and added 1, to the range so that it starts at 1. lifeisstillgood was spot on with the reasoning that this works.
I dont think the problem is people (researchers, developers) but of the infrastructure for research. Researchers are constantly thinking about getting new grants and renewing old ones the way politicians are constantly worried about their corporate sponsors and getting reelected. The result is that we only get a little science and we only get a little good governance. The internal organizations that form as a result of this environment are artificial. In the lean times researchers make short term decisions aimed at generating marketing and taking mindshare. In the fat times researchers ensure that all computational and lab space are used and come up with new reasons for growth. A friend working in a large research institution once suggested a refactoring that would greatly improve efficiency of an application. Instead, she was handed back down a recommendation that would make the application less efficient with the same functionality. The reason was that the computational usage was about to be audited and the rule was that there would be no improvements in efficiency until after it was complete. The system is an old house with hundred year old plumbing. The people you pour through the system are going to flow through the pipes abiding by the laws of physics. Blaming them for a leak is about as useful as blaming water: while you may win the moral argument, you will not solve the problem. The best you can do is replace them with new people who will react largely in the same manner.
I don't think there's proof of China doing anything here. Perhaps someone on OP's coffee shop WiFi is poisoning arp tables and forging certs.

This seems really sloppy for China. Without further proof, I don't think it was the govt.