skysight-inc/HackerNews huggingface dataset:
> Perhaps not, but it absolutely does deserve a visit from police (many school shooters have made the same sort of at-the-time humorous comments beforehand)

It's not how reality works.

Just write it like this:

P(shooter|makes-a-joke) = P(makes-a-joke|shooter) * P(shooter) / P(makes-a-joke).

And try to look at it, even qualitatively.

Even if every shooter was known to have made those kinds of jokes ( P(makes-a-joke|shooter) = 1 ), there are many, many more kids making those jokes who don't end up shooting anybody ( P(shooter)/P(makes-a-joke) ~ 0 because P(shooter) will be around 1/10^6 (several hundreds shootings so far over hundreds of millions of children being alive at those times) ).

Therefore a visit from police is absolutely undeserved because this test has mind-bogglingly huge potential for false positives. You'd probably had to interrogate thousands of kids per a school shooter to be found.

It's the same reason when you get "positive" on cancer test that has 99% chance of being right if you have cancer, that doesn't mean you have 99% chance of having cancer. It probably bumped up from 0.001% to 2% or something.

> and I doubt many who claim otherwise would stick to their positions had he actually then moved to violence.

Those who wouldn't shall be considered unwise and taught how the world works until they understand causality.
Estonia publishes its e-voting source code on GitHub
StackOverflow Security Expert
Dropbox doesn't offer great encryption because the service is meant to make it very easy to share files and not a secure repository for your things.

The gripe is like someone saying "this axe doesn't cut butter very well".

Wrap your Dropbox stuff in TrueCrypt if you want security at the expense of ease of sharing.
Russia Says It Hasn't Receive Snowden Asylum Request
It all depends on which country one speaks about.

Many European countries, have shared leaves between parents.
Not anymore. But he did have plenty options before he revealed his identity.
http://www.atmel.com/products/other/securemem/atmel_cryptome...

How's $0.50 per tamper-resistant crypto device?

Again, MRAM is a niche product. So is a crypto chip. If you want a crypto chip, they are already available with Flash RAM / Microcontroller combos. There's no need to use MRAM for that application, when Flash is already widespread and cheap.
Too long -- didn't watch.

Actually, I saw the original (57mins) a few months ago @ http://vimeo.com/43536445 "Rob Conery - Five Things You Didn't Know About PostGresSQL"
recorded at NDC2012 (Norwegian Developers Conference).

Is this clip just the error reporting part? (In fairness, the youtube description does have a link to the original.)

Worth more views--this, or the original. I don't think I've ever heard anything bad about PostgreSQL. There must be some comparisons with the other viewpoint? I would be interested in seeing those too.
If that's the case then maybe it would be better for society if we all started self hosted these sorts of resources. Longer load times, more bandwidth usage but better privacy for the public.
I'm curious how he's paying for it. Surely the US froze his credit cards/etc by now.
I think the grep test is inappropriate as a blind requirement for commit acceptance, but I do think it gets at an interesting issue. If your code fails the grep test, pay attention, make sure what you're doing makes sense, and make sure it's documented somewhere that's accessible to those new to the code base (in terms of work flow as well as technical access).
Presumably you mean "median" (i.e. the wealth of the poorest millionaire in your example).
Most browsers probably have all versions of it cached by now too.
Thank you for the links, very interesting.

There is also this: http://genderdreaming.com/family-balancing/natural-gender-sw...

I have noticed that in some small immigrant population pockets in the US the majority of offspring is boys, and I've been wondering about the biological causes for this phenomenon. The explanation I heard is that the acidity can be regulated by stress levels of the female, causing more boys to be born in a more stressful environment. At the time I thought it's pure pseudoscience.
How To Become A Great Marketer
For what reasons should I choose C# over Java and C++?
Next few days will be interesting to see what Russia will do there.

They do not have the best track record in terms of privacy or human rights, but helping him will make them look good internationally.
Smuglispweeny? Unfortunately, a lot of metaprogramming is done in languages that don't even have a "compile time" never mind providing a hook to metaprogram in it.
DropBox is built on the premise of availability (I.E. it's available from everywhere, and easy to share).
Availability is usually in direct conflict with Security (let alone encryption).

If you want your files encrypted (or just some of the files), do what the rest of the world does, and encrypt them locally (with archive software or builtin protections most content making programs provide)
Erm... because that $10M is a conjecture, while the $1M is a cost paid upfront with complete certainty? Or do you want to pay in equity? Also - because someone else is willing to do the same job for less? I'm not sure that "framing my value" will help me when someone is willing to do the same for less money.
And also dragging every visitor of your website along.
> Wherever you work, whatever you do, you have to trust the people you work with for that relationship to be ongoing and productive (i.e. staying out of court)

Americans seem to like having things escalate. Going to court is the first reaction to everything in stead of asking someone to apologize or talking things out. The incentive for going to court also seems to be very high, you can get large sums of money for small things. Money is the biggest reason people work in the first place.
Just on the surface the potential for the minified library with its reduced size and browser support sounds great. In just checking a few features it seems as though the performance doesn't line up with jquery atm. In a large application space would I rather trade off js performance for saving initial DL time (cache)? I start to wonder where diminishing returns set in, if I should I really care about IE6 anymore or if the clean and simple API you say won't change will in fact never change.

http://jsperf.com/test-jquery-vs-minified

And to the community at large, feel free to add more tests.
You know, somehow your comment conveys a uniquely Russian atmosphere, making me feel slightly nostalgic.
"And please remember 2FA is not a substitute for a good password policy."

2FA is not a replacement no. What it does is increasing security in environments where you might risk that your main password is compromised.

This doesn't mean you are free to reuse passwords but it still significantly raises the bar for a successful attack.
The important bit of Smith v Maryland was that the Pen Register was warrantless, which means it has been established as an unchecked power of police. The police are allowed to install as many pen registers as it wants, and never tell anyone about it.
CA Attorney General releases 2012 Data Breach report
"Today's inventory management software has a fundamental problem. They're downright impossible to use. As much as engineers and accountants might love their endless menus after endless menus, they only make for a frustrating experience."

There's a reason there's 'endless menus after endless menus' - all the points you brought up (and then more). "Inventory management" as an open-ended "solution" is... near impossible.

Now... if we saw 'raka for automotive dealers', 'raka for gardeners', etc., it could be comprehensive enough for specific industries, but still able to be focused and simple. And perhaps all the flexibility could be there, but stripped away to leave focused UIs for niche markets.

I hit all these issues and more with a project a couple years ago. They really couldn't afford the 'industrial strength' inventory systems - simply too costly for them as a company - but had too many variables like the one you mentioned above. Just one small example - they'd record receiving various chemicals by the gallon or liter, but would record the use by... (IIRC) how many 'uses' (sprays, in this case). Without knowing how service person A had mixed their chemicals, 'one spray' could not tell you how much of the liter was actually being used. But they had to keep track of their chemical usage (I think for local permitting if nothing else) - during a stock take, there was no way to tell if people were using too much, or if some had been stolen, or perhaps was never delivered properly. And that some of that stuff was pretty expensive.

There's certainly a need for 'inventory management' for small business, but I think raka and others have to dive further and market focused niche versions to solve the needs of particular industries.
Neutralize is the military euphemism for kill.
Then why didn't this kid, and anyone else stuck in arrest that can't pay the bail, use a bail bondsman to get out of it? It seems like a reasonable idea but broken in practice. If I wanted to become a fugitive I wouldn't care of I was chased by both bounty hunters and the police.
An Ode to Computer Shopper
This is an argument against using SMS or phone calls as the second factor, apps like Google Authenticator are still a really great option (as the article states).
>Ruby - Now that Perl has Dancer/Plack/Moose, Ruby has nothing that Perl doesn't have (at least that I've seen). Therefore no reason to switch.

>Python - Basically the same argument as Ruby, except that in my opinion Python isn't half as good of a language as Ruby.

IMO he kinda missed the main ideological differences, benefits, pros, cons of both ruby and python.
Yes we do. You reveal to the Post Office:

1. The date that you sent the letter

2. The address you're sending the letter to

3. The return address (ie: where you've sent the letter from).

Its a known fact that the Post Office records this information, and that the Police is free to analyze this information without a warrant. How do you think the Police go about those Anthrax attacks through the mail system?

Neither the Police nor the Post Office are allowed to OPEN an envelope, because that hasn't been revealed to a 3rd party. But that goes back to this whole _metadata_ collection question. There is no expectation of privacy on the three elements above... you've written it on the _outside_ of an envelope. So you expect other people to know about it.

If this is a "Police State", then we've been living in it for damn near a hundred years. Analysis of mail records is police standard procedure.

Similarly, the Smith v Maryland case argues that Telephone records have no expectation of privacy. After all, its all information that goes onto a caller-id, its all public information.

On the other hand... the actual conversation, the Feds aren't allowed to look at. That requires a warrant.
Some of the worst science reporting I've ever read. That said, after reading the journal article itself, I found plenty of false assumptions there as well.

"... if functional consequences of SR manipulation were to be found in mammals, then it would suggest that mammals (either in individual species, or in general), possess unknown physiological mechanisms to control birth SR."

This sentence in the introduction assumes a level of choice on the part of the mammals that is pervasive in the article but never substantiated or even formalized to the point of a testable hypothesis. It is the type of sloppy science that takes away from the truth, and it's becoming way too common. It's as if scientists feel that if they just have some good hard numbers, they get the freedom to toss conjecture around as Theory for a few paragraphs.

The study found that gender bias in birth rates can affect the number of grandchildren. That is the takeaway here. No evidence whatsoever of what caused that bias is present, nor do I accept their statement that the study taking place in a zoo means that their findings are somehow more likely to be present in the wild. That would require a different experiment on its own.
>I've been using Perl since 1996, but it became my language of choice in 2001.

Did the rest of the article need to be written?
Breakthrough Music Playlist Service Integrates SoundCloud With YouTube
I've never worked for a company in which HR had any real influence over selection, but then, I've mostly worked for startups.

We have HR. They don't screen.

I might suggest ratcheting back "incredibly uninformed".
Can you please elaborate on the point of publishing this? It'd really help.
HTML LOL
We have 23 locations around the world where we have servers. Those servers need to be administered, monitored, backed up, rebooted, and synchronized. So we make extensive use of SSH and TLS.

Yes, there are all sorts of firewalls and iptables rules to create an 'intranet' across the world, but that doesn't stop the actual packets from passing the public Internet. There's really no reason not to use TLS.
That's cool, thank you (even if the results don't look so good, but it's not that surprising).
I would say that the proper solution is don't sexually harass employees.
Not so much hypocritical, but definitely misdirected and in direct conflict with the claim that he is a smart guy.
Ask HN: When did people start paying for your SaaS and why?
When did people start paying for your SaaS?

How many times did it take before you got it right? I don't suspect most people get it right on their first go, so what have you taken from your failures and what have been the biggest factors in your success in terms of gaining traction with your SaaS?

In particular, what marketing/promo tactics have served you best?
It's all about faster, cheaper, better. When software/robots are faster, cheaper, better than their human counterparts then the humans will be replaced by software/robots. This has been going on for nearly four decades now. What people haven't been anticipating are the effects of exponential growth in the capabilities of software/robots, Moore's Law. We are now reaching a tipping point where vast swaths of labor can be replaced by these systems, much faster than the displaced workers can be reassimilated into other areas of the economy. This is leading to protracted high levels of unemployment, which we're already seeing our social and political institution's inability to cope. This will only get worse.

This is quickly becoming one of the biggest issues of our age.
So, it's like Lumi, but for shopping?
Show HN: easyAB.js - a jQuery / Zepto plugin for easily setting up A/B Tests
I have an odd affliction - I collect ARM devices. Right from the OpenMoko Freerunner, through the N900 and now the Raspberry Pi.

It's always a tradeoff between price, community size and compute power with these little things. Hell, even the ZipIt Z2 running a tiny little Freescale processor had a good community when it was new.

I can go and get a HardKernel O2 and have really good performance but there won't be that many people in the IRC channel to help me out when I have a device specific question.

The Raspberry Pi has captured such an audience that there's people everywhere who can help, as well as a huge amount of development going on.

The other advantage of the Raspberry Pi is that replacing the whole board is cheaper than buying the JTAG breakout for other devices (I'm looking at you, GlobalScale).

I'd love to talk with you further about the different devices around - I really do have a lot of them and I have more on the way. Support and communities for ARM devices seems to be really fragmented, and it's a shame.

I think my contact details are in my profile. Sorry for the rambling reply, it's late here.
I find it kind of awkward to hide a "Show HN" entry behind a login wall, without any explaination what to expect there.

The given "static" URL is some help, but still just shows a page filled with book covers, without any explaination what this is all about.
Care to post your slate config?
Thanks for making it easier.
Ask HN: List down best product websites you have ever seen
Sometimes we come across websites about products that are really beautiful, well designed and product information is presented in a well thought manner.

If you know any website(s) that fits the bill, please list it down. Thanks.
Identi.ca conversion to pump.io: Fail
Mailchimy?!

Well atleast it wasn't about flattening anything.
How is it "just" a window to web content? You never mind things like tabs, bookmarks, the developer console, browsing history or, say, the "Back" button, I guess.
If you have the option to use RSA SecurID or Gemalto
devices (used by Amazon), use them first.

RSA SecurID was famously compromised back in 2011: http://en.wikipedia.org/wiki/SecureID#March_2011_system_comp...

Any system where the manufacturer has a copy of the secret key on the token is theoretically vulnerable to this attack.
Show HN: NRPE server/client in pure Perl
The full, concatenated and uglified source of one-page JS web apps can easily run to >600kB. Whether my DOM manipulation library consumes 4kB of that or 35kB isn't especially important to me. I'm more concerned about features, cross browser support and familiarity other developers may, or may not have, with the API. I'll be happy to check this lib out though, the API and docs look nicely put together.
He gives an example of what can happen with voice-based authentication but not SMS. What can an attacker do, collect the text as it passes between the cell tower and your phone then use it before you get the chance to?

Or is it the scenario where they've stolen your password and your phone? If it's a smartphone, they'd have to be able to unlock it and once they've done that, SMS doesn't seem any worse than Google Authenticator.
This is a simple plugin for setting up A/B and multivariate tests with Zepto or jQuery. Hope it could help tech savvy people build better landing pages. What do you think of it?
Hipster argument is already a tired meme-argument.

Bose sucks...because they suck. I'm not an audiophile, but Bose makes some seriously bad sounding products.

Yamaha makes some seriously good sounding kit at a good price.
The History of Ctrl + Alt + Delete
RackHigh Hosting Introduces IPMI Remote Reboot For Saudi Dedicated Server
IPMI technology with fully managed Saudi dedicated server allows for better server monitoring; it is placed directly on the motherboard and the client portal. IPMI hardware integration streamlines the intelligent hosting process, allowing users to remotely reboot servers, machines or KVM on-demand in the client portal, from anywhere across the world—without having to contact a hosting provider.

System admins welcome the IPMI adaption for fully managed Saudi dedicated server; as it means they can now remotely monitor the system health, as well as control rebooting the server, gauge temperature, adjust fan speed, voltage, CPU speed and screen messages. IPMI hardware is built into the core for easy access, helping to avoid expensive downtime. Remote recovery capabilities also combat server issues, and hardware health observation supports predictive failure analysis.

IPMI with fully managed Saudi dedicated server works with any operating system, and helps decrease MTTR (mean time to repair), as it permits DBD (diagnose before dispatch). The highlights of IPMI hardware from a hosting provider include 24/7 on demand dedicated KVM over IP as well as lowered managing costs. RackHigh Hosting offers IPMI hardware with all their servers free of charge.

RackHigh Hosting is a leading global provider of a variety of hosting services. In the last decade, RackHigh has successfully empowered over 2,000 customers, helping them grow their business. RackHigh is on the forefront of offering services that are valuable to their clients. Tools like IPMI for fully managed Saudi dedicated servers improve the efficiency and reliability of a server, providing better server management; hence RackHigh Hosting’s decision is to include this service with their servers.
Useful bootstrap snippets
Listen to what he is saying.
"Hello. My name is Ed Snowden. A little over one month ago, I had family, a home in paradise, and I lived in great comfort. I also had the capability without any warrant to search for, seize, and read your communications. Anyone’s communications at any time. That is the power to change people’s fates.
It is also a serious violation of the law. The 4th and 5th Amendments to the Constitution of my country, Article 12 of the Universal Declaration of Human Rights, and numerous statutes and treaties forbid such systems of massive, pervasive surveillance. While the US Constitution marks these programs as illegal, my government argues that secret court rulings, which the world is not permitted to see, somehow legitimize an illegal affair. These rulings simply corrupt the most basic notion of justice – that it must be seen to be done. The immoral cannot be made moral through the use of secret law.

I believe in the principle declared at Nuremberg in 1945: “Individuals have international duties which transcend the national obligations of obedience. Therefore individual citizens have the duty to violate domestic laws to prevent crimes against peace and humanity from occurring.”
I don't think this is true. I think you're assuming that the vulnerability has anything to do with how your app works, when it in fact targets browser behavior. The attacker uses (e.g.) Javascript, loaded from some random site, to generate a bajillion connections to your site, each of which will bear session cookies.

The 256 byte padding doesn't help either, because of the Fluhrer-McGrew biases.
I feel like that, among Perl startups, DuckDuckGo is the elephant in the room these days.
Yeah that security course was wrong. And, for what it's worth, the "safe" ciphersuite in TLS 1.2, AES-GCM, is also a stream cipher.
Health Booster: 10 Surprising Stuff That Can Boost Your Health
"No 2FA. If the only option available is SMS or call-based authentication, do not use 2FA."

I see no problem with password + SMS or password + phone. The big problem is that some companies think that their second factor overrides the first factor, and choose a weak second factor. 2FA must be an && operation, not an || operation, for all modes of authentication. Otherwise, you are exactly right, and attackers will compromise the weakest link in the chain.
I can't help but think maybe this is similar to having only the login screen https, but the rest of the site http with the auth cookie being passed around in clear text... Initially, we thought we were being more secure because we secured the transfer of the password to the website, but in reality the auth cookie is just as important.

In the case of typical 2 factor authentication via phone - if I can reset your password via a code being sent to your phone, then you've lowered the security of your password from maybe an 8 digit password to a 4 digit numeric pin...

Of course, I would need to know your phone number, which may be difficult to guess?
Based on what he posted, either he's doing an extremely superficial comparison or he's done a proper one and realised there is actually not a lot in it when talking about modern languages.

Fair enough, he wants to continue to use Perl because it's familiar and there aren't really massive advantages to using the other languages, that's a fair point, but state that as opposed to having a tone that suggests Perl is a better language than the others, or at least back that up with something quantifiable.

On the other hand, Perl (when comparing php, python, ruby) would be last on my list because it requires the most effort to learn and get familiar with the syntax and I don't think the extra work required to learn Perl is worth the effort, because again, I think you'll actually be alright with the modern versions of all the languages.