skysight-inc/HackerNews huggingface dataset:
So, I'm the first to say that it's sketchy at best, but...
A quick google of "156.33.241.5" comes up with http://www.verifyphone.com/phone-lookup-reviews/xxx-xxx-xxxx. This lists the phone number as having been looked up by that ip address. A search of the owner's name is quickly associated with what seems to be a relative's name who happens to be a congressional page (http://www.legistorm.com/person/bio/xxxxxx/xxxxxxxxxxxxxxx.h...). Pretty easy to see from there which office she works for. My question is... is it cool here to post details? Google it yourself if not.
I am writing a bot to play Cards Against Humanity.

One trick to know if a sentence is funny or controversial that works quite well: Simply have the bot post it in an IRC channel or chat-room and count the number of responses it elicits (and give extra weight to words like "lol").

The more people fail the Turing-test, the funnier/controversial the statement.
Public service announcement for physicists fancying themselves as programmers: Learn the following topics before going any futher:

* BLAS (please)
* LAPACK
* memset
* memcpy
* 'Segmentation Fault' is not a synonym for 'exited successfully'.

Those who maintain your code will thank you for it. Sometimes it might get you chocolates.
And of course, that they are made up of people who are subject to human nature. Thus it is relevant if one can draw correlations regarding outcomes from shared traits.
This entire thread has turned into 2005 Slashdot.
Facebook To Publicize News Feed Algorithm, Starting With New “Story Bumping”
> My sarcasm detector must be malfunctioning. Who said I don't want to use his software or install anything linked on HN because they're new? I've checked out and installed plenty of things linked on HN, not because they're new, but because they're interesting. But lax procedures like the root shell install aren't good indicators.

Oh, my apologies. I think the context of your other comments caused me to misunderstand that one. Your initial comment was simply "Nginx is part of the base OpenBSD install," and I read your later comment as an explanation of that, which made it sound to me like "I'm OK with nginx because it comes with OpenBSD and not OK with the OP's server because he's not a trusted organization." I understand better now.
Twitter’s New Two-Factor Solution Kicks SMS to the Curb
What can successful open source software projects teach corporate marketers?
Doesn't matter if they share cookies. Static files reflect neither user-supplied data nor secrets in their contents, so they can't be used in a BREACH attack.
There's the Emergency Alert System [1] which has been around much longer, in various forms back to the 60s. It's mostly used for sever weather alerts from NOAA, it's the crawl you see on the bottom of broadcast TV some times. It can be activated nationally though.
The request parsing code seems to be of dubious quality https://github.com/timothyej/Shortfin/blob/master/src/reques...

From a cursory glance:

1. https://github.com/timothyej/Shortfin/blob/master/src/reques...

should be (data_len - i >= 4) since it accesses data[i+3]

2. https://github.com/timothyej/Shortfin/blob/master/src/reques...

shouldn't headers[header_count]->key also be null terminated?

3. https://github.com/timothyej/Shortfin/blob/master/src/reques...

header_count can become greater than 49 which causes a heap overflow at https://github.com/timothyej/Shortfin/blob/master/src/reques... and https://github.com/timothyej/Shortfin/blob/master/src/reques...
what language are you writing the bot in?
There is a setting in iOS to disable it...

Settings > Notifications > down at the bottom there's a Government Alerts section, with AMBER Alerts and Emergency Alerts toggles.

At least, there is with AT&T, because I recall getting a notification saying my phone's software was updated to be complient with phone company requirements, which added the two toggles.
If you are taking recommendations, I wouldn't recommend installing them at all. You could ask the authors to support a platform which has a better security model.

(Given that there are open-source and robuster-than-Windows platforms freely available.).
This is incredible and may have far reaching implications for computing.

Hopefully, the cost ratios haven't disproportionately increased as well.
For the clueless like me- https://en.wikipedia.org/wiki/Maximum_power_point_tracking
Show HN: Vraple - a wrapper around search engines
I've written about my motivation for creating Vraple on my blog: http://saltvedt.github.io/2013/08/06/searching-and-retrievin...
The Indebted States of America
Do you share my belief that documentation tends to lag in most projects?

Absolutely.

I suspect that the number of people interested in writing software documentation is fairly small: they have to have enough knowledge of software engineering to be able to understand what they are writing about, and they have to be good writers. Anyone could learn software development, but not everyone does. And anyone could learn how to write well, but not everyone does. So the set of people who learn both is even smaller.

On commercial software engineering projects, my experience is that documentation of any sort is made as much of an afterthought as possible, if even that. Unless there's some business case (i.e., obvious money) that comes from spending time on documentation, then it doesn't make it very high on the priority list. Which is unfortunate, because as a software developer, I've wasted a lot of time figuring things out that should have been documented. So money can be saved later on, even if no money is "earned" up front.

For free / open source projects, the story may be different. There's not necessarily paid engineering staff involved, so if documentation doesn't get written, I can only presume that the developers either didn't want to, didn't know they should, or felt incapable of writing it. I find it hard to imagine taking a principled stand against having good documentation.

BUT... in my anecdotal experience, I've encountered volunteer open source software developers who in fact did seem resistant to accepting offers of volunteer help with documentation. So I'm not really sure what's up with that.
Thanks! K How about now? http://www.the-collage.com/
A Pre-Launch Toolkit, django-waitinglist
The Surprising Brilliance Of The LinkedIn Influencers Program
Dismissing people as hardly worth a hacker's time is pretty self-aggrandizing, yes. Invoking a nebulous definition of hacker as a guideline for appropriate behavior is about as hip as it gets; following a trend for the sake of its title.
I know that's the reason in the article, but the parent had said it's illegal, so I figured I'd ask.
This type of a joke is a snowclone. See also,

http://en.wikipedia.org/wiki/Snowclone

http://snowclones.org/
Excellent. I look forward to checking that out.
I don't think so. Here's the snippet from the linked PDF[1]:

> DEFLATE [2] (the basis for gzip) takes advantage of repeated strings to shrink
the compressed payload, an attacker can use the the reflected URL parameter to
guess the secret one character at a time.

By encrypting the CSRF token (or any other "secret" data you want to roundtrip from server to client and back) with a random IV per request this wouldn't work. The value sent by the client would not be the same as the new token generated by the server (since each has a random IV). Even though the decrypted value of each token is the same, the values presented to the client in the response body are each different and not predictable (to the client).

[1]: http://breachattack.com/resources/BREACH%20-%20SSL,%20gone%2...
The stated goal of JBIG2 is to recognize 'characters' on the fly and compress them together. It's not traditional OCR but I wouldn't take such a hard line.
Login verification on Twitter for iPhone and Android
Could you give an example of a case where science explains something without making a testable prediction?
>> "but I instead got a pointless amber alert"

That sounds like the real issue here then. I'm sure there are others like you who found it useless but quite a lot of people who think it's a great idea. They need to offer a few on/of switches in the settings for types of alert (weather, terrorism, amber alert etc.).
Reset is not really an option when you have your chosen extensions installed and customized.
Gumroad adds Subscriptions
[Funny] The robot that instantly generates billion dollar startups
Thats OCR...
Awesome work, this project looks great. Do you plan to add support for Amazon's ELB to serve as proxy?
No, stories like that are used in B2B marketing. Sometimes you take a very well perfoming testimonial, and craft it into a story and blast your list with it. Instant sales boost, and the degradation of your list is minimal, especially if you can pound in some kind of novel insight as well.
It's very easy to fall into this mental trap. Developers are creative people by definition; we of all people have no excuse to pass the blame for our lack of success to another. It's a way of avoiding responsibility and completely counterproductive to success. Great post.
That website has a memory leak. I left it open for about 10-15min and it ate 2GB of my ram.
Python. I'll open source when I am done.
"Today, go up to somebody non-technical. Ask to borrow their computer. Visit chrome://settings/passwords and click “show” on a few of the rows. See what they have to say."

Someone that does that to me would not get a punch in the nose, but that is certainly what they would deserve.
the primary key is 2B90 598A 745E 992F 315E 22C5 8AB1 3296 3A06 537A not 5445 390E F5D0 C2EC FB8A 6201 057C C3EB 15A0 A4BC

if you search for the primary its there (at least it's on pgp.mit.edu as far as I can see)
it's the primary that you need to trust for the trust to work

For FF 23:

gpg --verify SHA1SUMS.asc
gpg: Signature made Tue 30 Jul 2013 09:32:39 PM PDT using RSA key ID 15A0A4BC
gpg: Good signature from "Mozilla Software Releases <releases@mozilla.org>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 2B90 598A 745E 992F 315E 22C5 8AB1 3296 3A06 537A
Subkey fingerprint: 5445 390E F5D0 C2EC FB8A 6201 057C C3EB 15A0 A4BC

gpg --sign-key 0x8AB132963A06537A

gpg --verify SHA1SUMS.asc
gpg: Signature made Tue 30 Jul 2013 09:32:39 PM PDT using RSA key ID 15A0A4BC
gpg: Good signature from "Mozilla Software Releases <releases@mozilla.org>"

It is however, indeed, only self-signed right now as far as I can see.
This sounds almost exactly like how traditional management is done at my job. Each "circle" has a lead "point" who distributes roles, but each person is able to make decisions about their particular part.
You're not wrong, but note that the usual random-handle-to-server-side-state still needs good random (1) that is not correlated across servers (equivalent of 3; don't spin up VMs with the same data in the random pool!) And if you have long-lived admin sessions, you may need to think about (5) too, especially if the company does not own all the hardware that employees use.
Ways to make yourself happier
They are being sued for harassment but being sued does not automatically mean you are guilty. Why, as suggested in the article by one of the defendants, have they not been criminally prosecuted for harassment if it is cut and dry?
Industry consortiums are always iffy things, but here's one thing I don't think I've seen since Lisp Machine days that's potentially very interesting:

"The consortium will offer open-source POWER firmware, the software that controls basic chip functions."
I hate this article. It's not bad in any factual way, so it's an opinion...but the hero worship is just intense.

That, and it just reminds me of the hustle startups do all the time. "We're rebuilding the internet." Come on...

Regarding the actual management content of the article: it seems too good to be true. From what I can understand of the article's explanation of "link leads" and "evolving roles" - it essentially reduces job description to a generalist, jack of all trades perspective.

That's not realistic. Once you pass that beatific startup culture point, you need structure. Structure isn't a bad thing. It's faulty managers who give it a bad rap, but from a group dynamics and sociological perspective, implementing structure in a company makes sense at scale and for maintaining/improving productivity.

Unfortunately, it's trendy to be anti-all-things-BigCo nowadays. "We need an idea for how to run our company!"..."Well, what's Microsoft doing?...Aha! We'll do NOT-THAT!"...

Personally, if it works it works, but I think I'd hate it, and I'm skeptical.
It's certainly possible to implement ELB as a proxy. We'd be open to a pull request for that.

However our focus on private cloud means we must use Nodes/Instances/VMs for every component. This is how we decouple the PaaS from the underlying cloud provider.
San Francisco, CA. Relocation Assistance Provided (within US).
Looking for a Backend Python Engineer/Data Scientist to help design and implement novel intrusion detection/prevention strategies using a technologies like Tornado, Redis, MongoDB, MySQL and AWS.
If you have data analysis background, you could additionally analyze security data and develop new machine learning models. You will work with data created using http://www.mykonossoftware.com/about-us.php
* Above all: interest in coding, security and statistics. Knowledge of specific technologies is not required.

* Desirable:
- Strong Python coding skills, understanding of Java and C.
- Understanding of and experience using common data structures i.e. trees (heaps, binary trees, tries, etc), Bloom filters, arrays, linked lists.
* If you want to do data analysis, you should have
- Understanding of and experience using common statistical techniques: generalized linear models, PCA, and basic statistics (Fisher's exact test, Binomial test, t-tests etc)
- Experience with implementing algorithms from academic papers
- Experience with at least one machine learning package e.g. Mahout, Scikit-learn

You get:
- Very competitive compensation.
- SoMA (close to downtown) location.
- Work with a great small team with smart people who look forward to coming to work every day.
- Excellent benefits package.
- Free Macbook Pro and any work-related software.
- Flexible working hours.

Please send resumes to dpaul@juniper.net
It's not really a government as you can't (ideally) force people to participate even if they don't want to (or if you do it's through tamer methods like boycotts or whatever rather than threat of imprisonment.) And it doesn't have to be a central organization. It sounds like a minor difference but it's really not.

Importantly most things that are done by government would be done completely differently and by private organizations. The point is, that if the way government does something is truly superior, then people would still do it that way. They just couldn't force people to participate or pay for it. But you could still have a non-profit with elected officials and all that, if it's really better and can compete on a free market.

Again, I'm no longer certain this is the best system as there really are things where a free market doesn't lead to the best outcome and participation has to be forced (like public goods.) But there are ways of funding public goods without a government that might work, and most of what government currently does doesn't fit in that category anyways.
Qualcomm’s Snapdragon 800 comes with always-on voice recognition
Two plugs in the same thread, come on!
Additionally, you should be serving static files from a different domain anyway so that you can get the performance gains from cookie-less requests.
My favorite part is this, under the config section:
# vim /etc/shortfin/shortfin.conf
# /etc/init.d/shortfind restart

No explanation of what the configs are, just that "its important to configure it right."

Why not put this information on the site?
>> It is not uncommon that, for a new project, we already start working for them before anything is on paper

This is typically known as starting work "at-risk". You're right that it's a great way to show you're a good supplier. Usually starting work at-risk comes with the caveat that if the customer doesn't sign the contract and/or issue the PO in 2-3 weeks then work will stop.

You are very lucky to be able to pick and choose your customers and work with only those that your company trusts. Not all industries have that option open to them.
Some parts of the mind are emergent, but I'm sure some parts or features of the mind are a consequence of the particular organization of the neurons itself, and they won't 'emerge' without careful tuning.

Otherwise Sperm Whales would simply be much smarter than us.

About conscience itself, my guess is as good as yours.
Pluralsight acquires TrainSignal for $23.6M
The way Android does Amber Alerts, which IIRC I have been getting for at least 2 years now, seems much more agreeable. That said I am surprised this just came up. I get an Amber Alert on my phone every couple of months or so.

Is this a regional based thing where it was just enabled in California so for whatever reason something that has been going on for awhile now finally hit the national news? Or is this alert format new to iOS? Basically, why haven't we heard about people in other cities complaining? (Or were they just ignored?)
Well, it doesn't go all the way, at least in this implementation (contrary to Xerox's statement, we've been told compression is not standardized), to actually recognize the symbols it finds. If it did, it would presumably make many fewer of these errors, maybe almost none since when it's uncertain it could just go with the original.
I personally like
:x
Over
:wq

Also a nice one is
:Sex

For splitting windows and navigating the file system.
> We do not normally see a character substitution issue with the factory default settings however, the defect may be seen at lower quality and resolution settings.

I might have read it wrong, but from how I understood it the default settings don't have this problem. It's when people adjust the quality settings to be lower. Am I wrong?
Tim is, in this blog, forcing you to REALLY define need, and I think "tons of marketing dollars for initial launch" is not a need, ever. What you need is to prove that, when they find the game, they'll download and pay for it. Invest $100 in marketing, and see what your ROI is. If it's high enough, somebody with half a brain would put up the money to amp up the spend.

I do not agree that these "need" massive marketing, but it does depend on the scale. The only game I worked with delivering has over 20,000 downloads and absolutely no marketing, because there are a ton of blogs that write about iPhone games. It's not a very good game, and it has absolutely 0 viral mechanics, or else I'd posit we'd have more.

We were lucky, to be fair, but I disagree that a "startup" that is making a game "needs" massive marketing dollars. It seems like you "need" viral mechanics, press, devoted fans, or an incremental ad spending campaign where you constantly re-invest the money you have.
Was this Amber Alert geo-targetted? I never even heard of Boulevard, CA, which is 500 miles away from my home.
Read this and talk about ominous: http://www.gnu.org/philosophy/right-to-read.html I think rms has other interesting articles on the same subject but I fail to find them right now, I now I read a few back in the days when I was diving into FLOSS.
I know perfectly that and infact i ever put /home in a different partition, as /boot and /var, but the big part of the config files are not in the /home but in /etc and i will lose all of them each time i have to reinstall from scratch.

Dist-upgrade is one of the main advantage of a lot of distribution not rolling, and it has ever worked perfectly for me ( i remember having a ubuntu wm with 9.10 upgraded without problem since 12.04. After that i didn't need it more).
Also thanks to that i have not to teach to my parents how to format and reinstall an os, they just need to press a button when the os itself warns them that there is a new version ready to download.

It just that mint developers are more focused on make money spamming their ads everywhere rather that implement that basic feature.
Muccccccch better! Much easier to focus on the center content.
IBM To Furlough Most Of Its U.S. Hardware Staff In Late August
Malelficus - Dissect and Infect ELF binaries
I joke slightly, but this has to be a privacy problem for people, right?
The best trick I know for "improving affect" is very counter-intuitive. Think about something good that happened to you, and really changed things. Now imagine how much worse your day (or your life!) would be without that event. Ten seconds, and presto! Your mood improves!

Edit: Affect is a noun. It means "the way you feel", and the inflection is on the first syllable. https://en.wiktionary.org/wiki/affect#Etymology_3
Not to nitpick, but I think you mean Bangladeshi Government not Bengali. I was confused when I read Bengali Government. For sec, I thought you were referencing to West Bengal government.
I guess I just view the wavefunction as an inherently multiparticle function on a configuration space. The concept of approximating single-particle states seems peculiar to me; it seems simpler just to have one state for an entire system (and the corresponding probabilities of what measurements you'll get on that system, regardless of how the system is distributing spatially). Then again, we're coming from different research backgrounds so we probably have a different way of looking at it ;)

Quantum entanglement doesn't seem to be particularly unusual any more so than the fact that electron-electron correlation must be taken into effect when computing energy levels with some kind of QMC. All particles within a quantum system are correlated, so entanglement just kind of falls naturally out of that; I'm not assuming any kind of locality. I suppose what you're saying is that collapse is defined as the process of "fixing" these correlations?
It drives me crazy it can't remember where I'm at when I refresh and then automatically collapses the code, too.

If you know a way around that, I would love to know.
Wow, that might be the absolute worst format for an AMA I've seen.

Flat discussion boards for what is a nested method of communication makes this almost impossible to follow.

How does one easily see the answer to a question if its not in a nested, or other attached, form?

It seems like you'd have to read the entire thread to see if a question has been asked.

I really wish they had put some thought into this before they started as this could be much more useful with just some basic changes.

</rant>
There should be a key that has a retractable sleeve over it which gets pressed up into the handle portion of the key as you slide it into the lock, basically shrouding the key cuts from visibility at all times.
It looks like they used the null byte as a separator with the assumption that users couldn't submit a null byte. So attacker could submit a value like foo\x00user:admin and it would be serialised as user:bad\x00key:foo\x00user:admin and deserialized as key:foo, user:admin. that's my takeaway from the patch. I haven't played with it so I could be off track.
What is the status of the old T1/T2 SPARC chips? Those were similarly open-sourced, yes?
I wouldn't use Deis because of its tight integration with Chef. (I abandoned Chef in favor of Ansible) But for Chef users, it looks like a great project, and am glad to see an expanding community of Docker-based tools.
If that's what he means, he's wrong. At least on iPhones, there is a specific setting for AMBER Alerts, separate from Emergency Alerts.
The Fallacy of the Wisdom of the Crowd
It's not out of the question actually. The speed that earthquakes propagate can give those not at the epicenter a handful of seconds to take cover under a fast response alert system. Those who live in earthquake prone areas have probably experienced watching a live news broadcast and having the anchors react to an earthquake a few seconds before you felt it yourself.