skysight-inc/HackerNews huggingface dataset:
Considering that I upvote pretty much every gwern.net article I see (the guy rarely disappoints) and that there's probably a fairly cohesive Overcoming Bias/Less Wrong demographic doing the same, how long will it take before we're banned as a voting ring?

(Anyone selling futures for that?)
Yes we wanted to give you the flexibility to see what we are installing on your servers. We understand the importance of checksums and will be realizing checksums for our agents in future releases.
Now just figure out the ratio of gas-cars to Teslas on the road, and we can decide if that is meaningful.
Show HN: Octopus - Marketing Apps Community
Probably related to the fact that the waitress can justify no tip with the thought "they might have forgotten to leave one". A short tip sends a message.
The right attitude is to not throw shit to the wall and see if it sticks, but to think of an idea and commit to it. With commitment comes the responsibility of doing right by your users, finishing your idea out and not giving up two weeks later. If you aren't prepared for it, if you aren't committed, if you are already nearly burned out from the work you've already put in and have no traction to speak of, well then maybe just leave it alone.
2:26.
While the users would be paying the price, it would happens because you actively made the users suffer because you were not paid enough.

Even sitting on it is immoral, but in a lesser way. Users would then only lose in the case someone more malicious finds the same problem.
I believe they mentioned in one of the Dragon's Den specials that something like 75% of the deals fall through during due diligence.
Can you point to such inanity? I've only read a couple, but he just seems careful to me.
So a lot of people here hate this. I'm not a huge fan, but I want to understand the right way to solve the problem. The problem I see with the APIs I work on is that automated integration tests are hard. I would love a way to answer the questions "Am I sending a request in the right format?" as well as "Am I going to receive data in the form I expect?". If I had a JSON schema or something, I could include those tests in isolation rather than in a big system test environment.

So it sounds like true REST is supposed to solve that. How?
The news articles aren't the best source for technical specs; Galileo does indeed have all of those ports. From the FAQ (http://www.intel.com/support/galileo/faq.htm): Intel® Galileo includes native Ethernet, SD, USB Host support, USB Client support, RS-232 serial port, and 10 pin JTAG ports. It also includes Arduino* shield connectors compliant with the Arduino* Uno R3 connector definition. Finally it includes a native mini-PCIe connector for the addition of Wi-Fi (for example).
Kind of an unfair statement imho. I work for Tumblr, and we run independently still. That being said, a companies policy does not reflect every employee, especially when you have a company that employees over 11k people.

I think it's great they are making a policy change, and making it retroactive even. My opinion is facing the community and the perceived entitlement people have at getting something for reporting a bug. I applaud those that have policies in place, but the community is shining a bad light on itself with the outrage.
No, if you read more closely, you'll see I'm the kind of person who likes to get paid for being a dick. My comment is a bit tongue-in-cheek, but the moral questions it raises are interesting. Well-being of company vs user. Short-term user security verus long-term user security. I don't think you can say categorically that it would be wrong, in some cases it could play out better for the innocent users. However, I don't think I'd really be comfortable selling an exploit to any party other than the company, but as mentioned in another of my comments here, the auction could be a bluff (especially if it's a hidden auction.)
Sounds like a personal problem.
I think the US government is engaging in a massive overreach, and I think that other countries have an opportunity to develop sane data protection laws. Normally, when you want data on one person, you get a warrant for data on that person. The US government, however, has decided that the rational move is to demand indiscriminate access to the records and communications of over 400,000 Lavabit customers.
It's why the word Incognito in Chrome for iOS has an asterisk next to it:

"On Chrome for iOS, due to platform limitation regular and incognito* tabs share HTML5 local storage, which is typically used by sites to store files on your device (client-side caching) or to provide offline functionality. This means the same sites can always access their data in this storage in both regular and incognito* tabs. Incognito* tabs will still keep browsing history and cookies separate from regular tabs, which are cleared once those tabs are closed."

https://support.google.com/chrome/answer/95464?hl=en
If you depend on any of these:

Issues: hard to fix a bug you can't read about

Pull Requests: code review is a lot less fun without a tool for commenting, without something triggering your build server to verify each commit, etc

Releases: distributing builds to QA or users is all of the sudden more awkward than you're used to

It's not really about pushing and fetching code. :-)
I wonder if they will be paid back any funds that were paid to the production company.
If the funds had been proven to be ill-gained, then the defense would already be over (since proving that funds are ill-gained both requires proving the crime and proving that the funds came from the crime.)

So any meaningful proposal here isn't about actual ill-gained funds, its about alleged ill-gained funds, and that's the source of the problem.
Yahoo "owed him one" when he reported the vulerabilty.

When they traded a shirt for the report Yahoo was implying that they no longer owed him anything, it was a fair barter
Steve Jobs Teaches Andy Warhol to Use the First Apple Computer
If the chance of a catastrophic event happening is one-in-a-million, then it is equally likely to happen on the 13th and on the millionth coin toss.

> Assuming that the normal rate of battery fires after collisions is one per million, the probability of observing such a fire after only 13 collisions is rather low.

What you're arguing is that the probability of it happening on or before the 13th time is less than it happening on or before the millionth time -- Which is self-evidently true of _any_ probability, and is a much weaker argument.

> perhaps the rate is not one per million

This is much closer to the argument you should be making. I.e. "Given that a purported one-in-a-million event occurred after only the 13th test, what is the probability that their estimate of one-in-a-million is accurate?"

(I don't know the math to answer that question, but I hope somebody that does will come along and chime in.)
It's a big idea of Overcoming Bias'[1] Robin Hanson[2] along with a proposed governing method based on it called the futarchy[3].

[1] http://www.overcomingbias.com/tag/prediction-markets (easily one of top 5 blogs on the Internet)

[2] http://hanson.gmu.edu/ideafutures.html

[3] http://hanson.gmu.edu/futarchy.html
>Real karma would be something bad happening the employer

I think she did something bad to the employer by making this video public. I now have the impression of an employee who was just a bad fit, but didn't realize it and ended up taking it out on the employer who had to defend himself on Gawker.
Yeah, because we never have conference calls where we have to be there but don't really have to do anything besides listen for our name.
Show HN: Dynamically resizing swipe library for Android
I love how you're mocking HN and the parent post at the same time!
Hacking Your Keyboard in Software
14 minutes, 27 seconds for all 5 levels. Bah, should've done better. On the other hand I just woke up.

I wanna see one of these in Python.
www.startuptabs.com. They have a chrome extension where their users see a random startup site every time a new tab is opened up.
This is just our "MVP". We have a lot more planned:

- Better trim organization.

- Actual data on trims (MSRP, major trim features, etc).

- Proper galleries.

- Aggregation of YouTube video reviews, blog reviews from around the web, Edmunds reviews, etc.

- Aggregation of user-submitted photos of models / trims from Flickr, etc.
> It would have been better to give them nothing rather than a "cheap" gift?

Yes. Giving nothing doesn't give any indication of value - maybe the work is very highly valued but it's not Yahoo's policy to compensate. Fair enough.

Giving a cheap gift attaches a very particular value.

There is a body of research on this, e.g.
http://ideas.repec.org/p/zur/iewwpx/007.html

"rewards undermine the intrinsic motivation of volunteers."
"a large literature in social psychology [emphasizes] that external rewards can undermine the intrinsic motivation for an activity"
At that point you've stopped even pretending to be a "security researcher"
Nothing like figuring out another way to kill your browser :)
its only contempt when its directed at the powers that be!
It's problems like 5 that make me sad that IE <9 doesn't have Array.prototype.reduce.

return i.reduce(function(prev, next) {
if (typeof(next) == "object" && next.length) { return arraySum(next) + prev; }
if (typeof(next) == "number") { return next + prev; }
return prev;
}, 0);

Something that simple needs to be shimmed on earlier IEs. In fact, I had to look up Array.prototype.reduce for this since I usually use Underscore's. Javascript problems...
After 180 Websites, I’m Ready to Start the Rest of My Life as a Coder
No, because in the car metaphor the person with the unlocked door is not putting thousands of innocents at risk. Now if he had an unlocked door, and the sign outside his building happened to read "Joe's Firearms and Ammunition" then forcing Joe to be more careful with his security, no matter if it's unpleasant for Joe, is a good thing for society on the whole. Doing that by auctioning the location of his store to thieves is obviously unethical.
There is no such thing that could never happen again under that thought process. Google Boltzmann brain to see what I mean.

If never is to have any meaning at all, it is in situations like this.
Communist Propaganda is Destroying the Middle Class
Google Acquires Gesture Recognition Firm Flutter
I'm actually not mocking either the post or HN. If I am being a little snarky, it is towards the thin skinned who zero in on any comment they don't like and then launch a tirade in hopes of, essentially, group bullying. It happens with increasing regularity.
You are right there are two views, but they are reconcilable.

I think the problem mostly lies in conflating "token of gratitude" with "gratitude". The token is a cheap thing, and has some small monetary value. The gratitude itself is a much more valuable thing, for both the giver and the receiver. Reporters are motivated by doing the right thing, and perhaps getting some recognition for their contribution. The recognition has two parts: recognizing cleverness (you caught something others missed), and recognizing honor (doing the "right thing", reporting it to the affected party rather than exploiting it yourself).

You can't put a price on cleverness and honor. And if you try to, and you come up with $12.50, then you're an idiot. The only thing you can do is recognize it, and show gratitude for the help.

What the OP tried to do was show gratitude and recognition with a token, and some recipients confused the token for the gratitude. It doesn't sound to me like the giver was confused! E.g. he wasn't saying "Here, let me pay you for your time, eliminating the need for us to recognize your cleverness and honor for the cost of a T-shirt." Now you might say that the token was poorly chosen: there is a reason people invented trophies, items that are totally worthless other than as tokens of accomplishment. It's because the recipient will NEVER confuse a trophy for the price of the accomplishment behind it.

Personally, I think a cool little useless trophy would have worked better, and certainly no gift certificates! Being named and honored somewhere on the Yahoo website would be great. Giving a small cash prize, like $1000, would be a classy move.

The bottom-line remains: there was nothing fundamentally wrong with the T-shirt-as-trophy, apart from the (apparent) risk of recipients confusing it for T-shirt-as-payment.
I'm a bit disappointed that it doesn't award points for my heavy use of regex and obscure variable names.
I tried to set up an account. I chose the log in with facebook option. It asked me for my city and mobile phone number. It wouldn't let me sign up without giving you a phone number.

Has that always been the case?
Typed Clojure Game of Life
Isn't that ransom / hostage-taking?
nice stuff but this is plain wrong!
// return the file extension (with no period) if it has one, otherwise false

its like returning error codes in C for errors
Business Card Ray Tracer part 2: Go vs C++
I seriously don't understand how you expect people to consider acting for your cause when all you do is offer it in a hidden agenda of some tech news. This is full of dark patterns.
I won a startup pitch competition. Now what?
> separate tasks done for free for fun or just to be nice, from tasks done for money

Sure. But given the lack of a formal bounty program at Yahoo!, it was a poor choice to pick them as a place for "tasks done for money"
I find the hitman idea rather silly. I will preface this by saying, that I do think there are, in some organized groups, probably such thing as a hitman. A loner, on the internet...don't count on it.

So, you pay $40,000 up front. That's then mine to walk away with. Or heck, I can then threaten to go to the cops unless you give me the other half. You surely wouldn't go to the cops about this little scam, right? You obviously don't have the fortitude or skill to do it yourself or you wouldn't have paid me, so I'm not worried about you coming after me. That would only leave you to hire another nonexistent hitman, to come after me, who would without doubt be a cop or fellow scam artist.

Seems like this isn't a good idea to begin with now, doesn't it?
I've read the other replies and my answer is pretty different. I think this has to do with a fact that up until 24 months many toddler-targeted things are spoken of in such fashion:

- Clothes are sized in months 0-3, 3-6 etc..
- During doctor visits you discuss developmental milestones expressed in months.

Etc. You get used to it, since at that age the development of a child is extremely condensed and years simply don't provide enough resolution.
Little late for that ain't it?
You intentionally omit "by using a technical solution provided by the investigating agency." Moreover you completely ignore the initial order where they don't mention that they will accept what Lavabit can provide them but expect help in installing the device.
Asking that timers be identifiable. Can you imagine if setTimeout or setIntervals were user facing in the browser in some kind of list that pops up?

The entire debate about it being async or not. Nobody disputes that JavaScript is an async language, but it only runs in one thread. And here the discussion about it not being really async so it ought to be renamed, is such a silly bikeshed that goes against much of what is considered async in other widespread platforms (JavaScript and ActionScript being notable examples).

The being able to cancel a setTimeout. Imagine users being able to kill asynchronous requests in the browser. Being able to cancel an HTTP request that's modifying the server side database state. Canceling an asynchronous line of execution could create all kinds of unexpected problems, and then exposing that to the user?

The whole being careful thing in itself is insane. You can already create plugins that break shit. You can already create plugins that block. You can already create plugins that rewrite files in the user space and do god knows what harm. That's what comes with exposing a plugin system that isn't sandboxed. And vimscript and the python you can embed in a vimscript is not sandboxed. It's the plugin developer's responsibility to not do stupid shit and the user to not install stupid plugins. And there already are stupid plugins, I've uninstalled some myself.

That's the inanity.
n % 1 == 0
I think, from a practical standpoint, if "never" means "never before the heat death of the universe" then I'd be pretty satisfied. Pure math is truly wonderful (I love theoretical stuff) but at some point it does have to shift back to the practical realm.
When you buy a piece of bleeding-edge technology, you're kind of signing up for a few problems that require attention. Goes with the territory. The real question is, once you identify a problem, how is the company doing at fixing it? If they're giving excellent service, you're going to have a high overall satisfaction level.

And may I just put this offer out there: if there are any millionaires who are unhappy with their (unburned) Model S, I will be glad to take it off their hands for just $99.99 plus shipping. (Who am I kidding? I'll cover the shipping myself.)
I didn't say I liked it.

When you fight on principle, you have to decide just how far you're willing to go.

The antagonists here will make the personal cost to Levison, right or wrong, for better or worse, extremely high.

Levison appears to have the cojones to take the fight all the way. For now.

The trap of fighting on their terms, which I also fell into, is that you're in the mud too. Then is a war of attrition. Absolutely exhausting.

But all fights are rock, paper, scissors.

I decided I can't win on their battle field. I stepped back, reassessed, and am now fighting a battle I think is winnable.

(My issues are election integrity and open government.)
A new form of encryption could make practically unhackable code
This is brutal, but very true. Now, according HN etiquette, this comment should be downvoted to infinity for supporting you, too.
As the article notes, that is a rather infamous case that is a large part of the reason former Illinois governor George Ryan was convicted, as it uncovered a cash for passing grades on commercial driving tests scheme. It was a horrible tragedy.
Steve Jobs Quote - Think Different - The Crazy Ones
Not sure how robust it would be, but you can set a default shell that would be a simple script requiring log in before launching bash. That would give you both.
Yes, always hire your own professional liar first.
I got 11 minutes and 14 seconds. Is that slow? The answer to my last solution was like this:

function arraySum(i) {
var total = 0
for(var x=0; x < i.length; x++) {
if(typeof i[x] == 'object') {
arraySum(i[x])
} else if(typeof i[x] == 'number') {
total += i[x]
}
}
return total
}
3:15
Hoe zorg je voor een functionele inrichting van je badkamer?
9:10, had to Google a bit for type checking, and I had forgotten the proper syntax for a string split. :-/
I think the judge is lying. Every telco in the USA has been paid for providing LEOs with call detail records, which are completely equivalent to the output of such a device. I'm sure the bigger telcos like VZN and ATT have been paid development costs as well, which speaks to either ignorance or deceit on the judge's part.
Which is a good point - as it gives illustration to mikeash's point in this same thread. This doesn’t make logical sense at all - but there are practices based on it.

And in this case both the "a token of our appreciation" and "short tip" practices could been "meant", and were as a matter of fact taken as "meant" by the sender and receiver respectively.
I too shuddered at this instruction...
You're absolutely right. That's why I would never use Yahoo for anything important of mine. Having such an incentive in place is a crucial measure in today's security climate.
One major item of note that the news stories haven't picked up on: the Galileo board itself and all of its documentation, schematics, BOM, etc, are all Open Source under CC-by-sa. See, for instance, the schematic at https://communities.intel.com/docs/DOC-21822 , the BOM at https://communities.intel.com/docs/DOC-21823 , and the datasheet at https://communities.intel.com/docs/DOC-21831 .
I only did one time: 8 minutes and 57 seconds, for sure the next try will be way easier.
Understanding JavaScript Callbacks
"biased". The word you want is "non-biased".

I literally* don't understand how people mess this up. If you were talking about a list of projects that had not yet been submitted to one of those lists, would you say they are "non-submit"? No, obviously you would say "non-submitted". If you were talking about books that had been printed by a publisher, would you say they are "publish"? No, you would say "published", because it's a past participle, and that is how we say past participles in English. This is not a prescriptive/descriptive thing: every English speaker over the age of 5 talks this way. But for some reason "bias", a completely normal verb, causes people to throw out everything they know about English.

So, stop it.

/rant

* Yes, literally.
Apiary's awesome, but it's great to see open-source alternatives. Every closed-source, lockin-producing service I use is another thing to worry about.
Yup. There is no argument that modern systems are more flexible, but that flexibility comes at the cost of needing to understand a vastly more complex system.

I recently discovered an emulator online of my first 8-bit computer (the Compucolor II), and I was amazed at how simple it was to use (draw graphics to the screen, read from the keyboard or disk etc). Whilst you have to write all of the high-level processing yourself, the actual low-level magic is right there at your fingertips. Want to set a pin on the serial port - not a problem, the I/O is memory mapped, and the address you need is in a table in the 100 page manual that came with the computer. Done! Compare that with today's environments - find out the API needed to access a serial port pin (if it even exists!), pull in the system headers and libraries necessary (after figuring out which are used!), modify your build system to use them, and then run.

The beauty of Arduino is that it takes you back to that bare metal simplicity. It makes interfacing to the real world very easy. If you want to run a webserver it's probably not the best choice, but if you want to switch off your washing machine because a sensor has detected that a pool of water has formed on your kitchen floor, Arduino is so much more accessible for an amateur. I really don't understand where the manufacturers are going with these boards...
His hair is unnervingly tall
Tried that first, but that will fail on the "false" case.
If using chrome, the Chrome Toolbox has a handy mute all tabs feature. I have it muted by default.

https://code.google.com/p/chrome-toolbox/
"other forms of online gambling such as poker are not"

That, of course, depends where you are - in some countries online gambling is completely legal.