skysight-inc/HackerNews huggingface dataset:
Are you talking to the militant hacker crowd?

Hey, aren't you? I do believe we call that a "draft".

http://www.insightcrime.org/news-analysis/are-mexico-drug-ga...

http://blogs.wsj.com/digits/2013/09/18/rsa-russian-speaking-...

OR: An unhealthy economic incentive to release [made-for-prison] software onto the public writ large. (And if the software isn't sufficiently modular, what kind of unwanted surveillance comes "for free" – or "batteries includes"?)

A dialogue:

A: "What did you do in prison?"

B: "Started a hacker school that wrote the surveillance program which monitors this very traffic intersection."

A: "What were you in for?"

B: "Drunk driving; caused an accident."

A: "Does it see my concealed metals?"

B: "If you move fast enough. We had to make first launch!"

Will this tease out public opinion on "rehabilitation"? Or will it show how we really feel about "bootstrapping"?
You are mixing the shell and the terminal. (But you're probably right that neither of them is good on Windows.)
Code is here for anyone interested

https://github.com/paf31/trypurescript
Prison food contracts are usually awarded via a bid process. If the two facilities are included in different contracts, which is not unusual, then the price bid by Sysco could very well be different just based on market conditions at the time of the bid. Also, when Sysco and competitors enter their bids they take freight and delivery conditions into account. When I enter similar bids, I sometimes charge a little extra to cover the drivers' time when a particular facility takes too long to unload. Some places just aren't run as well as others and it costs more to deal with them.
>Science can go through similar periods of stagnation, and currently, it seems like we might have hit upon one.

Most of the recent criticism of science is related to the biological and medical sciences. I would disagree that these fields have hit on a period of stagnation. On the contrary, I believe that the biomedical sciences are in a period where there is a massive amount of recently generated data and innumerable ways to find correlations among these data. The data themselves are also recorded in a wide number of different formats and data from one paper might be difficult to compare to that from another (giving possibly unwarranted suspicions of non-reproducibility).

In the midst of this maelstrom of data, individual scientists are trying their best to make sure they maintain their publication rate and grant funding. As a consequence, findings are sometimes published "too early". While one might criticize this trend to early publication, the reality is that it is sometimes impossible to know exactly in which direction the "final answer" (if there is one) lies. Retaining data until one had found the complete and final answer to something is also a disservice to other researchers.

I appreciate the public debate on this matter and hope it ends up working both ways, i.e. the public and science journalists get to understand better the constraints in basic research, and the scientists are given a little more support to undertake more thorough studies.

With regards to the latter point, I would refer you to a review on studies involving mouse models of Alzheimer's disease [0]. In that review, the argument is made that almost all studies on this topic are under-powered (in a statistical sense), and most labs should be using 5 to 10 times more mice per experimental condition. This would more than double the cost of each experiment. For constant funding, this would mean halving the number of labs studying Alzheimer's disease, which might not be such a bad idea if the data coming out was more reliable as a result.

[0] ‘Too much good news’ – are Alzheimer mouse models trying to tell us how to prevent, not cure, Alzheimer's disease?
http://www.sciencedirect.com/science/article/pii/S0166223610...
From what I read about his personality, I can't see him as anything but either this or he takes over at CEO.

Microsoft is an interesting thought. He could certainly wrangle the reputed "warring factions" but would he want to? If he is as individualistic as they come, he'd want to start out as the de-facto leader and visionary. And he has the funds to do it. Why bother with Microsoft?
They have not done serious work yet with driving in snow and other inclement weather conditions, this is the phase they're entering into as we speak. They've suggested their cars will be ready for the public in 2017, I guess we'll see if they meet this deadline or not.
Your comment is sadly-humorous in two different ways. Well played!
Cloudcrack has a 40-core FPGA solution that allegedly can break MS-CHAPv2 in a day[1]. Looks like they charge $100/lookup[2].

--

[1] https://www.cloudcracker.com/blog/2012/07/29/cracking-ms-cha...

[2] https://www.cloudcracker.com/dictionaries.html (in the mouseover text in the graph for brute-forcing DES keys).
I agree that a kickstarter for science would be an interesting experiment. It would be quite a change for scientists, if they have to propose to the public instead of experts and politicians.

I'm in Germany, so no direct experience with the US system. Nevertheless, the symptoms are the basically the same here.
There's a brilliant technical paper written on this subject: http://eprints.soton.ac.uk/340382/

The authors' (completely algorithmically managed) team managed to get a rank of ~25000 when competing against 2.5Million human players. Pretty damn good if you ask me.
This paper is about Fantasy Soccer though. However the same rules apply to Fantasy Football too.
There's a fine line between prisoner and slave.

https://en.wikipedia.org/wiki/UNICOR ->

Under current law, all physically able inmates who are not a security risk or have a health exception are required to work, either for UNICOR or at some other prison job. Inmates earn from US$0.23 per hour up to a maximum of US$1.15 per hour, and all inmates with court-ordered financial obligations must use at least 50% of this UNICOR income to satisfy those debts.

I think work and education/skills are key to being a healthy human. I just worry that prison labor could easily cross over from being rehabilitative to being exploitative.
I help people make things using the Android OS - things that are not phones and that do not include the Google ecosystem. I have also been involved with using code from AOSP to create Android compatibility for non-Android OSs and in convincing OEMs of non-Android system to use it. In my experience I have traced the boundaries of what Google allows people in general to do, and their OEM partners to do with Android.

This is roughly how it goes: If you want to use AOSP for anything, including competing with Google, go for it. Google won't sue you, and won't even FUD you the way Sun did and Oracle continues to do if you want to use an open source Java implementation.

If you make Android devices that use Google's logo and proprietary code and ecosystem, you can stuff Android full of crapware that your carrier partners want, and that your product managers delude themselves into thinking gives you "differentiation," even though Google really does not want that to happen. What you can't do is compete with Google, or take a cafeteria approach to using Google's apps and ecosystem. You are in or out. No in-between.

AOSP is Apache licensed and Google adheres to the letter and spirit of that license. Both B&N and Amazon compete with Google using AOSP code and there has never been a hint of FUD aimed at them for doing so.

Many China-market phones with China-based ecosystems are based on Android. Here is where the lines blur a bit: China-based Lenovo gets away with making AOSP-based products for the China market with non-Google ecosystems and they make Google-logo Android phones. Somewhat famously, Taiwan-based ASUS was slapped down by Google for trying to do, as far as I can tell, exactly the same thing. There are also Google OEMs who make OPhone handsets. So Google hasn't been 100% consistent regarding OEMs with one foot in the mainland China market and one foot in the Google ecosystem.

It also appears that OEMs licensing other OSs, notablely Windows Phone, get no retaliation from Google.

I also dealt with Sun, trying to get a license to use Java in a VoIP-oriented OS. They were utterly opaque bastards about the licensing process, cost, etc. and about their position regarding Java patents and open source implementations. to the point where we concluded they could go to hell and we would use an open source Java implementation. Using AOSP is by contrast FUD-free.
1. The ability to develop a solution within the tight confines of the problem.

2. Being able to recognize a bad design and improve upon it.

3. Not wanting to re-invent the wheel every time the code base stinks.

4. The understanding that no problems in general might be new, but some specific problems inside a particular situation might be.

5. The importance of listening and taking into account the solutions others provide.

6. Being able to deliver. I have met too many full stack rockstars whose code never works and is as tight-coupled as melted cheese to bread.
> I never said we have high social mobility.

Yes, you did.

> People today are generally either lazier or less imaginative. I'm not sure which.
Scanii.com (https://scanii.com) practical API for malware/virus detection. Low thousands/month and growing quickly, profitable from the beginning and we effectively spend $0 in marketing. Honestly, there hasn't been an easier time to do a startup or side project - I know that's cliché but it isn't. If you know how to consume cloud services you can keep your operating costs amazingly low.
I have an MBA, fwiw.

Dalton leaves off what I'd consider to be the biggest red flag: risk aversion. Many MBAs are risk averse. They are career-track professionals. They are box checkers. They are bullet-point collectors. A lot of them are extremely smart, and the ones from the top-tier programs are among the hardest working sons of bitches you'll ever meet. These were the kids who ground their asses off in high school and undergrad, and who will (generally) land lucrative, but safe careers continuing to apply the same grind-and-optimize strategies that got them through school. They do well in regimented, structured environments where there are frameworks, processes, known inputs, etc. They flourish in career tracks that resemble academic environments: where there are "grades," tracks, clear progression, etc.

A lot of engineers are the exact same way, for what it's worth. They don't have a monopoly on risk-taking any more than MBAs have a monopoly on risk aversion. Nevertheless, as a general rule, an MBA is not a degree one pursues if one is seeking risk or adventure (and I'd argue that the same could be said of any master's degree).

I'd almost require an MBA of a CFO, COO, or CEO that I'm bringing on board to scale up a business or take the helm of a mature business. But I would be a little uneasy about an MBA's founding a tech startup from the ground up. That's not to say that MBAs can't do the latter, or are necessarily good at the former. But there's a correlation. (MBAs are perfectly capable of starting non-tech businesses, however, and often do. But to found a tech startup, the MBA would really need to be technical to a high degree.)

A startup founder needs to be risk-seeking, and to whatever extent he or she has collected a bunch of degrees, that's a pattern of risk-averse behavior. It's an indicator. I still think such a person could make a great fit working at a startup, provided the entitlement issue isn't there (which it really is for a lot of folks, owing in large part to the expense of the degree). But as a founder? I'd be a little leery.

MBA programs are changing these days, and it needs to be said. A lot of them are adopting Lean Startup methodologies, or refocusing on innovation, or encouraging and teaching entrepreneurship (to whatever extent the latter can be taught, which I'd guesstimate to be maybe 50-60%). Today's MBAs are not your grandfather's MBAs. They're not the 1990s tech-bubble MBAs, either. Nevertheless, a lot of them are not risk takers.

The ones who are? Give them a fair shot. You'd be surprised. They are incredibly smart, well trained, quantitatively analytical, and make great marketers, biz dev & corp dev types, CFOs, and operations managers. Few of them walk into startups expecting $200k + signing bonus + equity the way they might have 20 years ago. That stereotype is out of date. But if a well-qualified candidate shows up at your door with realistic expectations about the job, the title, the compensation, and so forth: I see nothing wrong there. He or she has self-selected out of entitlement issues. (On the flip side, spotting the entitled ones -- MBAs or otherwise -- is fairly easy.)
I saw that a few days ago. It's disgusting. I couldn't even read the article because of the images.
What a Successful Print Magazine (Offscreen) Makes in Dollars
I have to disagree. Ubuntu is a great way to get to know Ubuntu. Debian, while _incredible_ has somewhat the same flaw, but in its case is worth the tradeoff.

Slackware or Arch are great ways to get to know Linux.
Learn Emacs: Zsh and Multi-Term
Chess 2: The Sequel
I think it makes sense to use tax money for science which benefits the general population. The distribution is tricky of course, but it is with all tax money.
No, it was not.

>Visitors were prompted to execute a signed Java applet that in turn launched an attack that enabled the team to use privilege escalation exploits and thereby gain administrative rights.

This was purely a social engineering attack. Even if their JVMs were all fully up to date, they would have fallen victim to it. Assuming this test was done recently, they would have to get through this prompt: http://www.mendoweb.be/blog/wp-content/uploads/2013/04/self-...

If this test was done a while ago, they would still have to go through a similar prompt, though it didn't have the scary red letters back then.

This is pure user ignorance in this case, especially considering this was supposedly an organization that deals with computer security.

That being said, however, any good organization should be monitoring things like Java applets accessed by employees, and they should receive alerts upon events like "EXE or binary type file downloaded by a Java applet" (though this kind of signature can possibly be bypassed if the pentesters were smart).

I work for a medium-sized company, and we would've caught something like this fairly quickly, even if the user did get infected. We check a list of all Java applets loaded by users every 12 hours. And we have various rules in place to look for malicious applet behavior, in addition to our regular screening.

Disabling Java applets is the safest solution, but unfortunately many enterprise applications still run as Java applets or JNLPs.
is possible to install Gala WM / ElementaryOS on top of Debian?
I don't understand why the thing is roughly the size of a phone...
I am confused, do you mean that in the general case? That I should do that experiment right now and because wireshark won't show anything on my systems, that means whatever is going on with his systems is made up?
The sad part is that 200 MB is considered something ... that it is a sale point is even worse.

Mobile has stagnated brutally.
The following question: should you give a f*ck?

As a hacker, I'm not even remotely interested in testing an amazing database of users on other websites. It's Adobe, so you've got your fair bit of users that know their stuff and have already changed their passwords everywhere. Adobe's target audience is developers and designers. Apart from the designers, we have a very small bit of audience which you can find on DeviantArt, who will merely use Adobe to make some mainstream artwork and gather likes. But then again, why would a Facebook/Twitter/Instagram/DeviantArt combo be of any interest for me as a hacker / evil guy?
Well, using vi seems to have worked out pretty well for him: http://www.paulgraham.com/bio.html
Not the OP, but http://www.fmcsa.dot.gov/facts-research/LTCO2010/2010LargeTr... - Figure 2 and 3
I have never seen these on the roof, however, I have seen them posted on telephone poles and light posts all throughout Chinatown

http://www.washingtoncitypaper.com/cover/2009/0213/1.jpg
Aside from some topic selection issues, you might want to consider passive vs active topics. Can't do any activity while awake that's more passive than watching TV, almost anything else is more active.

I'm not too interested that a coworker watched someone else exercise on TV. On the other hand, start talking about experiences on local medium distance hiking trails, and I start listening...
It could be trivially implemented in Lua as a pre-processor. Lua has lambdas, higher level functions, lexical scope and tail call elimination.

The main problem is that it doesn't have a ternary operator, making conditional expression problematic to represent (you have to wrap an if statement in a lambda called on the fly).

For something more fully featured, see [0], it is written in MoonScript (which itself compiles to Lua), and the parser depends on LPeg, but writing a S-expression parser is rather easy.

Edit: There's also lcl [1], which is implemented in C. Written by lhf, one of the Lua authors. From the test files, it looks very basic.

--

[0] https://github.com/leafo/moonlisp/tree/master/lisp

[1] http://www.drdobbs.com/open-source/lua-an-extensible-embedde...
Yes you can. By spewing them on the audio interface, which wireshark doesn't monitor and decode into packets, instead of onto a network interface, which is easily monitored. Especially when there is no reason to involve the network interface at all.
Ask HN: what open source project do you want on your tombstone?
If you're an OS author, what are you most proud of?
I never clicked with Unity so I tried Linux Mint with Cinnamon. Don't regret it one bit.
I've also switched to Debian, back in August. I don't like Unity, but the deciding factor was the rolling update characteristic of Debian Testing. Ubuntu just plain breaks in every semi-annual update, and I missed the rolling aspect of Gentoo (which I used before Ubuntu).

Debian testing is reasonably up to date, updates continuously and requires much less maintenance than Gentoo. It's about as hassle-free as Ubuntu. Ubuntu does have some useful PPAs, but if you pick the right version, you can just add an Ubuntu PPA to Debian and it will work.

I could live without some of the political aspects of Debian (there's no Firefox in the default repos???), but they are really just minor hassles. Import a couple PPAs, and you are rolling.

For those of you looking for an alternate distro, my shortlist was Debian Testing and Arch Linux. Arch does look like it has a killer community: techie and helpful, lots of available documentation, much like what I remember from Gentoo. Debian won because I'm less inclined to workstation tweaking and more inclined to real work nowadays.
Haven't done the math, but it seems like I could check my GMail pretty regularly on 200mb/month, no? For that and the occasional I'm-lost-helpme-GMaps situation, I'm somewhat tempted by this offer.
>I wonder who out of today's major players could be the next big thing.

ElementaryOS is doing good things with the Linux desktop and should be a contender.

http://elementaryos.org/
Not too easy, but not as hard as people expect either. The App Engine SDK is open sourced. This is the layer that connects your code to Google's infrastructure. There are a couple of projects that have taken that SDK and modified it to connect to MySQL, MongoDB, memcached, and so on. They allow you to run your GAE app on your own server, without changing your code. I tried typhoonAE a while ago and managed to get my app running on another server with about a day of work.
This explains more. https://github.com/paf31/purescript

It looks nice and simple to use.

I guess it is similar to these:

https://github.com/faylang/fay/wiki
https://github.com/evancz/Elm
https://github.com/puffnfresh/roy

This one isn't mentioned much but has a similar goal in that the idea is to bring strong typing and a nicer functional style to web programming:

https://github.com/ku-fpg/sunroof-compiler

A lot of info on similar here:

http://www.haskell.org/haskellwiki/The_JavaScript_Problem
If we're going that way, what about adults who have below 100 IQ? Or people suffering some mental disorder -- eating disorder, drug addiction, depression, impulse control disorder, poor memory, etc. They're not capable of properly evaluating things and making informed buying choices either.

I can assure you that my 11 year old niece will make better buying decisions that benefit her in all sorts of ways, than the homeless guy down the street, who I suspect is under a serious bout of depression.

I'm not being flippant, I'm interested in reading the logic you're operating on. I don't see how you can argue that there are moral considerations when advertising to children, but then ignore a really significant part of the population that is also being exploited in pretty much the same way. Either advertising has moral hazards all around for everyone of impaired and/or undeveloped intelligence -- young and old, or it doesn't. I don't see how you can pick and choose.
Yes. In fact it's called Terminal.app; it's just a terminal emulator, but one that doesn't particularly suck. The shell is ordinary bash (or ksh or zsh or whatever; I forget what the default is).
The key consideration for me here is "they communicate well."

As someone who's just recently started to consider full-time hires beyond our founding team, it's ridiculous how important this is relative to how little it's talked about. The other traits - "avoiding crises", "doing their research" - often boil down to effectively working together with your teammates and finding information / reaching decisions quickly.

And I do think it's got something to do with educating programmers. Working with interns and contractors we've had at Harvard, MIT, etc., the best have been Olin College (http://olin.edu).

I'm not going to gush about it in this comment too much, but suffice it to say the best communicators about technical problems are usually the ones who spend the most time working in teams and presenting their work, and those are Oliners to a tee.
Maybe if Moldova didn't mistreat Russians we would've never left- thereby contributing to the decline. My parents were born in Moldova, I was born in Moldova. Since we were Russian speakers we were told to "Go home." Along with many other Russians, Jews and non-Moldovans. Now a country that used to be considered one of the best places to live during the Soviet times is the poorest country in all of Europe.

Not all these issues can be blamed on Russia, look to Moldova's corrupt leadership for answers.
I have actually gone the opposite when it comes to Fantasy Football. I am a huge football and basketball fan. I am also a very competitive person. So when I played Fantasy sports I found myself too often rooting against my team when it came to getting fantasy points. It started to kill all the fun from watching the game.

So last year I stepped back and didn't play FFB. First season I was able to enjoy without the extra stress of competing in 5 years. This year I didn't play and once again I am enjoying the game more. So I don't think I am going back. I will save my competitive juices for either the basketball court or playing a game online.
Did you read the story? The pen test team created a completely fake female profile and used it to hack their target.
Three reasons why the Semantic Web has failed
opensuse is very good. to me (having used both) it feels more transparent - it's easier to change / configure things. you get all the automated help, but it's easier to dig down and fiddle around.

having said that, i am waiting for my openbsd to arrive. i plan to keep opensuse on the laptops, but am going to try openbsd on the server / firewall / everything box.