skysight-inc/HackerNews huggingface dataset:
Agreed, it would have been better to have the chief scientist discuss the core technologies, design and potential applications than watch an Elon Musk/Tony Stark ripoff drive his Tesla-S home to his sweet pad and knob around with a CAD model of a rocket via a seemingly non-intuitive interface.

If the device was only a few hundred dollars to purchase then the marketing video might have had some merit. But at 3k, you're selling to people who want to know how it really performs, and what technical trickery Mann might have introduced to make it an exciting human-machine interface.
It's also very typical for machine rooms in academia in my experience (the MIT AI Lab had one that looked far worse than this, and others in the same building were similar). [Well, minus the wooden beams, but aside from that...]

Business are typically a little better (IME), as they tend to have a bit more money, but sometimes barely. Once you get to giant Google-scale outfits, of course, the game changes completely...
Theo de Raadt gives a 10-year summary on exploit mitigation in OpenBSD
Microsoft has all significant <a href="http://www.openbsd.org/papers/ru13-deraadt/">exploit mitigation techniques</a> fully integrated and <a href="http://www.openbsd.org/papers/ru13-deraadt/mgp00030.html">enabled</a>, claims Theo de Raadt at <a href="http://tech.yandex.ru/events/yagosti/ruBSD/">Yandex ruBSD</a>, whilst giving a 10-year summary of the methods employed by OpenBSD.

In year 2000, OpenBSD started a development initiative to intentionally make the memory environment of a process <em>less predictable</em> and <em>less robust</em>, without impacting the well-behaved programs. Concepts like the random stack gap, W^X, ASLR and PIE are explained in the talk. Some of them, like the <a href="http://www.openbsd.org/papers/ru13-deraadt/mgp00009.html">random stack gap</a>, are implemented with a <a href="http://bxr.su/OpenBSD/search?q=stackgap*&path=kern_exec">3-line change to the kernel</a>, yet it appears that <a href="http://www.openbsd.org/papers/ru13-deraadt/mgp00034.html">some other</a> vendors are still shipping without it.

http://www.openbsd.org/papers/ru13-deraadt/
> Is there precedent for a party to put up a different choice in the primary when there's a reigning incumbent?

The parties elect their candidates in a primary before putting them on the ballot in the general election. But parties don't like primaries: You have two of your own candidates saying bad things about each other in public, taking specific stances necessary to win a primary that may be disadvantageous in the general election, and using campaign money that could otherwise have been used against the other party in the general election.

So the result is that if the incumbent wants to run again, generally no one from the same party will be willing to mount a primary challenge, and anyone who does will raise the ire of other party members for causing trouble and wasting money. Hence the absurdly high incumbency rate.
Designing great App Store screenshots
Seth Roberts:"The Growth of Personal Science: Implications for Statistics"

"Personal science is science done for personal reasons (to help yourself) rather thanprofessional ones (as a job). The most common personal science is health self-measurement, which has recently become much more popular. This article describes 14examples of personal science involving health. The topics include blood sugar, sleep,mood, body weight, resistance to infection, and brain function. Most of the examples areabout new ways to improve these measures. For example, the results suggest that: 1.Skipping breakfast reduces early awakening. 2. Looking at faces in the morningimproves mood. 3. Flaxseed oil improves balance. 4. Butter improves arithmetic speed.Overall, the results suggest that personal science plus expert advice can produce betterhealth than expert advice alone. Personal science may influence statistics in two ways: 1.A new audience. Personal scientists want to learn statistics. 2. Better understanding.Learning about personal science may help statisticians understand science in general"

http://media.sethroberts.net/blog/pdf/2012-09-24-The-Growth-...

---
---

Seth Roberts:"The unreasonable effectiveness of my self-experimentation"

"Over 12years, my self-experimentation found new and useful ways to improve sleep, mood, health, and weight. Why did it work so well? First, my position was unusual. I had the subject-matter knowledge of an insider, the freedom of an outsider, and the motivation of a person with the problem. I did not need to publish regularly. I did not want to display status via my research. Second, I used a powerful tool. Self-experimentation about the brain can test ideas much more easily (by a factor of about 500,000) than conventional research about other parts of the body. When you gather data, you sample from a power-law-like distribution of progress. Most data helps a little; a tiny fraction of data helps a lot. My subject-matter knowledge and methodological skills (e.g., in data analysis) improved the distribution from which I sampled (i.e., increased the average amount of progress per sample). Self-experimentation allowed me to sample from it much more often than conventional research. Another reason my self-experimentation was unusually effective is that, unlike professional science, it resembled the exploration of our ancestors, including foragers, hobbyists, and artisans."

Medical Hypotheses

Volume 75, Issue 6 , Pages 482-489, December 2010

http://media.sethroberts.net/articles/2010%20The%20unreasona...
Thank you! It's good to hear someone else say it. I've made a couple of runs trying to come to terms with Ember; invariably the docs are wrong, and various examples don't work with the currently-released Ember build; and then Googling turns up some other docs for some other version. Maddening to try to figure out what the current reality is.

The third party ecosystem also seems very sparse -- would pay money for the Ember equivalent of Two Scoops of Django, although I'll probably just try Angular instead of waiting to see if things get better. Seems to be vastly more resources for Angular and the rate of development seems much quicker.
As a developer I can say this post is right on the mark. Screenshots are infinitely more important than your description, especially the first screenshot. People download directly from the search results now, especially when talking about free apps.
Beyond Lean Startups
Introduction to Mathematical Thinking (Winter 2014)
First sentence on the homepage: "Sifo is a well-proben [sic] open source framework for PHP professionals."
I'm sorry to have to say it here on HN, but this wannabe apple.com spin-shit-in-3d-when-you-scroll crap is completely unusable.

I'm on a Retina 15" MBP – a laptop that their target demographic will be using – and I can barely make it through the site to try to piece together information about their product.

Am I supposed to scrounge up an external mouse with a scroll wheel and be impressed by the CSS3 transitions? I'm seeing this more and more and I'm really confused how something like this makes it through QA.
Nah, I just personally think the "Fork on GitHub" line is wrong because I'm very rarely trying to go from a tool's site directly to the "fork" action. Instead I think something like "Source on GitHub" or "View on GitHub" is more appropriate. And since I just launched it, in this case I thought "Star on GitHub" could work. I don't mind too much really, just anything but forking :)
I can just imagine this will spawn a new contrived, perverted sex act that's similar to the glass-bottomed boat.
I initially had the same reaction as you, but reading the discussion between the author and Telegram in the comments (both on the linked article and the original HN thread) it seems to be this is largely deserved given the way Telegram has been responding. They've essentially refused to justify any any of their (curious) choices and relying on authority arguments instead:

> We grew tired of “experts” too lazy to read the full documentation.
> Is there a GOOD reason why we aren't defaulting to these modes nowadays?

Two of them:

(1) SSL certificates for public-facing sites (where you don't control the trusted CAs/certs) cost money. More money than many individuals with sites spend on their hosting.

(2) Because you need one IP address per domain to do SSL, which costs even more money. Most sites are on shared hosting where dedicated IPs are not even offered, and on VPS/dedicated hosting additional IPs cost extra.

There's not enough free IPv4 space available to switch every domain to SSL if we wanted to. It won't be until Windows XP and Android 2.x usage is much lower that we can start using SNI on public-facing websites, which would relieve us of the need for a separate IP per domain.

On a personal note, SSL can be really expensive even if you're willing to spend money on it. I run three sites that give users subdomains. To run SSL on the sites, I need three wildcard certificates that cost over $300 per year.
i dont see the connection.

could you explain that?
Theo de Raadt gives a 10-year summary on exploit mitigation in OpenBSD
Visualization of Bitcoin Exchanges
Visionary, but seemingly impractical. Any way of seeing videos of real use that isn't spinning rockets around? Not trying to be condescending, but that seems more marketing than reflective of what people can/will use Meta for.
Why not forward, for awhile at least?
AR stereoscopic see-through displays are complex, difficult tech. This has nothing to do with Google Glass which is closer to being an aside information display.
Sony has the most IPR and expertise in the field when it comes to displays that create a 3D augmented experience for both eyes. They have examined this field for ages and had a hard time to discover application fields.
Meta hopefully cracks this nut and delivers a development program that brings stereoscopic AR to the next level. But as someone who managed an AR portable display team in this field for VF, I see it as a steep challenge.
Will pass it along, thanks. Neither of us are native English speakers.
Until you can get everything switched over it's no harm of course--at the time I just wanted to leave Google asap so it's definitely my preference.
I completely disagree! This is not a reasonable choice. Email forms must confirm to the RFC standards or else there is no standard. The biggest offender I've run into is Yahoo. Yahoo's email address filtering won't allow me to use my email address because they reject my TLD. Even lousier, their technical support form also rejects my email address, so I can't even send them email to have them correct the problem.
>I spent the next 8 weeks coding for three hours a day and preparing for interviews.

what were you doing the rest of the working day?
To be fair, he's Harvard Business. Sort of the meathead division of Harvard, compared to their law school.
How programmable is this?
Surprisingly PHP with Composer, coupled with type hinting and interfaces allows you to achieve what you're discussing. It's how I write web apps now -- small libraries, classes that expect interfaces, and unit testing. It's great - no frameworks!
Curious to know more about what Sony's doing.

If the price drops enough: Dennō Coil.
Show HN: Parallax and Scroll-Spy with KnockoutJS
Was is 12? Seemed like 13.

At least the brake fluid was fresh.

I had a window seat, but all I could see was despair. Turns out it was my reflection.

The small lady in the paper hat was nice, but she ran out of cookies before she got to me.
#DRUNKBARTENDERGOESHULK
Drunk bartender goes hulk
And would you berate Edward Snowden for the "valuable government resources" that surely have been spent on his behalf? Somebody has to be willing to document the abuses of our system, and I'm glad he did it.

Treating an entire group of individuals as criminals is bound to be a self-fulfilling prophecy. Between confirmation bias and people living up to expectations you are guaranteed to see what you expected to see. To believe in the rule of law you must believe the law is fair, and large numbers of people see every day that it is not.
Far easier just to shoot down the planes, assuming reinforced doors, air marshals, and passengers aren't enough. No, I don't think there's anything rational about it, beyond the rational calculation of shirt-term advantage by politicians.
The reason why companies are caring at all about it is because this directly affects their income. Especially from foreign users.
A Lisp family language is hardly more approachable than Scala. I found Java -> Scala pretty smooth, but can't make head or tail of Clojure code as it looks completely different to languages I've used before.
Only for a first job, or for more school, yes. But seriously, it isn't important.

For any job, it is much more important to have some sort of positive personal connection. (Worked with someone there before, a professor recommends you as talented, an internship).

Which is why people pay big bucks to go to Harvard/MIT/Yale? Correct? The objective is rubbing elbows with the elite and making connections. Presumably I can get a similar education elsewhere for less money.
Ya, I use ember-data when its appropriate, and not when its not.
Hah, I wrote an ActiveRecord plugin or TinyMVC back in the day. Should be in the forums still. Nostalgia!
I didn't say property rights were part of nature, but hunger is, which is what I meant.
The Art of Giving
Isn't this post from the 1st of April?
I think slight disturbances from being perfectly spherical are fine (since the Euler characteristic wouldn't be affected). The wind vectors not always being orthogonal to the Earth seems more damning, but maybe it is enough to just consider their projection onto the Earth's surface.
I'm currently deciding between learning Rust or Nimrod, having a good web framework would help Nimrod adoption.
I use Slim, Idiorm, and PHPUnit to build all my projects :)
It's the animated GIFs and blink tag of 2013.

I've seen weird scrolling used reasonably well when most of the content is text, but in this case it really should just be a video.
Christmas Backup Horror Story
I appreciate your positive outlook :-) There is no doubt a great deal of technical advancement under way today, but it seems mostly applied, incremental work. Perhaps we're nearing the end of a Kuhn-like cycle of scientific advancement and some kind of breakthrough will kick things off again.
Are there videos of actual first-person (recorded by camera) demos? Correct me if I'm wrong but I believe the video was all graphic editing and thus not representative of the device itself. If I were to shell out $3K I'd want to see actual product demonstrations, which I can't seem to find.
Yeah - most client side MVC frameworks wind up having to sync the client Model and the server Model, and are based around data (what something is). In Q we took the approach of streams and messages, being broadcast to all participants and offline notifications sent to subscribers. So the apps are encouraged to listen for messagea pushed from the server, which may be "data changed" but could also be a chess move, or a song added, etc.
Play 2: Great except it's Scala. Ruled out.

The Play guys went to great trouble to ensure that both Java and Scala are fully supported. Perhaps consider being a bit more open-minded about your options. Scala is simply a more modern and flexible language, so I don't blame them for using it.
I develop internal applications in the investment banking sector.
I may be misunderstanding the author's target for his rant, but why would Google or Apple want to turn off in-app purchasing? They make an immense amount of money off it, which has to outweigh any reason I can imagine for turning it off, including this one. Similarly, why would the developer want to hide their main source of revenue?
Taking Control of the 'Small News'
This is a beautiful and insightful comment. I used to live in the ghetto and knew cops that worked there, and after spending a couple of years listening to their stories the only thing that surprises me is how they're all not completely insane racist psychopaths. (A similar result comes from knowing some landlords.)
Chef encrypted databags or a similar approach where the environment variable is encrypted on disk and decrypted at runtime. Obviously your deployment nodes eventually need the secret in plaintext and all end up with the key, but at least the information is encrypted at rest (for example in your source control, a common source of breaches).

It doesn't seem wise to share secrets amongst developers (especially new ones) to me - that sounds like a recipe for disaster. GitHub accidentally deleted their production database by giving developers access to production secrets on their local machines a few years ago - regardless of how much you trust your people it's not a particularly solid plan.
> I object to his suggestion you should always take blind intros for coffee, and it's not because i'm full of myself, it's because I'm pragmatic.

In business, this is how a lot of business is done aka "I know a guy who you might want to connect with". I gather most BDs will have experience in this during their career, after all BDs are their to entertain and develop new business.

However from what I am reading, the problem was with the persons response, e.g. the email response with a link to a tech blog, what happened to the old "Sorry I am not interested" response or "Ok I will give them a call".
Actually, your worldview is wrong, and mine is right, and driving is a human right that is not contingent on giving up privacy rights, right to not have your car searched, or other rights.
Ruby to_i considered harmful, what to do instead
Caliendo is a very simple interface for mocking APIs
If you run your own mail server, this whole process is much easier. Just set up an alias name specific to whoever you're giving the address to; then forward it to your real email. If spam starts, you just delete the alias.
Could have spent all of this time studying, would have gotten a decent grade on the exam.
Abney And Associates Intenet Technology News Updates
[URL=http://www.huffingtonpost.com/robert-siciliano/lack-of-identity-proofing_b_4412466.html]Lack of "Identity Proofing" leads to Fraud[/URL]
`
Real ID Act

Implementation of the Real ID Act, a law meant to begin the process of properly identifying U.S. citizens, has been delayed repeatedly over the years. About two dozen states initially passed legislation refusing to comply.

Currently, the following states still have laws banning compliance, according to the Washington, D.C.-based advocacy group, Coalition for a Secure Driver's License: Alaska, Arizona, Minnesota, Montana, Oklahoma and Washington State. Without full implelentation of the Real ID Act the we will never even begin to identity proof who's who.

[URL=http://www.scribd.com/abney_and_associates]Healthcare Fraud[/URL]

The Obama Administration is currently attempting to mitigate the strained federal health insurance [URL=https://twitter.com/Abney_and_Assoc]website[/URL]. And yet another problem has surfaced on the radar of officials: Thousands of individuals have been unable to authenticate their identity as it relates to medical plans.
It's not just "an immense amount of money", in most cases it's the only way they generate revenue.
Yes, this was confirmed as an April Fools' day joke.
> Monads are a mostly a non-issue, once you understand them.

I prefer to emphasise the "... once you understand them" bit.
Hacker News For CryptoCurrency Community
Roger that. AutoZone uses an iPad in their stores for yeoman duties. And today I checked into a potential employer's office on a kiosk tablet.

Some other vertical markets -- car diagnostics, tuners.
Classic government compartmentalization.

No one out side the US gov had a clue how big the scheme was and how big or small their part was in it. Now they know. Not suspect, but know.
I think you're reading into the $5 wrench a bit too literally. It's not about perpetuating the idea (false or not) that torture is an effective means of procuring intelligence. The point of the comic—at least to me—is about tunnel vision w/r/t security. Someone might invest a great amount of time and effort on encryption, but then look past the fact that the encryption is only as strong as the password that protects it...or that the password is only as secure as the place it is stored (lastpass, 1password, or even your brain).

There are many creative ways to circumvent encryption, and one of those ways could be something sinister like a wrench-torture, but it could also be through social engineering or psychological craft. The wrench is just an extreme example, maybe even a metaphor.
Only demo I could find...

https://www.youtube.com/watch?v=0rj9nMJq1Vk
Many people people said this before, but as time passed it turns out to go the other way.

Gud luk Proffessy
Linux: Keep An Eye On Your System With Glances Monitor
How I am waking up in the ‘internet of things’ era, in a more “natural” way
The idea is to keep them out of version control. At least ~/.bashrc won't end up in a repository under normal circumstances. You have no idea what pieces of your code base may eventually be open-sourced.

For small teams, a good solution is to keep a GPG-encrypted file in Dropbox or another team file share. When you onboard a new developer, someone reencrypts the file with the new recipient. If you use Chef, the knife-briefcase plugin will handle this for you.

For large teams, there shouldn't be any secrets that need to be disributed. In an ideal world, at least. Each user should get his/her own account on each server, his/her own AWS credentials, etc. At some point you'll run into sharing a secret among production servers (SSL certs, for example), but you should never need to share secrets among developers in a well-designed system. Individual accounts allows useful audit trails and limits the damage if a credential is leaked.
Yes they definitely built something cool that a good number of people found useful. So I assume the problem was revenue? What was the revenue model in the first place? Not sure the revenue is there on either side when the average ridejoy user is probably pretty price sensitive and also has a good enough free CL alternative. Hindsight is always 20/20 though
> The reason I ask is because no one wants to use those self-serve kiosks.

I could totally see automated ordering happening. Look at big box stores and self-checkouts. At my local home depot, walmart, and mejier, and smaller stores like county market, there are often only two cashiers for the whole store (I only go at night, i guess). One oversees a bank of 4-8 self-service check-outs, and the other handles one full service checkout.

Self-service grocery store checkout is way more complicated than fast-food ordering. There are coupons, produce codes, scales, large qty of items, and the actual act of scanning and bagging. By intentionally under-staffing the full service lanes, people naturally adapt to self-service. This is the standard now.

Imagine how efficient fast food could be. One touch for predefined meal, accept the defaults or maybe one more touch for size change, tap your NFC credit card or device, done.