skysight-inc/HackerNews huggingface dataset:
> "eg multiple lightweight pods that are designed to eject automatically under certain circumstances and consist of a battery, the same sort of technology you'd find in a typical satellite smartphone, and a small parachute"

So you've replaced a single point of failure (failure of the recording device) with 4: failure of the ejection trigger, failure of the ejection mechanism, failure of the parachute, and failure of the (significantly weaker) recording device.

The point of a black box is that it's an when all else has failed device - there are extremely few assumptions you can make about such a situation, so the correct move is to design as conservatively as possible. The plane could be gliding. It could be a raging fireball. It could be missing a wing. It could be about to crash but all the sensors still think everything is just great.
Does |x| mean something specific here in C++ that I'm not aware of, or are you just using it to bracket the expressions?
Working as designed, and yet still a massive failure
Innovation, Validately, and Spring Time Fun
The problem with leverage is that you don't need a 100% failure to be wiped out. This is why the US crises was not very surprising, the investment banks had upwards of 1:30 leverage ratios. Similar things were happening to real estate investors.

So no, not all of the loans will go bad. But, some go bad. First prices stop growing. No growth? Why borrow to buy? Next prices drop, and then suddenly a lot of loans that should have been ok are worth far more than the underlying assets. Then it is just a big mess.

Think of a credit bubble as a game of musical chairs. The people who borrow money at the end always lose (also the ones that lend money.)
You're probably right. It's hard to pin down what's meant by value though. To an economist it's economic contribution, so it becomes a tautology to say people who make more money or build bigger companies create more value.

It gets more interesting when the definition of 'value' is less technical and more common: providing some benefit or capital-g-Good to society. But those discussions are not well conducted over the internet, or anywhere in fact where scotch whiskey is unavailable. And in any event, most people would probably agree THAT definition of value is also unconnected to wealth.
From what I can see, the issue is fixed now. But simply, someone put html in their useragent, the site copied it as text, and included it as text in the html. The browser then interpreted it as html, and executed the javascript.

The fix is to parse inputs, and replace < and > with html entities. You can see this fix if you read the source for the page.
China has $3 trillion in reserves, and it's completely meaningless when stacked against their rapidly expanding pile of debt. China is one of the most indebted nations, and to keep their GDP growth going they have to keep adding ever larger sums of debt. The amount of growth they get from $1 of capital has crashed the last six years. It's obvious how it's going to end: either in a very long period of dire stagnation, or crash.
Taobao, 360.com and the likes are selling Billions and Billions trough the internet, massive amount of internet consumption, home appliances, electronics, clothes. Thats not food nor real state and cars
http://en.wikipedia.org/wiki/Superdollar
Applying Network Science to Measure Influence of the Wikipedia Person dataset
This was an amazing story. Lots of professional services firms get too wrapped up in profit sharing and infighting when they get too big. Look at Accenture and Arthur Andersen breaking up.

You have a lot of good points on the nature of law. If you're selling billable hours, it is very hard to scale up. Profitability is still per partner. You can find ways to charge more money, or increase the worker bees per partner, but that's about it. Some firms find a way to leverage the connections between partners (think McKinsey, but not a law firm) but that's rare.

The partners and worker bees can leave at any time leaving behind very little IP.

This is why these firms rarely trade at high multiples, and frequently stagnate post-IPO.
Not the same thing, since most of the wealth of those billionaires would be in stocks and other illiquid investments/assets. Therefore someone would need to buy them in order to have cash to give out, and who would have that kind of cash available?
[python] cpdb – pdb speed up using c api, set/unset breakpoints dynamically
I've bought ads, but it would have been better not to. Total I've probably spent around $3000 over ~2 years for campaigns that only brought in around 30 conversions. It would have been better to just spend that time blogging instead. I tried Facebook (side banner, newsfeed and promoted posts), AdWords, web comics, stumbleupon, Reddit ads. Some of the campaigns were close to break-even, though.

With this few conversions, it's hard to make any judgement to what works and small tweaks in particular are basically impossible. Noise drowns everything. It's inviting to start getting fancy with A/B testing age ranges or gender targeting on FB ads, but unless I am mistaken about 230 conversions are needed to say A/B test male vs. female assuming it would give a 30% boost. If you know how to figure out the optimal targeting without spending ~$20000 on each test, let me know :-)

If I could get LTV up (reducing churn might be the lowest hanging fruit now), conversions up or write better ads, paid advertising could still be doable in the future.
I feel for you. My cousin has also lost his money and driver's license copy. Incredible amount of incompetence. He said that it is ironic that he is saying he has lost money rather than bitcoins.

Also, the people who leaked this database are unto more nefarious purposes, the DB dump contained a malware file, which if run searches for bitcoin wallets on the host computer.
http://www.reddit.com/r/Bitcoin/comments/200k30/the_tibanneb...
Not sure what you're talking about. The exact opposite is true. The US massively stimulated, including running up about $10 trillion in new federal public debt alone, which was a form of deficit stimulus. The Fed of course has been running hundreds of billions in annual stimulus.

I'd roughly estimate that the total US stimulus in all forms, from the treasury to the fed, totaled $15 to $20 trillion (some of which was repaid, eg loans to european banks, or the AIG and Fannie bailouts, or GM etc). That's two to three times the size of the entire Chinese economy.

That new federal debt paid federal salaries, contractors, welfare, social security, you name it. Those people then purchased hundreds of billions of dollars worth of Chinese goods.

"U.S. Bailout, Stimulus Pledges Total $11.6 Trillion"

http://www.bloomberg.com/apps/news?pid=newsarchive&sid=aZchK...

The Fed kept the entire global financial system solvent during the crash. They lent huge sums to European banks.

"the central bank lent billions to foreign banks that operate in the U.S., including Germany's Deutsche Bank Securities, which got $290 billion in mortgage securities; London-based Barclay's, which received a $47.9 billion loan; France's BNP Paribas Securities, Switzerland's UBS Securities LLC and Daiwa Securities America, a subsidiary of one of Japan's largest brokerage houses."

http://www.foxnews.com/politics/2010/12/02/federal-reserve-l...
May the force be with those who chose another path of understanding than science.

Their lives must be ecstatically thrilling as nothing is certain, constant or knowable. I truly admire the masochism of these brave souls, as they battle seen and unseen foes alike for the duration of their exciting lives.

Meanwhile, us poor scientists must deal with the boredom and stability that comes with scientific understanding. The laws of the universe are forever constant, the narrative of the universe unchanging, and the world predictable and understandable, just waiting for curious minds to uncover its ancient mechanisms. Terrible, eternal boredom.

Alas, I must return to insufferable monotony. Live long and prosper.
All the bourbon/compass/etc stuff is great, but it's so full featured that it's too much at times. With this, I aimed to take the best stuff, the shit I actually use day to day, and make a super lightweight and easy to wrap your head around framework.
How does Swype make their money?
I thought it is a paid app, so why do they need analytics? Are they secretly selling user corpus data?

That post has some really wishy washy handwavy explanations for how IMEI spoofing etc supposedly ruins Swype analytics. I don't buy it.
I had to learn RegEx because of Google Analytics. The folks from LunaMetrics wrote a handy guide - http://www.lunametrics.com/regex-book/Regular-Expressions-Go...

It's still just basic RegEx, but if anyone is looking for stuff with more context related to GA, this is the one for you.
Show HN: hangnest.com
Hangnest allows groups of travellers to connect with other groups of travellers in the cities they visit while travelling.

What do you think? Feedback are welcome.
Also from the article:

Google buys Spanish Ono for $9.5bn to start Google Fiber throughout Europe

Vodafone won't be rolling out ultra fast fiber networks. They'll be putting everything through a cost-benefit exercise to maximise profits. Essentially just a fish being eaten by a bigger fish.
Plus, I don't do the whole ruby/rails thing. I really prefer node-sass/libsass. On big ass projects it's the difference between a 40 second compile and a 3 second compile.
All the php hate I've seen over the years is because of one guy who doesn't know what he's doing? ;)
Quantitative Easing has been large but it drove investment mostly in emerging markets and not in the US.

Neither fiscal or monetary stimulus is effective in a post industrial economy like the US.

Structural reform like patents, immigration, occupational licensing, taxes etc are where the big stimulus lies unfortunately.
KNH confirms cure for cervical cancer
I agree with you. Even my friends know everything that is contained on the driver's license. Obtaining SSN can be a trivial thing too.
The thing is he wants to contain the damage because now there can be real repercussions. Even though the banks are liable, he still needs to be proactive.
Google's Pichai touts wearables SDK, 'APIs for hardware'
The solution is streaming the data at all times. The idea of a black box is an antiquity - something used as a backup to the stream, perhaps.

Hold on while I go patent the shit out of this (yeah right, fuck the USPTO if they approve something so obvious).
RegEx 15 minutes to learn, a lifetime to master.
Clickable http://hangnest.com

Sadly, this is all behind a facebook login. So can't give any review of your product without creating an account and spending time learning your system.

Please, put up a page that shows what you're accomplishing, what the user can expect to get when they login. It will get you much further.
This is what Invictus has been doing to raise money for their DACs via AngelShares
Why don’t commercial jets have parachutes? (2013)
>Once, I waited at the station over 8 hours. The train had broken down, and another train was sent to push it to the station. That train broke down too.

I was on that train; it was the day before Thanksgiving. It was the worst public transportation incident I had ever experienced. On top of the engine breaking down the electricity also went out, which prevented the air conditioners from running. With the large amount of people the trains were carrying, the heat grew to be too much and someone ended up fainting. So we had to wait about an hour for the ambulance to come by and revive the person.

Once we reached the LA station, because we had two large trains coupled to each other, people couldn't get off because the platform wasn't large enough. So they had to back the train out, decouple some cars, and go back into the platform. This went on several times before everyone could get off.
A combination of Enhanced Ground-Proximity Warning System (EGPWS) http://en.wikipedia.org/wiki/Ground_proximity_warning_system and
Deployable Flight Incident Recorder Set (DFIRS)
http://www.drs.com/Products/c3a/DFIRS.aspx might be an option. The DFIRS deploys when a pilot ejects from a F/A-18 Hornet. Using EGPWS in a civilian aircraft the system only triggers when a crash is imminent.

An alternative would be to eject the DFIRS when subjected to high acceleration like an Airbag in a car. In a large proportion of crashes, the nose of the jet hits first.
The role of facial hair in women's perceptions of men's attractiveness
You've almost got a point there except PHP has quite a few frameworks to choose from. Mainstream ones all include, as you put it, "basic security features like auto escaping output,orms by default(so no sql strings),csrf on forms".

Symfony2's form component is one of the best I've ever seen. It has many sane defaults and is locked down out of the box. Read up on their use of data transformers and how they protect users against XSS without any extra effort by the user. Validating automatically looks for a CSRF token.

Whats more is that these are (for the most part) stand-alone components. You don't need to commit entirely to the full Symfony stack - you can just opt into using the components you need -- even the smallest project that only uses PHP as a "templating language".
Add Facebook's Gender Identities and Pronouns to your Website
Thank you. That link was wonderful. Pretty much all of it applies. I think doing a credit freeze will shrink the size of the damage, though medical identity theft still remains a possibility.
Native Chinese here. I guess the best way is to apply those better tools for thinking to the Chinese context. To be honest, I don't think there is much information in Chinese politics and economy worth reading. The tools we use are outdated. The information(meta data) we can get is actually very limited and very distorted. The knowledge and how people perceive the world are far behind those in developed countries. When cheap labour becomes less and less competitive, things will go south. Domestic consumer market growth does have a chance to save us, that was what I thought the best way out when I was younger. But that would never happen, when you have some understanding how the nation's stakeholders operate. This is a topic that is too big to discuss here. I do believe, sadly, there is a long dark road ahead for most of people in my country. I wish not but from where I can see I'm quite pessimistic on this. Just my 2 cents.
Impending Danger
Hopefully it would just require a bit of mining to pay for whatever service you were looking to use. If we are going to have a more decentralized internet we are going to need a lot of people mining the blockchain.
You can also include an extra random number in the hash, and require that within the window of acceptable timestamps the random numbers have to be unique.

By the way, be aware than hash(string1 + string2) constructions are often vulnerable. hash(hash(string1) + string2) is better for most hashes, I believe. But you shouldn't roll these primitives yourself, either. Just use a proper library.
Subtyping and coercion in Rust
Having assisted some friends in building something similar in technical scope, I'd be pretty surprised if they managed to pare it down to run reasonably. It's a really hard problem.

Minecraft's system requirements remain low because the engine doesn't do a hell of a lot, which is good because it really...can't.
You're contradicting your own statement then.

You said China did the heavy lifting regarding pull the global economy out of the crash, then you say that Fed QE drove growth in emerging markets.

All that stimulus drives massive consumption, which bolsters global manufacturing. And you ignored the part where the Fed kept the entire first world solvent during the crash, that alone is more than China did.

And the US is hardly post-industrial. It's the world's largest manufacturer (yes, larger than China).
This is not a very useful article.
A method to use Google for DDoS. Bug or Not?
Valuable Technologies are Tools
Was there today. Can confirm, great hacks, great people. As a highschool student this was the highlight of my month.
> You can send plain text passwords back if you've encrypted them, you just have to decrypt them first.

Yes, and security-wise that's just a slightly obfuscated version of plain text.
I feel for you. He says hardest part was breaking the news to family. Straight afterwards he drove down to me, he said hearing scorn every second was becoming overbearing for him. Cryptocurrency can be hard to explain in layman terms.
I'm pretty sure trains are more deadly, especially when you include the numbers from them hitting things like trucks at level crossings.
> and if you go to 2nd tier cities, you'll see new developments everywhere that are basically empty.

Malls you feel wwwaaaay over-crowded today were once empty for like 5-8 years in the 90s or 80s. Google for 烂尾楼 and you'll find a ton.
Fun fact, Voyager launched before the first RAD hardened CPU [1] processor was available and the Voyager electronics are more akin to a ton of expensive FPGAs and ASICs that have a bunch of error correction and redundancy.

[1] http://en.wikipedia.org/wiki/RCA_1802
Samsung – Uneasy in the Lead
Extreme Twerkin' "yiken" captured in C-money's "Corner Music" video
A few weeks ago when BTC was trading at a huge discount on Mt Gox, I thought "what the hell" and started the process of signing up to experiment with buying a trivial amount as a lark. I'm usually skeptical (and eventually correct) about things that look like speculative bubbles, but at least there could be a story to tell.

I stopped when it got to the verification phase. It's one thing to lose a few bucks that I was willing to gamble, but it's another entirely to lose my personal details and a scan of my passport. I guess I dodged that bullet.
Tikz2svg – cli tool to convert TikZ – SVG
"I think the reason for this is security people keep to themselves and work as consultants."

???

I know there are some pretty obscure edge cases in some successful attacks, but... almost everything I see as a security issue (and stuff I've done myself) usually falls in to XSS, CSRF and SQL injection. Those were the big 3 10+ years ago, and probably still will be. This isn't some magical 'hidden' info that a handful of security consultants hoard to themselves to maximize top dollar.

Have safe password/authentication systems, prevent XSS, prevent CSRF and prevent SQL injection - you'd prevent a HUGE number of attacks for little effort. But... it takes education, and actually caring some about your job/company/product.

"Also, there really is no place to hire a ``security person'' at a early stage startup. " Why not? I don't think they need 'hiring' full time. Many startups spend inordinate amount of time on 'user experience' and 'branding' and whatnot, with the (correct) understanding that you can't easily just 'add on' UX after the fact - it's much easier to develop UX as part of the overall dev process. Why do people not think of security the same way? Regular security audits/reviews by a security consultant (1-3 hours every week or so) would go a long way towards helping inexperienced developers spot gaping/obvious security holes well before they become big problems.
Also, the people who leaked this database are unto more nefarious purposes, the DB dump contained a malware file, which if run searches for bitcoin wallets on the host computer

That's just evil genius stuff right there.
This is awesome, but I've found it usable only for very low bandwidth applications (like a remote terminal session). Web pages and emails are large these days :(

If you're interested in IP-over-DNS, you may also be interested in IP-over-Facebook: https://news.ycombinator.com/item?id=7256477
Indeed Autoland started deployment in the 60's, though not in a pervasive sense until decades later. Point on that was that we've had a lot of automation for in aircraft for some time. :)
Nothing new here - it's the same rehashed argument made previously by countless (often uninformed) Bitcoin detractors.

Clear and concise responses to the claims made here:

https://en.bitcoin.it/wiki/FAQ#Is_Bitcoin_a_bubble.3F

(also see "Is Bitcoin a Ponzi scheme?")
> Ruby or Java dont have <?ruby or <?java tags

I dunno about Ruby, but Java certainly does: http://en.wikipedia.org/wiki/JavaServer_Pages
It's just someone new who has finally heard of Bitcoin. So he's bringing back the tulip craze argument thinking no one else has thought of it yet. :P
“It was, of course, nothing more than logical positivism, the especially virulent type espoused by male techies who sincerely believe that they are too smart to be logical positivists.”
Usually with an APIkey, you have a corresponding "Secret" Key.

This is called a shared secret.

Using the shared secret, you can come up with a unique signature, that only yourself and the host can generate.

You also want to use some sort of TTL for the signature, to prevent replay attacks.

Passwords should never be stored in plaintext. They should be hashed using a cryptographically secure hashing function (bcrypt is easy enough).

Password hashes shouldn't ever be exposed to anyone.

If you need to provide login functionality, provide a method that takes a username and password.

Make sure that username and password method has a backoff time to prevent someone from partying on that api (calling it with username and password combinations)

As the password has to be sent in clear text, make sure your login api is over SSL.
ISlumped : What's your slump? Share, Learn, and Grow
Да. Inspiration-а за книгата идва до голяма степен от кондензираните книги коите се използват в Българските университети.
My point is pretty obvious.

For those that are a bit slow: Do you come up with policy like only 2 devs can be on the same flight from data or feeling. It seems this is from 'feeling' and the data doesn't support it. If you're still struggling, I'm saying policies like these are likely irrational.

Do you still need more help? I could draw you a picture.
I love this idea. Could totally see redbox pulling something like this and including a coupon for dominos in the sleeve.

I wonder how strong the scent really is.
If you use them in CGI mode, you very well have a "start" tag in form of a shebang first line like #!/usr/bin/env python.

Also, shellscripts and perl are considered programming languages, and these too need a shebang line. Your point is invalid.
Please see your email, I just sent.
My (very limited) understanding is that Roslyn is a lot more like clang than llvm.

From comment on Eric Lippert's blog:

*
So, is this like LLVM for the CTS/CLR?

Absolutely not. Low-Level Virtual Machine (LLVM) is a tool that takes code in an intermediate form from the semantic analysis of a compiler, optimizes that intermediate form, and then emits optimized machine code. Roslyn takes in C# and VB source code and produces a lexical, syntactic and semantic analysis of it for you, and then emits the code in an intermediate form. The thing in .NET that most closely resembles LLVM is the jitter.

http://blogs.msdn.com/b/ericlippert/archive/2011/10/19/the-r...

Update - A more full response here: http://blogs.msdn.com/b/ericlippert/archive/2011/11/18/why-i...
What would you answer?
The current fatal crash rate for human drivers is about 1 per 100,000,000 miles, and the injury crash rate is around 1 per 1,200,000 miles. 300,000 miles with 1 accident doesn't prove much.
I think your efforts on #1 are moot because I don't think there's a way to include the API key in a mobile app such that it can be used by the app but not extracted by an attacker.
Nice to see that C++ can express this pattern. (It is extremely ugly there, though.)