skysight-inc/HackerNews huggingface dataset:
And, particularly, why anyone who's tasked with answering questions from the public needs to be trained on when it is and isn't appropriate to use a canned response. Whoever it was handling the comments here clearly had no idea what they were talking about, and ended up making the company look much worse as a result!
It seems like there's a bot who's replying to comments with a handful of canned responses. I'd be interested if you could get the same responses from the CBA twitter/facebook accounts.
That a bank responded inappropriately to a security breach is regrettable, but not intellectually interesting, so I don't think this counts as on topic for Hacker News.

Also, when there is a rash of stories surrounding a single event, like Heartbleed, HN only needs the most significant or interesting articles. Otherwise it'd be all too easy for the front page to consist of nothing but stories on that one subject—most of which would at best be auxiliary.
A better credit rating system. The current one kinda sucks, no offense to Transunion, Experian, and whatever that other one is. Just because Joe Schmoe was unemployed 18 months ago and struggled to pay the rent, much less pay the bills, does not mean that Joe Schmoe is currently unable to do so. A creditor can claim a debt from Sally Schmoe, and Sally has little recourse in fighting it -- it's ridiculously complicated to combat something you know nothing about. Usually she winds up just paying the bogus bill to get it off her credit report. The whole thing is a racket.

I have been working in consumer credit modeling for last three years and currently consult in this area. Despite the deficiencies, the credit scoring model (introduced in 1950s) is still the most effective model. Banks and lending institutions do overlay behavioral scoring models to achieve somewhat better results. But including social knowledge is still in infancy and mostly at research stage. If you have any specific thoughts, I will love to hear them.
Consider switching to a different bank.
SQL are a leaky abstraction too, and ORMs get rid of an extremely high amount of common beginner errors.

Using raw SQL instead of an ORM is one of the best examples of premature optimization I can think of (unless you are very very good at SQL and have a very complicated structure).
The canned responses are hurting me to read. Pretty sure comments will be turned off shortly when this blows up.
At a megacorp, as a developer, you have as much chance of changing the culture as you have of stopping a hurricane with a fart.
Looking a little more... it looks like the e-banking stuff feeds into an F5 box. F5 claims they have never have been vulnerable if you are terminating TLS at the load balancer... so this may indeed just be marketing drones who don't know how to communicate clearly about what happened.
I often come to the wrong conclusion when "just thinking" about it, especially in domains where I am not even a novice. Also, the fact that I don't find listings for 500hp brushless motors for <10k online calls into question the results of your thought experiment.

I can see where you get your belief -- I wasn't questioning that it is a reasonable one to hold. But I am asking for evidence that compels me to a confidence level I'd actually bet on. Data will be required. Thought experiments are not sufficient.

(Don't get me wrong, I'm not accusing you for failing to provide data. It may not be publicly available. And it is not your duty to give me this. But that is what I am asking for, and if you don't have it, you don't have what I want, your duty or no.)
(I think you posted this to hn because I posted it to Facebook again, yes?)

The really interesting things to me are:

1) Invisible divisions, and the system to split units

2) Hiding top-tier equipment from the West -- even at the cost of not allowing their own soldiers to know what equipment they're supposed to ultimately use. Vs. the US, where soldiers are expected to be intimately familiar with their assigned weapons systems.

3) A really naive view of economics, that the military is "free" because the State provides it. It doesn't correctly assign the cost as that of the foregone alternative -- a tank means 100 fewer cars, etc.

4) "Role before Rank" promotions -- officers being promoted into a role above their rank as a precondition to attaining that rank. In the US system, that only really happens for certain General Officers; everyone else is promoted and then assigned, with most early to mid career promotions being either automatic or based on seniority and checkboxes.
Well, it kind of evolved into 'programming for everyone!' nowadays.

And I believe, that is the wrong direction.

Sure, we need to make learning programming more available. There are A LOT of people in non-English speaking countries where the language is a barrier for entry.

Many people say that people could make tools for their own use. It looks easy for us, programmers, when we eat, breath code. But for people with no background in programming, it's a lot to learn.

Let's make programming even easier to study but please stop shoving it down people throats putting it as something you can learn in a weekend when you are bored.
Halfbike: A new take on the bike. 96% on Kickstarter and 14 hours to go
yes hoping OP will explain; so far I don't see the win.
When talking about a large organisation like this with tens of thousands of employees the original response may have been written by a technical person. But it would have then passed through various layers of lawyers, marketing people and so forth to result in the watered down nonsensical result.
New Agile Method announced: SCRAP
Feels like a neat blend of brains ability to dream, memorize, and model physical environments. Can anybody with some more understanding of the brain tell me if any of the brain areas used in these activities are active during the voluntary out-of-body experience?

If so, is it feasible that we could one day use this for entertainment of the weirdest (coolest?) variety safely?
>We need tools that bring the learning curve down and allow people to develop their own basic tools to make their lives easier

This won't achieve much because the issue is that most people can't think about the problems they face in a structured way.

Modern programming isn't hard, all you need to learn is a handful of control structures and how to do I/O, and there are a multitude of tools to take away the tedious bits.

But if you can't describe the problem you are trying to solve in a structured way than no non-AI tool will help.

P.S. I remember being considered a Wizard in a non-technical university course because I looked up some Excel tutorials and built a spreadsheet with some basic calculations and graphing. This wasn't technically hard, but most of my classmates lacked the ability to comprehend the relationships between different cells and tables in Excel.
My electrician in the Seattle area quoted me $700, including parts and permit, to install a weather-shielded 240V outlet with separate breaker on the outside of my house directly above the electric meter, next to where a car is parked, and on the opposite side of the wall where my breaker panel lives for another purpose. (I don't have a garage so it would have to go outside if I did want to charge a car.) The cost probably goes up another hour of time if a person wants something like this and the breaker panel isn't also located in the garage since wire will need to be pulled.

Apartment dwellers and renters of houses are going to be charging from 120V stations. Considering the uproar just over satellite dishes, I can't see landlords being any more forgiving about tapping into the electrical system of a unit. (And I write this as a former long-time renter.)
> People with WS are empathetic, social, friendly and endearing but they tend to have a low IQ, making tasks such as counting money difficult.

IQ is what a standardized IQ test measures. And there is no way such a person can effectively attend a standard IQ test - which is why this statement is pointless by definition.

And to connect this "low IQ" with having problems counting money is funny in multiple ways! First of all - counting anything is not what I would consider needing intelligence. Usually the opposite is correct - pertaining a boring task as counting is usually impaired by high intelligence.

And second of all - isn't the feat of "counting money" the root of most of mankind's biggest problems? Wouldn't it be more intelligent in fact trying to foster some of the conditions coming with this "disorder"?

Like approaching people open and friendly disregarding their dull and dismissive facial expressions and aura - tired from counting money very well all day long?
No need to look at countries with different history than Ukraine. Look at Estonia, Lithuania, Latvia, Poland, Hungary, Czech Republic, Slovakia or Romania.

All former soviet republics or sattelites. 20 years later all are modern democracies with much better economy than countries that had the bad luck to still be in "Russian sphere of influence".
I've recently switched to using VMWare for everything, and disabling networking on the host (use a pfSense VM for networking). It's quite handy, but still feels a bit heavyweight. Of course, I'm sort of forced to run Windows as the host to ensure best driver/battery support.

I really hope these approaches like Qubes take off and that things get optimized for this type of workload. I'm not sure why Microsoft has ignored lightweight virtualization, both on client and server.
Kickstarter EXPOSES personal information through ignorance of session management
(A) I am NOT Allen Farmello.

(B) CNET posted a link to a PONO kickstarter, and included a session key that Kickstarter SHOULD have known wasn't mine.

(C) When you click the link, you see ALLEN FARMELLO's name and his participation status

(D) NONE of this information should be passed on the URL, but rather stored in server-side memcache referenced only by a web-server generated session id that is not re-used.

Link to CNET story: http://www.cnet.com/news/neil-youngs-reality-distortion-field/

Link in story to PONO Kick: http://kck.st/1lZZOv6

(original link .. too long)https://www.kickstarter.com/projects/1003614822/ponomusic-where-your-soul-rediscovers-music/posts/803045?at=BAh7CDoMcG9zdF9pZGkD5UAMSSIIdWlkBjoGRVRpAmFrSSILZXhwaXJ5BjsGVEkiGDIwMTQtMDUtMDcgMTg6NTQ6MzIGOwZU--36c2c135e21eb5ea3428afbba810bc76f86e284f&ref=backer_project_update
I suspect BP would have actually worked (rather, been made to "work") during the socialist lost decade(s) in Israel. The national security advantage of not needing oil probably would have led to a huge tax on either petrol cars or fuel, combined with subsidy. Consumers could have been forced to accept one model of kind of mediocre car instead of the full range of options today.
I... I... don't know if this is a serious question, or a hilarious joke.

(For those that dont know, the bank's slogan used to be "Which bank? The Commonwealth Bank."
In case someone is looking for Hamming's Art of Science and Engineering book:

http://worrydream.com/refs/Hamming-TheArtOfDoingScienceAndEn...

And the entire series of lectures is on youtube:

https://www.youtube.com/playlist?list=PL2FF649D0C4407B30
I've noticed this kind of thing with lots of Google products actually - they're often written for downright ancient versions of python and can be a nightmare to get working with modern pythons. Any clue as why this is?
Even if Telsa covers the earth in superchargers... it doesn't matter unless other cars are using the same tech... which they are not.

And if every 200 miles I have to sit for 30 mins... what? What if the stall are all full? I have to sit for an hour? No even on its best day was that a good idea...
You should be able to track down a reasonably priced copy of the hardback edition via a good used bookstore. The copy I have now I got via Alibris a few years back.
Show HN: Crowdsourcing Green Card application waiting time
Is it me or it seems that people have forgotten (or never learnt) bash and make?

Automatic deployment is usually 3-10 steps that need to be run in a remote server. How's this better that a simple script that sshs into the server/servers, CDs into the project dir and does `make update`, which pulls some branch, runs any migrations and does an `apache gracefully` or similar whatever needed for the update?
not if they work...
No, Qubes is a lot more than just that.
He has announced that the current state of cert revocation will be covered in detail on the next upcoming episode of Security Now. The current page is wordy and lacking, and I will be very surprised if he doesn't update it with real substantiating information soon.
Yes, "keeps your sheets cleaner between washings" I think is a better pitch.

Also, what about marketing this to hospitals, retirement/nursing homes, NASA, movie theaters (for their seats), etc? I think there are many vertical markets that would need anti-bacterial fabrics.
Heroku's architecture makes sense when you bill per process and primarily target a slow runtime like MRI. If you want low latency you want as little as possible between your HTTP endpoint and the actual processing. You don't need HAProxy, SSL termination daemons, and so on when the JVM has the grunt to do this itself, and you end up lower latency as a bonus. It is also to my mind a simpler system. All things being equal I would rather configure and monitor one system than a zillion.
Combat aircraft. SR-71 is a spy plane.
I never really worried about heart bleed with CBA as I figured if they were stung by it our consumer banking laws would pretty much effectively ensure that the bank wore the costs (at least until they could pass it on to a merchant). The banks are in a position where they need to promote internet banking (it keeps their costs down) and the small costs they incur on providing a security guarantee pretty much ensure as a consumer your going to be OK.

On the other hand the ridiculous response is moronic. Someone needs to loose their job over that. Repeating a canned answer that fails to answer the question is the height of arrogance and adds nothing to the conversation.

If they don't know then they need to say that it is being dealt with by another team and the information will be available at a (defined) later date. In the mean time people can rest assured that their money is secure and CBA will guarantee it against these and other threats.

What a way to turn a great feature (their security guarantee) into a negative by treating people as mushrooms.
Modern programming isn't hard you say, for a programmer I'd like to add. I have never been able to program well with something like a programming language as I can seem to hold enough information in my head structured that way.

Building giant spreadsheets is easy though. I don't think programming is for everyone, but more people could learn than today.
Not directly in charge, but close...

http://www.spiegel.de/international/world/bolivia-angered-by...
Every time I hear about moving the entire stack to high level languages I have two thoughts:

* I love high level languages, but is there even a toy OS that provides a decent amount of functionality with tolerable performance without cheating?
* There is no silver bullet to anything, let alone security. Automatic bounds checks only solve that one problem.

For instance, most would consider this an order of some of the vulnerabilities that potentially exist in increasing severity. And note that the first one is what Heartbleed is qualified as.

* Buffer overrun on read
* Buffer overrun on write
* Arbitrary code execution
Wow. This is awesome. Ants adjust their movement based on their speed. So when they're going slow, only one leg is touching the ground, intermediate speed two legs are moving simultaneously and when running three legs are touching the ground.

I never realised ants were such fascinating creatures in regards to how they move. Nature is beautiful in how even the simplest of creatures like ants can be so remarkably complicated.
[edit: are you saying only 32-bit Linux can be targeted, and not 64bit/multiarch?]

Thank you both, after looking harder at the documentation I figured out as much (except for the icu-part, I don't think that's mentioned anywhere).

Unfortunately I had to give up building under Debian 7.0 (wheezy/stable) -- even after trying with both open jdk7, oracle jdk 7 and 8, standard llvm as well as llvm 3.5 and a newer cmake (in each case the jni/llvm-bindings doesn't build, as maven fails the second test-case).

And the binary distribution is linked against a newer libc than I have.

I guess it'll be possible to get it to run in an Ubuntu VM/chroot -- but I haven't tried that yet.
Pretty sure the SR-71 is not a combat aircraft.
It would be nice if people did not reuse operating systems names:

Insight ETHOS: On Object-Orientation in Operating Systems (1992)

http://e-collection.library.ethz.ch/eserv/eth:38713/eth-3871...
Perhaps an implementation of the idea could reduce arguments of a political thought into an axiom, e.g. (this is probably wrong) abortion should be legal....<insert a tree of arguments here>..., assuming individual liberty is the most important quality of a society, vs abortion should be illegal....<insert a tree of arguments here>..., assuming maximising human life being the most important quality of society.

In that case you could see where you fundamentally disagree with a political idea, and accept the difference quickly without rehashing past arguments.
Read Hacker News faster
$10-20,000 for a 400hp electric motor. A gas engine would cost a couple hundred bucks.
> Would I be justified in asking them to remove this requirement?

Absolutely. Just cross out the line in the contract, initial it, and ask them to initial it as well. The worst they can do is deny your request to modify the contract. But it would be a totally normal thing to try.
Pascal was quite strong in Europe up to when the web started taking off around early 2000.

Here Pascal was actually Turbo Pascal/Delphi, as other dialects were usually ignored.

> And then I fell for the "safe languages can't be compiled" myth propagated by Java and the popular dynamic languages (Perl, Python, etc.).

This is why I sometimes tend to defend Go, even when I used to bash here some of its design decisions. Or keep bringing up Pascal family of languages or alternative commercial AOT compilers for .NET/JVM.

It is a mean for young generations to learn you don't need VMs for memory safe languages.
Oh so it's an ad for the podcast? I was wondering about the angle.
Heartbleed is one of the biggest security threats the Internet has ever seen?
You are right. I read this book when I was a kid, already forgot the difference.
>In the pre-Internet era, tools like Hypercard and Visual Basic allowed hundreds of millions of semi-technical people to become software developers. Since then, there hasn’t been much work in these areas, but from what I’ve seen that might change soon.

I doubt that there will be much progress on this in the foreseeable future. Not for general purpose programming anyway. It's not true that there hasn't been a lot of work in these areas since Visual Basic. Not a week goes by without news about some tool that finally allows everyone to create UIs easily, wire up some logic and one-click-deploy everything on the web and mobile devices all at the same time.

But the bottleneck is somewhere else entirely. It's thinking in terms of models. Formalizing and abstracting what we know intuitively about the world and about the things we want to automate.

In my opinion, there have only been two inventions that really "democratized" access to thinking in models: Spreadsheets and SQL. Both are from the 1970s. There has been no progress since then, perhaps with the exception of some of the visual things you can do with modern game engines. Maybe R and Matlab deserve mentioning but they are for people who know exactly what they're doing.

I think the next step has to be abstracting away some of the intelligence required to analyse data and make all the tedious micro decisions about how to transform it into something fit for the task. What we need to make progress is some kind of AI enhanced version of Excel.
Google Reportedly Testing ‘In-Store Attribution Transaction Reporting’
It's a cost of doing business. You're not going to get it itemized for you so the logical thing to do is build it into your pricing.
I gave it a shot with a picture of myself and the results were dismal.
Have you checked out Intercom.io? It does a lot of what you are asking ...

https://www.intercom.io/
When the restaurant you Googled Googles you back
Right tool for the right job. Wiring UI controls and data sources together in LabVIEW is easy, but it all falls apart when you need to implement a non trivial algorithm.
My teenage son made a video for my entry in The Summit... Oh Dear
I'm using an experimental Firefox add-on that collapses all comments so that all top-level comments are immediately available. Seems to be working out ok so far.
https://addons.mozilla.org/en-US/firefox/addon/hacker-news-r...
I'm glad you are here to remind us what is interesting and what is not. Thank you.
You have to wonder if they're actually paying someone to put those messages there. They're just different enough to make one think a human is typing them.

I guess management instructed them to do this.

I would advise against changing banks over this though. Knowing banks, this is not going to be the only one or even remotely the most serious security bug they ignored. And their competition is just not going to be better. The way security works at banks is threefold : (a) screw inattentive customers (b) watch backend systems for transactions like a hawk (c) call the police over every small problem claiming (correctly) that the financial system could fail if they don't track the culprits down for their current problem.
Focusing on the Israeli market made a certain amount of sense. They positioned this as a sort of a patriotic project that would be transformative for a small country and they had the country's top leadership involved from the beginning. They were probably in a much better position to get what they wanted from government and local businesses than they would have been in the US. It's also a lot easier to build enough charging stations to cover any place a customer wants to go if your target country is very small.
I can specify you the behaviour even if I never looked at sources of that feature in Gcc, and I'm sure anybody who writes compilers can do the same. It's nothing earth-shattering, much easier to specify than most of C++ features, and certainly not harder to implement than most of C++.

I see a lot of developers like to ignore C, giving immense priority to C++ and that makes me sad. C has certainly potential to also get some features first implemented by major compilers and only then standardized, just like it happens all the time with other languages.

"Will never be implemented" in the compiler error message is still quite telling about the climate among the clang developers. Are you one of them?
I called CBA tech support, and they confirmed (verbally) that CBA has never been vulnerable to Heartbleed. I've suggested that they get someone to clarify the comments made on the blog.
I went through some of the hiring process at fb, and it was quite promising (hard to tell, but I was pretty sure I was almost to an offer), but decided I couldn't relocate at the time and remote was a complete non-starter.
FTA:

>Step 3: Think locally and globally--all at once

>[...]

Completely delusional futurist zealotry attempting to solve all problems at once, from what I gather.
Not bad, shares info about OpenSSL and Heartbleed, a way of supporting foundation and it's a nice geek t-shirt. Why not.

True, it could be, somebody is trying to make money. If the t-shirt cost $30 and they would support only $5 then I would suspect they're concerned more about profit.

It doesn't cost much more than a regular t-shirt, so as long as they give $5 from each to OpenSSL I'm in. It's extra $1000 for foundation, if the goal is reached.