skysight-inc/HackerNews huggingface dataset:
I'll do my best to provide an example. It is hard to come up with a general idea, but I can demonstrate using a graph:
http://i.imgur.com/AwpTeRt.png

The numbers in the nodes represent heuristic values at each node and the numbers on edges represent edge weights; we're looking to get from S to T.

Our heuristic is admissible because it never overestimates the distance to the target.

Consistency dictates that the heuristic value at any node may at most be the weight of any out-edge added to the heuristic value of the node that the edge connects to. So in our example, the heuristic at A is 3, but at B it is 0, but 3 > 1 + 0, so our heuristic is inconsistent.

The reason this causes issues is because our algorithm assumes that any visited path is the shortest path to the end vertex of that path. So when we traverse this graph, we will visit B first, because the sum of its heuristic value and the respective edge weight is less than that of A.
This sounds good. One point I don't agree with is this one:

What happens if not all the early employees need to take a salary?

Don't resolve these problems with shares. Instead, just keep a ledger of how
much you paid each of the founders, and if someone goes without salary, give
them an IOU. Later, when you have money, you'll pay them back in cash.

Those who don't take a salary don't take any risk, so I would say the IOU should be greater than the missed salary as a minimum.
They should at least give us some more info, like which openssl version their running (if they use openssl)
Yeah, they deflated. 1 share buys more now instead of less.
Woah, that was weird. This thread was #1 for around an hour and it jumped down to #37 almost instantly. I wonder what happened. Can an admin explain? I'm genuinely curious about the algorithm that would cause this.
Have any publications you could point me to?
Well, I think what they are saying is, assuming your opponent has equal game knowledge and practise and in general has a similar overall strategic decision making that a younger person can probably outdo you with the very short term decision making and faster control.
Except that an "asshole" is decidedly female. And apologizes for out concern-trolling you.
My experience has been very good for colloquial English. Text messages I've sent where I've used a lot of jargon or proper names, that you wouldn't find in a dictionary, Glass understandably fails.

I shoot pool and even in a loud pool hall I can almost whisper my commands and Glass picks them up just fine. What is neat is that Auto Awesome will stitch together clips of my game, and at the end of the night I have a highlight of my match.
"is not affected" being the operative wording. users want to know if their data has ever been at risk. still, surely everyone can just assume it was affected, act accordingly, and move on?
head upwind gathering bottled water as you go.
hint - prevailing winds are often from the northwest
"others more qualified" is more re-assuring than 'there was something wrong' or 'we don't like you' so i'd take that boilerplate response over silence/nothing.
That's probably not a great idea - it just instantly confirms them as a viable future target if a bug in that particular version comes up with a hole in it later.

I'm personally okay with "We were not affected by the bug" - random internet people shouldn't have details on the software your company runs internally. One more thing for a potential bad guy to exploit.

Besides, if they'd be willing to lie about being affected, they'd be willing to lie about using a particular version of software, so nothing gained anyways.
This is why it exists
https://bitcointalk.org/index.php?topic=257525.0

Bitcoin apps/sites are using blockchain.info API as a hot wallet. I bet some exchanges are secretly doing this too. Surprised there doesn't already exist a hot wallet as a service yet. A competent one would make assloads of profit from gambling and betting sites that don't want to run their own.
I think their issue is that "is not affected" implies the present moment, and makes no claims about possible exposure in the past.
If we operate under the assumption that each intermediate path found is shortest for its respective endpoint (which is the fundamental insight for Dijkstra's), we could potentially throw away the solution because it travels through the "visited set."

Edit: The paper you cited uses a traversal slightly different from traditional A*.
I think there is something wrong with it.

As a site that has access to financial records, I would expect them to explain in detail why they aren't affected and if they were ever vulnerable.

For instance, if they are using IIS (I know, I know) it would be an easy answer.

The fact they are not explaining clearly and in detail leads me to believe that there is/was something amiss.

The transparency expectation of them is greater.
Online course aggregator built with python
>I think the bigger issue is if the externalities imposed by normal usage are so high that, when properly internalized, AirBNB no longer presents a compelling value proposition in the majority of cases. This is certainly possible.

Sounds a lot like Bitcoin and some other tech stuff. Where the conceit is that is doesn't have all of the externalities, until it's realized that they are functional and useful.
We should talk William. I run CentUp.org and we use standard currency versus something like Butcoin. Half the battle is having people be able to pay you easily (BTC is not an easy option for the average consumer) and the other half is incentivizing your audience to give you donations. I'm Len at CentUp dot org if you want to chat.
The Worst Part of YC
https://www.tinkercoin.com/ will be nice, $20 worth of BitCoin one time.
I really appreciate your sentiment. I will say this (and again I do agree with you): bigotry of varying degrees is so common and so engrained in society that if I were to bother to recognize its presence consistently, it would quickly become unsustainable.

I do try and find ways to point out the "not okay" aspects of situations when I can, but it is rare. Here, for example, I took a leap of faith in the HN community for it to be okay for me to criticize the knee-jerk reactions of the aforementioned respondees to the original post. For me, it's just such a "weak" reaction for said people to complain in some rare, ambiguous case that in no way relates to them personally, about discrimination against white males. "Weak" is really the only word I can come up with right now.
Except in this case, seeing as it seems that Mint hasn't got new ssl certs or private keys, the only way to 'act accordingly' is to never use the service again.
The absence of a clear response indicates to me that the brass is currently weighing the pros and cons of admitting there was a problem. This is the sort of thing where those who really weren't affected get way out ahead of this sort of thing with vivid detail. I deleted my account.
Even chess with a chess clock is like a walk in the park compared to SC2.

In an average game,the first 5 minutes has already decided the match.
Doesn't rekeying result in the old certificate based on the compromised private key being revoked?
Is this... a Let's Play of learning a programming language? Because it's surprisingly effective. I learned and I was entertained.
I don't think this would have helped us a lot on Go.

We occasionally get reports like "We're seeing [issue] on our system, but only when it's loaded with production traffic." Some bugs are simply impossible to reproduce in an isolated, mechanical way. (Or at least very hard for people who aren't totally familiar with the project.)

But often one of the core will take a look at those reports and say "Aha! That must be a consequence of [some change we made]." Then they investigate, poke at some of their code, check their assumptions, and eventually find the cause.

Another large class of bugs pertains to docs, for which the concept of "reproducibility" is irrelevant.
A lot of advice on lawyering up and fighting this tooth and nail, and gotta say, this is extremely childish and a terrible idea.

If you sue your company, you increase its chance to fail by an order of magnitude. If you lose, you can laugh as your former founders and friends struggle to recover to pre-lawsuit levels but probably fail. If you win you would've won worthless shares in a company that's shortly going to fail.

Be pragmatic. You even admitted yourself that you are not a great coder - be the bigger person and do what it takes to help the company succeed.

Oh and when you exit, negotiate for an automatic vest for 25-50% of your remaining unvested shares.
I wonder if all of this talk about his Adsense earnings and what he earns from Adsense is going to see his Adsense account getting whacked. My understanding is that the first rule of being a publisher monetizing with Adsense is: don't talk about Adsense.
C5: A simple, reliable, scalable, open-source database
This sentence: "No examples have surfaced of anyone actually exploiting the vulnerability" is incorrect. The Canada Revenue Agency revealed that 900 SINs (canadian equivalent of SSNs, but nowhere near as totemically identifying) were stolen due to the heartbleed bug. http://www.theglobeandmail.com/technology/mounties-chasing-v...
C5 is a simple, reliable, and scalable open source database which improves on HBase in every way. It is optimized for fast failover and can be used in production for both OLTP and analytics, eliminating a whole class of pipelines and bottlenecks. It is the first HBase successor, fully HBase API-compatible, developed from the ground up to run on the cloud installs with very easy to no maintenance and tuning. Failover happens instantly, which makes it a viable option for APIs, and all the data is accessible to Hadoop analytics flows right away. C5 takes full advantage of high speed IO (SSDs) and is simple to grow to hundreds and thousands of nodes as needed.
there is still valuable feedback to be had, no? why are some companies "particularly good" where others don't get accepted? "no reason" is paradoxical and i'm not really convinced it's a reason...
In the past month I have received roughly 100 € ($130) in donations.

I am running a much smaller site, Volafile.io, with maybe 200-500 daily users (most stay over a period of a few hours).
I decided against ads and instead decided to support the site with donations.

One hundred euro cover my expenses for about two and a half month. (I also give 10% to the EFF)

I assume that for most people the main reason to donate is because they feel the site is providing value to them. Value they can actively experience.
In return for their generosity I don't impose any limits on them. You can upload any amount of files without limits, download as much as you want, without countdowns or the like and you don't even need to register.
Reminding users of the value you're providing is key to getting them to support your project.

And this is where he made the biggest mistakes:

- He put donation button at the top of the articles

If the user hasn't read your article, you didn't provide anything valuable to him yet. Place it at the bottom.

- He put the donation there without any explanation

What do you need the donations for? Are you some cooperation trying to squeeze a few extra-bucks or just some poor guy trying to keep his website afloat?

- The donation button is just slapped on the page

It not only looks like he didn't spend more than a few minutes integrating it on the page, it almost looks sketchy.
Guide users through an additional page telling them what you'll do with their money in a few sentences. And I didn't even see his bitcoin donation button at first because it's on the opposite to the much more visibly placed paypal donation button. Even more so if you are using NoScript.

Those are just my few cents. I don't know if they'll help him if he's going to stop supporting his page with donations, but they should at least be of some use to someone else.
I'll be in touch. I'm open to anything at this point. This whole bitcoin donation thing was a great experiment and I would really like to pay for the site without any ads. I hate ads.
What I love about Python is that these hangups are mostly relatively obscure, due to the puritanical adherence to principle of least surprise by Guido and the other language maintainers. No language is completely without quirks though, especially one as old as Python.
One of my favorite things is to automate something. I feel like I'm giving away a personal productivity secret here. I suspect many people do this but not to the extent I do.

I can spend, for example, an hour automating something that would take ten minutes to do manually. To some people who don't think it through, this would seem like a waste. But that ten minute task might get repeated, so it's often a net win.

But taking a devil's advocate position, let's say the task only gets repeated three times, ever. So (ignoring off by one errors in my accounting) let's say when all is said and done I end up spending 30 more minutes, total, over the course of my lifetime, on that task. Sounds like a losing proposition, right?

I would argue even if the tasks are never repeated enough times to make up the time spent automating them (though many are), this expenditure of time is still worth it in a whole-picture assessment because at the end I have:

- New code snippets I can use for other things

- Increased understanding of the problem space and how to model it.

- Learned and refreshed knowledge of some coding techniques.

- A new tool under my control, which I can tweak and extend in any way I want.

- A good productive feeling and a clear conscience about my time.

- Fewer mistakes, and no learning curve, when I repeat the task.

And then... if not that, there's always refactoring legacy code ;-).
True, but people tend to take security in a very strict manner. (With just cause.) The mod could have said, "was not affected", but instead and using improper word use, said "is not affected[sic]". Someone can correct me if I'm wrong, but I believe the proper use is either, was not affected or is not effected, not some combination of the two. The true point is, the statement is inherently unclear as to when, much more so when you introduce faulty word use.
> I'm happy to say I've spent less than an hour playing computer games in the last 5 years.

Exactly why is that something to be proud of?
Your calculator appears to, among other things, allocate equity based on who paid for business cards.

Respectfully, appearances can be deceiving. Without giving away the secret sauce, it's fair to say that most of the questions in the calculator are not measuring what they seem to be asking for. To get to the truth of a situation, indirect questions often work better. I'll ask you to trust me a little bit.
ah, right. i didn't consider that their private key could have been leaked if they were once vulnerable (i was only considering passwords and the like). good point, thanks!
check out buffer and hootsuite
top quartile is useless, it's not even master league
master league is top 4% and it still doesn't matter there as much
Furthermore servers that weren't even using OpenSSL or the particular version(s) that were susceptible. What is the actual percentage of servers that needed to react to this?
That's crazy. Did your friend mention how he managed to land the internship? Was it a software based role?
Is there something wrong with me that I am not even remotely outraged by this?
I truly did want it to succeed, but I'm a content guy, not a business guy. Maybe that's my problem. I'm 1 guy trying to do the job of 5-10 people while holding down a demanding day job.
Proper use is to communicate abundant details to remove any ambiguity in phrasing.
Glass isn't recording all the time. Just as the camera on your phone isn't recording all the time...

Of course it is possible with the right application installed that you could accomplish that for either device it isn't typical.

Just as with your cell phone, you need to be respectful of others. If someone doesn't want me to film them with Glass, I don't. It has never been a problem for me and frankly once I've spoken with others and explained how Glass works, it isn't a problem for others around me.

No one cares if you are carrying a camcorder around, they care if you aren't respecting their privacy and are recording. That is a social problem and not a new technological problem introduced by Glass.
Not sure what adapter you are using, but the one that ships with the 2012 or 2013 air is tiny and very light.
That's a really long-winded way of saying "Get your twitters off my lawn!"

It's a shame, though, because surely there's a deeper story here? Why are people doing this? Are they all teenagers? Do they know each other? How wide-spread is it? How are the airlines handling it?

In other words, it would be nice if the Post did some reporting instead of the "grumpy columnist" bit.
Intuit Not giving a Strait answer, next you will tell me water is wet...

Go try to read some some of their dev docs.... I do not believe anyone in the company can give clear and concise responses to anything.
Should the Oculus $2 billion have gone to this man instead?
Better bash in 15 minutes
I'm not sure "secret sauce" is something people should be looking for in founder equity allocation.
If you're hearing it a lot, then perhaps there might be some truth to it? You can refuse to believe whatever you want though.

I agree I'd like to see a real study about this, but yeah anecdotal evidence is all I've got.

I know of at least 4 landlords like this, and the set of people who I know is an extremely limited sample size. How many you encounter probably correlates to how many homeowners over the age of 60 you know. These are people who have already paid off their buildings, which is usually also their home, and have decided that the potential income stream is just not worth the hassle of renting out their extra units and potentially getting bad tenants. Especially if they have been vacant a long time and would need some sprucing up to put on the market. They are retired and comfortable as it is and just dont want to deal with it. Better to just use that unit as storage or an occasional guest house for family or whatever.
1)

Lets just call a do-over, EVERYONE generate new private keys and request new certs. Any cert created before April 10 2014 will be considered suspect.

2)

Create a bloom filter for revoked certs. Have a remote cert revocation server/cache so I don't need to have a 50MB file of revocations.
I found a bug: http://puu.sh/8arsr.png

The very first planet started on the absolute edge, then when I added a Dwarf Star pretty close to the Sun, it altered the orbit such that the planet went out of bounds but it didn't kill me.
Technically these are v.2. v.1 devices were replaced for v.1 Explorers in December.
I dunno... Probably worth it from a netsec point of view.
It's really too bad, their basic product - turbo tax free file uses the 1040 EZ form and can be confusing.

My gf who is a student was told by turbotax she owed over $300, after doing it on paper, the old fashioned way, the tax liability was 0. Why? The tuition deduction didn't apply on the EZ version of the form.

Ultimately turbo tax takes a conservative, strict and rigid approach to taxes, but as anyone knows this isn't the reality of doing taxes. For anyone with a moderately complex return, I think it's better to hire a tax professional, then at least you'll LEARN something for your money (which can be about the same amount!).
So nice to see a plan come together.
Yes, clearly it is a problem that only the rich are able to have the resources to get ahead. But this is a much bigger problem than who's able to become a doctor and who's not, it has to do (imo) with the greater issues of society, like new parents being unable to provide high quality preschool education, mom and dad still working when kids are teenagers and need attention and guidance, and so on. I'm a fan of quasi-socialistic, progressive-taxing to ensure everyone gets the resources.

I'm from a brown immigrant family. Brown/Asian immigrants seem to be exceptions everywhere, in that they're usually poor starting out and still persevere and make it through medical schools and whatever else. My family now is doing quite okay, but is probably still below the average residency student's family. The way it looks to me (anecdata), the average residency student's family has a household income of 1mil+. My family's household income is barely 200k, so make of that what you will.
Doesn't work, since rekeyed certificates are often (mostly?) backdated to have the same valid-from date as the old certificate.

I updated my key and certificate, and for the browser-visible certificate metadata only the fingerprint changed.
Somewhere YC is doing ranking of applications. When ranking gets done some function does get applied to each group. It might be beneficial for YC to know how this function works so they can debug it. For instance the YC's ranking function can generate set of components that contributes to final rank.

If YC wants to scale it is imperative to understand their own ranking ranking function. If we say that I have no idea why group A was considered better than group b then its not very scientific and there can be not much hope to improve something that we don't understand. Of course, it's different matter if this information is passed back to group because I suspect that would make ranking function more vulnerable to gaming.
If they make a lie that can be proven, they invite liability ($$). If they make an unclear statement and people foolishly trust then to mean more than they say, they skate by. That's why users should always assume the vendor is being intentionally deceptive.

This is mint, for heavens sake, who do all kinds of contortions to downplay the fact that the whole service relies on the having all your passwords and banking details, instead of using their clout to push for sane Oauth-style access tokens for limited access to bank accounts.
I don't think so.
I found these two very amusing even:

"@AmericanAir hello my name is Ibrahim I think you guys are the BOMB!!!!!!"

"@SouthwestAir I bake really good pies and my friends call me ″the bomb” am I still allowed to fly?"
I agree that they shouldn't publicize which specific other versions of openssl they use/used, but they should be much more forthcoming about what systems (and potentially keys) in their architecture were affected and what data such systems had.

For instance, at my work, we very explicitly said that only two internal systems, our wiki and our issue tracking system, used that version of openssl. Those systems had no user data and had a different set of certs. It is essential to give details.
http://blog.taximagic.com/heartbleed/
the problem with that is: Starcraft is really like playing chess on several boards for time and if you run out of time for a move your opponent can make two in a row

this is because you need to be at several locations at once
If the human brain was simple enough to be understood it would be too simple to understand.

We will glean bits and pieces but a detailed functional understanding of an emergent system as large, containing as much feedback (within feedback), and with as enormous a connectivity as any large (or probably even small) mammalian brain is far beyond any reasonable expectation ever.
I would definitely watch a video series in which an experienced and talented programmer tried out various programming languages for an hour and gave first impressions, comparisons, etc as they hacked something together during the video.