skysight-inc/HackerNews huggingface dataset:
i don't think Einstein back then would have had a higher chance of surviving than some other random person.

Possibly there was very little advantage being a genius would give you back then? Especially if you count the life expectancy.

If everyone had a spear and you were the genius that invented the bow and arrow, then one day later, everyone would copy you.

Also, an older society of average people would have created more technology than a newer society of geniuses. Or even if a society of thousands developed, they would be able to create more advanced weaponry than a village of 40 geniuses. So maybe the group of humanoids with the genetics that made them a super social species with the predilection for massive groups would give them a huge advantage over a genius group without the genetics to seek massive societies.

A city of 10,000 people all with "IQ" of 90 that has been around for 500 years would annihilate technologically a village of 40 all with "IQ" of 150 which has been around for 100 years.
I... don't think the GP was suggesting he should have done that...
You're right, we need to add social skills and domain knowledge to the list.
>I love how there's endless attempts to portray him as a sinister, self-interested actor.

I've found most people I talk to do not think he's sinister at all. I (and may others) think he's one of the best non-fiction writers of our time. But for this particular book, he seemed in over his head, which made him susceptible to believing misinformation or at least misinterpreting the significance of some information he came across. I still think he's great, and I'm sure I will devour his future books with as pleasure as I did with Liar's Poker and Moneyball.
I feel like Inside is mostly a response to summly. Calicanis basically said, "this computer-generated content doesn't work well, I'll do the same thing by paying reporters.

But I feel like that misses the larger point. We're all instantly connected and publishing now, and realistically every single person can act as an editor, fact-checker and reporter; it doesn't make sense that we still use the same model as we did in the 1800s to create news.

Basically, we think we can create a world where news is entirely controlled by everyday people, and not governments or corporations.
I'm a huge fan as well. I even post my notes on each episode at http://www.personalopz.com. The podcast came on my radar a year ago on April's Fools Day when they switched with Startups For the Rest of Us.

I'm technically location independent from my job but not location independent family wise. I live vicariously though Dan and Ian for the time being.
Haha, we'll look into that :)
But you are not paying for a service, because funding OpenSSL is a classic free rider problem: the company would be better of not funding OpenSSL, even though all companies would be better off if they all funded OpenSSL.

By that logic, the tax accountant could argue that they should arrange a company's finances so they pay more tax, in order to pay for more "stability" by funding the government.
This part sums up why I quit using OS X for my personal projects: "And if your software crashed, you didn’t make excuses. You just made damn sure that particular scenario didn’t happen again. Ever."

In making sure nothing ever crashes, Apple has moved more and more to an OS that is too restrictive for my taste.
Considering he just pulled a shadow file as well, it's not pretty.
The theorem says nothing of the sort. By your argument, if I flip a coin 10M times, where heads is 1 and tails is -1, and get a mean of 0, then I will very rarely see tails. You're confusing mean and variance.
It's intended to, but it doesn't.
Fees million at most. Real estate + connections are commoditized - tens of thousands a month for starting out.
You're correct. I had a typo and meant to specifically write "L-1A/L-2".
Everyone on that exchange has the same access to the same types of orders. HFTs only get priority if someone gives them priority. If these order types are so powerful, why aren't everyone using them?

Also, I will reiterate: HFTs NEVER get fills on quotes that are worse than any other participant on the same exchange. That violates RegNMS, and is straight up illegal.
The motivation for continuous integration I can certainly understand. I'm sure many of us have worked on projects where someone was working on a branch for an extended period to implement some big new feature, and then ran into the mother of all merge conflicts when they finally wanted to release their changes for general use. I don't think CI is appropriate in all cases, but I find it a better strategy than mega-merges for most projects, most of the time.

It's specifically the motivation for continuous deployment that I'm curious about here. Fixing bugs quickly is obviously a plus, and I found the point 'twic mentioned about rapidly instrumenting a production system interesting. These are good arguments for being able to release an update on demand, and indeed for continuous integration as a technique to support that goal.

However, to me neither seems like a strong argument for routinely releasing multiple updates per day. I've always been a little surprised that so many web sites and SaaS applications seem to take pride in making such frequent changes, even though doing so surely incurs some risk of breaking things and typically also causes some degree of instability in the UI. I was just wondering whether anyone had experiences and/or actual data they could share about whether the practice made a measurable improvement to, for example, revenues or reported customer satisfaction -- something concrete that might outweigh the risks -- or whether it's more of a subjective preference for that way of working.
So Cal Swimwear
Hello!! I'm Katelynn and i am currently making homemade bathing suits for women. I would be delighted if you could help out my future buisness in any way possible! This new line of bikinis will be comfortable, afforable and very adorable. I might even make mens board shorts! Any help or advice you can offer is wonderful! Thank you for your time and i hope to hear back from you!
Many Thanks! (:
Katelynn
>They said the phone would employ retina-tracking technology embedded in four front-facing cameras, or sensors, to make some images appear to be 3-D, similar to a hologram, the people said.

Reminds me of the zSpace. (https://zspace.com) Pretty neat stuff.
Sorry, but I'm not going to link to a huge convoluted mess of variously versioned DLLs just to get standard C library functions. Maybe the situation is different with C++ (probably due to no real ABI standard), but the C library functions shouldn't change since they were standardised. If an application breaks because the internals of a library were changed, that's none other than the applications' fault.
Not only this, but there is delay/wait-list of over a year to get your 501c3 status approved at the moment.
And in contrast to what its name suggests, youtube-dl supports 150+ different services: http://rg3.github.io/youtube-dl/supportedsites.html
I understand your point regarding HeartBleed, the title and SSL. However, does that make it acceptable to not use some form of SSL on the non-authentication portion of the site? And are you saying they do?
False - HFT firms have access to special order types. Example is Hide Not Slide, which is mentioned in the book and also here [0].

[0] http://online.wsj.com/news/articles/SB1000087239639044398920...
I suppose my comment was silly and snarky. Clearly Michael Lewis is a gifted writer. But he's not a journalist, and he takes sides. He uses his enormous talent to demonize some and lionize others, when often the facts of the case could easily be viewed from another perspective. The problem isn't simply that Lewis's critics don't have the facts on their side; it's that they lack his eloquence and his podium.

To that end, referring to The Blind Side, the fact that Lewis was a schoolmate of Tuohy at an elite prep school in New Orleans, and the NCAA did investigate the Tuohy-Oher relationship, its not beyond the realm of possibility that Tuohy got away with something in adopting Oher.

As to Billy Beane, thanks to Michael Lewis he's touted as a visionary who literally changed the game of baseball, except the teams he put together have never been to the World Series, and over his GM career, the A's are slightly over .500. It's possible that he's not so revolutionary.

This is not to say the Lewis gets his facts wrong. He doesn't by and large. But non-fiction is like photography in that it is not a clinical representation, and the same event from different perspectives can be understood very differently.
> tens of thousands a month for starting out.

I couldn't find any reports of prices that low. According to one article, at least, Spread [1] charges ~$300k a month.[2]

[1] http://spreadnetworks.com/network-map/

[2] http://www.motherjones.com/politics/2013/02/high-frequency-t...
How to recruit a Linux guru
The DoD is by far the largest, wealthiest, and most powerful institution on the planet when it comes to the broad range of things it's involved in.

Saying DoD attention and funding for something is 'unsustainable' is sort of like saying the efforts of our planet to solve some problem are not sustainable.
I tend to have much greater success in accomplishing tasks if there's a collaborative way to do them with someone else.

I'm currently tethering my laptop to my phone, so this may not work, but I'll try setting up a Google Hangout On Air with the YouTube plugin for simultaneous viewing in a few mins.
The discipline, as he said, to Not Be Stupid. There's still a floor on the error rate, but it's entirely possible to use these tools responsibly.

I will believe Rust when I see it. We may, however, look at Lua. That might not sell, though. Lua is amazing but I'm not sure a culture is ready to bifurcate its code base like that.

Given the complexity of all this, it's amazing we don't get a Heartbleed sized thing per week. The color and shape of this reminds me of when markets take a tumble because of a cascading failure - some poor schmoe ends up with a margin call and everybody sweats a lot for a while.

At work, I do this: "Are you done?" "Yeah, but I don't trust it yet." They're really nice about this.
Sorry. I said some pretty silly things.

See the new version of the posts. Hopefully it's a bit more coherent now.
Yea, you can't simultaneously say "Developer, don't do this!" and then "Well, to maintain backwards compatibility with developers who did it, we're going to let you do it. BUT DON'T DO IT!"

MS is in a tight spot. They have this maintanance mess because of their otherwise admirable dedication to backwards compatibility.
I am not sure how those guys did it, but I was talking to a friend of mine today, and I guess that it had something to do with forcing the server to use its private key to check for information sent to it. Then you use the heartbleed bug to intercept the intermediate forms on the information you sent to be decrypted/authenticated. Since you know the plaintext, the ciphertext and the intermediate forms, it should be possible to recover the key.

As I said, I am not sure that is right or if that was the method used to exploit cloudflare, as I didn't had the time nor the knowledge of openssl implementation to test it out, I am just throwing my guess out there before the official exploit comes about.

edit: formatting
You don't think some humans raped neanderthals?
HMO:

I'm a Rails web developer and Clojure hacker. I'm looking for remote freelancing gigs and don't know how to find any clients. Any help there would be great!

How I Can Help:

In the same vein, I'm looking to build up a github portfolio by contributing to open source on Github. If you have a project in Ruby or Clojure that you want to get me up to speed with and want another hand, let me know.

Email in profile.
> If these order types are so powerful, why aren't everyone using them?

An allegation made in Dark Pools was that the existence of the order types was initially deliberately concealed from most actors in the market. The claim was well substantiated, from what I could tell.
You might be spot on - 7,500 kilometers per capita and year in Germany (2011) and 15,000 kilometers per capita and year in the USA (2013). This gives the same ratio as the road fatalities do.
Now all they need is a search engine ...
"Nothing to do with the language"?

Seriously, apart from C, what other language cause almost any of their users to think: I must do my own malloc, or String type, or XXXX.

This kind of weird is typical of C.
Ok, I think your main idea was that since they've achieved consistently positive returns, then they're likely to keep it up. Even if that were true, the 800lb gorilla question is how they've managed to achieve such consistency in the first place.
Also possible to verify using OpenSSL commandline:

openssl s_client -connect 165.225.128.15:443 -showcerts \
-servername www.cloudflarechallenge.com

(Though to fully check, you need to compare certificates with the one off the real site, and ensure that his blog appears upon an HTTP request - to exclude proxying.)
spread has an interconnect between Chicago and New York but that is not generally useful for HFT stock trading since nearly every execution venue is in New Jersey.
I'm currently also an an L1 (B) and I've been thinking about the EB2 greencard. How would you say your experience was with the process?
Why do you believe only HFTs have access to hide not slide? That order type is plainly listed on DirectEdge's website, e.g. https://www.directedge.com/Portals/0/01Trading/Trading%20Pro...
I came to Shenzhen China because I'm a manufacturing guy and this is the place to be for that. Plus the 8% YOY growth and low labor rates here give a better chance for bootstrap success. And finally, yes, I got a hot girlfriend during my visit and wanted to stay a while. She's now my wife.

I first started a technical sourcing/manufacturing/engineering consulting company. Then later started a 2nd company that uses the experience and engineers in my consulting company, but instead of consulting we just do direct sales of custom designed products and tooling, like a virtual ODM.
Ask HN: Side project ideas for BlockchainTransactions.com?
Interesting to note that in Asian languages there is actually a word for "neither yes nor no":

http://en.wikipedia.org/wiki/Mu_(negative)#.22Unasking.22_th...
Declining is the same as acknowledging in this context, which he couldn't do.
You either have an epistemology about defects and practices to prevent them to the best of your flawed ability or you don't. If you don't like 'C' then don't use 'C'.

You really, really need an epistemolgy. I mean absolutely no disrespect, but railing about choice of language ( although I love the links you provided; heads on pikes outside the city wall ) falls flat.

There are entire quadrants of computing for which 'C' is a grindingly horrible choice. OpenSSL for one is not one of them.

For path dependent and beyond-our-control reasons, 'C' is just about the only choice for that.

'C' programs should be invisible and close to the wire. Examples like these should give us courage in the face of pressure to let go of something too early, while that still small voice is nagging you "It's not really done."
Not sure why you are being downvoted. This was my very first obvious conclusion.
Sometimes they suggest you don't pass through border control posts if your visa isn't 100% done yet.

While my H1B (later L1B) was processing, I was legally allowed to enter the US for business trips (Visa Waiver with ESTA), but the lawyers really recommended against it.

The border control people apparently can see the pending application and sometimes tend to be in the "I think you want to come here early and start working" mood. That way one might get denied entry which in turn has a negative effect on the currently processing visa.
Bug: OpenSSL implementation. All of it.
As doktrin said, they were originally concealed.
I get the feeling you're comparing NoSQL to what PgSQL was 4-5 years ago. Modern PgSQL has a pretty rich set of tools for handling schemaless data, and combines that with its traditionally strong support for relational data. PgSQL has a direction that cares a lot more about data than doctrine.

Though your last line makes me curious. What is an example of one of these new classes of product and service that can't be achieved with PgSQL?
any exchange member may submit a hide-not-slide order. there is nothing secret about them.
They have slightly positive return per trade, and they make millions of trades per day. Their PnL is the sum of their trades -- the expected values grows like O(n), while the volatility grows like O(sqrt(n)), so for n = several million, the probability their PnL will be negative is extraordinarily low.
What is your definition of HFT? Why exactly does it worry you?
Has anyone read the criticism of the book in question? The Amazon review linked to in the article is very informative. I just finished the book and it read like an advertisement for IEX.

http://www.amazon.com/review/R3PJO6KJGRMWUE/ref%3Dcm_cr_pr_v...
I'd like to see some of the labs providing APIs to some prototypes, sorta like this random number generator: http://qrng.anu.edu.au/index.php
Microsoft is hitting up a lot of Android vendors for licensing fees. They're not even trying to protect any particular intellectual property. They're just shaking down people for money.

It's Intellectual Ventures that was co-founded by two former senior Microsoft employees that's the worst offender by far.

Those companies that invested in IV probably did it for strategic reasons since barring that they'd probably end up targets.
i think, generally, the tendency to think openssl needs help right after seeing openssl need help is..ignoring the problem that there might be other projects similiar to openssl, who need help. its like donating to 1 disaster victim because she appeared in a news story.
this thing should be left alone and looked into after a few months(i dont know how long it takes for people to forget,actually) of no stories in the press about openssl.

otoh, if there were a foundation that collected money and funded many projects..it'd look like apache perhaps..

personally, i wouldn't mind an option to donate to apache or openssl in a humblebundle, nor do i mind an option to stick a donate button/widget on my website..
or even better, have the widget rotate recipients..
Does it matter about everyone else though? Your company values rock solid encrypted communication and it willing to pay a premium to ensure this it remains rock solid. The fact that everyone gets it is just a side effect of that.
About your question 4 -- Interior designers sometimes direct art purchases. The specialist whose sole job is to do this, usually for wealthy clients, or corporate clients, is called an art consultant. I know someone, for example, who directs art purchases for rooms of boutique hotels. That can add up fast.
i think because in a way i've insulted them by insulting all humans.

they can't face the reality. Which is even happening today. We hunt animals for sport and wipe them out. And we've wiped out even other humans that we've come into contact with and raped their women and children. Everyone has ancestors who were rapists and murderers. We have those same genes. It would not surprise me at all if it turns out that we hunted neanderthals for sport and wiped them out this way.

it is grim, but it's the truth.
OpenSSL heartbeat bug patch (CVE-2014-0160):

https://github.com/openssl/openssl/commit/731f431497f463f3a2...

> A missing bounds check in the handling of the TLS heartbeat extension can be used to reveal up to 64k of memory to a connected client or server.

Previous discussion: https://news.ycombinator.com/item?id=7557825
> If an application breaks because the internals of a library were changed, that's none other than the applications' fault.

The issue is that it becomes Microsoft's problem if popular apps break during OS upgrades. Breaking a high-profile app and saying "it's the app's fault" is a good way to attract angry blog posts on the top of HN.
I'm not sure I understand your argument. Arbitrageurs help with price-discovery and are useful agents, though much maligned. HFT, as Lewis describes it, is not arbitrage, it's front-running. This doesn't add to market quality, it's just information theft.
I agree that cloud hosting opens up many new vectors of attack, but I completely disagree about building the app from the ground up.

The larger your app is, the less likely it is to be secure. A better strategy is to keep your app lean and mean, and build it off of existing security technologies which have proven to be reliable.

But as we've seen with Heartbleed, some of your security measures will fail. Its important to follow the principle of least privileged, and to isolate your system as much as possible; for instance, Colin Percival uses stunnel to isolate OpenSSL from his webserver[1]. This solution is far from perfect, and it still puts your private key at risk in a Heartbleed-like event. But that majority of your user's data is kept away from OpenSSL; it limits your exposure.

[1] http://www.daemonology.net/blog/2009-09-28-securing-https.ht...
Not so - I don't think - because so many types in the C standard library are value types. Say you have an array of struct stat (the first thing that springs to mind) - now your program depends on the size of that structure. When its size changes, your code will stop working. The standard doesn't guarantee the size of things, only what members they need to have.
They were originally concealed.
Seen on Twitter a few days ago: "Heartbleed is the Red Wedding of the Internet". Thought it hyperbolic at the time, but not any more...
"If an application breaks because the internals of a library were changed, that's none other than the applications' fault."

I agree 100%, it's certainly the application's fault, but Microsoft has some very large corporate customers that it wants to keep happy, so in some cases it will eat the cost of cleaning up after sloppy developers.

I don't work for Microsoft, but the company I work for (we write expensive enterprise software) has a similar practice of bailing out customers who get into trouble by relying on undocumented behaviors... as long as the customer is important enough that alienating them could cost us significant future revenue. Being willing to provide support like this can differentiate you from your competitors. Not to mention that you can also charge customers extra for this higher level of support.

"Sorry, but I'm not going to link to a huge convoluted mess of variously versioned DLLs just to get standard C library functions."

You don't really have to do that. If you build your application with Visual Studio 2013, you link against the version of the runtime library that it uses, and your application's installer installs the redistributable DLL for that version (if it's not already installed on the customer's machine). You don't have to deal with any other versions.
They evolved into sperm whales which have the physical capacity to support such a massive brain. Sperms whales also think the research and link bait article are full of shite.
Usual Suspects: Someone fat fingered an upvote or HN is not always enthusiastic about "Me too!/That's awesome!" no-op comments.

Backup Suspect: Teetotaler/Brogrammer-hater. Doesn't like beer on the desk at work.
HFTs are making price impact happen faster than big players can stop it. That's improving efficiency. That's exactly what Lewis is complaining about.

It's not front running since the HFT is not your agent.

http://www.chrisstucchio.com/blog/2014/fervent_defense_of_fr...
Isn't it possible that they were us and we just happened to get smaller brains?
Ok, so the non-technical attorneys on the site are going to know what SChannel is? I think not.

I think their statement is fine.
Experiment: Eliminating Toast Sweat