skysight-inc/HackerNews huggingface dataset:
Ah ah, when reading the title, I expected to read an article about moot, 4chan's founder. Maybe this could be one of the incencitives for the name change ?
>The rest (retiring keys and stuff) can not be handled by them due to nature of the problem.

And they actively refused to let people know when they were safe to do that. That is the problem.
Ya I actually completely agree with everything you said, my main complaint though is that the difference between my 16 MHz LC II in the early 90s and my blue 333 Mhz G3 iMac was almost two orders of magnitude, whereas my 2.3 GHz i5 Mac Mini only feels say 5 or 10 times faster than my iMac did. The question I ask myself is if Moore's law can no longer lead to faster computing, then what good is it?

For parallelism, I have lost hope that there will be much progress in the compiler automagically parallelizing things like for loops in C++. There's some cool stuff with SSE etc, but it all feels fairly ineffectual to me. Probably people will just move to a new language like Go or Haskell/Scala and just use C for glue code. I could maybe see something like Groovy for low level languages though, where it makes global variables illegal and does some other things to eliminate side effects and then compiles to, say, Go for the 10/100/1000x speedups we'd expect for things like graphics or matrix math.
Age, momentum; "network effects."
[..] http://www.haskell.org/ghc/docs/7.8.1/html/users_guide/type-... [..]

This extension allows programmers to use the list notation for construction of structures like: Set, Map, IntMap, Vector, Text and Array. The following code listing gives a few examples:

['0' .. '9'] :: Set Char

[1 .. 10] :: Vector Int

[("default",0), (k1,v1)] :: Map String Int

['a' .. 'z'] :: Text

http://www.haskell.org/ghc/docs/7.8.1/html/users_guide/type-...
I could live with simplifying the proposal to just list CVE numbers and timestamps.
> Why is a nautical mile 1 MOA and a statute mile something else" is the more interesting question, IMO

Lets handwave a conspiracy theory:

The Sumerian Ku was 518.5mm. A SAR-kus (60*60 kus) 1866meter is nearly same as a sea mile by 0.7%. One ku per second equals one sea mile per hour, equals one knot. So ancients did already know the size of earth by one and a half digits in 60er system (1/120). This required a mathemagical wisdom, like knowing how to compute square roots and pi to several 60system digits behind the comma, that was lost after 333bc.

Weights and measurements got mostly smaller and seldom bigger over time. The Sumerian mine lost 10% to become the lbs. Kings did declare the weights and length measurements at their time. Make the rod a bit shorter, if you have to hand out parcels after an invasion, and you have a good loot left for yourself. Use the bigger weights, after asking for ransom of a city, and even throw your sword into the balance, with the words VAE VICTIS! But making the weights bigger was a seldom exception. More common was the gain in declaring them smaller.
Medicare Payments to Providers in 2012
For those who write large scale applications, web or otherwise, the mio io manager improvements should be especially exciting. See http://www.reddit.com/r/haskell/comments/1k6fsl/mio_a_highpe... for a prior discussion.
How? Wouldn't a password manager manipulate the DOM directly?
> Why should package maintainers be hearing about this any sooner than me?

Because they vend updates to the vast majority of users. It's about maximizing people's ability to get the fix quickly upon public disclosure.

> ... they needed to take action, which in this world of plentiful managed hosting, is really not typical.

What action do you think you need to take? Revoking certificates? Almost nothing checks OCSP or CRLs anyway, there's hardly a rush.

All this marketing has done is sent ill-informed people scurrying.
Why your VC funding is worthless without a plan
I have a q&a site with 4 million visitors a month - an ESL learning site. We have 2 employees, total cost <1 million :D - 1 million, even saying that makes me laugh. Completely coded by us from the ground up. This says https://siteanalytics.compete.com/quora.com/ they have only a million visitors a month??? - I'm guessing that must be wrong.

My question: What in pickled f*s are these people doing with 80 million on a Q&A site? How far out of the reach of reality is this industry?
I am not sure why you are getting downvoted for asking a simple question.

It could be a security flaw because you discourage using passwords that are truly randomly generated.
ODF vs. OOXML: War of the Words Chapter 5: Open Standards
Isn't Yahoo one (of the many) sites affected by heartbleed?
I simply asked how that constituted a security flaw, but thanks for the snark.
I had a bash a while back at getting a snake game to play how I wanted:

http://waynecrouch.co.uk/jsnake/
(source: https://github.com/wgcrouch/jSnake)
While this is nice, it results in a big static lib(27M) to include in your app. This might be okey for some games, but maybe not for small apps. I was very interested in a Haskell app, but eventually gave up because of this...
This is a really cool tool:

http://projects.wsj.com/medicarebilling/

Does anyone here know much about Ophthalmology?

What is a "Ranibizumab injection"? It's making bank!

The top guy does 37,075 of these are year, at $320 a pop.

That's about 100 a day....
The market value of Heartbleed
In dollars, how much was Heartbleed worth to Codenomicon? How much would it have been worth to a blackhat?

If a blackhat discovered Heartbleed or an equivalent vulnerability, wouldn't they just use it secretly?

Assuming Heartbleed is worth much more to a blackhat and a blackhat would have exploited it secretly, the scariest part about Heartbleed is that it should change our estimate of how many equivalent vulnerabilities there are in the hands of blackhats.

(A weakness with this argument is that the market in vulnerabilities might not be liquid, but that doesn't change this analysis very much.)
KeePass can use a virtual keyboard to type into stupidly designed fields (no need for DOM), but not all of them. Many use the clipboard to some degree.
I was chuckling a lot and telling my wife "I feel like I'm watching parts of Hacker News and Techcrunch come to life"

It's satire but doesn't seem too exaggerated (unfortunately?).

My favorite was the marketing bicycle meeting. It seems like it would be such a silicon valley type thing.
I guess that is something of a double-edged sword then. You might force someone to use a weaker password, but then hopefully they wouldn't be keeping it in a place where they could simply copy/paste it. This really starts to delve into the whole "security is a gradient with tradeoffs" situation.
The way Medicare for these high-reimbursement specialties (Ophthalmology, Radiation Oncology, and Medical Oncology) is that the Doctor's practice will pre-purchase the medications/injections/treatments before administering to patients and then Medicare will reimburse the practice. These doctors are certainly not taking home anywhere near a fraction of that number.

See: http://oig.hhs.gov/oei/reports/oei-03-10-00360.pdf

The executive summary discusses how two injections used for treatment of Age-Related Macular Degeneration are purchased.
Internet Of Things and the future of machine to machine communications
What's critical about nasa.gov? It's just a marketing facade. Not patching it means nothing.

I'm not saying that NSA did/didn't do X. Just that the above about .gov domains is not a valid argument. Intelligence gathering trumps trivial service to citizens.
In practice the only way users are going to discover these "features" is by accident. How would someone be notified the behaviour is changing? The About page nobody reads?
Marketing is entirely the wrong way to get the people who release fixes to scramble. At least at the top few tiers (package developers and distribution maintainers) you know the organizations necessary to contact, and how to contact them. If the orgs are worth their salt, a descriptive email to their security contacts is faster and easier than a marketing campaign.

Marketing is useful to get sysadmins too lazy to subscribe to security announcement mailing lists to apply the already-released patches or take other mitigation.
I'm curious as to how that would affect a password manager? I was always under the impression that they would directly manipulate the DOM (or perhaps alter the outgoing request)?
You do know that a URL doesn't have to map to a particular path in the filesystem, right? You can load the resource's representation from anywhere you want.
How is patio11 using this "to capitalize" and "to market himself"? Anyone who follows him knows that security-related "PSAs" are a staple of his Twitter feed. Combine that with the fact that he writes about marketing on a regular basis and this post is very much par for the course. Both his PSAs and his material on marketing and business are a real service to everyone. That's why they've been so popular on HN for years.
One really cute feature that some systems folks might like is there's now support for calling the CPU/hardware prefetch instruction where applicable. http://www.haskell.org/ghc/docs/7.8.1/html/libraries/ghc-pri...
Those things are very far off from the point.

If you buy Purina, you're paying for dog food. If you donate money to a proposition that opposes gay marriage, you are paying for a proposition that opposes gay marriage.

I intentionally avoid Chik-fil-a, The Salvation Army, etc. by choice. However, if someone was pro-LGBT and still chose to eat Chik-fil-a, I don't really care. The only time it would be comparable would be the people who intentionally started eating Chik-fil-a as a show of opposition to the people who were boycotting it.
Part of getting the fix out there is marketing. If the fix is out there and no one knows about it, or the powers that be don't care, what good is the fix?
Somewhat surprising. I'm just a data point, but I rarely hear, see, or visit Quora anymore. I don't honestly see the difference between it and heavily moderated sub-reddits.
Would a clause in LGPLv3 that exempts the publisher/distributor from limitations beyond their control (console/iOS restrictions) help?

Also, I think the the user isn't prevented from recompiling and running altogether; a user can get a developer account. Although, I guess that presents an additional cost, something (L)GPL might be against.
If they didn't already have a tested deployment procedure, that is a bigger indictment upon their professionalism than the woeful communication during the incident.
I'm not a data scientist but I'm guessing this data is somewhat normally distributed with a long tail on the right side. I would also venture to guess that if we looked at individual patient spending we'd see some patients spending millions per year. (Though w/ HIPPA maybe anonymized data isn't even available.) Both patients/doctors that are outliers should draw additional attention as the chances of fraud are increased, but the distribution is probably somewhat normal.
Thanks for pointing that out, I never made the connection. Anyway, I just found this out today and thought I would pass it on.

"The GPS satellites also have NUDET (Nuclear Detonation) sensors on them to detect nuclear detonations almost anywhere on earth." Which is reasonable as it's run by the airforce and they want global coverage, but I can't help but wonder which was the original goal nuclear detonation detection or navigation.
I'm curious what the business case was for open sourcing the code. Maybe to create an ecosystem?
JavaScript Frameworks: How to learn them quickly
> A rule of thumb I've found that can be accurate is you should/can charge about $10/hr for every year of experience you have, and should be working for clients or employers that see value in paying for that kind of experience.

This seems REALLY conservative IMO. If I went with this model when I started consulting I would have quickly gone out of business. Have you had clients that ever said your rates were too high?
This isn't about inconvenience, it's about having patches in user's hands the moment the vulnerability hits the public.

> I also think it is a radically borked threat model which suggests that attackers only find out about vulnerabilities when the man-on-the-street does rather than when really-savvy-vendor-folk do.

And yet, this is true. A small number of people with a vulnerability provides a small threat exposure, because their attacks are simply more likely to be targeted.

Everyone with a vulnerability provides a large threat exposure, because suddenly every single script kiddie on the planet had a window to target a Python script at Yahoo or GitHub or Amazon and troll through web server's memory.

You think it was worth exposing GitHub's private company repositories to every script kiddie on earth, just because a small number of people had an incredibly valuable zero-day that they would wish to hold in reserve for high priority targets, lest it get burned and they lose the zero-day?
"Hackernews should have been the correct place for generic tech advise but we don't see questions of that nature here."

In my experience HN isn't a great place to ask questions like that, at least not any more. I tried to post an "Ask HN" question about pricing hardware and working with re-sellers the other day. First, under a newly created account so I could share more details; that submission was immediately killed I assume as a preventative measure against spam. So then I posted a much more generic version asking the same question under my typical username it floated to the bottom of the new page w/o getting any votes or responses. So I went over to Quora posted the same thing anonymously and had a reasonable answer and pointers to things to read up on in a couple hours. I like HN and have been reading it regularly for years but it isn't a replacement for Quora
Neither am I...

Wouldn't using a random password and copy/pasting it imply they are storing it somewhere unsafe?
Can I PM that to you?
You didn't watch the same episode I did. TJ Miller is hilarious
Anything that was in memory was potentially leaked in a way that can't be traced. Certs, SSH keys, user passwords, database passwords...

Oh, and if an admin logged in at any time during the window in which you were vulnerable to Heartbleed, or if any similar credential ended up in memory in any way during that period - consider yourself rooted.

Heartbleed is a "burn down the server, redeploy, restore database backups, expire all credentials" event, not just an "apt-get update, done" problem. And it hit over 2/3rds of HTTPS websites (ideally: anything with passwords, then some).
1) Meet with business people.
2) Tell them they need to focus on [Insert current industry trend here]
3) ???
4) Profit.

Currently mobile (apps, web) and cloud services.
Ranibizumab is the generic name of Lucentis, an injection into the eye that is used to treat age-related-macular-degeneration. The way Medicare works is that Lucentis is pre-purchased by the ophthalmologist and then reimbursed by Medicare. The doctor is taking home only a fraction of that reimbursement, as the majority of that reimbursement is going directly to the manufacturer.

I posted this elsewhere, but the way Medicare for these high-reimbursement specialties (Ophthalmology, Radiation Oncology, and Medical Oncology) is that the Doctor's practice will pre-purchase the medications/injections/treatments before administering to patients and then Medicare will reimburse the practice. These doctors are certainly not taking home anywhere near a fraction of that number.

See: http://oig.hhs.gov/oei/reports/oei-03-10-00360.pdf
Have you read the rest of Leviticus? Do you know of anyone who keeps all of those rules? And not without reason; those rules have been overridden in the NT.

As far as I know, homosexuality is mentioned a grand total of 3 times in the entire bible, some of those were arguably a lot more specific than homosexuality in general (like temple prostitution or rape), and none of them from the mouth of Jesus Christ himself.

Compare this to the number of times Jesus himself insists on loving everybody (neighbour, enemy), or argues against wealth.

Don't just cherry pick a few verses from some dark corners, read the entire thing, and understand its context, understand what the core message is. Really, if you listen to some people, you'd think that the bible is all about Genesis 1 and Leviticus, and anything later is pretty much irrelevant (except maybe the Revelations of John).
This sounds a lot like Robert Shea's & Robert Anton Wilson's division of humanity into neophiles and neophobes in the Illuminatus! trilogy.
Analysis of suspected MH370 pings recorded by Ocean Shield
Some other features that can help classify a liberal:

Weaker upper and lower body strength.
Weaker immune system, lower T-cell counts.
Weaker ability to detect odors and tastes like burning smoke and acrid compounds.
He needs to learn a valuable lesson. don't shit where you eat. The question isn't about firing him. Do you really want someone you can't trust working for you? If he's willing to stab you in the back personally you don't think he'll stab you in the back professionally? Do you really want someone that has no ethics working for you? Do you really want someone that dumb working for you? The only question, how hard/long is it going to be to get others crossed trained on his job until you can fire him?
Doesn't heartbleed let an attacker hijack the keys? Then they can man-in-the-middle the connection, and spoof the file so that the website appear to be not vulnerable to the attack.
My guess, and this is only a guess, is that the physician is focusing on routine procedures (cataract surgery) and has optimized the procedure greatly.

Someone else preps the patient, doc walks in, spends 15 minutes doing the surgery and then moves to the next patient. Nurses or other medical professionals care for the patient after that.

Unfortunately I can't find it anymore, but there was an article a while back about physicians performing an amazing number of surgeries and if you calculated it out (based on the time estimate by Medicare) they were working 200 hrs per week. In the end, the physician had just chosen to specialize in one procedure and optimized everything about his clinic around that.
The only way for a "consultant" to average 38.8h per week is to either have a full time contract or to work 50+ hours a week. There's overhead in consulting, bookkeeping, marketing, sales, etc. There's no way you can bill an average of 38.8h a week unless you're working really high hours and I don't understand how that could be an average across the industry.
These are for sure good reasons to not use infinite scroll. But I think this is more like an implementation problem than a problem with infinite scroll itself.
This does not include cost of injectable or infused drugs. These are not paid separately by Medicare.
Dumb question here: Any way to maybe download all the PDF/HTML books in one big collection? I could imagine it being pretty huge, but I might interested in downloading it.
Password managers can protect you from being "Hacked" in the manner of destroying all your Gmail, and can help prevent your computer from being enslaved by a botnet. And probably help protect your bank account and any online medical records.

But if the NSA or any competent government targets you as an individual, no password manager can help you. TrueCrypt might help, but even that has vulnerabilities.
I may very well run a service that my customers' bodily safety depends on the encryption of the SSL connection

If that is the case, your FMEA needs to include undisclosed vulnerabilities in your communication channel's encryption, and the mitigation can't be telling the internet your particular opinions on responsible disclosure.
No. My passwords are stored very safely.

Edited: you were probably downvoted for using scare quotes.
As IT Pay Rises Students Pursue ‘Big Names,’ Mid-Size Firms Work Harder to Hire
Oh, I'm not actually in the UK at all, I just meant I also need to keep a FON router connected.

In that case, I assume the best option would be to put a decent router behind the Homehub (configuring the latter in bridge mode or similar) and then treating all traffic beyond the inner router as public.
HN: I was fired today, is this even legal?
Hi,

I've been unemployed for a while and recently got an $8 an hour job through Kelly services. The name of the company is called Juno Pacific in Santa Cruz. I did excellent work, got along with everyone and had nothing but praise from my immediate supervisor. She jokingly said 'good job ,you deserve a raise' and other such comments regularly.
When I was quizzed at the little testing stations I worked at I did fine. It was easy rote work.

We had a meeting yesterday where the upper management ( who I had never met ) called in all the workers in my shift and told us about the productivity incentive program.

The productivity incentive program is this:
If you give the company any ideas that make them more money you are rewarded with a pizza party and you get to spin a cardboard cut out wheel that has 'big prizes' like a $25 amazon gift certificate. The grand prize of the cardboard cut out wheel is an ipad.

The manager mentioned one example of a single employee that thought up an idea that saved them $5000 a month. Presumably this person was rewarded with a pizza party and got to spin the cardboard cut out wheel and claim their prize.

The manager said that he would like to see each employee come up with at least 3 ideas.

I raised my hand and said that "if anyone here can make the company an additional $5000 a month you should treat them as a consultant and simply write them a check for $1000". I also said that the incentive program as is is a bit "maddening" and silly. I also mentioned that I've seen this kind of thing before at companies while implying that its simply not fair. After the meeting was over a few other employees expressed gratitude because its what they were thinking as well.

Today I was fired without notice. The person that was given the responsibility to notify me didn't give any reason except that my 'outburst was inexcusable' and that the decision came from upper management.
Around the world without flying.
I used to answer questions on Quora. Hacker News has captured the bulk of that free time. But I still post my esoteric questions on Quora. For example, asking about the source of a Manhattan smoke plume [1], the species of a bird I spotted on a walk [2].

[1] https://www.quora.com/New-York-City/What-does-the-smoke-NYC-...

[2] https://www.quora.com/Birds/What-is-this-bird
Its part of the initial conversation you have clients. The goal with the initial meeting isn't to focus on how you can fix all their problems with technology, it's to focus on truly understanding the problems they have from their perspective. Once you completely understand and empathize with the issues their having only then can you formulate an appropriate business strategy (which may or may not use technology) to address their problems.
Ok. That makes sense. I'll put away my pitchfork. But a follow up question. Why are some offices doing so many of these? 100/day. That's like a Ranibizumab assembly line.
Howto make rendering engine
I love the concept and I thought a lot of the jokes were pretty funny but...

I'm not sure how they'll keep it funny over more than a few seasons, seems kind of like a one trick pony (and maybe that's just fine).

I trust Mike Judge, so I'll likely keep watching, but what made King of the Hill so magical was how he was able to show our changing world through the eyes of a simple propane and propane accessories salesman. Plenty of content there; likely not as much with SV to survive maybe a two season run.
That's called "buy and bill" and that is paid separately from the physician fees discussed in the article.

If you did include the cost of drugs, you'd be correct that physician salary is only a small fraction of the cost of treating a patient. Since some cancer drugs cost over $10,000/month, some clinics spend 90%+ of their revenue just on drugs.