skysight-inc/HackerNews huggingface dataset:
I can't help but think that all the drivers who are making trouble (in Seattle and now LA) are just ex-taxi drivers.
I recently finished my site QABounty.

I would get annoyed when I could not get anyone to answer my questions on sites like Stack Overflow so I created this site, https://qabounty.com/. It is basically your standard QA site but you attach a USD $$ bounty to questions. For example I have a question up at:

https://qabounty.com/questions/what-kind-of-database-should-...

The best answer for that question will award that user 3 coins (which can be withdrawn for about $3). I plan on adding my own questions of the day for a while, basically giving money away for a while hoping people use it for their own questions eventually. If you want to make a quick $3 though and check out my idea please go to the site and try to answer the question!

Let me know what you think! I am also looking for a designer as well after I see if people like the idea.. I used Stripe's new withdraw to debit card feature so you don't have to use bank account info to withdraw your "bounty" (money you get for answering questions)... Please give me some feedback on the site/idea!
Pricing and Efficiency in IP Addresses Market [pdf]
The data here is wrong for most players.

Example: Ramires from Brazil is 73kg not 83kg. Hulk is 85kg..etc
You are advocating for fundamental change in America? Or just some tax cuts?

Mostly, things are under control here: http://talkingpointsmemo.com/dc/princeton-scholar-demise-of-...
What's the break-down on how many taxi drivers are employees vs independent contractors?
No, there is just no legal recognition of a union (as is understood in the US) for freelance contractors. Contractors organize through professional associations, instead.
With self-driving cars, it would seem likely in the next 20 years there will be extreme cost cutting on labor.
Reddit moderators accused of censorship
I was wondering how accurate these heights and weights were. Are these taken from the World Cup site, or wikipedia or something else?
I didn't know about morality simulations.
Couldn't you say the same thing about downloading and running any installer from the internet? There is nothing special about PHP that makes this insecure, the exact same attack you describe could be done when you are downloading a Windows installer executable from a browser and double clicking it.
The 1st place entry is apparently very similar, but trades interactivity for sound and rather more psychedelic colours:

http://www.pouet.net/prod.php?which=63517
For a long time the officially documented way to install GNOME was to lynx -dump http://go.gnome.org and pipe it to a root shell. Looks like the industry hasn't learned much in twenty years.
Immunosuppressants can have a whole load of side-effects since you're effectively nuking the body's natural defence mechanism. The ones I've used (Prednisone, for asthma and allergies) have always been in pill form which is untargetted, so whilst you may knock off the immune response causing the primary symptom, you also shut down a whole host of other systems too. This has been one of the biggest side-effects for me.

What will be interesting is whether a topical cream can perform targetted application of this - shove it on your scalp for a few months and it locally modulates the immune response to the follicles and allows for hair growth. I'm not nearly familiar enough with the medical processes behind this to know whether you can do this or whether it has to be regulated at some other location.

As an aside, the whole field of computational medical research excites me. Folding@Home and the like have been the first foray into this, but I suspect we'll see a continued rapid expansion of this as we harness huge computational capability to explore modifications to processes to discover a whole host of unknown but useful side-effects from existing medications. I suspect it's likely the next big field.
Tiny Letters to the Web We Miss
FYI, requires cookies.
The point is there's no SSL.
In Venture Capital, Birds of a Feather Lose Money Together
There is only one smallish Java component (an OAuth implementation). Everything else in CloudFoundry is Ruby and (increasingly) Go.
Exactly. Higher prices provides the signal to increase supply.

Consider an occasional host planning their upcoming schedule. Knowing you would get an 18% premium for Google I/O days could very well convince you to be a host those days instead of other more convenient days. That behavior triggers more supply for Google I/O, which is exactly what conference goers need. Without that increased supply, the conference goers will be paying even more with even fewer options.
Isn't the point of this that the script code doesn't need access to anything via getComputedStyle? It's the user telling the script what color something is.
Well the difference between manslaughter and murder is intent. What is the concept of crime if we believe our actions are predetermined? Does that mean there is no crime? Or that every crime is prosecuted under strict liability?

Would a person still be pleased and surprised to get a nice birthday card if they believed it was the inevitable result of the clockwork universe?
You only get the commits reachable from the refs you clone. i.e. anything under refs/heads/* by default. Unless a commit is reachable from a ref you can fetch, it is not retrievable to you and won't be in your clone. So unless GitHub can locate it via reflog and create a ref, you won't be able to access it.
What does super expensive mean? Expensive is a relative term. When weighed against the costs of other options, tunneling consistently comes out ahead on a cost basis. This is proven by the fact that tunneling projects are undertaken regularly across the world.
The Braess Paradox In Soccer: How A Team Can Be Better Without Its Best Scorer
Many of these regexes should not be used on user input, at least not if your regex library backtracks (uses NFAs), because of the risk of ReDoS: http://en.wikipedia.org/wiki/ReDoS

Trying to shoehorn NFAs into parsing stuff that isn't a regular expression is generally a bad idea. (See: Langsec.)
Apparently ASUS started selling computers after Dell outsourced a bit too much to them.

http://www.asymco.com/2012/12/07/the-real-threat-that-samsun...
Kevin Rose agrees to sell Willamette Heights property
If that doesn't cost you too much ;)
These are cool, but completely impractical for anything other than your resume, and even that might be doubtful.

Is this useful for anything other than learning how to do different kinds of css3 transforms and making you want to buy a macbook?
>There is nothing special about PHP that makes this insecure

He didn't say it was because of PHP, he said it was because of http (i.e., because it's not over SSL).

> the exact same attack you describe could be done when you are downloading a Windows installer executable from a browser and double clicking it

Exactly, which is why people who are security conscious never simply execute a Windows installer downloaded from the browser (or wget, for that matter). At a minimum, one checks the file hashes. Ideally, one confirms that the executable has been properly signed and not tampered with (by right-clicking the file, clicking 'properties' and looking at the 'signature' tab, or else manually checking if it's been GPG signed).
If you consider it work, then it's probably not a good investment for you. I like doing it. It's like telling Jay Leno that restoring an old car isn't worth the money since it costs less to get someone else to do it (especially at his Salary). Some things are their own reward. Running my own mail server is very much worth my time.

Also, my quoted 3 man days is a huge guess. I don't keep track of that stuff. It's 15 minutes or an hour here and there...
Why is that ironic at all?
What promising idea is that, making a business on the basis of ignoring the laws of the municipalities your business is in, or having the drivers, who were in business before Uber and will be in business after Uber, do all the work and wealth creation while some startup and its VCs and its VCs LP's parasitically suck up profits from all that labor?
>>Also, even if it's non TLS/SSL, you're putting a lot of trust in Rainloop not being hacked or malicious.

I'm assuming that "non" shouldn't be there, so... I don't know how I feel about the whole curl/wget [url] | [interpreter] trend. In theory, it shouldn't really be that different from the days of downloading "setup.exe" and running it.

If for some reason you don't trust Rainloop then you shouldn't install anything of theirs no matter what the delivery method is.
it's just a bullshit game for Uber to avoid regulations

That generally seems to be a critical part of their business strategy...
Kalanick would have to be an idiot (which he's not) to let them unionize. Uber has a ridiculous amount of funding, and I can't imagine any of their investors would oppose them taking advantage of it to starve any unions out. People will forget soon enough that Uber wasn't available for a while, but a union will be like an open wound that just won't go away.

After all, if the drivers go to their competitors, then they'll just unionize there too. And once the situation has stabilized, Uber can just undercut their unionized competitors and put them out of business.
Absolutely! I gave us a real warm and fuzzy feeling inside making more money with cheap, mediocre quality tshirts made in Thailand with unknown working conditions, than the actual music …

Ironically, in the time of the sacred internet, cutting a limited edition on Vinyl is still more profitable than any other digital form for a lot of small artists :)

I'm not complaining though, because I refuse to look at art as plain business and rather earn nothing at all than compromise doing what i love for a better ROI.

I think people should value money less. The artists/label on one hand, and the people who are too greedy to spend a few bucks on something every once in a while, because they can get it for free on the other.

Update: And i do believe that the current time is probably the best ever to make music, from a purely artistic viewpoint.
Is it even possible to keep people from scabbing a service like Uber? There's no central place to go to work, so I can't imagine any kind of picket line situation. How will a union maintain any kind of power when they can't control who goes in and out of a work site?
The canonical use of history stealing is to find exploits in a bunch of websites (e.g. online banks), then use history stealing to find customers of that site.

A number of attacks against, e.g. banks seem implausible ("but how would the attacker know that I bank at Wells Fargo?") until you learn about history stealing.
> This only "removed the feature" for sites that use such trackers.

Such as Google, Facebook, etc.

My favorite part is the consistency of Youtube's URLs.
People around here probably fancy themselves to be the dog that's going to be in charge of the next Uber, so they'd naturally root for Uber.
Facebook is taking this holding-company approach to WhatsApp, Instagram and Oculus. Unilever, P&G and Nestle should be wary of another holding company controlling their customer channel, especially after the Axciom partnership which gives Facebook access to the _offline_ purchases of Facebook customers. The consumer goods companies should fund new social networks, to diversify their online reach.

http://www.businessinsider.com/facebook-and-acxioms-big-data...

"Audience Operating System .. allows advertisers to tie together your "digital persona" even if you've changed your name due to marriage, the use of a nickname, or because you sometimes use a middle name. It also figures out whether someone who has moved addresses or changed phone numbers is the same person or not."
Jawbone auto adjusts Nest temperature when you go to sleep
Rise of the REMOTE startup incubators
Is angel list secretly the world's most successful startup incubator ?
INTEGRITY-178B and seL4 are not related in terms of their source code or origin, though they do both aim at the same target audience (security and/or safety-critical systems).

I don't have a good knowledge of INTEGRITY-178B, but as far as I can tell some differences are:

* INTEGRITY-178B is a static separation kernel. seL4 can be used as a static separation kernel, but also allows for dynamic systems, for instance with processes being created and torn-down dynamically at run-time;

* INTEGRITY-178B has a proof that a model of the code satisfies particular security properties, while seL4 has a proof that the actual C implementation satisfies particular properties;

* INTEGREITY-178B is certified to EAL6+, while seL4 has not undergone any external certification process. (Without having a good knowledge of EAL6+, my suspicion would be that the code-level aspects of seL4 would meet or exceed EAL6+ certification, while the process-level aspects would need work on the seL4 side.)

If someone has worked with INTEGRITY-178B, please correct me if I have made any mistakes.
This top turns see-through if you leave personal data exposed
I've found Mithril to suit my way of building JS single page apps perfectly, I highly suggest having a play with it. It feels very different to begin with, but once you've grokked it, you can fit the whole "framework" (it's more of a library + conventions) in your head! Thats its most powerful feature for me -- along with the syntax-errors-in-my-templates and the component/module system.
Very impressive. Work such as this show a mastery of CSS that few possess.
Well, an employer really doesn't get to choose whether or not employees can unionize. They just get to employ unfair and illegal labor practices without much retribution.
> We recommend against using Creative Commons licenses for software ... CC licenses may be used for software documentation, as well as separate artistic elements such as game art or music

http://wiki.creativecommons.org/FAQ#Can_I_apply_a_Creative_C...
4) It meets the specification but the specification is incorrect/specifies sub-optimal behaviour.
Showing people online cool things that can be done with CSS3 transforms.
First time I meet fast.js, I think it's running fast. When I read introduction I was wrong, it just write fast... I hope one day js run in phone is really FAST.
These demos always amaze me. Can somebody enlighten me as far as the way the size is measured - does it typically include all of the assets such as music and textures? I was watching a few of the demos and it blows my mind that the audio would even fit in that amount of space, let alone the visuals.
What do you suggest is a good height for soccer? Is taller always better? This might go against American thinking, but more is not always more. ;) (though I don't know if this is the case when it comes to soccer.)

> For example, the average height of Brazil's team is 181.7 cm or 5 foot 10

That's closer to 5" 11.5'.
The prover has a bug (most proofs are done automatically).

Minor point: while many formal verification projects are proven automatically, seL4 is proven in Isabelle/HOL which is an interactive theorem prover. This means that the proofs are actually carried out mostly manually. (The downside is that it takes much longer to carry out proofs; the upside is that you can prove far more sophisticated properties than is possible with the current state-of-the-art automated provers).

You are still right that the proof checker could have a bug, though. Proof checkers tend to be much smaller and simpler than things like SMT solvers, which helps increase confidence in them, however.
I can always play a song and record it. YouTube doesn't even allow downloading in 1080p anymore.

Enough with this idiotic copyright bullshit. If you don't want people to copy your stuff, stop publishing it! We don't need copyright. Why is the law enforcement that I pay for with my tax money working to prevent alice from copying something bob put out in public?

Now if bob took alice's secret documents, and put them out for the world to see I can understand. However, this copyright mess is out of control. Please... Let's put an end to this nonsense.
I wish AirBnb was never born
There's a lot of php webmail software out there; the php script for installation just makes you want to run away.
Cupid Media in breach of privacy laws for not encrypting passwords
I don't know how I should feel about this secure method of generating a salt that is used for almost everything as it seems:

// random salt
$sSalt = '<'.'?php //'
.md5(microtime(true).rand(1000, 5000))
.md5(microtime(true).rand(5000, 9999))
.md5(microtime(true).rand(1000, 5000));

@file_put_contents(APP_DATA_FOLDER_PATH.'SALT.php', $sSalt);

It looks like they just threw some cryptographic hash functions at things and hope it works out.
> guygurari: What new thing did philosophy contribute to physics in the last 100 years?

> vacri: If it weren't for philosophy, you wouldn't have the scientific method in the first place.

That's arguing from history.

> There is no dichotomy.

Not in your mind there isn't, but obviously there is in the minds of a lot of scientists, including for example the author of the linked article, every scientist he mentions by name, and guygurari, the person to whom you responded. You can keep asserting it over and over but that doesn't mean it's true from all perspectives.
How College Is Like Sunscreen
Oh my God I thought these bullshit cries of doom stopped. It's such a simple matter of business. If Oculus did that, no one would by a Rift. That would be bad for Oculus, Facebook, and consumers. The much more likely thing to result from the Facebook buyout is they use their $2B to build a better product and market it better to compete against new behemoths butting in the VR marketplace like Sony and others that are surely about to jump on the bandwagon. That would be good for the consumers, and thusly good for Oculus and Facebook. There are literally zero good reasons Facebook would ram down tacky social media bullshit onto the Rift. That's bad design, bad business, and no one would like it.

Isn't rabid Facebook hating getting old now?
He only needed the answer once -- so a pretty smart move :)
> I don't see something as potentially risky as drones running around unregulated.

Really? How about people hitting baseballs with bats unregulated? That's a heck of a lot more dangerous than most hobbyist drones, perhaps unless you're deliberately trying to do harm (in which case regulations don't matter).
Will there be future work with Genode, e.g. is the codebase going to stay focused on ARM or will it also support x86?

http://genode.org/documentation/articles/genode-on-okl4
High pressure aeroponics with led multi spectrum lighting = great grow op....

Check out any of the commercial HP aeroponics, this is the future of cultivation.

http://aeroponics.com/aero43.htm

http://www.nasa.gov/vision/earth/technologies/aeroponic_plan...

From a personal hobby of mine, fast yield high bloom, small space requirements semi sterile and can be completely organic
> The laws already changed to give them these powers - the 2012 FAA Modernization Act authorizes the FAA to make rules about UAS.

So claims the FAA. I can't make my way through the text of the law, nor can I find any legal summary or analysis other than the FAA's own claim that it gives them the authority to regulate UAS.
The thing is, there is no way to automate learning. Learning is a lot like exercise - it takes work and effort to get stronger. Nobody has succeeded in making effortless exercise, and nobody has or will succeed in making learning effortless.

The Khan Academy and Coursera do not automate education, they simply are the modern version of correspondence courses.
Yes they do.

Step one is employees forming a union. Step two is negotiating a labor contract. If an employer says no to a labor contract and fires everyone, the employees are back at square one.

Back in the day if a union tried to fire everyone and rehire, the union would physically assault scab workers and their families. Hence the close ties between unions and organized crime. (EDIT: I added this part to point out unions do not have any leverage anymore to work with, sorry if you misunderstood it as implying unions still regularly employ violence)
Why do you need history stealing for that. If you have an attack against Wells Fargo, why not launch it on everyone you can. You will get at least as many Wells Fargo users as you would if you pre-filtered (probably more because of false negatives).
Unions historically employed violence (or fear of violence) to prevent scabs because of the close ties to organized crime. Failing that, there is no real way that the union can avoid scabs.

(Edited to clarify. Yes I acknowledge employers can be evil too, I assumed that was obvious.)
I don't know why they wanted the info (and it was fairly dumb of them to try). Nevertheless, they saw some practical value in it, so did others.
Tablets Are Making Waiters Obsolete
Coderwall Source code is now public and open source
> UNIX started as a "microcomputer" OS

One very minor nit...the PDP-7 where Unix started out cost US$72k+ in 1969 dollars. Nothing compared to the big iron of the day, but very far from a microcomputer (and, really, that market didn't exist until 1972 or so).
Not for lightweight craft, but then again I think that driving a car should require a licence but a bicycle shouldn't. The difference is that while it's possible to kill someone by crashing into them with a bicycle or a 20 pound drone, a car or regular airplane it's much, much easier.
I'm easily a member of the "European descendant US citizens", and I don't exactly have a lot of say in it either.

I also find it odd that you included "stand your ground" laws in there. Those laws would actually protect a homeowner using deadly force in opposition to this type of raid in many cases.

I spend a large part of my free time engaged in the online firearms enthusiast community, and I can assure you that no group is more outspokenly opposed to these tactics as we are. The "militarization of police" is such a well-known thing that we have a few memes built around it. "Tacticool" is what we'd probably call these people, and it's something of a running joke that an police officer's professionalism is inversely proportional to the number of cargo pockets the have on their pants.
I don't really know PHP, but what's the problem? A salt doesn't have to be perfectly random. It just should be unlike any other salt in use.

This looks like it would meet that requirement.

Edit: Since this is HN, I feel obliged to point out that there is a small vulnerability introduced by using a non-CSPRNG here. If an attacker is already surveiling you, and is able to perfectly deduce the state of your PRNG before you generate your salt, and the attacker plans to steal your db at some point in the future, he can get a head start in generating rainbow tables against your database.

But the main value of a salt is in being globally unique, which this is.
It isn't a good measure if they are muscular, no.
There's a great book called Influencer:

http://www.amazon.com/Influencer-Science-Leading-Change-Seco...
Is Nuclear Power Ever Coming Back?
"Plus, job market you know, fuck motherfucking H1Bs." ?
I meant "legally owned".
Thermal is blocked by windows, much less walls.