skysight-inc/HackerNews huggingface dataset:
> My advice is do not bother.

Second this motion. The number of vendors or administrators who respond well to security or privacy reports is tiny.

Some approximate data from my own emails. I've reported just over 120 security or privacy bugs over the past 4-5 years that this email address goes back (using my real name). I tag the emails, but searching "from:me vulnerability" brings them up. It is like a scoreboard of horrible vendors and site administrators.

From the most recent 100, there are around 25 with no reply at all. I know that some of those, such as government sites were followed up on the phone. Of those with a "(1)" in the thread meaning an additional message, most are me sending a reminder or trying to work out who to contact.

There are then a group of replies where they confirm receipt of the email, but then never confirm the actual contents of what i've reported. Scanning the threads, this looks like another 30 or so emails.

Then there is the group who confirm or deny the bug or parts but get into prolonged technical arguments, with around a dozen threads stretching beyond 10+ emails into arguments about if it is a bug or not.

Last group is those who get the bugs fixed and respond well. In these cases there are only a very small number where the threads are short - most involve long conversations. Some of these are still open - I just reminded myself that I have an open privacy issue with a large web company that still hasn't been fixed. That thread is 30+ emails long.

Overall more than half either didn't reply or didn't confirm the bug (silently fixed or not). There is a messy middle full of long threads and replies that are full of frustration and then only a tiny number of reports where they just get fixed with minimal effort (and you know who these companies are).

There is not a single instance of a non-software company responding well to a bug report (usually from a custom web app), and that includes some well known brands (banks, etc.). The number of good experiences I could count on one hand.

In terms of vendors, recent examples are a 20+ email thread over 3 weeks debating a vendor about severity of a group of bugs (still ongoing), two reasonably well-known vendors with no reply and a well-known vendor who only fixed after more than a month.

You can work out before reporting an issue who the good vendors are. They have a page dedicated to security with contact info, a key and a proper reporting program (preferably with a bounty). With everyone else, you are working for free, wasting your time, not making the internet any more secure and run the risk of getting into trouble - in some countries that could involve legal trouble (there have been a number of raids as a result of security reports in Australia, and the government head of privacy here said there is no such things as a white hat report).
His publications on net neutrality: http://www.ics.uci.edu/~sjordan/research/net%20neutrality.ht....
I'm not sure what it means to be a "net neutrality expert." As far as I can tell, it's mostly an ideological viewpoint. Jordan uses the phrase "philosophy of Internet architecture." I'd argue that the internet is just a set of technologies and doesn't come bundled with any particular philosophical viewpoint.
Apple is reportedly teaming up with American Express on iPhone payments
What is not what the author was getting at? It's clear from your comments here--continually scare quoting "frequentist" and "Bayesian"--and your answer on Quora, that you're contemptuous of this debate, like the author. OP is saying that there's more to frequentist vs Bayesian than simply picking the right tool for the job, which you are both suggesting. It won't be settled in this comments section.
If anyone cares, this is the complete Tim Leary photo archive. A while ago I was asked to help curate it, and my payment was getting to keep a copy on my site, as long as it doesn't show up on search engines.

http://robots-everywhere.com/leary_gallery/index.php

There's also a dosbox setup for Leary's Mind Mirror software.

http://robots-everywhere.com/portfolio/games/mmirror_port/
It avoids intermediate structure and enables more sources and sinks to work. For instance, if you build a reducer, you're basically adjoining a "reducible" and a "reduction function" and then transforming the reducer by transforming that reduction function.

This already avoids the creation of intermediate structure since you just keep transforming the reduction function, but you have this sort of useless "reducible" thing attached. Mostly, the trouble is that you were afflicted by the kingdom of nouns---you don't really need a structure to think of first class objects.

Instead, you can just consider the various ways of transforming reduction functions. They all compose as (reverse) functions (you can see them as a category) and you can take your resultant "transducer" and apply it to a source and sink structure to map out of the source and into the sink.
On a more pedestrian scacle...

There are some extremely smooth and round objects available for ornamental purposes. Finnish company Sorvikivi [0] has been making such granite balls for 20 years, and their products are so accurately manufactured that the balls can be supported by a hydroplane between the ball and an equally smooth support bowl.

I remember seeing one of their products at the lobby of a hotel. Because the ball was effectively floating on water, you could rotate it by hand. And we did.

[0]: http://www.sorvikivi.com/eng/index.html
Twitter waterflow problem and loeb (2013)
As a former M1 Garand owner (replaced it with a lighter weapon due to my RSI weakened arms), your link is to my knowledge correct. While I avoided the screw cases where the bolt was not properly locked back, I can attest to other examples, most especially loading a clip finishing with loading the top round. The cartridge is indeed where your thumb otherwise would be, your thumb is essentially pushed out the way, I'm pretty sure it's very hard to get hurt doing this. Or look at it this way, it would have been very sub-par to have a real problem there when soldiers were loading clips while their minds were preoccupied with combat, and back then in the '30s the Army really really cared about the quality of our small arms.

The #1 screw case I knew about pertained to closing the bolt without loading the rifle, there is danger since it requires reaching past the bolt down to the follower that is locking it back. The trick is to hold your right hand in a rigid way so that while your thumb is depressing the follower, the bottom of your hand is holding the operating rod handle, keeping the bolt from flying forward. Depress the follower, then lift your entire hand as a unit up and out. Works like a charm.

Overall I rate the Garand as having better ergonomics than our following two service rifles, the M14 and M16/M4, it's for example very smooth in profile, very little to get caught while you're carrying it (that insight from someone who used it in Korea). If I had one today, and only that rifle, I would not consider myself to be under-equipped.

Hmmm, one other screw case it has in common with all weapons with the common pattern of an operating handle that is linked to the bolt, i.e. reciprocates with it, is that if you have a hang-fire---you press the trigger and the weapon goes click, but unlike the Java example ^_^ there is a round in the chamber---you'd best pull the handle back with your smaller fingers, palm upwards and under the bolt. Because if the round fires while you're doing this, if your palm is reversed and you're using your forefinger and on without taking precautions, the handle will smash into your thumb or the web of you hand between it and your palm. That'll do some serious damage....

C is not quite as good as the Garand is, although I'm not sure what I'd use as an alternative.
"The famous fizzbuzz test simply asks 'are you aware of the modulo operator?'"

False.

The fizzbuzz test asks, "Can you algorithmically about a problem? Can you understand variables? Can you program?" And it's the quickest, simplest way to find out.

How do you separate the people who "can do this job" from those who "can talk about doing this job"? There are many more of the latter than you may think.
There are so many different approaches to interviewing that come in and out fashion every few years. This is only natural but the common theme in a lot of discussions on HN is how people feel these approaches were not good for their particular case.

Wouldn't it be better if flip the whole thing and ask the candidates under what situation would they feel most comfortable and then conduct the interview that way? Surely, we want to get the best out of people while making them comfortable?

Yes, even this approach is not suitable for those interviewees who don't know what is the best for them but atleast the interviewer will show they they genuinely care.
>There's a few things missing with this app. The data may be encrypted, but its still available to anyone with the URL?

>I think https://www.noteshred.com does this better. It
requires a password to access and logs access information.

>You can also demo and see their client side encryption features working here: https://www.noteshred.com/client-side-encryption

Read the FAQ about how it works. It has a password. Also, this is totally free with no accounts or upgrades needed whereas noteshred is not. Also, you own noteshred so a disclaimer would have probably been prudent :P

This is just a weekend project though, so no worries either way.
Ph.D. programs vary a lot by country, school, and department. They mostly appear uniform from the outside. Big variabilities include: funding, status, teaching load, qualifying exams (these are after you are in), amount of choice, publications, expected level of choice/originality in thesis topic, writing, and open/closed defense.
yes. that's the one advertised but impossible to buy in the usa. i recall only place i found it at the time had a 4x price hike over the advertised market price.
flatMap is the fundamental transducer (of a particular model). To be clear, the function a -> [b] subsumes mapping and filtering---if [b] is always a single element then a -> [b] is a map, if [b] is always either 0-or-1 elements then a -> [b] is a filter (possibly adjoined to a map).
It isn't in a vacuum, people working on a PhD are free to pursue any topic that they can fund and get a supervisor to agree with.
Well I don't think it's a left/right thing as campaign finance reform has been proposed by both major parties.
fizzbuzz is very useful as a pre-interview screening technique. But as the author says, it's 20 minutes of wasted time in an actual interview.
Very, very true. To see it most clearly, compare a physics Ph.D. to a psychology Ph.D..

EDIT: to readers, the reason posts like this are downvoted is not because they're false, but because they're true. The anonymous downvoters are trying to conceal the truth.
The Sorry State of Gaming's Truthers and Their Gamergate
"sudo" is a command on some UNIX-like systems (e.g. Linux, Mac) for switching to the superuser (or some other user).
Choosing a language for a project rarely comes down to researching the languages that may best deal with the problem. More often than not from my experience, it’s what the first engineer(s) on the project thought would be fun (annoyingly often in the case of using new languages in production), were most-familiar in, or the company is most familiar with, or because some library they need to use is only available in X language and it would take too long to do the project and implement the library in their “normal” language.

Perl, Python, and Ruby are all pretty competent and on the same level. Given that Perl is chosen as a language the question isn’t “Justify the use of Perl to the exclusion of Python and Ruby.” It’s “What can Python or Ruby do that Perl can’t?”

Some common arguments between Python and Perl can be found at http://coosoft.wordpress.com/2013/02/24/the-perl-vs-python-d... (I would add the author should have expanded on Object Oriented in Perl more. While native OO in Perl is exceptionally basic, third party OO frameworks for the language exist such as Moose and Moo complete with introspection, roles, type constraint, triggers, attributes, etc, etc).

Perl is a powerful modern language, actively developed by a committed community[1]. We’re just generally too busy doing things to blog about all the awesome stuff as much, so people’s perceptions of the language are often stuck in 1998.

[1] https://www.youtube.com/watch?feature=player_detailpage&v=hH...
Well, actually, they would, for the same reasons that the postal service will make money in populated areas and lose money in less populated areas.

Say you need a trauma center within 1 hour of anywhere in the country. A trauma center in Manhattan is going to see a lot of traffic, while one in Clayton, NM, isn't. But the centers have the same basic cost in staff and gizmos.
Sibyl: Google’s System for Large Scale Machine Learning
This makes me wonder if it would be a good idea to make an emacs clone with another language, say, Scheme or Lua? Or Haskell?

Edit: ah, it looks like it's been done for Scheme: http://www.emacswiki.org/emacs/GuileEmacs
This is using antibodies, i.e. works on the principle of passive immunity.

https://en.wikipedia.org/wiki/Passive_immunity

By calling it a "drug", and that its way of action 'is unknown' etc., the article makes it sound a bit like they were talking about the engineering of a new chemical compound, when in fact the way of action seems straight-forward. The new work will probably just be in details of the production and perhaps embedding or some such of the antibodies.

Maybe my rejection stems from my native language (German) calling treatments like this "passive Impfung", literally "passive vaccination", while we seem to reserve the word "Medikament" (drug) for non-biologic actors.
> Yes they river water for cooling, but water is not polluted as it's not in direct contact.

Which I never claimed. I don't know why you mentioned that.

> we are importing only for some occasion when temperature are very cold which append maybe 10-20 times a year

There was a spike in 2009, where France was a net importer for 57 days - basically, French nuclear plants could not satisfy demand for 2 months.

I stand by my points.
This, so much this. Somehow, as if by magic, engineers always just know how good of an engineer somebody is after a thirty minute conversation. Just a conversation. You see this all the time in social settings.

While this is my favourite way to both give and get a technical interview, it does have a major flaw - measurability. In that there is none. The approach works when you're trying to hire one person every couple of months.

But I am fairly certain it breaks down when you have to decide between hundreds of applicants every week and you need to have a measurable and predictable process that goes beyond your engineers saying "I have a good feeling about them".
Love the choice of your dummy account name!

I immediately remembered it from the C64 days. Used in a FOR loop, poke 53281,x would create some marvelous color loops.... almost psychedelic ;)

http://www.youtube.com/watch?v=Tar8kV39P2E
There are some influential developers of such technology that would disagree with you on that. Tim Berners-Lee for example has stated that:

"The web is more a social creation than a technical one. I designed it for a social effect — to help people work together — and not as a technical toy. The ultimate goal of the Web is to support and improve our weblike existence in the world. We clump into families, associations, and companies. We develop trust across the miles and distrust around the corner." [1]

Certainly in the United States it could be useful to have a "philosophy of Internet architecture", mostly because of the market failure in ISPs for the last decade or so.

1. http://en.wikiquote.org/wiki/Tim_Berners-Lee#Quotes
Assuming it works, awesome concept!

I was looking for something like this a few weeks ago.
Two Little Words That Will Help You Sell More
I personally also use Python regularly and am very comfortable with it, but we often choose Perl because of the developer experience in it.

Perl has a reputation for being difficult to learn, and it does have a bit of a high learning curve compared to Python. However, once you learn Perl, you'll find it's a rather wonderful, expressive. and powerful language.

Is it "better" than Python or Ruby? No, just a different solution to many of the same problems. If we're being honest, most anything you can do in Ruby or Python can also be done in Perl.

My experience is that most engineers and devs over the age of ~30 know Perl front and back (if they script), so it's a natural choice. Fewer of these people (in my experience) are as familiar with Python/Ruby.

Perl continues to evolve and the Perl we wrote in 1998 isn't the same as the "Modern Perl" we write in 2014. There are great modern Perl web frameworks (Dancer, Mojolicious), real object-orientation via Moose, powerful exception handling via Try::Tiny, and a history of excellent database support.
Top stockpics by author's forecasting accuracy
The video makes it look amazing from a technology point of view. Also makes me think of the movie "Her" in a scary way.

Would love to see videos from regular people (not the company) showing it off.
The linked article's author thinks he should be coding instead of writing. Based on the number of misspelled words and mangled sentences in the article, he may also need to increase his awareness of the small details that are critical to making a programmer first-rate.
The Setup – Greg Kroah-Hartman
gals/guys what do you think about my attempt to outsmart Wall st?
How do you decide which models actually have predictive utility, under real world incomplete information? Back to square One.
ClanCats Framework, HMVC PHP Framework
Well... As someone with a brand new physics Ph.D., I think you're wrong that the pay doesn't need to be competitive. Ph.D. programs are really coasting along on the ignorance of the Ph.D. candidates, and I'm not sure how much longer that will last.

Here's what I mean by that: The opportunity cost of a Ph.D. in physics, in terms of foregone salary, earnings on tax-advantaged savings accounts, stress, etc., is north of half a million dollars (and 5 to 8 of the best years of your life). Talking to people I know from my own department, and those I've met at conferences, and such, the lifetime value added to one's salary from having a Ph.D. is probably greater than the opportunity cost. But it's not obviously greater--a Ph.D. is a pretty good signal for "smart and gets things done."

In other words, it tells you "this person was probably going to do well anyway." You can't compare the mean or median salary of Ph.D.'s with those of, say, people with a Bachelor's in some STEM field. If you were to compare median STEM Ph.D. salaries with same-field top-quartile (or maybe top-decile) Bachelor's salaries, you'd find there is not much difference.

Am I just a bitter washed-out Ph.D.? Hell no! I did all sorts of fun things (like intermural sports and traveling) that I wouldn't have been able to do otherwise. I cherish those memories. But, if someone asked me "Should I go to grad school to improve my chances of earning a decent living?" my answer would be "Hell no!"
I had a friend blow a job interview on something very similar. The company gave a description of an app and asked that he code something up over the weekend and host it on github for them to see. He wrote up a pretty basic app that did what they wanted, but the poor guy completely lost his head and couldn't remember `git init`, so they passed. Whether that's fair or not is another ? (I think it was, given he was interviewing for a senior role), but it's important to keep in mind that even though you may have been a productive maintenance engineer, working within an established codebase, basic infrastructure-level stuff that comes up once a project can still bite you.
To be fair, so does lifelong religious devotion.
That's a legitimate reason. I believe people that come in simply seeking drugs make it tough on you. Enough people abuse this privilege that many (but certainly not all) doctors have become vary of writing prescriptions. I honestly don't know if this translates into high consultation fees though.
The Road to iOS8 Part II – Improved App Store Discovery
A dupe of https://news.ycombinator.com/item?id=8235880.
Not related to the original post, but sharefest.me does not work with all browsers.
I'm looking at your site (menutail.com) + competitors and unlimited is already an established plan in your market. Should you break this market-established plan/packaging?

Giving a number (regardless of the amount) can give an impression of limiting a user. Conversions (theoretically) may e affected (+/- 2%) specially when a customer is comparing between similar pricing / same feature products.

I would be happy to help you out on your AB testing when you think it's time. Like to see how this goes. :)
Why is "flat prior" here? A requentist method assumes a certain prior, for example Normal
Kongsberg writes it's missile-guiding software in Ada. A pretty strong endorsement if you ask me.
My 30 Day Challenge Learning the MEAN Stack – Lessons Learned (it Was Hard)
Just a general level of respect, from what I can gather. This is all second-hand info of course. But the stories they've told me seem to indicate this.

I should have added that my friends are specialists, not general practitioners. I've heard lots of complaints about general practitioners too, in terms of late and canceled appointments, little to no interaction, being rushed out the door, etc.
The Kernel will be missing from the AnandTech system.
I'm curious why they don't have some kind of trailing shroud on the print head to better form the material. The round sides of each layer seem like wasted material. If those were formed into squared edges, via a shroud, would that provide a small increase in strength? Or even the same mount of strength with less material?

In other words, if you shaved off the round sides you'd be better off because of less weight and same strength, no?
KarTrak, a bar code system designed to automatically identify rail cars
I wish I had kept a list of all the ideas you brought to the table that significantly influenced the team. From the Clarion method of code reviews to team seating arrangements to all the innovative ideas that we later saw being implemented by other startups, you were and are a font of inspiration and ideas! Your current team is extremely lucky to have you!
At the end of the day, statistics is about using a rationally consistent process to making decisions under uncertainty, but everyone (except the theoreticians) tries to use it to make correct decisions, conjuring certainty from the ether, and then railing against anyone who disagrees with their choice of articles of faith.

In applied statistics we find the bitter religious rivalries of science.
You're probably among the top 5% (if not top 1%) of people in physics, and you attended top institutions. That's fantastic (I really mean that), but it gives you a skewed view of academia.

Most physics PhD candidates do not have free choice of research questions (or, at best, they are spending their "10% time" on their own questions, which is what I did).
"I think you're wrong that the pay doesn't need to be competitive. "
I would say the pay is competitive judging from the difficulty of gaining admission into these programs. Why do you think it isn't competitive?

"(and 5 to 8 of the best years of your life)"
I'm not sure about a physics Ph.D. but most of my friends who are finishing up their Ph.Ds enjoyed their mid 20's more than the ones of us who decided to did the daily work grind.
Nearables: Why a global lost-and-found network is finally viable
Explain how smaller, simpler and faster code is worse.