skysight-inc/HackerNews huggingface dataset:
Working in the design of large scale engineering systems, and watching safety / risk reviews, its a little disturbing to read this, and note that almost all hazard and safety analysis performed goes almost completely counter to these concepts.

It generally assumes there's one super-cause, and maybe some things that contributed. (Usually even pre-specified as "root cause" analysis when trying to find a problem)

The ultimate (although unstated) goal is almost always to find out how a specific person messed up, and then note what they did wrong. (Kind of human nature)

The culture usually assumes humans are inherently unsafe (ie, they don't create safety), and we're protecting them from themselves. (Does probably meet the statement that complex systems are heavily layered with protections against failure)

It often assumes that we can achieve a level of omniscient safety, where no-one is ever unsafe and we see all problems before they occur (safety culture names that imply "less than zero problems" or "we make you safer working here").

The probabilistic nature of accidents is not acknowledged, and its usually whack a mole instead. (This often ties in with the hindsight bias to note how a practitioner messed up the perfect safety system)

Problem is, I'm not sure how you would actually implement a good, probabilistic safety system that largely keeps people safe, but acknowledges bad, random things occasionally happen, and that line folks are your best defense for seeing and stopping it. Its counter to the whole leadership meme of decisive action and quick resolution to project strength. Its not very satisfying to hear "we could have spend $1M more on our safety program, but Bob still would have been burnt because it was due to three unlikely things occurring in quick succession."
Actually the jetbrains UI is pretty bad on osx.
How do we do it, then?

ed. I guess that's the trillion dollar question...
Yes, but to be a new implementation shouldn't I be able to install it without already needing Common Lisp?

For instance, I can install SBCL without already having another Common Lisp implementation right?
Yahoo launches personalized content recommendation tool for publishers
Seems like the SSL certificates that CloudFlare automatically generates for sites are SHA-1 signed.

Anyone know if they're planning to upgrade to SHA-2?
I'd like to see them gradually downgrade all non-PFS connections. Non-PFS connections should be considered medium-to-highly vulnerable, and shouldn't receive a green icon in browsers.

Unfortunately, they've just recommended everyone to use "2048-bit keys" when they announced the HTTPS Google ranking policy. A lot of developers won't understand the difference between a 2048-bit RSA key and a 256-bit ECC key, so they'll just pick RSA, since "Google said 2048-bit keys!". Sooo...maybe this policy will come in 10 years.

http://googlewebmastercentral.blogspot.com/2014/08/https-as-...
Https is to prevent wiretapping and man-in-the-middle attacks.

The problem now is even you established HTTPS connection, the weak SHA-1 encryption will not protect you.
As I stated.

The computation power needed to break SHA-1 is higher then attacking RSA. So if you are financially motivated attacking RSA has a higher ROI.
Announcing Chef Server 12 Release Candidate
Yes, an affiliate marketing scheme like this would have a big impact

as well at turn the social network into a cesspool.
Creator of http://tormovies.org and http://tv.tormovies.org here.

Can I put a "Watch Live" link to iflix.io which would stream the specified torrent (known by it's hash) next to each torrent download button ?

I love the concept, and I think it's wonderful especially for mobile device users...

The only fear I have, as other have noted is that I do really see how you will be able to scale if it takes off, and how you will be motivated to maintain it if it does not :/

Cheers anyway ! :)
Embedding the buy button wired up to your twitter account might not be so awful?
Yea they recorded all the talks, guess it'll be a couple of weeks before they pop up.
@tptacek - I tried to include enough detail to make it clear that a SHA-1 forgery isn't as trivial as a brute force. That you'd have to "coax a Certificate Authority" into issuing you a targeted forgery, and that that's what the MD5 team did.

The SHA-3 mention at the very bottom was in the spirit of "all things are broken eventually", not a specific comment on SHA-2 (though my understanding is that there are some conceptual weaknesses that have been identified). I don't think I've confused the issue there, but if I see confusion I'll definitely update it.
FSF and Debian to help free software users find the hardware they need
They can be seen in the Chrome discussion thread, complaining to Google that the timeline is too aggressive. But they're a good company, and I imagine they'll update as soon as they can.
The issue here is old clients... Does anyone know how old clients would handle SHA-2 certs, would they just get a warning saying the site is insecure but still be able to visit the site over an encrypted connection or do they break completely... I guess - I'll have to run a few tests this afternoon and see how windows XP performs.
isn't that kind of inherently possible due to the nature of Dropbox? Albeit this has a proper UI.

Plex, for instance, does this and much more provided you have a collection not in a cloud.
Really cool idea. Who hasn't thought of doing this before? Congrats on actually making it, and making it look beautiful. Already forked it, can't wait to start playing with it.

I don't see any mobile screenshots, how does it look on a phone screen? I can imagine that being a great use-case for this app.
Html5validator: Python package, cmd line tool and TravisCI integration
Well, he is right that you're definitely not polite.
This looks really interesting, glad to see some new development in the area of C++ IDEs.

That said, it's disappointing that they have explicitly tied this into CMake. This limits it's usefulness / ease of adoption for anybody working on a larger project with some other build process. Hopefully more generic support gets added as this matures out of EAP.
Look, there are still commercial carriers flying across the Karkiv oblast. Karkiv is where the mayor was shot in the back by a sniper and people are currently using grenade launchers in town. It is contested.

By my standards, eastern Cyprus is the eastern parts of Cyprus and middle America is the people in America who share a conservative rural culture, though where they live is almost incidental, much like middle England.

And I have been reading the news, however I do not rely on it if looking for actual facts about where commercial carriers are flying.

This is because journalists are generally really lazy and unreliable for anything other than a broad brush view of things, a view which you are now regurgitating unprocessed.
Why SHA-2 instead of RSA 4096 or SHA-256? Even the RSA is compromised but 4096-bit will take a lot more(maybe few more hours) resources to decrypt.

==edited==

Thank you for the reply.
disappointed. Single-page app relies on flash technology.
Keep in mind that Nimrod will also try to evaluate normal code at compile-time, so the following will work fine:

const FOOBAR = if 2 > 1: 10 else: 20
The worst promo video I've seen in a while! It's so annoying!
Yeah this is correct for Noroviruses as well - good old soap and water is the most effective against Norovirus, more so than alcohol and disinfectant gels.

http://en.wikipedia.org/wiki/Norovirus#Prevention

My wife works as a paediatric doctor in the NHS, and has told me that the regular use of alcohol gels leaves a slimy residue after 2 or 3 uses, prompting her to properly wash her hands (as well as wearing new gloves for every patient, obviously).
Where are they located?
> This product does not solve this problem, but instead tries to insert itself into the users' task flow at precisely the time when their goals are focused elsewhere (on opening the door).

I agree wholeheartedly.

> This is a rude interruption and will likely annoy rather than encourage more sanitization. In the video (0:59), a woman sanitizes her hands then must immediately compromise them again to actually open the door.

The idea is that you open the door with one hand and dispense sanitizer into your other hand simultaneously and then sanitize the other hand after passing through.
Understanding Monthly Recurring Revenue for SaaS
> Personally I prefer to just throw a fourth order Runge–Kutta (RK4) at things and normally that's more than good enough.

In the context of gravity simulation, I must point out that while Runge-Kutta/RK4 is good enough for a lot of stuff but it has a tendency to dissipate energy. It's not very good in a simulation where the conservation of energy is important. Run a simulation long enough and the orbits will eventually shrink.

If scientific accuracy is required, gravity simulations are usually done with "symplectic" integrators (which don't "lose" energy) and the equations of motion are written using Hamiltonian mechanics. There are symplectic variants of Runge-Kutta too.

In an exercise work for a celestial mechanics course, I wrote an n-body simulator using a dissipative Runge-Kutta method (because it was good enough for that, and the exercise was about using RK methods). Simulating an exoplanet system (HR 8799), the orbits were stable and 100 year simulation gave near perfect orbits. After 1000 years, there orbits were a bit smaller and after 10000 years, they had lost a fourth of the initial energy. This was done using one day timesteps.

http://en.wikipedia.org/wiki/HR_8799
Here's an actual video: https://www.youtube.com/watch?v=fucQFf7Txws (surprised to see there wasn't a video on OP's page)
Great guys, can't wait to see a finished copy of this book! Seems like the books are exploding lately, right before 1.0 is about to drop.

Good timing!
We did this at CircuitLab, and even did an integration with Electronics StackExchange last year: https://www.circuitlab.com/blog/2013/03/06/circuitlab-integr...
> In the posters variant of a spreadsheet where a blank value is invalid, how would the common practice of SUM(column A) be handled, where column A has an unknown number of rows (that keeps on being added to)?

IME, that's not really all that important of a case, because this:

> Require all formulas that refer to column A be continually changed to reference the true amount of rows?

Is the normal way to handle it in Excel, so normal in fact that Excel has a couple of automated ways to handle it.

If you are doing a table (which is the only case where "sum of a column" really makes sense), then for Table T and column C, the formula is SUM(T[[#Data],[C]]).

The other is the fact that Excel automatically updates ranges in formulas as rows are inserted, etc. (though this doesn't work if you are appending, only if you are inserting within the range.)

The two cases I've seen where relying on blank row handling is a common way of dealing with data that can be added rather than relying on either structured references in tables or excels automated updates are:

1) Spreadsheets written prior to Excel supporting structured references in tables (or by people who learned Excel that long ago and haven't updated their skills), and

2) Creating forms with a fixed number of rows (usually, to be printed in hardcopy form, so that page layout is an issue), where simply zero-filling the relevant cells with a formula that doesn't display zero values would be a simple solution (since you have a fixed set of cells to fill.)

Of course, you could also have function fail by default on blank cells but take an optional parameter to treat blank cells as the appropriate identity, the same way Excel lookup functions rely on sorted data by default but can be given flag that tells them to find an exact match without relying on sorted input.
Watch an Ohio Amish community raise a barn in less than 10 hours
SHA-256 is a form of SHA-2.
Amazon Offers Fire Smartphone for 99 Cents with AT&T Contract
I've seen things along this line in restaurants before:

http://footpull.com/
Yes, I looked into it a few years ago when I was working on my own resume. I wanted to customize mine more and I didn't like the page breaks. It doesn't look like it's been updated since then.
Paul and I don't see eye to eye on many things, but on this we're in complete agreement.
We're in violent agreement here. It was merely an illustration of what kind of ultimatum would be required to get that plane to land and I really don't see that happening. So I think if there is a formal offer of asylum by Switzerland and Russia lets him go un-opposed (which I assume they will) then he will arrive in Switzerland.
Why isn't the author getting another L-1 Visa? Since his company has a base in SF and Belfast, that should be possible, right?
Fishboom a new mobile ddictive game
First, it requires more than just a request flag, since that flag only affects the signature algorithm in your certificate signing request. Your certificate authority has to actually support signing certificates with SHA-2, and also needs a chain that uses SHA-2 signatures. There are some certificate authorities that are lagging behind here, such as RapidSSL.

Second, there are old clients out there that still don't support SHA-2. Namely, pre-SP3 Windows XP and pre-2.3 Android.

Edit: originally this comment said that only IE on pre-SP3 Windows XP was affected; apparently Chrome on pre-SP3 is as well, presumably because it uses some system libraries.
http://www.youtube.com/watch?v=tJOoIuOkERA
The author Robert Strandh is[was?] a Professor at the University of Bordeaux.

http://dept-info.labri.u-bordeaux.fr/~strandh/index.en.html
Slightly related: I wish door handles, taps, bathroom flushes, up/down lift buttons etc. are mostly foot operated everywhere. There's really not much advantage of interacting with all these knobs with your hands.
Motorola Moto X (2014) review
There's a video at the top, it's the first graphic. It is also 42 MB, so it may take a while to load.
L-1 visas are non-immigrant visas, and they require certain periods of absence from America in order to renew them, as well as lengths of employment at the company before you are eligible.
Hey guys!

I wanted to thank you for your feedback.

User @gorbas submitted a pull request to fix the documentation

You may find some bugs, some caused by my fault and some other s regarding libspotify bindings which are not maintained by me.

If you find any bug please, open a Git Issue
Two questions: first, in a zero-sum model, why is human exploration of the moon more worthy than other similar unfunded projects? In an non zero-sum model, why is it worthy enough to justify growing the funding pie for science projects?

It's not in either case in my opinion, and I would argue is it significantly less worth than those other projects.
That's an oversimplification since the valley is the leading proponent of immigration reform (yes since the companies there will get better access to foreign workers) but every other developed nation seems to have a more sensible policy like allowing "work status" and not tying it to a specific company. Green cards effectively do that but unless you're Bieber or can afford the $1M investment visa you don't get one on day 1.
I'm having a hard time remembering what it was but around this time last year I saw someone demonstrating a sort of gel like cover (similar to this http://www.amazon.com/Cyber-Clean-25055-Office-Pop-up/dp/B00...) at a startup weekend.

The idea was to cover door handles with it in hospitals etc and had received positive feedback from quite a few local hospitals if I'm remembering correctly. I'm not sure what happened to that project though. I like that solution much better than this though.
The SHA1 vulnerability being contemplated here affects only the establishment of an HTTPS connection; the attack scenario involves obtaining a forged certificate.
I'd be interested to hear from any experts in the are on this.

Why is Lidar so expensive? My vacuum cleaner has Lidar. Clearly not of the same grade as that on the Google car, but what is it that makes their unit cost tends of thousands of dollars and is this likely to fall dramatically at scale?
I'm british, so there's nothing stopping me moving out there tomorrow. But we have a pretty sweet deal here in the UK when it comes to tax if you're set up as a limited company, and I'm mainly concerned about tax in the Netherlands. I'm guessing it'll effectively mean a pay cut, I just need to make sure I'm tax efficient.
This one raises some eyebrows (a marketplace for prayers, where you can pay people to pray for you):
http://ideamarket.com/details.html?project_id=62838791408189...
Pricing for the UK seems kind of expensive.

Letter sending is often touted as being one of those things that's actually a lot more expensive than you think it is, and I think Lob are leveraging that common "wisdom". I don't really believe the Total Costs that are touted ($15.00 to send a letter), but it's interesting thinking how much this could therefore save.

I think there's also a huge potential here to partner with Mail Scanning Services. If I can charge you $1.60 to send a physical letter, and a mail scanning service can charge the same to receive said physical letter - then we're both in a position to cut out the middle man and essentially charge you $3.00 to send and receive an email.

That's a frighteningly efficient way of making money.
Here is Universe Sandbox, a gravity simulation that can do massive scale simulation on home computers. Neat demo videos about colliding galaxies, etc.

http://universesandbox.com/
SHA-256 is one of SHA-2's hash functions: http://en.wikipedia.org/wiki/SHA-2
The Most EPIC Double Rainbow EVER Excuse My Excitement ;)
> Philosophically speaking you can never verify anything through experimentation

This depends on what you mean by "verify". You seem to mean "prove that something is absolutely true".

That is not what I meant. I should have clarified that I meant something along the lines of "we've collected a bunch of data that don't contradict <something>".

I've edited my meaning into the post because I don't want my stupid equivocation to distract from more significant issues.
What parts of Common Lisp are bad? Wouldn't removing them require revising the standard [ANSI INCITS 226-1994 (R2004)]?
VBScript (classic ASP), SQL, C#, Javascript, Powershell

Most productive when working in the SQL/C#/JS parts of our stack and then need a warm-up period whenever I delve into the VBScript areas.
Ah interesting, thanks.

(For anyone else, here's the link:
https://groups.google.com/a/chromium.org/d/msg/blink-dev/2-R...)
Yes, you are right, not many economists share this view.
I have been called for Jury duty probably seven times. The prosecution and the defense both have a limited number of potential jurers that can be rejected, and each time I ended up being passed over. Once, just after my company was sold, I was called while unemployeed and was selected to be on the jury.

We were instructed to not speak to the other jurors during the trial, but I had already decided that a stern looking oil and gas attorney on the jury would end up being a law-and-order throw-the-book-at-them type. Once we got into the jury room to decide the sentence I realized how wrong I was. Our first vote was 2 for acquittal (me and the attorney) and the rest leaning towards guilty.

The trial wasn't complicated, but I was alarmed that most of the jury had a very poor understanding of the evidence presented. I heard reasoning such as the following: "Well, I'm a Mom and I'm just very very against drunk driving." OK, but what the hell has that got to do with the evidence we heard? There were serious problems with the evidence presented and it took a couple of hours of discussion before it we eventually settled on not guilty.

Years later a lawyer here explained to me why the compositions of the juries is so frightening. The juror pool used to come from local property tax records. This was decided to be unrepresentative of the population and they moved to pools based on driving license records. Anyone with a driving license can end up as a juror. Many of the people that don't come up with excuses for why they shouldn't take a week away from work are those that you wouldn't trust with any kind of important decision.

I don't know how to fix this.
If you want to compile it, you need a Common Lisp implementation. SBCL, CLISP, and Clozure CL can usually do it, though SBCL is the most reliable and well-tested.

There are binary versions available for download, too. They've been precompiled with an existing CL compiler.
I launched this because I felt the need for it in may latest projects. Basically now you can measure and manage customer feedback as rigorously as you now measure and manage profits. It's based on the famous Net Promoter Score.
In terms of auto-update, sure. But I was talking mostly about how to structure your data - for most business activities, lists of objects with properties (or dictionary keys) are far superior to cells, and collections of cells, with obscure names.

How much easier would spreadsheets be to understand if you had

sum([widget.price for widget in catalogue])

instead of

SUM(F3:F405)

?

Teaching people to think more about their data structures, rather than teaching them to squash everything into a table even if it doesn't really fit into one, would dramatically expand their skills in this type of analysis!
I don't think he's the first to think of it, but definitely one of the few who actually built it, I started once a while back, but never got very far...LOL
No problem, from the CDC[0] report entitled "Guideline for Hand Hygiene in Health-Care Settings"[1] From that reference it says, we have:

"Alcohols are not appropriate for use when hands are visibly dirty or contaminated with proteinaceous materials."
"Alcohols are rapidly germicidal when applied to the skin, but they have no appreciable persistent (i.e., residual) activity."
"Despite its effectiveness against these organisms, alcohols have very poor activity against bacterial spores, protozoan oocysts, and certain nonenveloped (nonlipophilic) viruses. Similarly, certain accepted methods for evaluating waterless antiseptic agents for use as antiseptic hand rubs require that 3 mL of alcohol be rubbed into the hands for 30 seconds, followed by a repeat application for the same duration. This type of protocol also does not reflect actual usage patterns among HCWs."

The alcohol gels are good, but I think they're not a cureall was my point.

[0]:http://www.cdc.gov/
[1]:http://www.cdc.gov/mmwr/preview/mmwrhtml/rr5116a1.htm
Do you mean for hire one for Creddle or hire one to design your own resume? Either way, I've seen some beautifully designed resumes done by professional designers.
Another way to think about SHA2 and SHA3 is that it's entirely possible that SHA3 could fall before SHA2 does. They are unrelated algorithms.

I'm also not comparing attacks on SHA1 to brute force (which is also not how MD5 fell).

It would be helpful, when people posit attacks on SHA1, if they'd cite the literature they're referring to.
As for the first 1.0 release, we'll go with CMake. After that we have big plans: http://youtrack.jetbrains.com/issue/CPP-274
Hey thanks man. Saves me launching John the Ripper.
I think the designs look great, but it's a bit jarring to see them in a very unfamiliar aspect ratio (also it'd be weird if printed because it'd incur a large margin at the top and bottom).
Most likely you are right that you can install without already needing Common Lisp for your particular platform, but that is not always the case. http://www.sbcl.org/porting.html
Have you considered taking a JSON Resume (http://jsonresume.org/) as input?
Echo this, they went out of their way to come through for us in an emergency. Fantastic service.
By the way I've shared with the unofficial Burning Man fb group https://www.facebook.com/groups/burntheman/permalink/1015458...
no, they just blow stuff up everywhere else in the world.. either literally, or politically..
Infographic: How to Increase Your ECommerce Traffic by 37% Using YouTube