skysight-inc/HackerNews huggingface dataset:
Isn't showing partially blacked out private photos still a violation of privacy? If the author of this post really wants to be white hat, he should modify the image (above 14) to obscure the non-blacked out part of the photo with a different color. I'm unfamiliar with that celebrity in the picture but if I was familiar with her work, it would feel creepy to look at it.
Another possibility is purchasing an old phone from Ebay and extracting deleted files. Or a local mac/pc/phone repair shop pulling the data during a repair. Then theres the nsa/border sec vector too.

Photos uploaded to a mac or pc could also be malwared or malicious apps. Theres the ex/friends/family as possible weak points too.

Plus we have no idea how long these photos have been traded within that private group.

What i'm saying is there are lots of ways this could be done and we shouldn't get so hung up on the icloud idea.
Location: Pahrump, NV (Las Vegas area)

Remote: Ideally not, but I'm not totally against the idea.

Willing to relocate: Absolutely!

Technologies: Go, HTML/CSS, PHP, Javascript, Ruby (Rails), SQL, application security, other misc skills

Resume: https://static.timewasted.me/files/resume.pdf

Email: ryan@timewasted.me

---

I just want to be in a place where I can work on fun/challenging problems and learn new things.
I love sexprs. In fact, I generally prefer prefix notation with the extra parens. However, for such a high frequency interactive use case, it really does meet the cost/benefit requirements to have specialized syntax...
I say it's not fully shipped until it's distributed
This was one more benefit to using an HP-48G. No proctors ever knew what one looked like, so they mostly just cared if it had a QWERTY keyboard.

Not that I ever used the symbolic manipulation, but the equation library was insanely handy from time to time.
Ifinity Unveils Battery-Less Beacon Tech
It seems attackers used them somehow:

"After more than 40 hours of investigation, we have discovered that certain celebrity accounts were compromised by a very targeted attack on user names, passwords and security questions, a practice that has become all too common on the Internet. None of the cases we have investigated has resulted from any breach in any of Apple’s systems including iCloud® or Find my iPhone."

http://www.businesswire.com/news/home/20140902006384/en/Appl...
Card value calculation should look not just at mana but also at the card itself as a cost. Something like Wisp might be great value/mana but it's appalling value/card. That's just obvious and simply to fix. Keep in mind the Warlock hero power(2 mana and 2 self hero damage to draw a card) as a reference point for the value of 1 point of 'card'.

The worst error, I think, is the the assumption that points increase linearly in value. Hearthstone has clear thresholds of usefulness. You'd almost always want to draft a 4attack/5hp for 4 mana creature, you'd rarely want to draft a 5attack/4hp for 4 mana creature, despite their model valuing 1 point of attack at .57 and 1 point of hp at .40.

For instance their Estimated cost for Light's Justice is 2.6 and for Fiery Waraxe 2.5. Except Light's Justice is godawful and Fiery Waraxe is one of the best cards in the game.

Why? Because Fiery Waraxe will kill almost any 1, 2, or 3 mana drop(most of those creatures have 2-3 hp). Light's Justice will tickle them and cause you to take massive amounts of damage.

It's also the reason Chillwind Yeti(4 attack/5 hp) is a 100% pick in Arena drafting(where you tend to build non-gimmicky general value decks). It very very often trades 2 for one and results in card advantage, without needing any combos. The increase from 4hp to 5hp is much more important than the increase from 3hp to 4hp.

Overall I really liked their experiment, despite disagreeing with their method/results :)
If this is a US operation, don't the US law prohibits entrapment?
Also, doesn't it seem more likely a surge in public interest is what originated the operation, instead of the other way around?
It's a footnote, indicated by the superscript "1". The story to which it refers to is linked at the end of the first sentence of the second paragraph. Commentators on HN typically use [1] to indicate their footnotes.
From the FAQ:

> I've heard that GC uses twice as much memory

> This may be true of primitive collectors (like the two-space collector), but this is not generally true of garbage collection. The data structures used for garbage collection need be no larger than those for manual memory management.

Is that true? What GCs use less than 2x memory and have good performance?
I think the main point is that while no platform is 100% safe, you can help alleviate the issue by reducing risk (in the case of the original commentor, they were emailing passwords to themselves).

Of course there are limits to any measure of security, but 1password does a great job in helping people manage themselves.

Personally, it's helped me a lot in just keeping my various usernames/user accounts organized (I sign up for just about anything).
The problem is that Google attaches your real identity to your activities.
Data Visualization and D3.js Newsletter – Issue 94
Hi guys,

Shant here, one of the founders of PitchGrub. We had a little hackathon over the weekend and launched the mvp last night. I woke up this morning to discover that it somehow landed on the frontpage of Product Hunt which was awesome to see.

I'd love to see what HN thinks of the app, all feedback is welcome :-)
People on HN are "murdering" taxi companies by complaining about them?

If something can be "murdered" by mere criticism, then it deserves to be "murdered".
Django 1.7 released to PyPi
Because unlike those previous species, we (as a species) were at best, at least partially responsible for their demise? That's the difference between the extinction of the dinosaurs and the previously mentioned species. Reviving species such as the passenger pigeon is probably viewed by those in the project (aside from science reasons) as a way to make amends for our ancestors' shortcomings.

I mean just 100 years ago, people actually thought it was chic to place an entire stuffed bird on a hat and call it fashion (google search will pull up some creepy results I'd rather not find and link). Thankfully that fell out of style (but long after many species suffered great losses) and the Migatory Bird Act[1] was passed.

I tend to think that humanity has at least some obligation to be a decent caretaker of the planet and to care for those (human and other sentient beings) that are victims of circumstances outside of their control. That doesn't mean we should all turn into hunter-gatherers and live with leaves covering us, but we should at least be somewhat concerned with the consequences of our actions for future generations.

[1] http://en.wikipedia.org/wiki/Migratory_Bird_Treaty_Act_of_19...
> Also why don't routine vaccinations in rich countries have a similar beneficial effect?

Presumably, it's an issue with quantity. The ~20 mandatory vaccinations in West are simply a drop in the bucket compared to the number of different organism/antigens you'd be exposed to without modern sanitation.
>Yes. Google+, by default, likes to grab all pictures taken with the device camera

Google+ photos auto-upload is opt-in.
A Programmer's Role
Sounds pretty similar to the much-derided MPAA/RIAA lawsuits. This probably won't work out too well for the German government PR-wise, at least around here.
And Google has already misused their trust with Google+ and the YouTube "real name" integration. As the integration becomes more complete, the ramifications of subtle changes become more problematic and hard to predict.
Process scheduling and multitasking in KnightOS
> How many people write anything in Python or Ruby that is not compatible with CPython and MRI Ruby? The lowest common denominators in those communities are still the reference implementations and any production grade library conforms to that lowest common denominator.

If the library is binary-compatible with that reference implementation (as the typelevel guys say they will be), why would you as a user care which compiler was used to compile it? A lot of typelevel code already uses macros or compiler plugins to generate source (I've even heard that at one point the Shapeless code was generated using Freemarker templates) - but as users we just depend on their released jars and don't have to worry about any of that.
Hats off, i have tried keto, just couldn't handle it.
You haven't heard of folding bikes?
I was referring more to the operators of the site. LE probably isn't going to go after individual buyers all that often. But the site will have a record of Bitcoin payments made, so you can link up sellers and buyers. And most people probably don't have untraceable Bitcoin. (I tried to buy $300 of BTC anonymously, and it took hours of work, and still reveals which post office I used.)
To be honest, the biggest mistake I've seen entry-level engineers make is not applying for every job.

|Everyone wants senior or lead developers in 2014.

This has literally always been the case. They want a senior engineer. They'll accept you.
http://feeds.99percentinvisible.org/99percentinvisible
What are you talking about? Of 12-14 services he listed, 4 were from Apple (iOS, Mobile Safari, Apple Maps for directions, and iCloud for Calendar sync).

And quite likely, he is not paranoidily avoiding Google, but partly experimenting as he is running one of the very few companies that are directly trying to compete with Google in search.
Shameless plug for python-colormath, which has been cooking since about 2008: http://python-colormath.readthedocs.org/

Has a lot of the same conversions/comparisons/color spaces, excellent test coverage, and in my own biased opinion, pretty good documentation.
That bike seems more stealable than the folding bikes I used for commuting before I started working from home. Interestingly, during all the years that I used folding bikes, I was never prevented from carrying my bike into a building or onto a bus, etc. (Though, I did need to cover it with a bag before placing it in shopping carts at grocery stores.) It worked out amazingly well.
Wow, everything looks so smooth and slick. Great job, guys.
I'm a bit confused by some parts of this. At some points, they seem to imply that at some point a team gets worse by adding more talent. For example, the title seems to be pointing in this direction. But at another point they say

>its performance would begin to suffer, with fewer wins than would be expected, given the caliber of its talent.

Particularly "fewer wins than would be expected" implies that while the marginal returns of top talent decrease, they don't necessarily go negative. I presume the actual paper by the researchers would clarify, but I'm not concerned enough to hunt it down.
Tipboard – a self-hosted dashboard with graphs and metrics
You'd think that Facebook would weight people's abuse reports if they ever abuse them. So perhaps 10 flags is enough to temporarily block a page if the reporting users are in good standing. But if they're proven to have bad judgement, then require far more reports. Same for "creating dozens of accounts" - that's some basic level stuff I'd expect FB able to deal with.
Oh, that looks interesting. Thanks for posting it.
The Weirdest Eating Patterns of Each U.S. State
Good article, surprised they didn't draw a parallel between event-driven programming and git/version control systems.
The rule-making game
When I see all the various Scala compilers out there (Typesafe Scala compiler, LAMP/EPFL Dotty compiler, Scala.js, Scala Virtualized compiler, Scala.Meta system, and several research and private variants of the Scala compiler, IDEs own Scala variants) compared to the lone version of the Groovy one, I realize just how detrimental to the Groovy ecosystem was Codehaus Groovy's practise of ignoring creator James Strachan's JSR-241 standardization effort and redefining "Groovy" to mean the org.codehaus.groovy implementation only. At times it seemed they were scuttling others attempts to build a variant compiler, and even cannabalizing the annotation-based addon market like when they duplicated the Groovy++ static compilation "speed booster".
Good question, it's about time they were dropped entirely from anyone who claims to be protecting anything of value.
Other than the silly British spelling of color, looks like great work!

If you guys are ever in the SF Bay Area, shoot me a note and I’ll buy you a coffee.

(For people looking for JavaScript implementations, I put a CIECAM02 implementation and some other stuff at https://github.com/jrus/chromatist)
My bets are all squarely on MariaDB. MySQL under Oracle is stymied by conflicts of interest.

One concrete example is hashjoins, a fairly simple and efficient strategy for many general purpose workloads: MariaDB supports hashing as a join strategy since 5.3/5.5 [1] back in 2011. MySQL, to the best of my knowledge, still lacks any implementation of this. OracleDB, of course, supports hash joins. Oracle has every incentive not to implement hash joins in MySQL because hash joins are one of the performance features that they use to drive sales of OracleDB.

[1] https://mariadb.com/kb/en/mariadb/what-is-mariadb-53/#join-o...
Half real food, half DIY Keto-specific Soylent.

I'm 31, and spent the majority of my early 20s at startups wolfing down Mountain dew. Was up to almost 200 lbs for being 5' 6", and now I'm down to 165, and headed towards 150.

Exercise is critical as well. I run 3-5 miles every other day, with a 10 mile on Saturday or Sunday.
Somehow, even though I've been following the 2.0 pre-releases fairly closely, I didn't catch the news about dotted version vectors:

> In Riak 2.0 and later, vector clocks can still be used for conflict resolution, but there is now the added option of using dotted version vectors (DVVs) instead.

http://docs.basho.com/riak/latest/theory/concepts/dotted-ver...
Apple says its systems not to blame for celebrity photo breach
Our experience switching from Oracle's MySQL to MariaDB was a solid improvement in performance -- particularly on certain queries where MariaDB's superior query optimizations kick in.

We've also migrated many tables to TokuDB storage engine, and seen phenomenal improvements in performance and scaling. It's so good we were able to de-partition and de-archive our largest tables with no performance penalty.

If you haven't tried MariaDB yet, try it.

If your database is reasonably large (10GB+) and you haven't tried TokuDB yet, TRY IT.
MIT Bitcoin Club Names Final Winners of $15,000 App Contest
There's a saying in Germany - Wo kein Kläger, da kein Richter (sort of a legal principle: Non ultra petita). Uber only could get away with breaking the law because no one complained. Someone now did. Case closed.

I'm not seeing how is this relevant.

You really need references for that? It should be obvious. There are markets (...)

Yes, yes, I know the theory. It's just that in practice, it doesn't seem to actually have facts behind it. At least when people give examples (e.g. Comcast) there's almost invariably an extra-market process pushing things.

The most recent case I remember were some German sugar manufacturers, but I could probably come up with hundreds of cases; it would be a waste of my time, though.

Yes, it probably would. Convincing me is not a very good use of anyone's time :)
Those numbers work fine with what I said, they're fairly full adult lives. Life expectency has been rising over the past few decades with improvements to medical care, but only 50 years ago in the US, it was 70 years. If that's 'full', then the numbers above are 'fairly full', I think. Rome might be a touch short, but it's still much longer than the idea most people drop dead by 30.

Certainly in a sociological sense, most people consider the years 60+ to be twilight years where you're not living life to the fullest - whether it's true or not, that's the perception.
2500mAh gone in a week? What are they doing?!
I had a friend who was a BBS sysop while living with his parents. One day he came home to— "Son, we need to have a talk about the illegal activities on your computers."

Thus beginning a rather awkward conversation which was eventually resolved, to his relief, when he eventually realized they'd just seen a crash message on one of his screens.
Fascinating, so I wonder how hard it would be just to put a GPS bug on the trains. These things are magnetic, you can get them to send SMS messages to a number, throw it up on top of the train car when it stops at the station :-). Of course Caltrain could do this official like but I think that would be to efficient for them.
Given I'd expect most JNI code on Android devices are supporting games, I doubt emulation is going to be a big winner.
Build Mobile Apps to Make Life Easier – Android Developer – Homejoy
"Maintaining it is arguably not."

Do you have anything in particular you'd like to offer to back that up? Have you ever done this? (I do and have done since the mid 90's on various equipment and I'm no Eric Raymond exactly either). We're not talking about running the mail server on a commercial ISP or a company with 20,000 employees. Just running a mail server to take care of your own mail.
+1 my first program was a hilariously poorly coded pong game on the ti-83. A ridiculous mess of labels and goto's, but it worked! I may not have gotten into programming if not for the early introduction through graphing calculators.
What are traffic waves and why do they happen so much? (2013)
No, the 140 characters don't mean 140 bytes [0]. A zigzag read seems to indicate that it's much more accepting than that: Every character is normalized to a preset format, such that combinations like é are represented in a single codepoint (and not "e plus diacritic" which would be two), and then you count the number of codepoints.

So, contrary to popular belief, the languages that could be discriminated seem to not be chinese or japanese, but languages with possible combinations on each character, such as european languages.
Content-Based Image Retrieval Using Pivotal HD with HAWQ
The Problem with Taking a Digital Detox
I'm the maintainer of KnightOS [1], an open source effort to build an operating system that runs on the TI-84+ (and other TI calculators). I've been tossing around the idea of also building open source calculator hardware for far cheaper than TI calculators (which are way more expensive than reasonable). In this dream I would also spend some time lobbying professors and teachers to break the monopoly and educating them on why open source is great. Is that something I should pursue? Would a kickstarter or something to raise funds for hardware be a worthwhile effort?

[1] http://knightos.org
Identifying Malware Traffic with Bro
George Carlin "...immune system is to kill germs. It needs germs to practice on ... When i was a little boy in 1949 we swam in Hudson river. The Hudson River was loaded with raw sewage. That's right, we swam in raw sewage. You know, to cool off. ...":

http://www.youtube.com/watch?v=CnmMNdiCz_s&list=PL4DDBE51446...

Edit: imagine, theoretically, if there is no germs and no need for immune system, would it mean additional biological resources available inside the human body for something else, like for bigger/better brain, etc...?
> Oracle is doing a good job with MySQL atm.

Obvious troll is obvious.

> the performance is BS

We're extremely happy with our "BS" performance.
3DHubs Raises $4.5M to Make Local 3D Printing Global
I’ll Have Some Obesity with a Side of Cancer, Please
Put it this way then:

In America, there is a widespread perception that Taxi companies have shit service, and that Taxi drivers are frequently untrustworthy or discriminatory.

Whether or not the perception is accurate, it is definitely true that the perception exists. Uber provides value to American consumers because American consumers find that the faults they perceive in traditional taxi services do not apply to Uber.

Lest you doubt that I am correct: I am an American, and the above are my beliefs. I can assure you that I have stated my beliefs accurately.
>It's inappropriate because the field of engineering is in dire need of more women, and it doesn't help the situation.

That's marketing thinking though, not a real moral objection.

>Imagine if you wanted to go into a field such as nursing and all of the men in the text books were oiled up shirtless muscular dudes.

This is not text books though. It's a student page. If another student, a woman, has pictures of shirtless ripped-abs male actors in her page, I wouldn't bat an eye.
Hi Luna, from my perspective async.js is about control flow whereas operations.js is about creating well defined operations that can be composed, queued, cancelled, reused and monitored. It's more of a workhorse.
7 must-read Selenium tutorials that jump-start your web app test automation
thanks - fixed. didn't notice I picked the wrong image out when uploading.
Yeah, I upgraded to an 89 in college and then had a math professor who did all sorts of programming with them. I still have the 89 and my wife has her 83. I can't bear to get rid of them :)

I think another reason they're still around is that there's just a lot of material written for them, decades and decades worth of programs and instruction notes.
App Dev's POV: The Status of Android HW and SW
My latest post. Bootstrapping with a new startup
Whilst in some ways I really hate the planning/listing laws in the UK, it does at least leave some very interesting buildings around. You can be walking down a London city-centre street, past one big blocky modern building after another and then suddenly encounter a 400+ year old Tudor inn. Absolutely fantastic when you see them; it's one of the main reasons I like walking rather than taking the underground.
"You can then get shotgunned by spam filters, too"

Have you had that problem and weren't able to get by it? I've had IP changes over the years and while it's taken a small bit of work to get the new IP accepted (in some places most places don't seem to care) I'd say it's hardly a show stopper. Of course all the email deliverability people selling products and services in that market want to make you believe you'd be a fool to roll your own.

Of course if you get a VPS with some IP address that someone used to spam sure you have a problem. The idea is to do your homework and not have any of the obvious problems. (You can run the IP by the blackholes to see most issues.)

Also (not a comment directed at you by the way) I love the way a forum such as HN where people spend all sorts of time doing things just for fun seems to have a problem with the "work" involved in doing something that actually has value or might take a bit of work in order to solve a problem that they have.

The downvotes seem to indicate a reaction such as "wow what a stupid idea why would you run your own mail server hey you can just use fastmail that's what we all use".
Further details
http://www.reuters.com/article/2014/09/02/us-home-depot-cust...
You mean the box is ticked in a terms and conditions screen when you first turn the device on and that counts as opting in. It's on by default. Most people don't realise what it's doing until either the uploader drinks all their battery (which mercifully they seem to have fixed) or they have loads of photos pop up when they sign in to Gmail on a desktop.

The sign in process for Android devices has become ever more convoluted and incomprehensible. People, understandably, complain about the Facebook app, but Google are actually far worse.
ESO offers guided tours of their Paranal and La Silla observatories.

http://www.eso.org/public/about-eso/visitors/