skysight-inc/HackerNews huggingface dataset:
I think a good example of people who exploit bugs in people to get rich are con artists, and what they do is usually considered illegal. Sure, there are various reasons why what they do feels wrong, they may have to lie and misrepresent things, they may con people (the elderly, etc.) for which the law has specific protections (France has "abus de faiblesse" -- abuse of weakness -- for exploitation of physically or psychologically vulnerable people), they may use threats... But I would be surprised if there was no instance of a con artist being successfully prosecuted for something which basically amounted to getting a responsible person to give them money through a certain sequence of legal inputs.

I am not personally sure that I believe this to be a good thing -- the flipside of laws that protect people against themselves is that they may make them less responsible, so care is needed. But I think it is not the case that exploiting bugs in people to get money would be systematically legal.

I do think there is a difference (at least in degree, maybe in nature) between computer and human victims: for computers, we feel justified in estimating that people should know that they are dealing with them, and second-guess what they are supposed to do, so that you are blamed if it can be shown that you "knowingly" make them deviate. (Laws have this interesting way of talking about unverifiable states of mind of people, but there can be clues. Did the gamblers who exploited the bug call it a "bug"? If yes, this suggests that they realized it was unintentional, so you may argue whether it is still fair or not that they exploit it, but you can't compare their situation to someone who would hit the bug in good faith.)

With respect to this difference, I think the law is also designed to account for the pragmatical fact that everyone has entrusted their lives and businesses to the dumb computers, without having the technical skill to be responsible for what they do, so some protection is afforded computers they malfunction and/or if they have been incompetently manufactured or programmed. I often wonder whether this is a good thing. (When you consider that people are responsible for computers they own or operate, you often get interesting moral consequences.)
Streak (YC S11) is hiring engineers who love JavaScript
We're looking for people that love Javascript - ugly warts and all. We want people that care about Single-Page App architecture, writing clean reusable code, and spend more hours than is reasonable looking at Dev Tool's CPU profiler. At Streak we have an incredibly sophisticated SPA that is built on top of another incredibly sophisticated SPA (Gmail), all while never compromising performance. This is extremely challenging technically, and you'll be sure your skills will be pushed to the limits and beyond.

Requirements:

- have worked on a javascript application with more than 10KLOC (app code, not external library code)

- you love working hard, not just for financial rewards, but for the opportunity to grow personally

- you live (or want to move) to SF and are authorized to work here

Obviously:

- Great compensation and real ownership (both equity and over the product)

- We’ll make your life easier. Our benefits package is amazing

- We’re well funded by great silicon valley investors and are profitable

We’d love to hear from you at javascript@streak.com, please send us some information about yourself and samples of anything you’ve built.

Read more about Streak at http://www.streak.com
I've written large systems in Java, C++ and yes, I have never ever used DI. Nor even seen any kind of AbstractFactory in Java.
a while back I asked for something like this except for current startups, successfull or not, and what they have learned. currently I'm following Mediums startup section
Backing is also a high-risk "investment". :)
>> "It probably even hurts more than it helps in the long term."

Compared to what? Big companies and monopolies die eventually, yes, but they pretty much outlast smaller companies and startups by definition.

Being big gives you the power of scale. You can simply afford to spend more resources building moats around your business than your smaller competitors can. If someone built a better Google.com today, I'd still be checking my Gmail and using an Android phone daily, plus Google would be in a much better position to play catchup than AltaVista et al were.
This might seem pedantically trivial, but my first reaction to holacracy was 'why should I trust your system when you can't even build a word properly?' The Hol part is is from Holos, Greek for whole. You could talk about a holarchy (a previous attempt at this sort of system) because a 'holorchy' would suggest a whole ball and 'holoarchy' is unwieldy. But 'holacracy' is such a linguistic mess that it conveys an air diving into something without having thought out the underlying assumptions properly.
I had the same expectations!
Retro Malware, cuando lo viejo se vuelve una amenaza
Yep - the first thing I do on any computer is re-map CapsLock to Control.
My point was that there are banks that will never adopt new technologies, then there's the likes of AmEx, Chase, Wells Fargo, etc, who have now signed on to two different (and to a certain extent, competing) technologies that they don't have to adopt, only because it pushes the industry forward.

But yeah, they obviously found a way to implement ApplePay - hell, Apple probably did it for them.
Researcher figures out how sharks manage to act like math geniuses
As someone who's been using (and really liking) rust for about 6 months, there are two things in this article which are, I'd say, 'common misconceptions' about rust:

One of the coolest features of Rust is how it automatically manages
resources for you, while still guaranteeing both safety
(no segfaults) and high performance.

In rust there are two types of code. 'safe' and 'unsafe'. The above is only true if your entire code path contains only safe code.

NOT, if you only write safe code.

That is, if you write entirely 100% safe code, and use some library that uses 'unsafe' code at a low level (this is very common; for example, an C binding or memory optimization), then rust does NOT guarantee safety.

Furthermore, there is no way to know if your code path includes unsafe code.

Rust is relatively safe; it's just not totally safe. Using rust does a reasonable job of protecting you from segfaults most of the time; but it's not a silver bullet.

As soon as the program stops using the resource, its cleanup logic gets
invoked.

...

Because only one scope owns an object at a time, you can tell just by
looking at it which objects will be destroyed when it's done executing.

This isn't always necessarily true.

Rust uses 'drop flags', which are extra bytes at the end of struct instances in memroy, to track objects and keep meta information about them to determine if they should be dropped.

At the end of scope when the drop checker runs it checks against these drop flags to determine if an object should be dropped or not.

(For example, if a closure captures a variable it may no be dropped at the end of the scope it would normally have been dropped in).

There seems to be this myth that resource deallocation in rust is magically determined at compile time and the has 'zero cost'; it's simply not true.

There is a runtime cost to the drop checker; it's not particularly large, but it's certainly not just a sequence of drop operations.

Don't get me wrong; I really enjoy rust, and I like it a lot. ...but those two ideas pop up repeated in discussions about it, and they're not exactly correct.
Is the FTC accusing of online ad equivalent of redlining?

in part, these sorts of ads are determined by a designed bid/match thresh-hold - so why is it not Omega Psi Phi accepting better matches on the Yield side? (also remember, if they deny the ad placement, they deny themselves ad revenue)

Also this is going to get a fundamental oddball question - being part of a protected group could be correlated but not causative for the targeting on that site, but not other sites. For example, for the lower quality credit cards, it could be tied to credit scores, and and there could be a higher percentage of people showing up in these protected groups on these sites (but not in other sites that these protected groups go to that don't have have this correlation of low credit scores, which is the actual targeting criteria.)

Targeting, weirdness.
Domain WHOIS privacy variations among registrars
This is definitely outside the scope of my knowledge, but if you dereference a null pointer, won't you get an illegal memory access?

Undefined behavior, at least colloquially, is about dereferencing a pointer to memory that may or may not be accessed and may or may not work/crash-the-program. That's what makes it undefined and an absolute disaster to track down.

I'm pretty sure that if you try to deference memory address zero the OS will bark at you.

Again, it's not my area of expertise, so please correct me if I'm wrong
I totally love the model-M (I've used it a great deal), and the model-M is inarguably a great keyboard, but calling it "greatest keyboard ever made" seems just silly hyperbole (OK, I know, I know... it's the verge what do I expect)... ><

There have been many keyboards every bit as wonderful as the model-M, and of course what constitutes "great" is obviously highly subjective. Buckling springs are nice, but they're just one of many good mechanisms.
Useful for storing links and data
Comfort is really an undermentioned point here. I've worked in a few offices that haven't been friendly to my Das (despite it having the "quiet" keys), but now that I'm working out of a home office, the clicks live on. And as someone who types for a living, I do notice that my fingers feel different after a few hours of hacking away on the Das than on my Apple bluetooth chicklet.
Kinda like Dropbox + Evernote
740 math 700 verbal, national merit scholar finalist

I can do miracles. I have God's endorsement.

I am God's official high priest. There is one God. There is one high priest.
Well this certainly made my day.
Well for one, it gives people something to complain about, and people do love to complain.
I dunno if it's just me, and I dunno how repersentative it is of their other products, but PyCharm always struck me as a bit overcomplicated. It's got little weirdnesses that make it less-than-great if you're opening, say, multiple different programs (like a student might) as opposed to one over-arching project.
Those, I believe, are fairly easy to capture in the `Moore b r -> Moore a r` formulation. It also captures linearity.

That said, I think the more general formulation is something like Fold or Traversal in Lens which operates polymorphically over the whole thing with a type that a refinement of

Profunctor p => p a b -> p s t

where such a type generalizes all of the concrete Haskell formulations.
Dozens of European ATMs rooted, allowing criminals to easily cash out
What is always missed in these articles is how much of a headache it is to actually implement a BI tool. If you are expecting to install a little bit of code and suddenly have a fully tooled interface to explore in a meaningful manner, you're in for a surprise.

The reality is that you often need to implement a lot of additional logging for things you never tracked before. You also will likely encounter problems with your ETL that need to be fixed so the data isn't completely borked. I guess the silver lining on that last one is that it can serve as a forcing mechanism to get you to clean up your code/data.

Then, once you've got all that in place, you actually need to build out all the tooling/models/views for your reports since most of it inevitably won't fit in standard template mappings, or needs so much massaging it is better to create a new model from scratch.

The reason web analytics platforms are much easier to pick up is they share what is largely a common dataset, although even that is getting more complex with event, audiences, unstructured data, etc. Because of this, they are able to build out the interface for the vast majority of needed reports. This in turn makes the data much more familiar and easily explorable and is a key factor for why business users can pick them up so quickly.

Some platforms offer a services approach, but the concern there is nickel and diming on getting anything done. Realistically, you need engineering and analyst resources in-house to really get the most of these systems.

Interana seems to be targeting enterprise customers that would likely have these resources (otherwise they wouldn't be enterprise-tier) which is a good start towards mitigating those issues.

Just remember that BI tools are just that...tools...the insights and value you derive from them are only as good as the data you feed in and the people actually analyzing it. None of the tools I've seen really spit out actual insights--they just present a bunch of data and representations of said data for you to draw your own conclusions from.

Congrats on the launch Interana team, and best of luck tackling these challenges. One small nit on your site...either let me view full-screen width images so I can really dig through the visualizations you make available, or one better--make a totally free and fully functional account available (ideally without an email required--if I'm kicking tires I'm not asking for a sales person to contact me or be opted-in to a nurturing funnel). It would obviously need a pre-populated dataset and reports, but that is the quickest way for a savvy person to determine if the product will meet their needs.
Ergodox kits are available now, if you don't mind assembling it yourself. I've had mine for a few months, and other than some problems with the reference firmware, I love it. Except for a Unicomp, I doubt I'll ever feel the need to buy a retail keyboard again.
Some discussion of Ivey hack ...

http://linemakers.sportingnews.com/sport/2014-05-13/phil-ive...

It's kind of a gray area.

True, as a professional gambler, he wants to find every legitimate edge.

But if you go to them repeatedly with a sophisticated attack and take them for $22m, you have to know they're going to sue you. That's part of what they consider their legitimate edge.

If I was at a poker table and there was someone who could read the backs of the cards I would probably think they were cheating me.
http://www.pckeyboard.com/

As I understand it, the IBM design and patents passed to this company where you can buy one today. No relation here except that I'm a satisfied customer.
Compared to not having a monopoly. Google has built up a massive empire using their monopoly profits to subsidize every new business they've built. They lose money to give away products and services that users wouldn't pay for. It's a house of cards resting on a single point of failure. It wouldn't survive laying off most of its staff, which it would have to if it lost its search revenue.

Companies that have always had to sing for their supper are much stronger. Apple is the best example. They constantly make new products that result in new sources of money.
grafu uses top-level dynamic HMAC SHA-512/salt encryption to store your personal data

That's not how encryption works. SHA-512 is a hashing algorithm.
I wonder if the jets and/or yachts come first...?
joezydeco's comments elsewhere in this thread are dead-on, but the short version is that there are specific gambling laws and regulations which prohibit this sort of thing. Something along the lines of "It is hereby illegal to find a bug in a gambling machine and exploit it." but with more legalese.
From the blog:

We realise that the shopping experience for many of you was frustrating due to errors and unavailability of the website at times. We had deployed nearly 5000 servers and had prepared for 20 times the traffic growth – but the volume of traffic at different times of the day was much higher than this. We are continuing to significantly scale up all our back end systems so that we do a much, much better job next time.
That's interesting, but it's not what I was talking about and doesn't solve the OP's problem of having to reacquire users every nine months.
Pud - bring back FuckedCompany. Based on all of our data, it's about that time.
Sorry, I still prefer beige computer parts -- to my eyes, everything black makes everything too difficult to see without just a huge amount of light.

So, I had a tough time at the Unicomp site finding a
keyboard with a beige base. They did seem to have one
keyboard with a white base. I'd prefer beige.

After some looking, and without an easy
to find explicit statement, eventually it appeared that the IBM Model M keyboard
uses a standard PS/2 connector. Okay. And for people
who want to connect such a keyboard to an USB port,
apparently there are some simple converters.

Yes, I might like the buckling spring keys.

A keyboard I did like was from AnyKey shipped by
Gateway with a copy of the function keys in two
columns on the left. For some years, my left
hand was nicely trained to hit those function keys
possibly with the control key or the shift key --
I had my favorite text editor programmed to do
something good with all 36 or so options. For the
function key location above the numeric keys, have
to look and reach, and for me that's less good.

Gee, I guess I'm the only one who still prefers beige!
> Complexity with dynamic languages grows with the size of the project.

I was talking about language complexity, not how complex the project is.

That said, I have nothing against static typing, my argument was not really about typing at all. It was more about how OO and functional interact in clojure compared to java. Also types by itself dont really make all that good of a documentation, at least not the kind you care about when looking something up in the internet.

I am a fan of schema, and I think the future really is in the combination of schema and core.typed. I dont really like to devlop with pre set types and structures, but you could with schema/core.typed. I prefer to work dynamiclly and once im happy with the shape of my data, I 'set it in stone' by writing the correct schema for it. Then you can just always validate everything during devlopment/staticlly. When you deploy you can turn on validation only for data from the outside. This is how I would like to do it, until schema and core.typed work together I just use schema.
Why does someone need 5000 servers for 1 billion hits? Even at 20X the suggested traffic it seems to be extremely over provisioned and under optimized.
I don't know if I am a member of the set "good hackers", but I found the submission interesting.
Nice app! Is login broken though?
I don't believe you. Are you mistaking DI for meaning a full blown IoC framework? DI is merely the abstract computer science concept. In FP land we call it partial application or P/A. But it is essentially the same thing. I honestly cannot fathom how a large project would look without DI. It must be hideous with massive amounts of coupling all over the place i.e. not something to be proud of. Refactoring must be very hard.

I would have to take a few guesses to know what an AbstractFactory is. That is a "J2EE Javaism" and always has been. So you aren't alone there ;)
Sounds great. Yeah I had noticed that exec function might work. :)

I've downloaded the binary and am playing with it....holy crap I love this thing. It's perfect for some stuff I'm currently working on. I'm glad it is so simple, although I'm sure there are some things that could be added eventually to make it a bit better. (sandboxing and various other permissions things come to mind)
I enjoyed the lecture, but I somewhat disagree with the scientist statement about how Y is close to 0. I think X is the one that is 0 because when the scientist makes an invention the market is so new that there is no market yet. Within this low market the Y value will be high because that is the only thing that exist in it.

Am I the only one who thinks this way? or am i misunderstanding his statement. It could just be a different side of the same coin.
> In rust there are two types of code. 'safe' and 'unsafe'. The above is only true if your entire code path contains only safe code.

I think this is actually a misconception. In every high-level language (Ruby, Python, etc.) there are APIs for interacting with low-level code. These APIs (C bindings and FFI) are unsafe, and are in the path of virtually all high-level code. It is the responsibility of somebody implementing a C binding for Ruby to ensure that the publicly exposed API is safe.

If you use `nokogiri` in Ruby and get a segfault, that is a bug in nokogiri. It is not an indication that Ruby is unsafe. Similarly, the "safe" dialect of Rust is Rust. Rust provides a low-level binding to unsafe code via the unsafe dialect that is philosophically equivalent to the FFI API or C bindings in Ruby. If somebody uses the low-level binding and exposes a Rust library that segfaults, there is a bug in that binding, full stop.

I think this is very important. If you use regular Rust code with the expectation that "anyone in your path may cause you to segfault", something has gone very, very awry in the ecosystem. This is not an expectation in other high-level languages when people write low-level libraries with unsafe code in them, and it should not be an expectation in Rust.

> Rust uses 'drop flags', which are extra bytes at the end of struct instances in memroy, to track objects and keep meta information about them to determine if they should be dropped

This is in the process of being eliminated (see https://github.com/rust-lang/rfcs/pull/320). I didn't mention it because it's runtime overhead that will not be present shortly, and certainly by the time 1.0 is reached later this year.
Entropy: Mycelium
Don't be surprised that the government prevails and the first amendment is furthermore whittled away at in an every increasing desire for our government to prove it's illegitimacy.
It doesn't, but if you uncheck "Let pages override this settings", all the backgrounds will be the same and the effect is quite similar.
Just glanced at it briefly. Looks almost entirely unlike what I need. :(

"26 cities available for the United States" ? I'm not visiting some big famous city by air; I'm going on a road trip. Looking at the list, I'm going to be at two of them, but I'm also going to travel through New Orleans, Kansas City, Springfield, MO, Memphis, TN, and about 100 smaller towns on the way. The point isn't to get to (e.g.) Orlando ASAP, it's to have fun on the way.

Regardless, if I have to list each town individually, the site is almost worthless, because I can instead just Google the destinations myself. It looks like I can accumulate lists of destinations IN a town, but for anyone who's traveling by car, a travel site that only shows the most famous attractions in a small number of big cities is doing no one a favor.
Chicago, IL - Full-Time and Intern - Civis Analytics

Civis Analytics: Building a Data-Driven World.

We create technologies that empower organizations to unlock the truth hiding in their own data—transforming them into smart organizations that are ready to thrive.

We are a community of engineers, data scientists, and statisticians, and are looking to add to our growing team. We are smart, fun, and a little bit weird. Does this sound like you?

We are hiring for a number of positions, including:

-Front End Engineer: https://jobs.lever.co/civisanalytics/1df0a4c2-a481-413d-9388...

-Software Engineer: https://jobs.lever.co/civisanalytics/75984a40-d4e2-4873-b4c8...

-Vice President of Product: https://jobs.lever.co/civisanalytics/169dd5ae-c3db-4ed5-91bc...

-Data Scientist - Engineering: https://jobs.lever.co/civisanalytics/e7165975-3545-471d-9844...

-Senior Data Scientist - Engineering: https://jobs.lever.co/civisanalytics/7bbb31e5-5b08-4a1c-ad5c...

-Software Engineer Internship: https://jobs.lever.co/civisanalytics/3f32fc1f-647e-435b-b06d...

View all of our open positions at: https://civisanalytics.com/careers

https://civisanalytics.com