skysight-inc/HackerNews huggingface dataset:
> I think a more useful question is, what is the amateur person worth $25K to do today? Or the young person with negative net worth? The usual "just dump it into the stock market and pray" seems very risky. Sure, long-term the overall stock market expected to go up on average, but that is if you can survive the variance. Netted out over the years, I'd guess that I've pretty much lost money on the stock market, and I'm skeptical of someone with a simple answer that amounts to "hand your money to Wall Street".

The big thing is to avoid the fees. The average money manager performs averagely, so unless you have some way of picking an above-average one, the fees you're paying are literally handing money to Wall Street. You're right to want something anticorrelated with the stock market, but everyone wants that, and paying a 2% fee to "diversify" probably costs more than you gain. I think there's some merit in the "fifty-fifty" approach - half your investment in an equity index fund, half in a cheap bond fund. But more exotic asset classes probably cost more than they're worth.

The other thing is to make sure your exposure to the housing market is appropriate (indeed I've heard a three-way split suggested). If you're paying a mortgage you'll do better to pay that off quicker rather than invest in stocks or bonds. If you're wealthy enough to own outright you want some of your "excess" wealth (over what you need to own the house you want to keep) in housing, either by buying another one to rent, or by having a big enough house that you could downsize if you needed to. If you're young and renting is the really tough part: if you buy then you're insulated from the market, but relying on your ability to repay the loan. But I guess books have been written on this already.
So you don't scam twice as big and just get caught for half of it on purpose. Pretty sure that's Die Hard though.
"Don't commit fraud"

Next.
Verhuisdozen om te verhuizen, bouwen en te knutselen
Yes. Well, with knowledge of basic statistics you might start getting angry at how much it's dumbed down.
What's Going on in Catalonia?
That's right. The purpose was to have twin papers - one for the Computer Science community focussed on language implementation, which is the earlier paper.

This paper focusses on motivating the design of Julia for the larger scientific community. Any comments will be incredibly valuable in improving the quality of the paper.
Because retributive theory of punishment.
you put an awful lot of words in my mouth. i didn't mention scrolling. re-read.

the top bar is too large vertically without enough value. readability improves a bit, but the sheer prominence takes away from the discoverability of the first article title.

i didn't mention type size or whitespace. i also like large type and generous amounts of whitespace.

i think you're just looking to argue for the sake of argument.
Download Pyramid Solitaire and and Start Playing.Free
> That said, I've heard the best way to beat the market is to invest in undervalued, small, unglamorous and mostly unknown companies.

There's an almost opposite approach that has been beating the market at least in recent years, "dogs of the dow": the idea is to buy the large companies that no longer have much growth potential (I remember McDonalds and AT&T as examples). People like to own small companies that they can imagine making it big, so the market undervalues large, old, "boring" companies that generate steady returns.

The underlying idea is the same for both approaches though: find a human bias that makes people over- or undervalue certain companies, and do the opposite. If there's any way to beat the market, that'll be it - and even that will fall as more trading is done by impartial algorithms that're immune to hype.
I have used Nop commerce (ASP.Net).

I am not sure if it is integrated with stripe/Google checkout, but I haven't written single line of code and integrated with Paypal. Also lot of plugins are available.
This really depends. The marginal cost of "what version is this box running, why doesn't this work, oh we don't have that tool?" could be very high on something like that.

I mean remembering, that the net is full of slow brute-forcers and the like. Just because it takes a few days to run through all the exploits doesn't mean that someone won't do it - that's thinking of security in human, individual terms, as though the threat is targeted rather then general.
Be sure to keep WordPress updated
Global Day of Coderetreat – November 15, 2014
Vanish: self destructing digital data
Both the risk an correlation are of course unknowns, so people use historical values, which of course are not realistic.
There is even a TV show which, among other things, depicts the tricks of bad consultants. It's called House of Lies and is based on the eponymous book.
I'm having a little trouble with this one. I run a small shop (really really small), we do a lot of troubleshooting and some maintenance and deployments for customers. Maybe we don't qualify as "consultants", I dunno.

But we certainly don't make money for our customers. We save them money, we eliminate some hassles and downtime, but that's not really the same thing.

So I'm open to hearing that we're doing it wrong, but I don't know what doing it right would be, especially since we aren't really getting rich, and we've got a bunch of customers that have been with us for years. I'd like to change the way the business works at the beginning of next year, so now'd be a great time to start figuring out how to do it right.
There's forgotten dimension being a good consultant and that's to only make sales when you have the opportunity and ability to remain independent and be able to provide recommendations that your clients might not want to hear, but need to hear. Too often, consulting firms incentives are aligned to making the sale and getting the next cheque that they'll be willing to compromise on their recommendations and solutions in order to please a manager within their clients - often whom have a specific thing they want to achieve which might be unaligned to the overall client's best interests.

Because of this, consulting exists somewhat differently to startups as well. In the startup world, your aim is to delight the customer. If you apply that same principle, you'll be tempted to say things that make people happy. I'd argue proper consultant or advisor in any field (whether IT consulting or management consulting) must be able to make a judgement concerning their expertise or their analysis regardless of what 'wants' to be heard by their prospective client (in lieu of how much they might be paying them).
11% per _week_! If it sounds too good...
Re 2. as my comment states, we have tried to fix it, but we cannot: the administrator of that server is powerless.

Error handling is mainly via types, mainly `Result`: http://doc.rust-lang.org/nightly/std/result/ . That part of your article will need changing because it is completely different to the condition system (that is, just swapping the link would be useless).

Also, it's a little unfortunate that you entirely ignore the major difference between Rust and Nim in your little list of differences: Rust does not require a garbage collector (there is no GC used or implemented in the standard library). Lastly, unless you've participated in Rust development (I encourage everyone to do so, it's fun) it may be difficult to judge what the influence of the 'corporate' backing is... you're actually talking to a volunteer (no association with Mozilla) member of the Rust core team right now.
The issue is that I think most people did not interpret it as PG was saying. "Looks like Zuckerberg", when I first read this title, sounds a lot like "is like Zuckerberg", as in speech styles, personality and the like.

I wish PG would talk more about the cognitive bias in VCs. Too many women have to ask the question "how do I get VCs to take me seriously"
Beginner Eye for the Expert Guy
Things I Learnt Teaching Go
I don't think we should push OpenBazar into the illegal drug corner. It is a neutral tech and follows the decentralization vector the internet opened.
Amazon, Ebay, alibaba and so on, all could very well get absorbed by an open bazar concept.

This happened imho to bittorrent, which remains in the piracy corner, even though it is brillant tech solution. E.g. BTSync still has this reputation problem (besides missing open sources) which curbs adoption from sys-admins.
The wikipedia article for Polyphasic sleep is very interesting - apparently it it possible to reduce the required sleep to 2h per day, split into six 20-minute naps.

http://en.wikipedia.org/wiki/Polyphasic_sleep
It complicates the implementation, but I'd argue it simplifies the API... one of the things you want to get absolutely right is the binding between hostname and server certificate. If you separate the two, there's a good chance that the TLS code won't even know what hostname it's supposed to be talking to (and I think I've heard of two codebases that required some refactoring for the hostname to get to the right place). A tls_connect that takes a string forces you to do the right thing, and the primary design goal I want out of a TLS API is that it should force me to do the right thing.
Are there any benchmarks to compare to other "format" (compress and retrieving time, efficiency, CPU usage, etc.) ?
What I would like to know before jumping in a new programming language is what it sucks at and how badly it sucks there.

Never in my life have I ever heard anyone say anything good about how wonderful it is language X is good at y which is what it was designed for. I have however heard plenty of people cursing languages for not doing something which they thought was an "obvious" thing for a language to do and X didn't.
Show HN: A simple PHP wrapper library for Twitter API v1.1 (Feedback welcome)
Does anyone know more about this story? Could he have gotten away with this if he were in a country with less regulations? Was part of the pitch that he was from the US or was that irrelevant to his investors?
I maintain the polyfill service. I'm very much aware of this issue, and we have tried to take steps to mitigate these concerns:

1. You can easily run the service yourself, just download it from the github repo

2. The hosted version is hosted by the FT and sponsored by Fastly, so you're not importing code from some random unknown entity. Those corporations practice good security awareness (in the FT's case it dramatically improved about 2 years ago), but if you don't believe us, see point 1.
It's great to have a paper like this on the arXiv, I believe this is the right way to reach the scientific community.

Some ideas for improvements:

The package directory could be mentioned more prominently.

It's a bit tricky to select code in the PDF, not sure if much can be done about this?
>It totally blows my mind people still fall for this bullshit split sleep meme made up by an historian. So we take medical advice from historians now?

Historians can help point to practices that fit the human animal better before modern technology abruptly changed everyday life.

>I do know in the world of science that shift workers get a lot of cancer. Which is not split sleep exactly but close enough for me to not be forcing myself against nature to split sleep.

I can't fathom how an argument in favor of more accurate medical advice and turned into "shift workers are close enough to split sleep for me", ...

>Some creative people work all hours and some bodies are weird but don't buy into this is 'common and natural thing' meme.

Well, there are ways to sleep that are not natural, even if they are common. And there are ways to sleep that fit a person better.
As you say, detecting the overflow is easy, but efficiently handling it is not. It adds a branch to every single arithmetic operation, and it makes it much harder for the compiler to optimise things e.g. it is hard to vectorise a loop summing an array, if every + has a conditional branch on the overflow flag.

(Also, I believe it introduces a lot of data dependencies, getting in the way of the out-of-order execution of modern CPUs.)
Scammers target leading online travel agent Booking.com
>If I consume, I watch a movie or surf or something, and I don't feel all that great in the end. Where did that time go?

Doing something you enjoyed doing instead of what they force you to do everyday?
From the article: "you should be trying to save your customer money, which is the same as making money for them"

I don't see how what you're doing isn't the same as making customers money. You save them money, all else equal they make more profit, that's what matters. Plus the fact your customers choose to stay with you suggests they feel they're getting positive value and not being taken for a ride.

If saving money isn't materially the same as making money, and maximising revenue is seen as the only way to create value, that sounds ridiculously 1 dimensional and like terrible business to me.
>> [TOR] does not hide the total volume of traffic that must be delivered. And it can't.

But what about I2P [0]? To my knowledge, it can hide much more than TOR does, including the amount of traffic going through your server. You get a large amount of traffic even if you do not host anything, because you become a relay node.

[0] https://geti2p.net/en/
The Unbelievable Skepticism of the Amazing Randi
Yes. You can only "make" money for your customer if you're advising them on sales and/or marketing. You can help them save money in other domains but that's not the same thing.

And some processes need to be streamlined not even to save money in the short run, but simply in order for the company to understand them and regain control.

Put like this maybe it doesn't sound very exciting or useful, but it is (useful).
I missed Nim
Show HN: Criticize our website
YouTube, fake copyright claims, and terrorism
One question for long time Emacs users - do you notice any significant changes compared to e.g. 10 or 20 years ago versions of Emacs? Same question applies to vim users I believe...

Like, for instance, there are huge advancements from MSVC 97 to MSVC 2013...
I'm all for Catalonian independence, but I completely oppose the way scrolling has been hijacked on that page.

here's how you scroll
http://bost.ocks.org/mike/scroll/
Even worse than the problem of uncommon concepts as monads is that Haskell's memory footprint is extremely hard to reason about. A few years ago it was impossible with the http libraries to download a file without the program consuming several times as much memory as the downloaded file.
Time for compassion and the Init GR (debian-devel)
Track your bucket list
I think this story is wrong on many accounts.

For starters, I don't think many Americans understand any details other than the anecdote that there was a wall in Germany, and it came down. Please, rest assured east Germans, we have done worse than steal your achievement- we don't give it any real thought anymore.

Americans glibly joke about the fear culture around communism from that time, but we have no awareness of the irony of our current fears of isis or Ebola.

Reagan's speech at the wall was iconic, but you really need to be over 35 to be aware of it.
How Canary Release saved our lives
Seems a difficult time for the 1000+ Debian members with developer permissions.
At the root of arguments that tech workers deserve a higher salary there seems to be an underlying assumption that people deserve more if they're more intelligent or talented.

I don't believe this to the be the root at all. People are mostly arguing that it's all about market value.

I've seen people who were more talented than me in lower income jobs, and I'm sure the other scenario exists as well. However, I'm employed based on a specific talent which is also associated with a specific median market value.
Ask HN: Why are usernames not secured like passwords?
So we often hear about data breaches, but why are we not encrypting usernames and emails addresses alongside passwords? Is this just because it will require too much computing power and slow down login processes?
I just think that a secure login, means a secure username along with a secure password??
George Soros' perspective is grounding. Markets are moved by people with incomplete knowledge. The entire field of economics is based on a false analogy with Newtonian physics. There is no equilibrium, no mystical balancing force underlying the economic universe. Just a whole bunch of relative idiots trying to get rich for free.
I guess we can publish the IJulia notebooks with the examples and even just the code as plain .jl files.
Not a lot in vanilla emacs (the executable, bare) but I definitely feel a surge in awesome elisp libraries from 10 years ago.
Yeah, sites that don't post dates on their articles really bug me.
Everything big started small: next steps on a grand adventure
Importing `*` in Python
As a user of Emacs for about 18 years, the answer is absolutely.

In recent years, since 23.0, it feels as if Emacs has improved a great deal. This is largely due to the introduction of package.el (extension / package management.) To put it in slightly more dramatic terms, it's revolutionized it.
In general, if somebody tells you're good at Japanese, it means they either a) think your Japanese is awful, but are complimenting you for making the effort, or b) you just made some sort of horribly ungrammatical blooper that reminded them that you're not, in fact, native, and thus need the compliment.
If you don't see it, try doing a sales pitch sometime. It'll be vastly different.
I'm not sure the bare executable is what most people consider to be Emacs (well not its users anyway!), since the large percentage of the code is emacslisp.
In a secure environment, your password will be hashed (not encrypted), meaning there's only one way that the information can flow--toward the hash. This is secure because it allows for matching against the hash without actually knowing the original password.

However, usernames have to be displayed, shared, searched, etc. It could in theory be possible to encrypt this, but with the requirement that it be two way (so as to allow display), it is more trouble than it is worth, with minimal security gained. Most security researchers would probably also point out that if you are able to get to a point where you are dumping a database of user credentials and emails, you are probably also going to be able to retrieve the encryption key, rendering all of that encryption moot.
I think this article was probably written by people who haven't actually tried it.

I experimented with the Uberman sleep schedule myself as a student (i.e. 2 hours sleep a day, split into 20 minute naps). I stuck rigidly to the schedule over the course of three weeks but despite near-perfect discipline, it only got harder and harder.

The hours between 1am to 5am were the hardest. I would stay awake because the program required it (and supposedly it gets easier as your body 'adjusts') but between these hours I was totally useless. I couldn't read because my eyes would unfocus, I had blackouts where I couldn't remember anything. Usually I would just sit and stare catatonically at a wall.

I started breaking things and falling over due to malcoordination from the sleep deprivation and finally gave up after spending a night hallucinating that strange figures were appearing out of the wood patterns on my desk.

I slept for 24 hours and felt like a completely different person after I woke up.

So I encourage you to actually try this yourself, and see if it works. Just don't drive, operate heavy machinery or in fact do anything remotely risky during the experiment. Sleep deprivation can be dangerous.

Personally, I think the 2 hours is enough theory is garbage.
Came here to say this. It was on ARD in the week. I enjoyed it a lot. Interesting to see what a pickle Herr Jaeger was left in by his superiors. Amazing really that nobody was shot.
The Mindset of an Investor explained
It's not a proof of concept, it's an actual thing that's designed to be used. If you read the README, it's clear that there are a variety of nonessential features included which you may or may not want, but I see no evidence it's "over-architected."
He would probably find the time, but not the energy.
If you don't need an insecure thing, why bother with a username at all? Just have a secure password with appropriate requirements.

I've done similar things and it makes life hard. People need a way to refer to specific accounts, to talk about them, to troubleshoot. And for most sites your username is a public identifier, a way for other people to talk about you.

But look at the way AWS credentials work. They're generated for you by the system, and no-one refers to someone else's login. But they still, very deliberately, split your AWS key into a public part and a secret part. Because it's very useful to have a public identity for a credential.
Any plans for Pushbullet integration? EvolveSMS is pretty fragile but the only one that supports it at the moment.

https://www.pushbullet.com/

http://www.androidpolice.com/2014/06/10/pushbullet-and-evolv...
If all goroutines deadlock, then the runtime will panic and you'll get stack traces for everything. But yes, you can obviously deadlock one or more goroutines trivially. A simple select{} will just block one goroutine forever, for example. And no, there's no tools currently that will detect deadlocks, AFAIK.
that’s a separate brach of consultancy called ‘scamsultancy’

There's a third branch, usually called something like strategic consulting. This is where you hire a bunch of young people from good universities with impressive resumes to tell your clients (executives at large companies) what they already knew and want to hear so that they can in turn use it to justify whatever they wanted to do before they even met you.

The world is not fair so this is the most lucrative branch. And you take no hit to your reputation. Quite the opposite, you benefit from associating with your high status clients.

Or maybe it is fair. It's pretty hard to get into that.
Note that Go also does bounds checking, so you never have buffer overflows in Go either (also unless you use the unsafe package).
This is encouraging news.

Google amasses absolutely gargantuan volumes of data about people's online behaviour. Yet, their privacy policy remains very poor [1].

If you have a Google account, Google has your name, date-of-birth, gender, and (possibly) mobile phone number. Couple that with the searches and sites you visit and that is incredibly personal information about you.

Yet, in their privacy policy, Google fails to mention:

- whether the data they collect about you is anonymised (and what they anonymise)

- how long they keep your data for

- whether the data they collect about you is disasscociated from your identity

- who sees your data at Google. GMail automates scanning of your emails. Does this hold true for all the other data they hold about you? After all, your activity across the web is arguably just as personal and private.

Google also states that you can delete your web history but fails to confirm if that data is wiped from Google's servers or merely from your dashboard.

It's depressing how easily Google gets a free pass on matters of privacy.

I challenge anyone to explain why you would purposely omit the information listed above. It is exactly what you would expect to find in a privacy policy, especially from a company that arguably tracks online behaviour more than anyone else.

[1] https://www.google.co.uk/intl/en/policies/privacy/
I think things could be sized down a bit. Especially places like http://www.qawba.com/#market where it doesn't fit on my 15" retina mbp.

I like the full page effect of the home screen and the text that follows. Maybe have an image in the whitespace like on the contact page? Speaking of, the contact page seems weird to me kind of like it doesn't follow a grid and the typographs looks off to me.

The links at the end should be actual links and not just the circles that are clickable.

License is spelled wrong in the footer.

Cheers.