skysight-inc/HackerNews huggingface dataset:
I'm managing the incident response.

The investigation continues in parallel. First priority was safety, which meant shutting everything down to prevent any additional issues or destruction of evidence. Second was giving people the ability to access their funds and to trade - a complete redeploy of the infrastructure which took us working 22/7 since Monday until just now.

An investigation is underway and we have some internal speculation from the first bits of information - the real statements will come after we aren't guessing. This is the first minute we've had to breathe this week.
Wouldn't a smart student realize that they can't trust their Professors?

If you can't spot a dishonest salespitch from an academic, doesn't that make you gullible?

Smart people make decisions based on evidence. Gullible people trust their elders.

I can't see any better solution to human gullibility than to herd all the gullible people into a reproductive dead end. This means gullible men should be put into a situation of poverty so they can't find mates, and gullible women should be made to work in careers until they turn 38 and their likelihood of reproduction drops into the single digits.

If we can't make gullible people smart, we can at least make sure their genes leave the gene pool.
Fair point about "labwork," but even putting that aside, it doesn't sound like any legitimate science is being done, one way or the other. I doubt they're even doing any meta-analysis. Sounds like they're just playing buzzword bingo, and citing previous studies to make it seem as if there's a legitimate basis for their "study." If you'll notice, most of the phony papers cited failed to establish any significant findings in their putative meta-analyses. If one were going to fake whole-cloth studies, it seems that this is the safest and easiest way to do it. For example: I find 20 previously published papers on a given topic, I claim I did a "Begger's funnel" meta-analysis of them, and I claim the Begger's funnel analysis found no statistically significant results. Done. I have a new paper to publish, from essentially nothing.

The giveaway, to me, is the fake statistical method that's repeatedly cited (in this case, the "Begger's funnel plot"). A legitimate meta-analysis wouldn't cite a fake methodology. It would have no need to do so. The fake method is used because it sounds arcane and advanced, and whoever is doing the peer review is going to assume it's legit.
I doubt that. Having the funds jointly controlled by the exchange and the user, and outside the full control of the exchange, would require each fund transfer to be represented as a transaction on the Bitcoin network, which is simply impossible - the volume of transactions on an exchange is a few magnitudes larger than what Bitcoin can currently handle. To keep up with that volume, exchanges must use an internal off-chain accounting system, which precludes the use of multi-signature (or any other smart contract based on Bitcoin scripting).

In addition, this would require the user to be online and actively sign transactions when a matching order is found.

I think that they most likely meant that they're using multisig internally to protect their funds, in a setup where all the keys are controlled by them.
Thanks ASquare, great video! Here is the longer version of the same presentation: https://www.youtube.com/watch?v=qr8B3l85E5Y

Another one on this subject: https://www.youtube.com/watch?v=YZCX-izCYMk
> does that mean they are just eating that loss out of their own profits,

Yup.
Ahead of them in what regard, exactly? Daily active users to the site?
Some of these are not protected even under the ACA or other regulations...

Not so. ACA allows insurers to price their plans based on only three factors:

- Age

- Smoker/Nonsmoker

- A geographic "community rating", based only on the broad area in which you live

That's it. If they sell a plan to anyone who matches along those three axes, they have to sell it to everyone who matches.
Insurance could be a killer feature of self-driving cars. Imagine a self-driving car that came with a $0 5-year collision insurance policy.
The salt thing is mentioned in the article. According to the author it's better to add salt before cooking.
Meet the illustrator behind your favourite childhood game covers
India has very rich monzanite deposits. If the claims published are real, India has found one awesome solution to address the present energy crisis.
You don't. Keys on an HSM never leave the HSM, is how I think it should work. But your keys in the HSM can encrypt secrets, separate from the HSM's keys, but stored with the same service. You could potentially distribute secrets to multiple HSM-backed services. It's equally possible that the service itself distributes your secrets amongst multiple HSMs.

YubiHSM back in the day, I recall reading, was designed so that you'd want two HSMs, one generates random secrets, the other stores the secrets using keys that never leave the device, if I recall correctly. And the reason it needed two is that the generator would leak parts of its keys with the random data it produced, I think, and so to securely store them, you needed a second device with key generating turned off. I could be out to lunch here, never bought a YubiHSM nor do I have experience with corporate ones. My point, is that there are different uses for HSMs, and it's easy enough to have an insecure use of HSMs, even as simple as generating secrets and storing secrets on the same device.

As to what to do if the key is lost, I suppose it's time to re-issue. :) The goal is to not make too many backups: keeping a key secret is more important than ensuring the key is widely available, right? So it's a balance....
"In another embodiment, a data storage system receives a request from a third party to access a user's stored, encrypted data, where the data is stored in the data storage system according to a predefined policy. The encryption on the data prevents the storage system from gaining access to the encrypted data, while the policy allows the encrypted data to be released upon receiving a threshold number of requests from verified third parties." - Cloud key escrow system, Microsoft Corporation

https://www.google.com/patents/US20120321086

Anyone here speak patentese?
Oh, it's a search result, I thought Google had some redirect functionality that was being misused.
So why did they then explicitly disable the GPU that was already present in the chip? Apart from Arduino, the boards you mentioned have one.

https://communities.intel.com/thread/55040

"I am from Intel, and on the Edison team. There were reasons for the GPU being fused out - namely that the use cases around what is intended for Edison do not need video. That said, it may not be that way forever. I'd love to hear from the community on what they think of this feature being enabled - lots of voices make it easier for me to sway opinion."
Stop More Bugs with Our Code Review Checklist
Intel Curie: A Low-Power Hardware Module for Wearables
I'd be very interested in a list of PAID courses you can get a grade from. It would be helpful to demonstrate my ability to get a masters in cs.

I have a bachelors in math. I've taken a data structures and algo course at a local university. I'm currently taking software engineering grad class on udacity through Georgia Tech.

Any other paid online cs courses from universities? Some of the other Georgie Tech classes require too much since they're grad classes. I'm looking for BS level paid online classes.
The upside is continuity of operations. The ability of your lab to continue doing work is no small thing.

Also, I'm pretty sure it's assumed that's structured as a loan.
So that explains it:

"At the high end of the initial IPO stock price range, Box would have a valuation of about $1.7 billion, including employee stock options and other outstanding equity.

That was below the $2.4 billion valuation TPG and hedge fund Coatue Management placed on the company in a round of funding last July. In that financing, Box agreed it would be required to issue more shares to TPG in the event it sells IPO shares at a lower price than expected."

I like Box, I think they have a good model for cloud storage and they seem to be able to keep operational costs in line. And when they pulled their IPO last year the only reason I could think of was that during the Roadshow they realized that their later investors were going to lose money. This too was something I saw in the 90's where the valuation of a company at the last raise got "too high" for it to go public (the later investors don't sign off on it as they lose money).

I hope this means that some folks will think twice about valuations, but you never know.
literally terrible.
Or, in other words, for about half the time those people are expecting no AI.

Never mind the Moore's Law putting computers more capable than our brains less than 30 years away.
Hm, an enum like `enum Color { R, O, Y, G, B, I, V }` is represented by a u8 at runtime (see for yourself here: http://is.gd/YkUY0l), which means that you're only saving a single byte in your `Piece` struct by doing that manual optimization. What was the magnitude of the speedup that you saw?
You are correct- I use the term meltdown to encapsulate an event that causes significant damage to the control of a reactor, such as an earthquake followed by a tsunami.

In such an event, an MSR has a "drain tank" that sits below the reactor. In an emergency, gravity drops the salt into the drain tank, and the nuclear reaction safely comes to a halt- all with zero human intervention.
People have been trying for twenty years to find $300 million in government funding to create a new reference design of a modern thorium reactor. TVA's old reactor which ran until the seventies was based on forties research.

But the past three presidents have not made it a national priority. China and India have funded research and so has one private individual, Bill Gates.
Nonstop Glamour and Prestige
I love how he is getting butthurt (yes, I am using that expression) because outside experts questioned their narrative. However ignoring the fact that the US government brought absolutely no evidence at all to the table (originally) and has a habit of blaming nation states rather than distinct groups with no ties to any specific nation (e.g. some of the "Chinese hacking").

It is like the boy who cried wolf. There might be a wolf (a nation hacking a US company) this time but they've mislead people so many times before nobody believes them out of pure trust anymore. The US government should get used to this. And next time bring even a broad explanation of why they believe so-and-so was responsible.

Just yesterday on the evening news an unnamed "US government intelligence source" claimed that two of the French mass murderers had been captured and a third killed. Which turns out to have been entirely untrue (at that point in time, three are dead today).
What's the source for your 20% figure and have you read any of Paul Campos' work on the state of legal education in this country? He's been saying for years that it's a scam. Only half of graduates get jobs as lawyers, applications are way down, and this year schools have been accepting more people with lower LSAT scores in an attempt to keep admissions up.

This interview has a summary of some of his claims at the end:

http://www.denverpost.com/ci_23733599/carroll-many-law-schoo...

He used to blog on the subject anonymously at:

http://insidethelawschoolscam.blogspot.com/

He's also written a book on the subject.
> How weird would that be in practice? The punishment would not only be time lost but also coming back to a society that's drastically different. You'd be pretty much alone in a new world like an Unfrozen Caveman Lawyer situation.

"Modern society can neither use you as-is nor reform you into a productive member. We hope, in the fullness of time, the future society which ours has developed into will find you a more tractable case."

It would certainly dissuade people from re-offending with the same skills, at least in a technical and, possibly, social context.
Steve Jobs’ brutal 2 character response after getting a Google employee fired
I don't think that a very good idea. People outside of that specific area of research would have no way of knowing whether a particular research proposal is worth funding or not.

I would expect people to end up funding the department which can produce the best promotional video. Then I expect departments to start spending ridiculous man hours producing promotional youtube videos.
I have a VPS running x86_64 Debian unstable so I installed Rust on it now.

I compiled an hello world on the VPS, the content of which is:

fn main () {
println!("hello world");
}

using

rustc main.rs

and the resulting binary ran on the VPS and said

hello world

I went to the example Rust code you linked that targets PSP and had a quick look at it but it was kind of a lot at once so I went looking for alternatives and found https://github.com/japaric/ruststrap which seemed promising but the README was not very clear and the archive hosted by that person is from 2014-12-17. I cloned it to my VPS and attempted to run the ruststrap.sh which it didn't want to unless it was root so I let it be root but it ended with

+ apt-get install -qq g++-arm-linux-gnueabihf
E: Unable to correct problems, you have held broken packages.

So I'm not sure if I was supposed to run that on x86_64 or not or if maybe I was supposed to run something else first. My VPS is a bit of a mess so that could be the reason also.

I am going to go back now to the example Rust code for PSP you linked and look more at it, it seems to be the most promising at this point (though it will be a bit inconvenient for me in the long run to do any development on the VPS instead of locally.)

Thank you for your comment and the link.
You must be unfamiliar with the AES and other papers that describe audible jitter and the threshold at which it starts to become audible. See e.g.

"Eric Benjamin and Benjamin Gannon, "Theoretical and Audible Effects of Jitter on Digital Audio Quality", Preprint 4826 of the 105th AES Convention, San Francisco, September 1998"

or

"The Effects of Sampling Clock Jitter on Nyquist Sampling Analog-to-Digital Converters, and on Oversampling Delta-Sigma ADCs, 87th Convention of the Audio Engineering Society, October, 1989"

or

Ashihara and Kiryu, etc (2005)

https://www.jstage.jst.go.jp/article/ast/26/1/26_1_50/_pdf
Wow, thanks for the link to that credit card comparison! I've never seen it before, but that's really cool. Why do they provide this as a service/how does it help them?
I'm amazed at the attitude towards insurance companies in this thread... that they shouldn't be able to charge you based on what they consider risk... People act as if insurance companies exist to just give you free money.
This can also be used for "We haven't spent out all the money yet but the funding period is coming to an end."
I think practicing programming should be about:

1. trying many new things

2. in a very tight feedback loop

So, code little ideas, but make sure you start from the essence of the problem - not the registration/login process, not the new API - start directly from the part that's new and challenging and risky. In this way, when the idea fails, you wouldn't have wasted time building support infrastructure for it.

Also, pick light and flexible tools for exploratory programming - dynamic languages, REPL, etc.
> Only a tiny minority of tech companies hire against any kind of formal assessment rubric.

Is there any evidence of how well this works? From what I've read these "formal" hiring strategies don't seem to lead to good results. In fact, the typical critique of tech hiring is that "HR" people have too much influence on the hiring process over technical experts.

I don't know how to solve hiring, but I'm confident that it's not been solved yet, and it's a very difficult problem.
UIUC offers a MCS online: https://cs.illinois.edu/current-students/graduate-students/p...
So eh, are you sure they couldn't get back in?
ECS - http://en.wikipedia.org/wiki/Entity_component_system (Just trying to save a lookup for others)
That is the thing about the event horizon, things that go in don't come out, ever. (except maybe as Hawking radiation)

There is no speed in which you could approach the event horizon, go inside, and the come out again. It is, by its very definition a one way ticket.
Thank you for this! I can't help but think that this benefits your company and your company's image in the long run as well.

I had a very promising half-day interview several years ago with a company I really liked and got nothing at all. Not even a "you're not being hired."

I sent the obligatory thank-you email the day after the interview and sent a polite "just checking in" email a couple weeks later. A few weeks after that I wrote and asked if he had any feedback or suggestions on things I might improve upon if I wanted to work for them in the future.

Now obviously, the hiring lead's obligation is to his employer and not some guy looking for a job. Not his job to be my career mentor.

But I'm an experienced developer, and I'm certain that I did well in all parts of the interview except one. With some additional experience in that area there's a very good chance I could have been a good contributor to their team - in a market that has a shortage of experienced developers.

So, on my most recent job search, I didn't even think about re-applying to that company. In a region where companies pay tens of thousands of dollars to tech recruiters for anything even remotely resembling experienced developers, maybe it's worth spending (literally) a few minutes maintaining at least a cursory relationship with those you didn't hire - but might like to someday.
All thanks to the contributors!
Exactly true. One should not be controlled by empathy. Being empathetic allows one to choose one's words wisely. The goal is not to allow sub-standard code to pass. The goal is to correct and educate, but do it in a positive way.
Empathy allows one to put oneself in another's shoes and ask, "How would I want my mentor to correct me?"
Don't get me wrong, I am not advocating the "even losers get a trophy" mentality. But I've been in code reviews that have turned into blood baths. That's just not appropriate at all. Ever.
Why is Medium fabricating false information?
I was looking through the "List of mergers and acquisitions by Google" on Wikipedia[1] When I noticed their latest acquisition was a company called "Early Clues". It was weird to see a company being acquired by Google and not have heard of it. So I some research.

I came across their website which initially had their logo and statement along the lines of "Too late Microsoft, maybe next time", obviously referring to their "acquisition" by Google. Pretty weird for people who specialize in lawn automation. They have since changed their site to some other bs. Note, many of the links on their site links to Medium. If not all the links.

This article on Medium [2] is the another clue on why this acquisition is bullshit. Also note the people who interacted (right word?) in the article are all affiliated with Medium (i.e. @tessr).

The biggest clue as to why this is some bullshit PR stunt by Medium is the fact that their twitter account[3] if filled with gibberish. Also note, most of the people @earlyclues interacts with are people who work at Medium (i.e. @nick).

I have no problem with crazy/stupid PR stunts. However, including false facts into something like Wikipedia, which is a source and database for human knowledge is just wrong. This completely ruins the credibility of Wikipedia and of course Medium.

[1] http://en.wikipedia.org/w/index.php?title=List_of_mergers_and_acquisitions_by_Google

[2] https://medium.com/@earlyclues/how-our-startup-was-bought-by-google-without-even-trying-e577cdbca479

[3] https://twitter.com/earlyclues
But if you break in to someone’s laptop via malware, then you can reach that user’s LAN.
There are languages with strong standard libraries: Erlang (both its normal libraries and OTP), Objective-C (Cocoa) and Mathematica are three that come to mind.
Whether it's better than the average is irrelevant, that isn't the benchmark. It needs to be better than or equal to all of the third party libraries for it to be worthwhile, otherwise, why does it exist? When you pick a library you don't pick all of them, you pick just the best one that meets the criteria you need, and the standard library can't beat the flexibility that other people will have to better meet those criteria without needing to partake in the process upstream.

(It's also not true that the standard library is generally pretty good IMHO, but that will start to veer us into subjectives [which I think the comment above my original post has already done anyhow]).
Or even take it a step further and just make it an "a posteriori" public service. Instead of auto insurance, tally up the costs of all auto-related damages at the end of each year and everyone pays their demographically-/driving-history-weighted portion through their tax return. You're right, there's really no reason for anyone to profit from distributing risk.
Looks like an expert crew and quite thought through design. Now all it needs is an Elon Musk to push it into existence in record time.
Did not know that, thanks :)
What kind of hardware/OS do you envision implementing the gateway/VPN server?
To the person imprisoned, this would feel like you had killed everyone they ever met.
Rockefeller was never worth $337 billion.

He was worth between $1 and $2 billion in his day, per the best biographies and historical information on the man.

That's a lot closer to $25 to $50 billion today.

The false hundreds of billions number is usually reached one of two ways: 1) by pretending Rockefeller still owned his former share of Standard Oil, represented in the form of the children oil companies today (Exxon et al.); 2) by taking Rockefeller's wealth as a share of GDP, and then claiming based on 2007's GDP he'd be worth X amount.

Both are absurd.
> The attitude that you somehow have to 'pay your dues' is part of the overall problem and is akin in spirit to 'hazing'.

> There are may ways to give encouraging feedback

You seem to be implying that these two concepts are mutually exclusive. They're in fact completely independent of one another.

> The comparison with the professional chef is amusing considering the TV chef shows I've seen. They're regularly abusive, cantankerous and create terrible environments to work in (imho). Not something that the developer community should aspire to.

That actually wasn't lost on me. TV shows aggrandize it, but the culinary world is not a polite one.

If anything, this should help serve as a point of reference. The "tech industry" is not harsh. It is in fact exceedingly gentle.
Hey, at least it's not Veriozon cloud which just told users to power down everything today in preparation for a scheduled 48 hour outage.

http://www.computerworld.com/article/2865802/verizon-warns-e...
How to Blog about Code and Give Zero Fucks
I'm pretty sure uranium is tightly controlled too.