skysight-inc/HackerNews huggingface dataset:
They should bury the long stretch that leads into the Holland Tunnel in NYC. Then create one continuous residential area.

http://static.panoramio.com/photos/large/149186.jpg
Chuck Norris Attacks the Pharmaceutical Industry
How an Entrepreneur Can Make No Feel Like Yes
> That was his first strategy — disengaging his thoughts — and he says he got really good at it.

> "You don't really think about anything," Martin says. "You simply exist. It's a very dark place to find yourself because, in a sense, you are allowing yourself to vanish."

Isn't that what certain Eastern schools of thought advocate? To unite with the world, liberate from your ego, accept yourself as nothing more but a wave in the vast ocean of consciousness?
There is also Google's Traceur, which "is a JavaScript.next-to-JavaScript-of-today compiler that allows you to use features from the future today"

https://github.com/google/traceur-compiler
Hope to have some social login
How do you get 10k user that fast?
I suspect that many users when told their password is too common simply add a "1" or "123" suffix. Such behaviour would significantly weaken this method of using the top 10,000 password list as a filter.
>> I have a comment more on the presentation than the content

It's a thing:
https://www.google.com/?gws_rd=ssl#q=power+of+storytelling&s...
@txshon theres facebook integration for now. Social logins will come up soon. Mobile app is around the corner.
I have a few sites with a few million Uris and found that the sitemap leads to much faster and better indexation than I would have had otherwise.

The sitemap protocol is a little bit awkward at this point since a sitemap file can only have 50k links so then you need a sitemap index. If you are not exceptionally careful you will see files updated when the crawlers are downloading them, sitemap indexes not perfectly synced to the sitemaps and other things that cause transient errors. In theory you could be careful with how things are date stamped to reduce the considerable load of downloading your site maps but web crawlers don't 100% trust assertions of how often things get updated.

Adding it up sitemaps work OK for a million pages, but probably not for a billion.
Neither dropbox nor btsync are free software afaik. I would be excited about a viable open source alternative.
How would this compared with apache thrift?
Ive posted on new section about how we reached 10k waiting list. you can check it out there. Let me know more about your experience.
Thank you for the awesome pointers :)
Thank you for the valuable info.
The SSO scenario deals precisely with how to pass authentication between two systems which do not have a shared backend datastore.
... well, yeah: placing massive hurdles in the way of potential competitors and their technologies is about half of the premise of regulatory capture...
Assuming 7% returns, and 6% employee match of a graduate student's salary in my programme (32k), graduate school costs ~288k in lost retirement savings, as well.
It's a bit unsettling that, from the pursuit screen, clicking on the logo sends me back to the landing page (I would want it to stay logged in), and logging back in from there asks for my details again (doesn't remember the login data?).
Also, no favicon?

Other than that, very well done, looks solid and well designed.
And yet they still can't build a web page that isn't a shitshow.

Main content has horizontal scroll on portrait monitors, which underlaps the transparent fixed div they used for navigation.
Arguably, MySQL/MariaDB has over the course of its life improved to the point where it is a reasonable product. I normally wouldn't pick it over PostgreSQL for a new project but it doesn't easily lose data any more, either, and it has good read performance with the default backend.
It's not easy to secure it. You have to do two things very well:

1) Don't let anyone find the private key

2) Don't let yourself lose the private key

The more of 2 you do, the harder 1 gets and the more of 1 you do, the harder 2 gets. If you have only a single copy on paper, it's hard for anyone to find, but also easily damaged or lost. If you make a backup on a computer, a virus might find it, making the paper copy worthless.

Not only that, but from the moment you generate the key, you have to be completely confident about the security of the computer you're using. People recommend a clean install of OS from the original CD and never connecting to the internet. That's not impossible but not easy, furthermore you have to carefully destroy all record of it left on that computer. So unlike gold, not only do you have to keep it secure in the future, but you have to have made sure that it was always secure throughout the past. You can't transfer ownership to anyone else without them going through the same rigmarole too, unlike gold which you can physically give to someone and they can be confident it won't evaporate in front of their eyes one day.

I agree with you about blockchain analysis. Who knows what new techniques might be able to dig up. They might not have much certainty but perhaps enough to put suspicion on someone.
The problem is that SSH uses a terrible buffering algorithm. This fixes it:

http://www.psc.edu/index.php/hpn-ssh

It's able to consistently fill 1G ethernet links.
Judge Orders NYPD to Release Records on X-ray Vans
Getting a Gig: A Guide for getting a tech gig in college
And also meaning that if you lose any one of the 5, you'll lose all your money.
Good point! At first on my end it seemed like this was already kind of implemented since after every button click I scrolled my mouse wheel one tick down and the buttons aligned more or less (for a bit). This might be a good workaround!
And more importantly, we should ask ourselves what kind of society we would prefer to live in. Would we like to live a life as a used car salesman, surrounded by other used car salesmen, talking about our weekly sales numbers with our used car salesmen wives?
Examples != a game, and given that scenario, I would recommend trying to make a game at this point, but I'll leave it be.

And that's fair. I didn't think this way until after working in industry for a while, and my code from when I was at school was very high level and OO.

If you're interested, Mike Acton (lead at insomniac, and one of the smartest people in the industry) had a good talk in CPPcon that you can find online about Data Driven design[0], which is basically what I'm talking about (he's a bit more extreme than I am). I'd also recommend looking at his 'Typical C++ Bullshit' slides[1] for a shorter and more amusing take on the issue.

[0]: http://youtu.be/rX0ItVEVjHc

[1]: http://macton.smugmug.com/gallery/8936708_T6zQX#/gallery/893...
Продвижение бизнес блогов и не только
How Machines Learn (and Why It Matters)
Really interesting article. I wish it hadn't been written with the gimmick of being written as if it were from the 80s.
That £13k is a tax-free stipend. You don't have to pay income tax and some other things (e.g. an all student house pays no council tax). When you work out the equivalent taxed income that would reduce to that stipend, it approaches £20k.
Just mark them not to be visible in your feed.
Thanks, and yeah I agree with everything you said. I will correct these things soon. Great feedback.
What hasn't really been said well is that there's constant incidents that are going on in large cloud providers and you don't need to have a maintenance period like this to experience failures. I work in a place where people are still used to individual machines being up constantly by IP alone and aren't practicing high availability architectures in their cloud environments. I had to explain to an architect that VMs can simply just hiccup in AWS or any other provider and that just relaunching the instance is fine. The idea of random failures may be foreign, but I was certainly a bit surprised that someone with such rudimentary understanding of infrastrucure wouldn't be familiar with the idea of "have you tried turning it off and on again?"

With that said, I have zero hope that most enterprises will be able to get a decently solid failover strategy for their cloud applications because an awful lot of them are barely able to get anything to even one cloud provider setup at the most basic layout. Half the folks I'm aware of don't even have cross AZ redundancy let alone cross region failover. When people are turning off 3-4 VMs to save money, you're in no position to think about cross provider load balancing.

Most of the enterprises I'm familiar with would throw Verizon more and more money in the blind hope that it'll make their service more reliable. They'll do this to an incredible dollar amount partly because it'll still be cheaper than their old, traditional in house IT that cost multiple orders magnitude more but got way worse availability. Stuff like this scheduled maintenance shows how foolish it is to believe that someone will magically become ultra reliable by you virtue of you paying them to be.
It's not an unmitigated disaster, true. But speaking as a sysadmin whose problem it is, it's still horrible to administer for something that turns out to be business-critical, and it pains me whenever a third-party useful thing pretty much requires it. (Typically PHP stuff where the paid developers hyperoptimise for MySQL, and there's hypothetical PG support which is actually half a volunteer.)
And that is entirely the student's fault.

On the other hand, consider categorical imperative. We need someone to study science and advance the field. We even need medieval historians (albeit, perhaps not so many of them). If everyone decides to become a bullshitting rainmaker of zero net value to society because that's where the money is, then we all lose.
Too bad the landing didn't work out yet but at least this will - hopefully - squelch the haters that keep repeating the mantra that SpaceX is merely re-using what was already known and not innovating. I figure they'll need a couple of tries at least to get that right, we're witnessing an enormous step on the path to access to space.

What's amazing is the increase in accuracy with this attempted landing, the whole grid-fin thing seems to work exactly as planned.
>how and why is Economics different from other academics disciplines in that respect?

Powerful people care a lot more about the conclusions made by academic economists than they do about the conclusions made by other types of scientists.

It's more corrupted than other professions. E.g. climate scientists have had money thrown at them too - to do the same thing - but by and large most of them have resisted.

>and why is so much focus given to this one kind of bias.

Because money talks.

It's not even about bias. It's about recognizing incentives for what they are.
This problem has been known for quite a while. For the past three years or so I see articles popping up discussing this trend with some stats, graphs, and reasoning, but most of them fail to mention whether the Japanese government a) acknowledges the problem and b) is taking steps to fix it (I'm thinking measures such as a subsidy-per-child).

Anyone have more info on this?
Nissan is pretty good at it, too. The twin turbo GTR destroys all of Ferrari's best offerings and costs 2.5-10x less while doing so. It's interesting that the author implies that only naturally aspirated engines give you the precise control you need in cornering when a 3.8L V6 with two enormous turbos strapped to it handily beats almost every other road-legal, non-gokart, NA-engine'd car except the Aventador... for only $100,000 brand new.

http://en.wikipedia.org/wiki/List_of_Top_Gear_test_track_Pow...

A tuned GTR easily beats the Aventador, though, for a fraction of the price.

https://nurburgringlaptimes.com/lap-times-top-100/
xz + scp will still be faster than this.
its not about the speed at which scp goes, is that the author doesn't compression before sending over scp, but does when he sends over nc and what not...

heck you can just use rsync over SSH for simplicity.
I hope this is a trend. Highways are ugly and smelly and noisy and dangerous. Parks are pretty, safe, and quiet. I wish that all urban highways could be underground, with parks and residences and bike/walking paths above ground.
how does it compare to protobuf,thrift ?
Didn't really look at it but the spirit of it I love. Thanks for sharing.
How To Build A Boolean Expression Evaluator
they have had it on the git repo for quite some time now (months i think), but distros generally dont have it yet.
I think forced password disclosure is sickening. In my opinion, they are forcing defendants to assist in their own prosecution.
On gogo wifi right now and I'm not able to replicate the results. After paying for access I've tested several google services with no certificate issues(checked with latest Chrome, and openssl's s_client).

I opened another laptop(I travel with two), and without paying I started testing outbound connections with openssl's s_client and curl. It appears that the gogo wifi system will allow between 5-10 ssl connections before starting to block all outbound ssl connections. Without paying all http requests include a redirect to the captive portal, but at no time did I see a self signed cert for any of the https connections attempts.
The 12 Habits of Exceptionally Luxurious Brands
My observation and experience as a product designer for 10+ years.

Hope it confirms things for another or blesses someone.

Nick
Combine this with docker export / import and you got yourself an easy way to copy images between servers :)

If you still have the setup up and running, throw this in the mix:

rsync -a -e 'ssh -c arcfour' source dest:destpath

and

rsync -az -e 'ssh -c arcfour' source dest:destpath

still encrypted! The latter enables compression, but I've found it slower when dealing with several small files (ex: source code files)
Quoting apc @ https://lobste.rs/s/7w6p95/msft_open_sources_production_seri...

The current offerings (Thrift, ProtoBuffs, Avro, etc.) tend to have similar opinions about things like schema versioning, and very different opinions about things like wire format, protocol, performance tradeoffs, etc. Bond is essentially a serialization framework that keeps the schema logic stuff the same, but making the tasks like wire format, protocol, etc., highly customizable and pluggable. The idea being that instead of deciding ProtoBuffs isn’t right for you, and tearing it down and starting Thrift from scratch, you just change the parts that you don’t like, but keep the underlying schema logic the same.

In theory, this means one team can hand another team a Bond schema, and if they don’t like how it’s serialized, fine, just change the protocol, but the schema doesn’t need to.

The way this works, roughly, is as follows. For most serialization systems, the workflow is: (1) you declare a schema, and (2) they generate a bunch of files with source code to de/serialize data, which you can add to a project and compile into programs that need to call functions that serialize and deserialize data.

In Bond, you (1) declare a schema, and then (2) instead of generating source files, Bond will generate a de/serializer using the metaprogramming facilities of your chosen language. So customizing your serializer is a matter of using the Bond metaprogramming APIs change the de/serializer you’re generating.
Do you know of any talks/articles attempting to break the YubiKey NEO in a similar way to how cloning attacks against SIM cards work?
AOL Ad Network Hit with Malvertising, over 1.5bn visitors at risk
>So in most of the 1980s and into the 1990s, I couldn't really effectively answer the "how did you meet" question because that wasn't yet a thing yet. ("On the computer" wasn't really satisfactory before people had a notion of "online".) And when it was more technically explainable, it was sort of seedy because there was so little that was local or social about it.

That's really interesting. At one point I interned at PARC, and we were looking at making some sort of privacy protecting online dating service. (E.g. your data is encrypted, only decryped when two people match)

But after the initial set of interviews I did, I found most people were more concerned with trust - is the information on this profile accurate? They couldn't care less if people are using online dating. Which surprised some of my colleagues.

Section 3.3 of our paper details this if anyone is interested in more detail:

http://www.kisc.meiji.ac.jp/~ethicj/USEC13/submissions/usec1...)
About unboxed float arrays
http://syncthing.net
Windows Phone Insider
Andromeda Galaxy Had a Much More Violent History Than Milky Way
In my experience the batteries included is one of the best features of python.
The standard library is fine for simple and small scripts, especially in restricted environments without pip or sudo rights. They are a lot of awesome python libs (like requests) but it is awesome to have the stdlib available everywhere and be able to depend on it.
To the authors: please add immediately accessible documentation, best in form of a 'Quick Start' document. Also please add one page to your website that you call 'Features' where you describe what it can do / can not do and add another page to your site that you call 'Documentation' where you put the USER DOCUMENTATION. No, nobody wants to read a paper to get some sync software up and running. THANKS!
This is something I'm going to have to research. I haven't dealt with logging yet, besides reading development logs and Heroku logs.
>Your post contains two unfair criticisms. The article was making a cheap shot at economists. Clearly economists don't claim to be experts at predicting "demand" in every possible markets, only at understanding the general principles.

Let's just say that I wasn't at all surprised that it was that one economist in particular - Piketty - who got stuck in the small room. Economists are a cliquey bunch at the best of times and the cool kids do not like Piketty.

>Your own criticism is unfair because you think finding any link, no matter tenuous, between a source of funding and some kind of bias, is sufficient to show Economists (but not their critics) are biased.

So you think economists are correct that everybody responds to incentives.... but economists don't?

>First, academic departments are not funded solely by corporate debt.

You mean student debt. No, they are not solely, but it is a huge proportion of university funding. Students take out loans. Every university has a keen interest in the terms and availability of those loans because it affects how much their primary customers can pay. This is what led to 20% year on year inflation in college prices.

> Second, it's unfair to call it "student debt" since students are getting something of value

facepalm

> Finally, student debt is a very minor issue in the scheme of things

You are really out of touch. There's over a trillion dollars of student debt outstanding in the US alone.

>Finally, how helpful is it to apply your lens of "rational incentives" to your own side of politics

I think it makes sense to look at incentives from every side.

>There is no incentive to support mainstream economics outside of academia, because economics is subtle, gives no easy answers, and often identifies no bad guys.

As mentioned above, it gives convenient policy proscriptions, therefore it is useful. The presence or lack of 'enemies' is irrelevant.

>It gives clear policy advice in some cases (e.g. free trade follows pretty directly from economic theory) but this advice is often unpopular with special interests.

Special interests such as half of the manufacturing industry in the US which was driven into bankruptcy, and the people employed by it who lost their jobs, and the cities such as Detroit that were destroyed by it?

Are the working classes a special interest now?

"Free trade uber alles" is exactly the type of thing I'm talking about. It is productively wrong - it benefits corporate profits over the citizens of the country. Among the many things it failed to predict were China's meteoric rise and the destruction of the fabric of entire cities in the US.
A unique look at blog spam
Thrift has pluggable protocols. It comes with 'compact' (protobuf-like), 'dense', 'binary' and json out of the box. It also has pluggable transports and multiple server implementations (threaded, async, etc). I'm personally not seeing any innovation here... I think they just wanted their own version of Thrift such that they could ignore the languages they don't care about.
It still exists. It's called "OKCupid".
I'm guessing "all the prototyping or hobbyist projects that DON'T need video out, because they don't have a display, or only a simple one" ;)

Outside of a media player for my computer screen, I've never seen the need for video out.
Turbos are attached to the exhaust. They muffle the engine sound. This is important for ferrari people, for some reason.
'"While this court is cognizant and sensitive to concerns about terrorism, being located less than a mile from the 9/11 site, and having seen firsthand the effects of terrorist destruction, nonetheless, the hallmark of our great nation is that it is a democracy, with a transparent government," she [Supreme Court Judge Doris Ling-Cohan] wrote in her decision last month.'
I'm flattered by the attention, as always.

Couple quick things:

On our original blog (I have nothing to do with this one; I haven't been at Matasano for several months), this was CSS-formatted to look like an actual script, which I think makes it significantly easier to follow. Dave Wagner copied it to his website, and it's closer to the original:

http://www.cs.berkeley.edu/~daw/teaching/cs261-f12/misc/if.h...

Second: in case you're impatient (I would be), conceptually, this is what the post is trying to communicate:

* Unauthenticated CBC is surprisingly malleable. There are two attacks in here that I thought were "clever": using totally random CBC block garbling strategically to eat quote characters and synthesize SQL injection (the motivating example for the post, after I pulled this attack off on a real system) and "stuffing" inputs with known plaintext to make rewriting easier.

* CBC padding oracles. I would be interested if anyone knows a source outside of academic literature that walked through this attack published prior to 2009.

It is not about how to implement single sign-on cookies.

The nice thing about posts about cryptographic attacks, as opposed to cryptographic constructions, is that they age pretty well. :)
A VPN setup seems like overkill. You can run stunnel and run a daemon to loop back through the stunnel configured connection. It's not quite as easy to use offhand like scp, but it's certainly not as awkward to try to use as a random series of OpenSSL commands either and it'll be easier to understand what you tried to do later on the production machine.
One key differentiator is the limited set of languages Bond currently supports:

"By design Bond is language and platform independent and is currently supported for C++, C#, and Python on Linux, OS X and Windows."

Versus Thrift:

"language bindings - Thrift is supported in many languages and environments
C++
C#
Cocoa
D
Delphi
Erlang
Haskell
Java
OCaml
Perl
PHP
Python
Ruby
Smalltalk"
Indeed. On the flip side, "AI" is a moving target--people used to think mathematical proofs, chess, and jeopardy required "intelligence", but we now know we just need software. I've heard people say "We've made no progress towards AI", but I think that's as hyperbolic as saying "it's right around the corner". Progress (in this case, using machine learning to build cool things) isn't this on/off thing. There are worse fields of study to enter than machine learning. You'll learn things that are broadly applicable. And maybe "real AI" happens someday, this would be on par with invention of flight or moon landing, both of which sounded batshit before someone (a bunch of people) did it.