skysight-inc/HackerNews huggingface dataset:
I read this essay 7 years ago and it was a revelation for me. I started coding right away and 1 year later I had a job as a programmer. This is a must read for all programmers imho.
In other news, the NTSB has no record of a U.S. commercial airline pilot ever intentionally crashing a plane. They must be hiding something!

> Occasionally, the F.B.I. does discipline an agent. Out of 289 deliberate shootings covered by the documents, many of which left no one wounded, five were deemed to be “bad shoots,” in agents’ parlance — encounters that did not comply with the bureau’s policy, which allows deadly force if agents fear that their lives or those of fellow agents are in danger. A typical punishment involved adding letters of censure to agents’ files. But in none of the five cases did a bullet hit anyone.

> Current and former F.B.I. officials defended the bureau’s handling of shootings, arguing that the scant findings of improper behavior were attributable to several factors. Agents tend to be older, more experienced and better trained than city police officers. And they generally are involved only in planned operations and tend to go in with “overwhelming presence,” minimizing the chaos that can lead to shooting the wrong people, said Tim Murphy, a former deputy director of the F.B.I. who conducted some investigations of shootings over his 23-year career.
I do like the rMBP, but I know I could use the 4 cores when I'm at home or just going to work, which is why I wish I had gotten the 15".

However, -1 lbs + smaller form factor + better battery is pretty significant when you're traveling abroad with a backpack for a week or two. I'll take less weight + more socks any day of the week. Also, I almost killed myself trying to get power from an outlet at Phnom Penh International Airport.

So, personally, I find the 13" a compromise I could have just spent my way out of.
Not that we know they have removed it, this is a render based on rumours, and it conflicts with other rumours (such as the removal of F-keys)
Why does the title say the guns were smuggled by a corrupt TSA employee? That isn't what the article says. It doesn't say who they worked for.
Just 18% of computing students are female, lowest number ever
Sources: US Did Not 'Hack Back' Against North Korea (AP)
Seems to me like this is a problem that could be solved without legislation?
This "Facebook approach" almost certainly requires you to have, at least once, access to your users' non-hashed passwords.

Which is widely regarded as bad security practice because your users' passwords can be compromised by an attacker getting read-only access.

[EDIT] Well, good thing I used "almost", since I was wrong: of course, case-inverting the password and hashing the result could also be done client-side, silly me!

[EDIT'] Answers pointing out that you always have access to non-hashed passwords, and I believe this is wrong. When the user submits their password, it SHOULD be hashed client-side and only the hash SHOULD be sent to you.
Does not run OS X.
Halving isn't really a big issue, when we're talking about something that normally talk about in exponents.
I don't get it. Wouldn't it be simpler, cheaper and less 'dangerous' to just drive from Atlanta to New York?
Fatal error: Out of memory (allocated 9961472) (tried to allocate 19456 bytes) in /home/quest15/public_html/brookeallen.com/pages/wp-includes/taxonomy.php on line 959
I don't see an email in your profile (by clicking on your username attached to the post). I just see submissions/comments. I can send an email to the one listed on the nightchamber about page, or you can check my profile where I just added an email address that I can be reached at. I should have put a contact email in my profile a while ago, my apologies for only having done so now.
Do we actually know much about the North Korean "intranet"?

I spent two weeks traveling around in North Korea in August 2012. One of our visits were in a military museum that had computers available (actually running RedStar OS!), containing some CD/DVD with MOV files (as far as I remember) and some other things.

I remember the machine having a 10.x IP address but it was definitely not able to access any internet, but I wonder if it was connected to their actual intranet, or if they simply had some local network there.
Well, I wasn't saying Swedes in Finland are a problem; I was simply trying to head off the potential criticism that Finland is not technically homogeneous ;-)
What is Microsoft SharePoint 2013?
There does exist a legitimate (though contrived) use case for not telling the user which of the fields is wrong: when a user misspells their username and that misspelled username belongs to another user. From the user's point of view the username would be wrong but the password would be right, whereas from the site's perspective this is reversed and would produce an incorrect error message. This particular case would be particularly insidious because it's impossible to review a password after typing it.

Like I said, contrived, but security-by-obfuscation isn't necessarily the sole motivation (though likely the commonest).
Show HN: Reach new markets by translating your MailChimp campaigns
You do have access to their non-hashed password. When they type it into your form and press enter. You just invert the case and check it against the hash again.
>>2560×1600 display.

What is Samsung doing to make sure that this resolution is usable at this size?
Which is the reason you buy an Apple product in the first place.
I was told by a pilot that in the industry a common term for the TSA is "Thousands Standing Around".
Security theater indeed. Although this bit in the NYT strikes me as BS:

The district attorney described how Georgia’s “lax gun laws” allowed the baggage handler to buy weapons online without a background check.

There's no such legal thing, except using the net to connect yourself with private sellers in your state (and they can't sell too many guns per year, or otherwise be "in the business" of doing so).

As for the whining about gun smuggling into NYC, if the city trusted as many people as Soviet Georgia did in its capital Tbilisi there wouldn't be as much motivation to do this. Less than 60K legal licences each for handguns and long guns (I personally counted the number when the lists were leaked a few years ago). An estimated 2 million "illegal" guns in the general population of 8 million.

A question: lots of you have lived in both NYC and SF, the latter of which is infinitely more liberal ^_^ when it comes to gun ownership (California law due to state preemption prevents de facto or de jure bans like NYC's). Does this make much of a difference that you've noticed? I might expect one with burglaries of unoccupied residences vs. robberies when occupied, but that's probably as much a function of regimes like the U.K.'s where effective self-defense is simply outlawed to begin with.
Ever been around a microwave that seems to clobber your wireless networking performance when it runs? Lots of microwaves leak and nobody is keeling over because of it.
I was offered to update my Nexus 5 after Android Lollipop was first released, however I was living in a country with low bandwidth so I deferred it until I returned home. Now I can't update and am stuck on 4.4.4, so I don't really have a choice but to not use Android Lollipop.
I might be oblivious, but why he can't teach at a private school for better compensation?
Assuming that you run your own login service like Facebook does, you always have access to your user's passwords at least once because at some point you have to take the raw password and hash it. Facebook just creates two variations of the user's password and stores the hashes for all three of them.
That was it; thanks.
And microwave ovens are orders of magnitude more than the claimed 1-4 watts, so stop using that as a scare tactic.
> skilled dirty uncomfortable work

Grew up on a farm on marginal land. Actually liked it.
One problem with these 5 "core principles" is that they apply just as well to tax accounting. It's the places where ESR writes things that don't apply to contracts law or mechanical engineering where he goes off the rails, which is a telling problem with the essay.
You always have access to the user's unhashed passwords when they submit it. In authentication, hash the raw password and invert case and the hash that. Then compare the stored hash against both hashed passwords from the input.

There is no need to store the password in plain text in any form.
Hello,

I wouldn't recomment The Art of Electronics, at all. Sure, it's an amazing book, but TAOE breezes through foundations and OP says he only remembers Kirchhoff's law.

I think OP wants a book that takes him from there: Tony Kuphaldt's series of books (available for free to download) titled: "Lessons in Electric Circuits".

These babies are 6 books: DC, AC, Semiconductors, Digital.

There's also a book for Experiments where you get the info you need to set up a home lab, and then experiment with the stuff you learned the theory of in the other books.

And a reference book you go to.

http://www.ibiblio.org/kuphaldt/electricCircuits/

The author has also a book titled: "Lessons in Industrial Instrumentation".

"Electronics" is a very vast domain. A lot of reading is needed to itch a specific scratch.

For example, our course about transistors. Yeah, solid physics and band gaps and holes, and manufacturing...

Then after you start using them, you work with "The gain, Beta, is 200". And you go "What makes it 200?"

Like in the manufacturing process, how do you make it that way.

Then you read the late Hans Camenzind's great "Designing Analog Chips" and get to where he explains the influence of the Base thickness.. And you go "Whooaaa". You scratched an itch you had for a long time. The books you read didn't answer that specific question.

Camenzind made the circuit you probably know, NE555. The book is available for free on his site:

http://www.designinganalogchips.com/

Good luck, and if you need anything (resources, etc), feel free to contact me.
Nice to see ACM trying to be relevant again :)
Our brains not only arbitrarily post-rationalises a bunch of stuff, but we often believe it to be the truth from the moment we think of it in many cases even when the rationalisation can't possibly be true.

(There's at least one study on people with severed brain stems that is fascinating in this respect, but I can't remember where I read about it, and don't have time to track it down)
I'd bet that a substantial proportion of Macbook users never plug their computer into a monitor.
I have worked in buildings low on meeting space where middle managers would do something similar, but with meeting rooms. You can always find a meeting if you abuse the system to 'claim' one room as your own for enough hours of the week.

Hoarding in a situation of some scarcity is common behavior, and makes the problem worse. You can't assume people will behave the same way when a resource's availability changes. And this is why we go from plentiful to very scarce so very quickly, with very little in between
Ping fans, be sure to check out bing! Fun stuff and 97.2% accurate (not really)! :)

> Bing is a point-to-point bandwidth measurement tool (hence the 'b'), based on ping.
Bing determines the real (raw, as opposed to available or average) throughput on a link by measuring ICMP echo requests roundtrip times for different packet sizes for each end of the link.

http://fgouget.free.fr/bing/bing_src-readme.shtml
What happens on the front end in that case? Would it be an irritating "Please check your email to continue registration" kind of situation? Because people don't like that as of 2010 ish
> but I am sure their test incorporated a great deal of detailed knowledge of algorithms used in the computation

Actually no. In this case it exploits the knowledge that "low frequency inputs tend to explore more program space", It was found using numbers with a low transition probability between zero and one. This is an approach also used for digital circuit verification too.

It's true that I also know the code is full of hard to hit branches for carries, which does partially motivate that selection. But importantly, "We weren't even testing for that." the OpenSSL code in general has an entirely different algorithm than the libsecp256k1 code; and I hadn't recently looked at any OpenSSL innards.
Loading SQL to Neo4j Like Magic
Base16 Shell Tmux Vim Color Switching Dead Simple
The hardware, albeit expensive, is pretty nice as well.
Thank you that was interesting.

Had the OP shared a link such as this I would probably not have responded, and I didn't quite get the following vibe from the talk:

"and for every computer there is a government official sitting in a room next door seeing what the person using the computer is seeing....and probably taking notes."
The American political system is broken....

...even if Warren were to be the president...
...little real and effective change would come about
because she'd be stymied at ever corner...

So the system is broken because the people you like aren't elected and when they are elected, they don't have enough power?

I suspect there are more profound social and structural issues at play here. I really don't think this is a purely political problem.
Though I use both klee and AFL, this particular instance was found with blackbox randomized tests; using numbers with low transition probabilities. E.g. 00000111111111000111000000000000.

Klee or AFL would be somewhat unlikely to find this particular problem because the error was an omitted branch, so they wouldn't know there was a case left to be satisfied.
Good grief, I'd forgotten about that one. Hard to believe it's still up almost 15 years later. A true classic of the Amazon review genre. Who would have thought they would become a cultural repository?
Scala Typeclassopedia
To be fair, many people think that technological unemployment is already happening, so basic income would be a good idea even today. Many others disagree and call it the "luddite fallacy".

Personally, I think technological unemployment is not a fallacy and we'll see much more of it in our lifetimes. For example, self-driving cars might put a 50-year-old truck driver out of a job. What would you advise him to do, retrain as a neurosurgeon? What if by the time he's finished retraining, neurosurgery is also automated? Even if theoretically there was an endless supply of jobs for humans, the job market always takes nonzero time to react. When technological change becomes quicker than that, we're in trouble.
Thanks, yes. I spoke intentionally.
Realtors Laud President’s Action to Lower Cost Prohibitive FHA Insurance
huh, that's odd, anyway, I can be reached at shane @ kilkelly.me :)
I've been using it (disclaimer: I've even been hacking on it. ;-)) The standalone Guix-based distribution uses dmd as its init system.

The way it is used, dmd itself takes care exclusively of keeping services running. Services themselves are "translated" to for dmd's configuration file from their higher-level definition (see http://www.gnu.org/software/guix/manual/html_node/Defining-S... ).

The nice thing is that service actions are written in Scheme so they can do anything. For instance, 'static-networking-service' at http://git.savannah.gnu.org/cgit/guix.git/tree/gnu/services/... uses directly the right ioctls to set up the network; so does 'file-system-service' at http://git.savannah.gnu.org/cgit/guix.git/tree/gnu/services/... and so on.
Sorry but I am far away from her home and cannot check - I am just reporting her reaction after 3-4 shipments.

(And this is not criticism about the service: it was me who had misjudged the situation - anyway she was happy about the idea, it is just that she prefers not to eat "too much" candies for health reasons).
Geo-grafia – Paper Globes
The problem is, this goes totally against the idea of Internet privacy. I think it's either-or case. If you want to solve passwords, you'll have to drop any dream of anonymity.
The first one doesn't belong on this list:

> Does the code work? Does it perform its intended function, the logic is correct etc.

I believe this concern lies with testing (automated or manual). I don't believe a code reviewer should even have to know about the requirements of the feature/bug, and should focus more on the design/quality vs. whether it works.

Mostly because it's almost impossible to know this by just reviewing the code, without having to run it -- and I certainly don't think a code reviewer should have to execute the code.
I've found Evernote's web clipper to be a good replacement for that same process.
Here is the non-mobile (and from what I can tell, original) article: http://iamjwal.com/the-tough-decision-to-leave-the-classroom...
Why does she assume that her hair color is at all relevant? It doesn't come up in any of the dialogues. Take a look at what people actually say about her appearance:

"So you’re like genius? But you seem so down to earth!"
"After you complete your degree, are you going into modeling?"
"You don’t look like you go to MIT."
"You look good!" and "But you’re wearing a dress!?"

The most specific comment refers to her clothing. It's not really a large enough sample to be sure, but it sounds more like people are responding to the care she puts into her appearance. Google image search tells me that this is indeed unusual for an MIT student.
The problem with language learning is that without a good reason for learning you are unlikely to stick at it.

I used to be that guy that wanted to learn a ton of foreign languages. I'd start enthusiastically, buy the learning materials and then it would dawn on me. "When am I going to get to China or Russia? How will these help me in the near future or even the long term?"

These days I've realised that I'm only going to learn a language if it's in my best interest to do so. I'm focused on Thai (my wife's native language) and French because I'm moving to Canada.
"Starve the beast" refers to Federal government. Schools are run at the most local level of government. Conservatives disagree with the growing role of Federal government in schools, not the idea of schools in general.
Computer becomes “unbeatable” at poker
> The kind of mistakes that good programmers make are not normally caught in code reviews. That's pretty much the definition of a good programmer; their mistakes are rare and subtle.

That's just arrogance. Good programmers make stupid mistakes all the time as well. It's the ability to recognize and fix such mistakes that separate "good" programmers from "normal" programmers and that's precisely where code review comes in.
I would argue the exact opposite, but I don't think we are getting anywhere :)
I have one. Two fans constantly running. Annoying.
"Well, I consider BBC to be the most reliable source of news there is"

Sorry no offense meant, but then in fact you are just repeating the party line.

"As for "personal experience": I come from a country which used to be communist."

My sincerest apologies if you yourself suffered, might I enquire as to which country? I am genuinely interested.
> Answers pointing out that you always have access to non-hashed passwords, and I believe this is wrong. When the user submits their password, it SHOULD be hashed client-side and only the hash SHOULD be sent to you.

If you insist on doing this, you can always invert it and hash it on the client side, and send both hashes. You still have access to it, just on the client's computer (running your own code).
awesomly sick!
Not if, when caps lock is detected, the case is inverted before submitting.
Lest anyone get the impression that DC has terrible public transit (it actually has very good public transit), San Francisco and Alexandria aren't directly comparable. Alexandria is to Washington DC as Berkeley is to San Francisco.

None of that makes amorphid's description wrong.
I recently read Atul Gawande's "The checklist manifesto" which covers applying aviation style check-lists to surgery. The outcome was a 30% reduction in post-surgical complications.

From reading this, I see how bad most software process check-lists are. They tend to be laundry lists mixing obvious minutia and vague uncheckable goals. They are not practical executable tools but well meaning documents that are ignored at the error prone moments when a check-list has the most potential impact.

A check-list for a good check-list:

1. Plan for a specific trigger giving a single pause point of up to 30-90s at which point the check-list is opened and executed

2. Decide whether it is a DO-CONFIRM or READ-DO list

3. Design to engage the brain rather than switch it off

4. 5-9 items at most

5. Don't include any action that is rarely forgotten i.e. the criteria for inclusion is the probability and cost of error. This is very different from listing the most important steps or attempting to fully document a process.

6. Regularly test and measure the check-list for effectiveness

I would say Fog-creek's article is in the "read once" training material category and not a practical check-list. For a real check-list, I would interview the team and examine recent commits and look for the 5 most serious real issues you are experiencing that you need to eliminate from future code. That is a now a review check-list you can mandate, measure and iterate.
In other industries administrative bloat gets disintermediated. That's been hard in academia. It might not be forever.
At times. From cracking plastic to less-than-stellar thermal performance with aluminium, MacBooks are just about as hit-and-miss as are any other laptops.
Agreed, it's very hard to catch errors in feature behaviour when code reviewing, if you check out the code and start testing then you are doing something else besides code review, sometimes is good for a big changeset, but most of the times the code review should be enough and the original author must have tested his code.
How does Guix compare to Nix?
Carl Sagan, Stephen Hawking and Arthur C. Clarke (1988) [YouTube]
A poor recommendation for a beginner. Dense and frankly boring.

Start with Code by Charles Petzold.

https://www.reddit.com/comments/ch0wt/a_reading_list_for_the...
Maybe I'm weird, but I think whether it works should be #1 concern over design/quality. I agree design/quality is a close #2 though.

Also, perhaps you need more practice reading code. So you are not so reliant on a "TEST PASS" output from a tool to know if a particular section of code is likely working.
No offence taken, but what party? I mean, sure, I could spend several thousand dollars and go to North Korea myself, but if journalists from various countries and from various news outlets report the same thing....then I think we can safely assume it's true? I wonder, what kind of journalistic evidence do you support then? And the country is Poland.
Does it still have any? As an old timer graphics geek, I am seeing it following the VRML footsteps.

Cool for demos and small scale prototypes, but that is about it.
I've done both free options (just using CloudFlare for DNS, and then using Free SSL in strict mode) and they're both great.

When I get my business launched I'll probably get a business plan for our SaaSS products.
New Clues
Right, one of the weaknesses of tools that rely on coverage analysis... and highlights the importance of using more than one approach to testing. No single tool can do everything.
All three of them? The Hash for the password as-typed, another for as-typed.invert(). What's the third? I feel like I'm missing something obvious. :-/
TAKEN a LIBERTY
I was just thinking about code reviews and how shitty Fogcreek's Kiln is as a code review tool. It has (or at least had) a weird "workflow" were you can't approve or finish a review. Also, it is very hard to see the full list of all the current reviews, because even 'approved' reviews would still stay in the list. And of course, browsing code in kiln is very slow compared to github.

All in all, it's subpar compared to github pull requests or Reviewboard.