skysight-inc/HackerNews huggingface dataset:
I agree that this definition of a hot wallet is wacky. The definition of a hot wallet is easy: it's a wallet that's online and can be accessed by automated systems without human intervention. How you use it is entirely up to you, and nothing says you can't put 100% of your assets in a hot wallet, it's just a really bad idea.

However, I still think it's really odd to only insure the hot wallet and to call so much attention to the fact that it's insured. Imagine if your bank called attention to the fact that they were insured with large, high-rated insurers for any conceivable loss... and then they mention at the end that the insurance only covers what's in the tellers' drawers, not what's in the vault. Personally I'd run far, far away if I saw something like that.
Looking at the OP, at least in part they are
addressing anxiety disease. Their suggestions
sound good.

If the suggestions work, terrific.

But: As someone who had a close family member
die from anxiety disease, I have to say that
during the long course of the disease
we thought of all those
suggestions, especially cognitive ones,
and many more, and they were all
like a BB gun against a Russian tank. The real
problems were much deeper.

And the cognitive approaches, that didn't
work,
were being
tried by a genuinely brilliant patient --
Valedictorian, PBK, Summa Cum Laude,
world famous research university Ph.D.
Cognitive? No shortage of cognitive
ability: The patient saw and understood
the cognitive ideas, maybe more deeply, and
certainly faster than the
professional could present them.
At one point, the professional had the
patient write a paper describing the
cognitive approaches then exclaimed that
the paper was
"brilliant". Yes, it was -- very clear,
etc. And the cognitive approaches?
Total flop.

So, after considering such suggestions,
good ideas, and
face validity, I get led to consider
also the old, two criteria -- safety and
efficacy.

Again, if the suggestions work, terrific.
But I would suggest for
such patients and their families,
ASAP, and maybe not in this order,
(1), if only to be a better, loving family member, learn as much of the
Clinical Psychology 101 level material
you can and (2) get the best professional
help you can. And for (2), if at first
the treatment doesn't look quite promising and/or
fairly soon there is no
significant progress, which in my small
sample size seems quite likely,
then get some
better professional help.

Be careful with anxiety disease:
Else members of the close family
can throw away significant parts of
their lives, and the patient, all of theirs.

In K-12 or even in a college STEM BS you
may not have been taught good information
about anxiety disease -- so, at first
symptoms, and you need to know about
such symptoms, get caught up.
They are saying it was human error by facebook and hence the outage.. but how come other apps like hipchat and tinder were also down? can't be co-incidence.
Pro-development activist group SFBARF agitates for more San Francisco housing
Ask HN: How much money do recruiters make?
As I'm sure you're all aware, the volume of recruiter-spam you receive when you're actively looking for a job can be deafening. I'm wondering, what kind of financial motivation is behind all this aggressive matchmaking?

Does anyone know how well they compensated? I really have no idea if they're making minimum wage, or millions of dollars. Just looking for some context here.

Any insight appreciated.
> The new guidelines to create cryptographic standards is being developed in the wake of suspected NSA meddling with a specific cryptographic algorithm, a deterministic random bit generator known as Dual_EC_DRBG

Suspected?
Uninstalled.

"Title: Vivaldi End User License Agreement

7. Without limiting the foregoing, you are neither allowed to (a) adapt, alter, translate, embed into any other product or otherwise create derivative works of, or otherwise modify the Software ; (b) separate the component programs of the Software for use on different computers; (c) reverse engineer, decompile, disassemble or otherwise attempt to derive the source code for the Software, except as permitted by applicable law;"
The Sharepoint experience comparison is pretty pointless. The complaint is that he's being consulted to fix things un-qualified people broke. Sounds like, consulting.

I haven't put food on the table with Sharepoint consulting, but "broken installations" can be done via the GUI by employees with admin access right? ... where breaking AngularJS apps would be done by those with access to the code. Very different.

Then what type of consulting doesn't feel like selling your soul when you've achieved a significant level of expertise in an area?

Pretty dramatic, but interesting bits none the less.
Matt, sorry that we screwed up with the crowdfunded Lockitron. We're still working to solve the Bluetooth issues on Android which, until very recently, have been inherent in the stack. The frustration of sleeping Lockitron is why we're moving to a separate WiFi component (Bridge). Let me know if there's anything I can do in the meantime (cameron [at]).
Make Your Meetings Productive with Solid
How to Use the Snipping Tool in Windows to Take Screenshots
Is this serious? Does this mean if I have an app, Java, PHP or whatever, which eventually calls glibc's gethostbyname gethostbyaddr, my machine is owned? That somebody could just craft a special hostname or ip address to lookup? So all those websites where you enter hostname o IP address to lookup something like whois info or ping other machines, could be owned?
Lost in the Fifties- Another Time, Another Place
Reagan joke:

"Two men, an American and a Russian were arguing. One said, in my country I can go to the white house walk to the president's office and pound the desk and say "Mr president! I don't like how you're running things in this country!" The Russian said "I can do that too!"

"Really?"

"Yes! I can go to the Kremlin, walk into the general secretary's office and pound the desk and say, Mr. secretary, I don't like how Reagan is running his country!"
I have a similar product (to the Bolt) called Kevo and it's been quite reliable, 100% even. That said, my door's deadbolt is a "loose" fit if anything and our climate stays very dry year round...
The VimL Primer is out
Who's the "user"? I sometimes find useful information on SO, but I would never think to ask a question there ("closed because ..."), much less play their "gamification" of Usenet. They're less terrible than the "?share=1" people, but that's not saying much.
Firefox's Hello is an amazing early free alternative.

https://www.mozilla.org/en-US/firefox/hello/

https://blog.mozilla.org/blog/2015/01/13/firefox-hello-makes...
After looking at the linked article and reading the comments, it appears that it doesn't make an actual impact on performance. He is just suggesting the ordering for consistency.
Grabicon – Simple Favicon Finder API
Never mind mechanical reliability - the fact that it's an outright replacement concerns me.

I wonder what the behaviour would be if I hooked a car battery up to the exterior lock... not a concern with the previous, electrically disconnected from the exterior, model.

Oh, and how well it fares when rain gets in it.
Performance of Angular.js, React.js and Knockout.js Compared
Preordered the Lockitron when is was first announced, after ~ 2 years got tired of waiting and canceled my order and bought a Yale ZWave smart lock. I am very happy with it, it has a touch screen, I can open it with a pin code, from my phone or even from my Android Wear watch. I love that it's ZWave because I don't have to use a separate app for it and other home automation devices, and I can set rules based on the condition of the other devices.

Between getting burned on this and the SOAP router, I will never back a hardware based Kickstrarter. I figure it's better to let someone else pay for the privilege to get the alpha version and struggle with it until the bugs are worked out.
Here's the actual study:

http://www.nature.com/ejhg/journal/vaop/ncurrent/full/ejhg20...

"Here we surveyed a total of 5321 Y-chromosomes from 127 Asian populations, including novel Y-SNP and microsatellite data on 461 Central Asian males, to ask whether additional lineage expansions could be identified."

Looks like all the lineages involve Asian males, so a more probable guess would be, say, the ruling family of the Abbasid Caliphate, which reached its greatest extent around 850.
For some values of startup, this all makes sense. If you're trying to solve a hard computing problem (not a social problem) then you have to write your own code. Turns out open source rarely gets around to hardening their code.

The you get to decide - jump aboard some community and try to help them get the code where you need it, or write your own. The community sounds nice, but the thrashing there can add more work than it's worth - tracking (incompatible) changes, arguing for your APIs and layering etc. Doubles the job at least.

Then you write your own. Again time wasted but not how you think. With examples of working code and/or a good idea what you need, you write it and it works. But you spend the rest of your life defending your decision. Every new hire naievely says "you could just have used node.js!" And you try to walk them down the design points but its almost hopeless.

I'm maybe a little depressed about this right now. My startup just got refinanced under the condition we use open source for everything, and write our app as a web app. Which of course is a pipe dream, since our app does hard things using carefully written low-level code, complex network strategies and heuristics hard-won from a thousand customer issues met and solved.

But no! Chrome can do all that, for free! So I'm asked to quit being a not-invented-here drudge and jump on board.

Anybody hiring?
I'm sure that's what everyone will claim :P

Seriously though, a huge proportion of people access porn even though an equally huge proportion of people would deny it. And that's the whole point of a private life - people should be free and comfortable to do things in private that they might not want other people to know about. You shouldn't HAVE to tell anyone about your online habits, it's none of their business.

It's not the Government's job to even ASK you about that sort of thing, let alone TELL you to have these filters. It's patronizing and paternalistic and intrusive.

Of course, it's also a thinly veiled excuse to force the installation of traffic monitoring and filtering equipment across the whole of the UK internet - since obviously you can't block sites without inspecting the traffic. It certainly makes GCHQs job easier - why bother hacking servers and tapping fibre when you've got ISPs forced to monitor every connection and paying for it too.
Valve has hierarchy. A good example is when the AR group was fired. The decision certainly came from someone, since the fired group wasn't notified, they were fired on the spot without prior notification. Therefore the decision was not democratic or made by everyone, but was instead secret and made by some small group or individual.
Battery Status API for developers
Most of what you mentioned is design-related don't you think? Don't you mean "fire the designer", not the usability consultant?
Lockitron Bolt is based on an electronic lock platform that's been in use and refined over nearly a decade. If you have issues locking your door by hand (due to to settlement, weather stripping, etc.), then a connected lock probably doesn't make sense until you adjust your door.

We'll be offering a tapered latch which helps a little bit, however, using it with an out of alignment door is non-ideal as it will wear down the batteries faster.
If it affects gethostbyaddr that'd be really bad - there are a lot of applications that automatically look up reverse DNS on a connection.

Mail servers in particular generally make it pretty easy to trigger both forward and reverse lookups.

The test case seems to have it looking up an ip address as if it were a name, but it's using the reentrant version of the function - maybe only those are affected?
Sounds like you need a powerful man AND a man who fathered many, many, children. A quick search suggests he had 20 kids, not sure whether that's enough to qualify.
a) That's true but I don't think it matters here. Coinbase is small fry. Heck, all of Bitcoin is small fry. There may be theoretical cases where that insurance is impractical because of this, but there should be no problem finding an insurer that can fully insure Coinbase. For example, I'd wager that Coinbase's total assets are less than the cost of a new A380, and airlines have no trouble insuring their airplanes.

b) Why is it unreasonable to want insurance for offline coins? They're safer but they're hardly going to be invulnerable. Collusion, theft, or accidental loss can still happen. I'm not trying to find ways to criticize them (I have pretty much no opinion about them aside from what I've seen here, and a single Bitcoin transaction I tried with them once that went completely smoothly), I just find it weird that a financial company would go to such lengths to point out that they're insured, but only insure 2% of their total assets, to the point where it sounds dishonest to me.
Agreed. Unfortunately it's too late for me to change it now.
>the real thing basically never leaves its room

>thing

>its

They are still people, even if you disagree or outright hate how they live their life. If this was an attempt at making the sentence gender-neutral, please use "one(s)" and "they" in the future like so: The real ones basically never leave their room, with...
John Carmack's adolescent years (2003)
> But if you want backward compatibility, you still probably want to use something like Lodash.

A few years ago, sure, but these days I'd use es6-shim. The code will be shorter, have more documentation around the internet, and when old browsers die you won't have to change anything to be on standard JS.
If the NSA has been hacking everything, how has nobody seen them coming?
Yeah, perhaps it's sad but I'm more interested in the synthetic economic systems of a game than the macroeconomics of the world. Somehow the former is more honest (probably because one has all the data).
> Chrome on iOS is rubbish.

What makes it rubbish? I remember using it when it was released and I switched to it as my main browser instantly. At the time I felt it was better than Safari, if not only for the top bar being smaller and/or hidden, something Safari did not do at the time. It also had the "request desktop" which is invaluable at times.

Currently I use Safari but it's because I haven't bothered since I use the iPhone browser for almost nothing.
As a 501(c)(3) nonprofit, EFF could potentially dedicate 10% of funds to lobbying. They would need (and maybe already have without my awareness of it) a 501(c)(4) group to do heavy duty lobbying activity.

I would be curious to know more about EFF's fundraising activity. I can confidently guess that the NRA gets a lot of money through direct mail and employs dozens (hundreds?) of major gift officers to build relationships with high-net-worth prospects. These donors are probably majority old white conservative guys. I'm sure EFF's potential donor base has little overlap with them, and I'm not sure if the same strategy would work. They should still have MGOs to get high-dollar gifts from individuals, foundations, and corporations. But where the individuals are concerned, I'm not sure how they would prospect since direct mail probably doesn't work as well on people who care about EFF's issues.
A diversity of approaches, tempered by capitalism, can be beneficial.

But that's not the same thing as entryism, which unfortunately we have in tech. Entryism is when diverse approaches don't attempt to win in the field of capitalism - instead, they attempt to parasitically take over the capitalistic winners.

Capitalistic diversity would consist of MBAs, SJWs, and all the other entrants building their own companies. Then customers could pick the winner. In contrast, entryism consists of some company (e.g. Google) "winning", and then the MBAs, SJWs, etc joining google and changing it from the inside.

In fact, entryism is very difficult to combat capitalistically. The problem is simply that creative destruction can't necessarily kill the entrants. For example, suppose the MBAs destroy MS. Then what happens - do they vanish forever, never to kill again, with MBA-ism as a disgraced ideology? Or do they simply shift jobs to Google and Apple and try to do it again?

See these two articles for more on entryism and boundaries: http://www.moreright.net/notes-on-boundaries/ http://www.moreright.net/entryism-as-containment-failure/ (Moreright has other articles on the topic, mostly focused on how neoreaction has avoided entryism. To a certain extent tech does the same thing by being a bunch of low status nerds, repelling people who don't really like tech.)
The old twitter, which offered RSS of users' Twitter timelines and searches made a lot of sense, it was a real shame to see it go.

Combining tweets about [subject of choice] inline with your favourite subreddits and websites, all filterable and searchable (with the right client) was a brilliant innovation.
When the patches are available, you need to update, and likely reboot. Mattias Geniar talks about using the following command to find processes depending on libc, any of which could be running the vulnerable code, these are core processes that you probably cannot just cycle without a reboot [1]. For me the listing looks something like this: agetty, auditd, dbus-daem, dhclient, init, master, mysqld, rsyslogd, sshd, udevd, xinetd. Many of these deal with hostnames, so I would want to be sure everything is clean, and the best option is likely a reboot.

lsof | grep libc | awk '{print $1}' | sort | uniq

[1] http://ma.ttias.be/critical-glibc-update-cve-2015-0235-getho...
> The U.S. government, for all its weaknesses, is providing their citizens with freedom and liberties as good or better than most other countries.

[citation needed]
Aside from being draggable, the little gap gives an important visual clue, it spells out the hierarchy between window>tabs. I would guess that user testing backs this up, i.e. people are probably worse at completing tasks like "Move tab X from window A to window B" when the gap is removed.
I do not expect them to decrease military expenditures. Their coalition partners (the far-right "Independent Greeks" that will be "holding" the ministry of defense) will not allow that easily.
August does everything they are claiming and doesn't require a total replacement.
> I thought then, and think now, that the TalkTalk bias is due to the demographics of the users of that ISP. Everyone with the technical skill to visit SamKnows or ThinkBroadband knows TalkTalk are poorly-rated and thus tends to avoid choosing them, I'd venture.

I'd be very interested in suggestions for broadband providers who are less bad than TalkTalk while offering £20 (incl "line rental") broadband providing, say, 80 GB monthly
plus the original email was sent from a PR agency.
We use it with about 30 offices, all connected via openvpn. 180GB transfer every day. No problem for months.... Hell of a software!
The NSA is tasked with doing signals intelligence so I get why they would develop some hacking abilities but you have to wonder where the break over point is with the money they are spending...at some point they are spending enough money that they could actually make a difference in improving our software and infrastructure. I mean, one of the reasons they say that they need these capabilities is because we are so vulnerable...how about actually helping out?
WDC – Cool new way of looking up domains
Well, I'm a bit of a radical, so I could give a lot of answers to that question. But even in conventional terms, and even after all the economic destruction of austerity, Greece has been running a primary surplus since 2013. At this point they're borrowing just to pay debt.
I don't get it.. What's the point? How hard is opening a classic lock with a key? It's like a solution to a problem that doesn't exist.. You can easily imagine things going wrong like unreliability, dead phone or abuse of the "give access via email or SMS" feature
> As a matter of fact, these people are much more detached than the rest of the population and are much more susceptible to the western Internet cultural phenomenon to such an extent that it might be changing their point of view in such a way that they find themselves unable to fit into their actual culture.

Hmm. I think you might be right. I can tell for me, as an Asian guy that came to the US about 6-7 years ago, I feel much more liberated and less stressful being in the US than in where I came from. It is exactly the make-believe culture that I have been exposed to thanks to the Internet that made me feel detached from the culture over there. Whether it is the main reason that people shut in, I can't tell. It is probably not the case (and it doesn't have to be) for the majority of my fellow friends who came to the US to do post-graduate studies (I came for undergrad after being a drop out). They often find that it is more stressful to live in the US where they don't have friends and their familiar environment.
I think it's okay to assign a media name to vulnerabilities, but only if the vulnerability is truly severe enough (easy to exploit and serious magnitude) to warrant it. Otherwise it's just an attempt at marketing and PR.

In this case, it looks the name is probably not warranted.
"Protect the children" is the crappy, creepy, ugly argument of someone who trying to defend the indefensible. It's conveniently vague while appearing hard-hitting. Save them from what exactly? Seeing titties? Maybe not what you want them to see, but hardly a strong argument for installing a nation-wide censorship network.
Given that I recently received a Debian Security Advisory which specifically addressed this CVE, I don't think it was accidental at all.
Oil futures for 2020 are trading at $67/barrel. If you think that's low, maybe you should buy some. If you think that's right, maybe this will last more then a few months.
Displaying a lack of intellectual rigor in response does not garner any respect from people that can think. The quickest way to get people smart to tune out is to engage in a political mudslinging contest lacking real content.
It goes deeper than even what this article describes - a ford exec admitted last year that they put GPS in all vehicles (post 2004 i think) but they "don't release the data" not sure how much I trust that statement in today's world...
It's a vain wish, but I wish there were more oversight when companies do experiments with our emotions.

Who is to say that Facebook was wrong while Riot was right? Who is to say that long term impact Riot's "tests" that produced negative consequences had on people? Who is there for those people who were affected negatively?

Nobody.
Show HN: Oxischeme – A Scheme implementation in Rust
I've lived my entire life thinking that anything I do or say anywhere could be picked up by phones or cameras or gps. I can't express enough how liberating it is to accept that and move on. The idea that you should be doing anything ever that you couldn't explain to anyone watching is a fantasy to me; something so far from reality you might as well be wearing a tin foil hat.
Not disclosing vulnerabilities is not a question of attacking or defending, it's just stupid to keep vulnerabilities open.

I also didn't propose to uncompromisingly favor attack capabilities. I still don't think effective cyber defense is possible on a national level without leading the edge on offensive abilities as well.
Agreed. It is hard to just accept these viewpoints without backing them up with some examples or data.

The v2 opinion and comparison to SharePoint just sounds mostly like FUD.

The comments about junior devs and masquerading as javascript I just don't buy. Sure someone new to programming might be able to just throw something together and not learn, but someone attempting to learn will still learn a lot using Angular.