skysight-inc/HackerNews huggingface dataset:
Funny, I wrote a blog post about this as well.[1]

Vulnerabilities do not need PR, especially not on the scale of picking a sexy name and making a cool logo. I'll repeat what I said in my blog post here.

Branding vulnerabilities accomplishes two things, both of which are bad for the security community and the broader tech community:

1. It implicitly establishes vulnerabilities as severe if they are widely reported on. Getting media attention does not necessarily mean a vulnerability is serious. It means you have content that will generate views. I’ve been in the press twice for vulnerabilities found in widely used web applications – neither I or anyone who is even remotely familiar with security would claim that media attention elevates a vulnerability to the same level as Heartbleed. But the broader public doesn’t know this, and the media capitalizes on it.

2. It implicitly rates a vulnerability’s severity by how much attention and “buzz” it generates, not by how severe it is according to an objective scale. Yes, Heartbleed and Shellshock were severe. Did you know that all the vulnerabilities that received bounties from The Internet Bug Bounty Program were also severe? They didn’t receive media attention. They didn’t need to receive media attention – the normal process of responsible and coordinated disclosure is enough (and I’m willing to say that for extremely high-severity cases like Heartbleed, a brand may be warranted – but not for anything less).

Having widespread press attention via a logo and a name is just another noisy metric that will soon be added to the list of necessities for a vulnerability to have any credibility. Michal Zalewski and Project Zero find vulnerabilities on the scale of the so-called "GHOST" weekly. They are resolved without the need for panic or self-promotion.

This activity, like all fame seeking in the infosec industry, is encouraging a race to the bottom where people focus on the wrong things to decide is a vulnerability warrants attention. For every legitimate Heartbleed and Shellshock, there are the 20 vulnerabilities people try to brand put on the front page of Hacker News and /r/netsec.

[1]: http://breakingbits.net/2015/01/27/your-vuln-does-not-need-a...
What are facts but beliefs that are not considered controversial?
Well, their website doesn't load, so they're not off to a good start.
I suppose his answer might be more philosophical. All things in this universe are shards of the same one universe. Shards of this one universe thinking about what this universe is itself made of. As far as we know from the fact the constants cannot be derived from any other principle and must be measured directly, the universe is made of itself. The universe is one.

Also an interesting read, if you're feeling philosophical about the number 1. http://en.wikipedia.org/wiki/One-electron_universe

EDIT: I'm tempted to give myself a downvote, totally missed phi was an actual constant in itself. http://en.wikipedia.org/wiki/Golden_ratio
Beyond the DOM: How Netflix plans to enhance your television experience
It's actually equally about Ripple and Stellar scandals :)

But for somebody who is not deeply involved with the SF crypto currency scene, this is a pretty informative piece.
Changing gene expression happens all the time due to everyday things like: sunlight exposure, amount of fat you eat, how much sleep you get, etc, etc, etc.
Depicting the Medieval Alchemical Cosmos (2013) [pdf]
On ProductHunt I found a startup for selling domains. This is not exactly trading but it may help. https://namebox.io/
UK also has provisional ones. That is exactly our strategy if we were to decide to file one, thanks!

(as a side note, we are working on biometrics not biotech: http://www.lockergnome.com/technobabble/2005/03/17/biotech-o...)
The funding target has now been met!
This kind of reminds me of all the "X cures cancer" media reports. It's not that hard to kill cancer cells in a petri dish (or in a xenograph model). Tens of thousands of compounds have killed cancer cells in models, but failed entirely in humans.
Engel's law (the food example) doesn't really impact it that much because the income elasticity of food is between 0 and 1. By your logic nothing has an income elasticity of demand greater than 1 because of competing with food.
I would wager that an appropriately-sized Spark, GraphLab, or Naiad cluster could outperform a laptop when running PageRank on this graph. Distributed graph processing research got stuck in a rut when the gold standards for evaluation were the Twitter crawl [1] and uk-2007-05 web graph [2]. Now that the Common Crawl has made a much bigger graph available, I hope that we'll see it used in more performance evaluations—with a COST baseline, of course!

I'd also wager that those Spark, GraphLab, or Naiad programs would be far from optimal, by at least an order of magnitude. My ideal would be to see someone attack the distributed graph processing problem with the same eye for systems performance issues that the TritonSort folks brought to the distributed sort problem [3] and MapReduce [4].

[1] http://law.di.unimi.it/webdata/twitter-2010/

[2] http://law.di.unimi.it/webdata/uk-2007-05/

[3] http://www.alexras.info/pdfs/tritonsort-tocs13.pdf

[4] http://www.alexras.info/pdfs/themis_socc12.pdf
Hmmmm. The difference between hardware a user buys and takes home versus hardware a user uses to engage a service seems very slight no?
"anyone operating an Internet-addressable computer who is not familiar with any of them is incompetent"

Sorry but I just can't take such a statement seriously. There are millions of people who are in this situation. Calling them incompetent is just ridiculous. Perhaps you were around for the big worms but vulnerable internet facing systems are purely reality. Making people more aware is not some kind of problem.
Themis: An I/O Efficient MapReduce [pdf] (2012)
I'm all about getting rid of trolls. However, I'm worried that various groups will use words like 'troll' to silence opposing opinions. It already happens on many Internet discussion forums.

Gamergate is a great example of this. I saw terrible messages and actions from both sides, but it really depends on personal opinion whether the opposing message will be considered a 'troll'.
Cadence is only $1E6 maintenance/seat/year?
TritonSort: A Balanced and Energy-Efficient Large-Scale Sorting System (2013) [pdf]
The signal (actual news) to noise (opinions, comments, satire) is very high so adding Twitter to news is probably not a good idea.
Do you know if it has changed enough to deviate from the course or not? I just found out about this and it sounds really interesting, and I'd like to get the newer book if I can.
How much would he have gotten in royalties anyway? I don't think there are any billionaires who got there just through patent royalties, right?
If it was a dollar or two to rent a movie, I'd rent a lot more. $5 seems excessive when I can buy the blu-ray version for a few dollars more.
The uses and abuses of cryptography
Seed Funding Gotchas
What makes the firefox sandbox escape "critical"? It requires at least one other, unknown bug to exploit. Seems like a pretty run of the mill issue that will get fixed in the next Firefox update. The fact that most Firefox users won't ever know about it doesn't matter.
Isn't the the issue troll had more to do with gawker making the coca-cola bot quoting mein-kampf ?
Usage of iCloud Photo Library is 100% opt-in.
"The University of North Carolina at Chapel Hill is considering banning a smartphone app that some say encourages hate speech, but other schools say free speech among students needs to be promoted."

Doesn't Reddit also promote hate speech? You can anonymously post disparaging comments.

If someone is offended by "Yik yak", they can uninstall it from their phone. I see no reason to ban it for everyone.
Apart of the wiki the author has in its page, there also exists https://github.com/gratifi/grati.fi , if you want to share ideas on it.
If you have a specific job offer from someplace else that is more than you would get by staying, take it! Go!

When I recently switched from a startup for a 30% raise, the CEO was pretty hostile. It actually made me feel better about leaving.

If you want to be polite, give them a chance to counter-offer, but you already told them that you thought you were underpaid, so you don't owe them that.

Also, if you get an offer that says "You get $X when the merger closes.", what happens if the deal falls through? What happens if the close date gets pushed back for a year? Remember the time value of money; you would have been better off taking the other offer if that happens.
So we should expect that criminals, who by definition violate laws and regulations, won't do something simply because it is illegal?

In that case, we should just put trespassing and breaking and entering laws on the books and call it a day, that should stamp out the problem immediately.
Bureaucracy has overhead, I'll give you that, but I assume you're saying that UBI is a replacement for assistance programs, rather than being used alongside them?

That's the only way for cost administrative cost savings. What about when UBI isn't enough for something as trivial as Medicaid?

Would UBI cover the cost of health insurance for everyone, since it's replacing the "expensively adminsitrative" medicaid? Even if you took away employer insurance today, many people with steady income can't even afford their own health insurance.
You have mixed two ways to "ask a question." A search query against Google is one way to ask a question. Stack Overflow supports the same method, through the search box in the upper right hand corner.

In both cases you are free to ask the same question many times per day, though I suspect in both cases if you automate it and ask it once every second then you might get throttled or shut off. This is possible because the machine costs to answer this sort of question is low.

Stack Overflow also has a way to post a new question, which may have supporting documentation, etc. Google does not have a way to ask that sort of question, in part no doubt because it requires human understanding to answer that type of question.

It's not useful to treat both ways of asking a question as being identical.

Stack Overflow depends on a lot of volunteer labor. These are people who would rather not answer the same question over and over again. It's possible to pay people to do tedious work, but that would likely be too expensive for their business model.

When I was a kid, before Google Search, there were automated systems like time and temperature; a free number to call which would report the time. There was no limit to how often someone could call it. NASA also had a free number to see when the next launch would be, also answered by machine. And of course even further back still, church clocks are a machine resource so people can tell the time. It's acceptable for someone to look at a timepiece every few minutes, but not to ask people for the time at that same frequency.

It comes down to that we treat machines as mindless, unfeeling automata. It's also acceptable to drive a car without doing any maintenance until it breaks, but do the same with a horse and it's animal cruelty.
No More Two Weeks' Notice: How to End the Employee Disappearing Act
Data Science Weekly Newsletter – Issue 63
5-Part Guide to Getting Started with Swift
The spelling error has been fixed. That's embarrassing!

The app used Dropbox and Google Drive's OAuth permissions, which assigns SendToMyCloud a token, which we use to add files to your account. We don't read from your account at all, and your users are only given write access, through our web form. Your users don;t have access to view your files.

The Demo inbox that is linked from the home page uses my personal Dropbox account, if you want to see what your users would see.
That crash you heard today was the real-time data door slamming shut on Facebook, Microsoft, etc. Say what you might about Twitter's slowing growth, but mainstream news cycles and breaking news are increasingly preceded by and/or quote tweets. Where are Google's competitors going to turn to deliver similar real time results? PR Newswire? Associated Press? Reuters? Huge win for Google who needed this and big oversight on the part of Facebook IMHO.
Automate and Increase Productivity with These Zaps
“Vanilla OpenStack” Doesn’t Exist and Never Will
Maybe you don't need to be smart to be rich, but I'd be interested to know if you need to be smart (in the IQ/book smart sense) to get rich. You'd have to measure the IQ of people like successful small business owners, etc. who built their own wealth rather than being born to or inheriting it.
I think you mean "very low"
>at least

>some

>arguably

>far enough along

>yet

I don't mean to insult you or criticize your post in any way, partly because I agree with you, but that is a lot of qualifiers for one short sentence. Diplomatic tones require them though, I suppose.
I'd bet it's less trading performance for ease-of-use, and more trading performance for the probability of correctness. Which may be just another way of saying ease-of-use.
Oh yeah, well not on Windows.
"... It's all about function and simplicity. ... Those machines are simple to maintain, cheap to run, and are unbelievably reliable. ..."

Spent my childhood with tractors and machinery and gotta agree. https://www.flickr.com/photos/bootload/8670866219

Used tractors to clear and pull down trees, slash and move things about. Small plot, nothing large scale but the machines (eg: Fordson - built in Dagenham, England b/w 1948 and 1952) were cheap, reliable and totally fixable. Fire put an end to these beasts. https://www.flickr.com/photos/bootload/3449252693/in/photost...

Miss them a lot.

Examples: (really old 165 diesel)

* replace a wrecked PTO https://www.flickr.com/photos/bootload/5362091356 and replacing it with a new one https://www.flickr.com/photos/bootload/5362074220

* tools required to change PTO https://www.flickr.com/photos/bootload/5362091360

* job done https://www.flickr.com/photos/bootload/8479859739

* hack battery system to recharge by sun https://www.flickr.com/photos/bootload/8479859639

Did stuff with tools around the shed to fix machines that allows you to do things absolutely could not do by hand.
Do you have what it takes to be a Gentleman?
There is no de facto authentication system for go
> This is SSN data that was stolen, it's a whole different beast that the ... Sony Pictures hack.

I can't tell which one you think is more serious. It sounds like you think it'd be a very serious matter if SSN data was stolen. But haven't the vast majority of SSNs been available on the various blackhat markets for many years?
>reduces the administrative overhead of providing assistance.

Only if UBI replaces all other programs, and i'm guessing it won't be enough for people to afford a Medicaid replacement.

Typically you only qualify for unemployement, disability, etc. when you're been let go, not when you're quiting voluntarily (and it usually only takes a week to get).

Even then, it's certain percentage of your current income, so as to not disrupt your lifestyle. I doubt many people will voluntarily quit to be on a much lower UBI just so they can look for a new job. But then again maybe there are studies on this...?
The Vonjournal – Announcing Vonjour for 500 Startups Perk
This is amazing news. Glad to see companies that benefit so much from free software helping to pay it forward.

Update, Feb. 5, 2015, 8:10 p.m.: After this article appeared, Werner Koch informed us that last week he was awarded a one-time grant of $60,000 from Linux Foundation's Core Infrastructure Initiative. Werner told us he only received permission to disclose it after our article published. Meanwhile, since our story was posted, donations flooded Werner's website donation page and he reached his funding goal of $137,000. In addition, Facebook and the online payment processor Stripe each pledged to donate $50,000 a year to Koch’s project.
Definitely. Thank you for pointing that out that difference.
But that's not what happened.

http://www.nber.org/papers/w16350

The hypothesis is that France "hoarded gold" - kept more gold reserves than it printed currency. This led to a paucity of gold. Those nations that played by the rules could issue less currency than was needed. This led to deflation.
I feel the complete opposite - I used to Google for specific tweets I remembered seeing and to help find tweets relating to current events. Google was much better about showing me the stuff I wanted to see than the actual Twitter site!

I'm really excited to have this back.
> Owners earn 5-20 cents per mile. So an average of 12.5 cents, works out to $30 per 6000 miles.

Not sure how you got this -- 12.5 cents * 6000 miles = $750, not $30.

(Disclosure: I work at FlightCar.)
I expect the actual number is billions, not millions.
Operate Your Startup Like a Grateful Dead Concert
Airmail 2 is pretty good. Kind of has some interesting bugs with the rules creator but it looks nice and functions well.
Deflation is terrible. We can largely blame deflation for WWII.
I think in its current form, COST simply provides a reality check: for some problems, a given system may be completely inappropriate when a simple single-machine implementation exists. Along with raising standards for distributed systems evaluation, I hope that it encourages people to innovate on the single-machine implementations: for example, the GAS idea in PowerGraph [1] is an antecedent of the Hilbert-curve implementation in Frank's first blog post, and it would have been great if the original GAS implementation were separable from the particular distributed system for which it was built.

I fantasize about this work inspiring a competition like the sort benchmark [2], but for single-threaded graph algorithms. Not only would this encourage people to develop usable single-threaded implementations, but it have the side effect of increasing the COST for all distributed implementations....

As for providing scalability break points, I think this work goes some of the way, but doesn't take into account the fact that the input data for a particular real-world computation might not reside in a conveniently-compressed format on a local SSD. Extracting the Common Crawl from an HDFS cluster just to replicate the blog post's experiments could take much longer than the computation itself; extracting the social graph from Facebook's Tao [3] to do offline processing might be similarly non-trivial. Academic experiments don't typically take this cost into account, but recent work like Musketeer [4] has started to consider it, and even offer ways to automate the system choice problem.

[1] https://www.usenix.org/conference/osdi12/technical-sessions/...

[2] http://www.sortbenchmark.org/

[3] https://www.usenix.org/conference/atc13/technical-sessions/p...

[4] http://www.cl.cam.ac.uk/research/srg/netos/camsas/musketeer/
Twitter is going to redirect users to a "logged out" page if they click on a tweet in search results and are not already logged in. How's that not cloaking and against google' own guidelines?[1]

Google wants to index tweets and Twitter wants to nip their growth stagnation in the butt. Two, otherwise fine companies, came to this half-arsed compromise that's solely based on fear of missing out rather than creating something that serves users. Or am I being too harsh here?

[1] https://support.google.com/webmasters/answer/2604723?hl=en
Musketeer workflow manager
Most of those analytics databases are pretty temperamental in cloud environments, though. I haven't used Impala, but something that can run on EMR (especially if it can get better turnaround times than Redshift) is pretty interesting.

(Vertica in AWS is a tire fire. Avoid avoid avoid.)
Neither of those comments were directed at you personally, but at a generic person who would fit the criteria immediately preceding them. "those who think <1TB is a 'very large dataset'" == not understanding modern scale. "if you buy into marketing hype" == you are making poor choices. Neither of those selection criteria apply to you, so I apologize that you took them as personal attacks out of context.
It's a non-trivial task to design software that will deliberately fail and cannot be easily by-passed with a debugger.
I've worked for a reasonable subset of top Internet sites and have friends who work at the remainder I haven't been at and I can emphatically say that none of them run "a single database server" for any main portion of the site. To think that is simply ludicrous!
.. which is exactly why an opt-out would be a good solution. People can see what they want, and rbing in tweets when/if appropriate.
Pacemakers Get Hacked on TV, but Could It Happen in Real Life?
It's far more complex than this. A lot of meat --free-range cattle and sheep particularly--is raised on land which is not arable for traditional crops. Farmed fish too, when farmed responsibly, can provide a lot of food on "land" which could not have produced other food.
That is an absurd and useless analogy. You're essentially just declaring your opinion without anything to support it, which does nothing to further the conversation.
I think there is a large difference. It requires a different skillset to manufacture 1000 of something that consumers will buy vs manufacturing customer touch points that are owned, and serviced by the company.

Your manufacturing pipeline, volumes, service issues are all very different. So as great as BufferBox was I don't think they were a hardware company and certainly not for the purposes of this thread. I am not discounting their abilities or what they made but based on my experience they are apples and oranges.

Most of the problems kickstarter companies run into are unique supply chain, and manufacturing issues that BufferBox wouldn't have had to deal with.

Additionally, a big part of what BufferBox offered would have been in their app, and website. A locker that you can remotely lock and unlock is not difficult from an electronics point of view and had been around before.
I mostly agree with you here, most browsers would take multiple exploits combined together to be effective. And the update process is fairly rapid with Firefox these days - especially compared to glibc and (often) Linux kernel rollouts. So this would exclude the script-kiddies unlike Heartbleed which was quite accessible to newbs who could use a single PoC.

Browser sandbox escapes are less common than higher level bugs so they have some FUD-appeal. But my point isn't to say that these are worse than any other bugs, or more exploitable for that matter. Merely that they are similarly bad but not as well covered. Both are definitely in the same class as Shellshock or Ghost.

I'm not saying particularly bad ones aren't in need of special attention, merely that playing the branding game as a security strategy is mostly non-productive when countless relatively unknown me-too's exist at all times.
How do people make decisions? A tale of a fishing pole and a young man
Pretty cool. I wish it supported regular IMAP accounts. We could use a modern general mail client. Gmail is quite well-served already.
My take was that "distribute" means everybody has some sort of decision making power, and the power to make all the decisions is not concentrated in hierarchical fashion. Those who wield the power to make a particular decision are then encouraged to make the decision themselves without garnering a consensus first.
Inertia a.k.a. reasons for people to like and therefore stick with your product. How dare they.