skysight-inc/HackerNews huggingface dataset:
Quoting from the article:

> The problem with this approach to nutrition is not that there’s anything inherently wrong with synthetic vitamins — it’s the shortsighted nutritional philosophy that our obsession with vitamins encourages. ...

> Indeed, natural foods contain potentially protective substances such as phytochemicals and polyunsaturated fat that also are affected by processing, but that are not usually replaced. If these turn out to be as important as many researchers suspect, then our exclusive focus on vitamins could mean we’re protecting ourselves against the wrong dangers. ...

> .. extra vitamins do not protect us from the long-term “diseases of civilization” that are currently ravaging our country, including obesity, heart disease and Type 2 diabetes — many of which are strongly associated with diet.

This is not a naturalistic fallacy. As my example, which I think is more direct than phytochemicals, consider that alcoholism can lead to B1 deficiency. In the 1970s people proposed vitamin fortified alcohols, which would prevent the institutionalization of 1,200 alcoholics yearly (in the 1970s) due to Wernicke-Korsakoff syndrome. (See http://news.google.com/newspapers?nid=2706&dat=19780812&id=J... for a newspaper article from the time. The PubMed reference is http://www.ncbi.nlm.nih.gov/pubmed/96343 .)

This wasn't done because, as I recall, the labeling of "vitamin fortified" would likely influence some people to consume more alcohol, on the idea that it was healthier because it contains vitamins. Unfortunately I can find no reference to this decision, and I'm not sure my memory is correct, since http://www.newsweek.com/are-vitamin-enhanced-alcohols-heathi... says "Stampede Light Plus beer, fortified with B vitamins, is soon planning a relaunch. The beer first got its start with Jessica Simpson, who touted it in ads urging beer guzzlers to "Be Smart, Drink Smart.""

Beer is low quality nutrition. Adding vitamins to beer does not make it high quality nutrition.
I thought that sounded weird to me too, I could only guess that they're trying to keep their service online while they fix it - which is insane at this point.
It'd be nice for someone to standardize this. I believe that it's safe to use a cryptographic PRF that's too short to be a proper cryptographic hash, like the 64-bit SipHash https://131002.net/siphash/ : you're not worried about collisions, and you (hopefully) have your own ways of shutting down 2^64 brute-force attempts already. But I haven't thought hard so don't quote me on that.

If you can get away with a 64-bit or even 128-bit hash (maybe truncated SHA256?), and you encode in some base32 scheme, then it's 13 or 26 characters — at worst https://example.com/resetpw/d232rgs5690y6nphk00tdmmw60 (128-bit), which isn't so bad. base64 only gets you down to 11 / 22 characters, so it's not a huge win.

The benefit of the scheme is that this is stateless and you don't need to access the database at all. This isn't about schema, this is so that you don't have to think about expiring fields from the DB at all. It's done entirely in the web server.

That said, the input to the hashes should be well-structured (so you don't generate a collision by having two API functions that can be coerced to hash the same string with different meanings). That's a vulnerability in this writeup, and I think that would also be something a proper specification of this scheme should address.
8 tips from Nightcrawler that will make you a better entrepreneur
> Source "annotations" are lost after a force-push (why not keep around a read-only view of old comments? We have lost some valuable discussions on GH pull requests)

Yes, that is incredibly annoying. I discovered that if you add your comments in the "Files changed" tab (which shows the diff of the entire pull request) instead of the "Commits" tab (which shows the diff commit-by-commit), then the comments aren't lost when you force-push.

Just FYI, might make life a bit easier if you're stuck with Github.
That's not an EE course, it's a CS course.
If the data is encrypted and authenticated with a server-known key, you couldn't change the data and end up with the server accepting it. How would a spoofing scenario work in this case? If you can steal another user's blob, you can pretend to be them, but if you can steal that blob, you can also steal a cookie if the website uses cookies for authentication. Maybe I am misunderstanding you.

One issue I can think of is users spoofing older blobs (reminiscent of a replay attack). I believe this could be mitigated if the server keeps a single 256-bit hash of each user's state (this would also make client-side HMACs redundant), or a 64-bit ever-increasing integer which is then included in the state. That's way more tiny than any user state.
I think this article is pathetic. If you saw the movie most probably you will think the same.
A UUID is 128 bits, written in hex, so it's 36 bytes. If you use an appropriately URL-safe base64, you can encode a 216-bit value in the same number of bytes. That's long enough to be cryptographically safe for this application.
I think a lot of what we would want in such a successor was embodied in App.net[1], and that didn't work out too well. It's a lot easier to dismiss the network effect in a tweet than to actually overcome it.

[1] https://alpha.app.net/
In other words: a maintenance nightmare, filled with security gotchas, difficult to scale, and hard to write.

I'm not sure I follow this. To change a password you need to write to the db anyways, it's one extra check to set token used=1 or remove it. Why is that a huge deal?

Now you don’t have to worry about clearing old bitrot from the database or worrying about when to expire non-verified accounts.

It's also possible to use Redis or another fast store with timeouts. The problem seems rather exaggerated.
I started the tutorial. Then I got stuck in the second step - Let's try something completely different. Type in your name like this: "chris".

The problem is: the input box doesn't get the quotes I write on my Mac. I tried double (") and single (') quotes
Such a waste.. probably ran some crappy spam/DoS drone on it, when binaries from that host are probably pulled and executed inside more or less every major financial institution on the planet.
The Myth of the Universal Turing Machine
That sort of data belongs in an analytics or event database (ie. one with entirely different requirements from your normal database).

Usually when I implement a stateless approach like this I still fire off a log event every time we generate a password reset.
Adding to this, founders have more information than employees, reducing their uncertainties.
I'm glad the page is getting a design refresh, as it needed it, however it may have swung too far in the direction of the latest web scripting language du jour. The 'try it now' box is appealing to the short attention span scripter and not to the engineer. Already you are having to mention IO actions which is a subject that can't be properly explained through a web form.

As for the image, I don't know why it would be interesting to see a picture of a bunch of people at a conference, especially if you go back to the page frequently. Why not some original Haskell art like the Diagrams factoring image?

Regarding the 20 years in development, I agree this fact should be front and center, this is a serious tool that has had a lot of work by very high level thinkers, it is a world away from the origins of Java as far as engineering integrity.
FAA proposes rules for drone use; Obama issues curbs on surveillance
I would suggest that there might be things that we will never figure out, but for which we will never know that we will never figure them out.

Also, belief is not a choice, by definition. Belief comes from being convinced. You cannot choose to be convinced, either you are or you are not, change only comes due to new information or new ideas, but never due to a deliberate decision to be convinced of something else. You can decide to pretend a different belief, but you cannot decide your actual belief.
Many of the large SV companies place many bets.

You could walk into Cisco, VMware, EMC, Pivotal, etc. etc. and find yourself working with close to cutting edge tools, hard problems, etc - BUT have a stable salary, perks, training courses, huge amount of corporate resources to lean on and learn with.
So, in summary either (1) no, we don't; (2) no, we don't; or (3) yes, we do.
Web scraping 201: How to find the API used by client-side webapps
Author of this book as well: http://en.wikipedia.org/wiki/Superintelligence:_Paths,_Dange...
People made similar arguments about the smallpox vaccine and just about every significant technology.
It has been... coerced.
Maybe I am.

Don't unplug the computer!
This is a valid survey response.
Direct Match (YC W15) Aims to Make Bond Trading as Easy as Stock Trading
Not quite right. Maybe "I like my Pine" or "I'm intrigued by my Pine"
Postgres lets you synchronize snapshots across connections so that they all see the same data (though subsequent changes are not visible to the other transactions unless you export another snapshot.)
http://www.postgresql.org/docs/9.4/static/functions-admin.ht...

This lets you parallelize work across multiple processes while maintaining consistency. When the client is the limiting factor you can use this with multiprocessing. When the db server is the limiting factor you can just use threads (or async.) Postgres backend processes are essentially single threaded.
While encryption is obviously a tool every developer should be using, this seems a little hand-wavy and built against a rather contrived strawman. It is a little info-mercially -- you fuss, you muss...

Is a table and a couple of columns actually difficult? Is this, or has this ever been, a problem for anyone? When did we enter the "post-database" world?

This all makes plenty of sense if you buy the strawman, otherwise it seems like some pretty strong over-reaching.
Getting a job in the City requires you have a job in the City.

There are two normal routes into the City if you don't have an amazing CV - knowing someone, or working for a non-City firm on City projects (e.g. Accenture, KPMG, or many of the 100s of smaller financial services specialist companies.)

Also note, not all City jobs are created equal, and many are worse than typical London IT jobs, with only marginally better pay and significantly larger expectations on hours, out of hours work, etc.
I've been looking at hosting some apt packages in a custom repo and am truly impressed/horrified by the layers of complexity necessary & suggested to create one. It boggles my mind why an apt host has to be more than a static list of files that are hosted on S3, raw github, etc. Running and maintaining a full blown server just to host some files seems crazy.
If one of the active pfSense developers is asking this question[1], then Manuel Kasper's OPNsense endorsement is certainly confusing without additional context. Without a doubt, the endorsement certainly carries weight given m0n0wall's impact and legacy over the years.

[1] https://www.pfsense.org/about-pfsense/development-team.html
What about property owner permission? I feel like that's something really important. Even if I'm not at my house I should still have a say if someone wants to fly some 50 lb contraption over it.
if you check http://en.wikipedia.org/wiki/Base64 there are actually RFC-standard alphabets that use . and - because they're URL-safe.
These things can be useful fraud-detection signals. If you don't log password reset requests then you're missing a chance to catch suspicious behavior. Even if you're capturing that data but using it now, at least having it gives you that potential.

Also, unless you plan on making the valid window very short, you probably want to mark reset requests as used so someone's old email doesn't get used again.

It's not a completely crazy idea, but the minimal amount of trouble required for the extra tables doesn't seem like enough to give up the logging and expiration benefits.
Same. RAM chasing them up too. Almost never had a network card failure.
Or, if you'd like to buy this off-the-shelf, the second author of the cited paper went on to co-found a company called Procedural, which was bought by Esri (the geo-spatial tech giant). Their work is still available as the City Engine product: http://www.esri.com/software/cityengine
The Death And Life of Great American Cities might overlap with and be a good starting point for what you're looking for.
In this case, I'd say that wasn't what happened. As is the case in many (most?) start up failures, my take on it was that it happened largely due to circumstances outside of the company's control. The founders were awesome folks, and did everything they could to make things work. I don't think it was a problem of "alignment" at all--if the company went under we would not have jobs. That's pretty solid incentive to me. A couple of stock options (with a low probability of ever begin worth something) is not going to change that calculus.
The Buildings of Tomorrow
Venture capitalists and self funded R&D want rosy market projections.

Sadly, based on sentiment from USA residents, like yours I suppose, I predict the USA is going to lead with military applications only for UAVs.
Students used to take drugs to get high. Now they take them to get higher grades
Armin Ronacher wrote about this back in 2013. [My Favorite Database is the Network](http://lucumr.pocoo.org/2013/11/17/my-favorite-database/)
> Large software is typically built from many heterogeneous components.

That is just one of the reasons, why software is getting more and more unreliable (not the asynchronous implementation). Software stacks are getting more and more complex and implementors loose track of the complexity.

Throwing dirt on software with clear and less complex implementations, is not going to make things better.

Of course I would not argue, that asynchronous implementation is for any software and in particular with today's development tools, but just to compare it with different types of things to make it look bad, is no proper argumentation style.
I was wondering what you do when say record 1001 gets deleted...your second query will only return 9 rows.

It's explained in your linked slides that LIMIT is ok, it's the offset that you need to worry about so your query looks like it would be better written:

SELECT *
FROM t
WHERE id > 1000 LIMIT 10;
Hi, I've designed this tool for myself to convert multiple currencies very fast, but is it simple and fast enough? - Would be great with some feedback.

Thanks.

Keep inspiring HN!!
Seconded. Same for discrete mathematics and differential equations. Interesting to learn about, but pretty much worthless as soon as you set foot off of campus. I'd love to see comments from anyone who has practically used any of the information from those classes as a part of their daily duties as a programmer of any kind.
Less type safety, more internet safety!
Hoping Google’s Lab Is a Rainmaker
By bang do you mean "gun"?
>Unlike the stock market, the bond market doesn’t have a centralized system where traders can plainly see the fees involved in the trade. This means traders have to ask each bank, one by one, either by phone or electronically, what they are willing to sell a Treasury bond for.

Mind. Blown. I always just vaguely figured that something as large as fixed income / debt markets, which look to be at least twice as large as equity markets[1], would have massive incentives for fintech to innovate much earlier.

[1] http://finance.zacks.com/bond-market-size-vs-stock-market-si...
Thanks! These are great resources for some cool programs and I will be sure to submit!
Perhaps they are both linked, perhaps it's the way we are wired, I frankly don't know. I am just suggesting that we should fix the way we think before we change how long we live. Just my $.02
That's what they'd like you to think.
I'm aware there are workarounds for all of these things, but they all result in a ridiculous amount of boilerplate and syntactic noise. To me, naming a simple function that's an argument to, say, `.map(...)` and putting it at the bottom of a function is pretty heavyweight.

Many of your suggestions are just optimizing for the current state of JS instead of thinking about how to best leverage the many brilliant syntactic advances from throughout the industry. I guess there's no point in arguing. Change is coming, and people can keep writing super verbose JS if they like; I'll be writing code that more directly reflects the actual important logic.
I think that a smile should never be forced, for two reasons.

1. I want to find people who are genuinely passionate about what they do.

2. If people are truly unhappy not being o.k with that, and not faking it may bring attention to a problem they or society faces. This may help highlight, and could lead to solutions. Do not go silent.
Narrative Legos with Ken Levine – GDC 2014
Carbanak Ring Steals $1B from Banks
How to Establish Yourself as a Recognized Thought-Leader on Twitter in 3 Months
The NYTimes could be worth $19bn instead of $2bn
All we need to worry about is the brain. We could just grow headless clones and do brain transplants to fix everything else.

And soon after that we will be able to replace the brain too. Whether uploading to a computer, or adding so many artificial neurons, only a small part of you is still biological.
I build a bunch of small web apps with a pretty diverse range of stacks. I like Dokku because it lets me deploy the apps in a uniform way regardless of what I use to build each one.

It's convenient, but Docker is likely overkill for the kinds of apps that I'm building. I don't have a compelling need to isolate them, I'm mainly taking advantage of the fact that Dokku automates the process of putting together the runtime environment and fetching the dependencies.

Dokku is reliable enough for what I'm doing, but I would frankly be reluctant to use it in production for anything that I really cared about.
Now I'm horrified too.
Good find! The goal was to wrap the feature engineer scripts up with a front end, so design was an after thought.
How the first brain-altering wearable is being tested
Well I don't believe we are in a computer simulation per say but I think there are certain properties that certainly make it seem like we are.

For example, I believe that conciousness can transcend to anything. We could just be some collective consciousness. When we are born we have no memory of our previous life. When we die we have no memory of our current one. So this suggest to me that it is entirely possible that we are continually living in different bodies, different animals, different entities that collectively make up reality.

For instance, I learned that even animals take drugs to get high when they are stressed. That they feel affection and love just like humans. This tells me that our conciousness is overrated. It also suggests to me that it could entirely be possible that we live in some giant cess pool of conciousness, some network of consciousness that is constantly reproducing and dying like cells.

so if our concousness lives through different bodies over time, then it is entirely possible that the current reality we live is also a transient state of being.

it scares me how I came to know this and I'm not even on drugs or have done drugs in a long time.
Sounds like your college sucked, but that doesn't make it a fair generalization.
You can host a dep/apt repo as a static list of files in S3. Did that myself before using reprepro to generate it, then pushed it up to S3. Nothing fancy, but it worked fine. Not sure where you got the idea is was more complicated.

I've also done it using apt-ftparchive using a simple script. Very bare bones, but easy enough.

Was looking at trying aptly next time I needed one. It looked interesting.

https://packages.debian.org/jessie/reprepro

https://packages.debian.org/jessie/apt-utils

https://packages.debian.org/jessie/aptly

[edit to include all links]
I"m pretty sure most banks are using RHEL or the like, rather than Debian. At least for production environments, something about about enterprise support contracts and the like.
Have you read any bad papers about quantum mechanics by philosophers? You're playing the hard-headed empiricist here, so don't just speculate -- show us the data.

The philosophers who write about physics usually have some training in it besides their philosophy education.
You should check out reprepro [1]. The configuration is really easy compared to other solutions [2], and once you've set it up, it's just one command to add or remove packages. The hardest part is generating a GPG key.

One note: it's not quite true that you can't throw it on S3 -- they're just static files. This is how the mirroring infrastructure works, after all.

If you have questions about setting up an apt repo, feel free to reach out!

[1] http://mirrorer.alioth.debian.org/

[2] https://github.com/ocf/puppet/tree/master/modules/ocf_apt is an example
Interesting that they feel the need to specify which problem this number is an upper bound for...
Linear algebra comes up all the time in advanced courses. Certainly in graphics, but also if you do any machine learning, optimization, probabilistic algorithms, any sort of scientific computation. I never took a linear algebra course, convincing myself that I could just pick it up as I went along and getting into grad level computer science courses was ultimately a rather painful experience because of this. If I were you, I'd try to take it seriously and really try to develop an intuitive feel for linear algebra because (depending on what courses you want to take), it can really save you time and headaches in the future.
Yeah the problem is getting to that point. Check out the docs on setting up an apt repo: https://wiki.debian.org/HowToSetupADebianRepository Good luck figuring out the easy way of using reprepro and S3 from that page.
We could be living in a multi-verse world. That's partly what the LHC experiments are trying to discern. If there are infinitely many universes then I think it would make it less likely we're in a simulation even if we are able to create our own simulation.
Vaporware is a pretty harsh way to describe it. If everything went perfectly for the Mill team, they'd still not be shipping physical CPUs - it's an outrageously long and complex process. Giving them the benefit of the doubt for now doesn't seem unreasonable.
Yes, but reboot the computer - updates are available.
:)
I really like this comment. There is a deepness in our lives that everyone can feel, a love that transcends everything. Such a thing can't be simulated.
Apple will Not buy Tesla for $75b in 18 months
Sure. I work in ML, in industry. Singular value decomposition and related methods are huge. Understanding basis vectors. Most of the notation I use every day. The intuitive understanding of linear algebra and ability to read papers that rely on it. a lot of ML relies on understanding data as points in high dimensional space.

a lot of the stuff you're mentioning is required for what I'd consider the really interesting topics in CS, stuff like ML, operations research, scientific computing.
No: http://www.tjradcliffe.com/?p=1220

Or if we are, the universe simulating us has completely different physics from the one we live in, which have to be fully specified before the "argument" becomes remotely plausible.
Related to that is Tetration, which can be expressed with complex numbers resulting in some beautiful fractal graphs: https://en.wikipedia.org/wiki/Tetration#Extensions
Not so sure about that, two out of the three SSDs I first used where Intel's second generation.. two of them went bad about a year in... I've used Corsair, Crucial and Samsung since... other than the two intels, out of about 12 drives since, I have only had one go bad (just about doa, died 2 hrs in).

It's pretty much conjecture... I will say that I was pretty disappointed in a lot of the seagate 7200 3tb drives I bought 3 years ago.. out of 12, 3 are now dead under moderate use... (I bought in different batches from different vendors for teh same model).