skysight-inc/HackerNews huggingface dataset:
I like to believe that almost all nukes aren't actively targeting anything, but I guess all my knowledge comes from documentaries and the like, so I'm not really sure. I'll concede that, probably, almost all nukes, if they were to be used, would target civilians, I just take issue with the use of "are" in your statement.

My understanding of the sequence of events was that WWII had already ended when the US dropped those two bombs, although the conflict with Japan continued in the Pacific theatre.

It seemed to make a whole lot more sense when I read that paragraph in the context of the book, so I'll concede that Pinker's definition of 'zero nukes used in conflict' is debatable.
After closing all of the big legacy industry research Labs, at the end of the Millennium, there seems to be some Kind of delayed second wave right now.

Is this really a discussion worth having? How is it different from the last one?
There are 2 ways to read your question.

1) What's the case for small investors to buy bonds, whether by buying them directly or via a bond fund? In this case, I recommend reading up on Modern Portfolio Theory and Asset Allocation or, if you just want practical information, just get a basic book like the Bogleheads guide.

Basically, since stocks are risky, investors typically hold a combination of bonds and stocks. Also, because the returns for bonds and stocks are (somewhat) uncorrelated, a portfolio with a mix of bonds and stocks can have better returns with less risk (variance) than a 100% stock portfolio. Assuming your bond and stock holdings are diversified (e.g. you buy and hold index funds), the main long-term investing decision you have to make is the % you allocate to bonds and stocks.

2) What's the case for small investors to buy individual bonds instead of just investing in a bond index fund? Well, depending on where you are, you can buy government bonds without brokerage fees, so your costs might be lower. But in that case it's harder to invest the coupons by yourself.

Of course bond returns are lower, but the risk is much lower too. In the case of short-term bonds issued by most developed countries, the risk of default is extremely small. The main risk is that unexpected inflation eats your returns.
but has this design been implemented to effectively handle something close to a million users

Obviously not. Some of his numbers are off by an order of magnitude.

E.g. he claims "10 million messages/sec" for a single redis instance.

In reality redis tops out at well under one million messages/sec; http://redis.io/topics/benchmarks

The design is almost comically bad (single source of truth for a "scalable" chat app?!). This is either an attempt at parody or this guy must be suffering from a rather severe case of second system effect...

[1] http://en.wikipedia.org/wiki/Second-system_effect
Cyber bank robbers steal $1 BILLION over two years
A note on testing private methods using C#
This is the time when you came in and could quickly scan the whats new on the internet menu on mosaic :-)
This really isn't true in any common cases. For instance web frameworks are making SQLi and CSRF, and to a lesser extent XSS, less common. When everyone was rewriting the same code in their CGIs over and over again, many of them got it wrong and opened themselves up to these attacks. While it is true that standardizing on a small number of stacks can increase the effectiveness of 0day exploits, they are not responsible for the majority of break-ins.
A few years ago i've converted some popular vim color schemes (Twilight, Wombat, Mustang,etc...) to pygments css styles: https://github.com/uraimo/pygments-vimstyles
Fairly hairy, yes, but if you follow the railroad tracks, it's quite succint for what it's doing!
Useful list. I would recommend adding one more resource for linear algebra/machine learning:

I absolutely enjoyed learning Linear Algebra from these beautiful lectures by Prof. Gilbert Strang (MIT): https://www.youtube.com/watch?v=ZK3O402wf1c&list=PLE7DDD9101...

Seriously, I gained a new found appreciation for Linear algebra after going through these lectures. You should go over some of these lectures even if you already know linear algebra - it might give you insights you never had before (it did, for me). Absolute must-watch if you are into machine learning or related areas.
List each project on a piece of paper.

Think "do I want to spend 100 hours making this into something?" Then toss a coin. Heads it dies, tails it lives. You may decide while the coin is in the air. Or when the coin lands you might say "best of three" - these are both great if they're actual choices.

Go through the list and whittle it down to at most three.

Put all the dead projects in a single document / wiki / archive under a "things I want to do eventually" heading.
You should use URL-safe base 64 encoding described in [1]. It uses `-` and `_` and should be safe for Gmail.

1: http://tools.ietf.org/html/rfc4648#section-5
A much more extensive article about this caper was published in Wired in 2012:

http://www.wired.com/2012/01/ff_ux/all/1
Deconstructing word count
and to put it into google to see if he woudl get hired today :-)
A programmer's going to jail because, as the original posting says: "Nomm also admitted that he personally downloaded copyright-infringing files from the Mega websites."

So, if you're employer is providing some sort of illegal service, you probably shouldn't use it yourself either unless you're OK with going to jail for it.
> I think the point was, if I request a password reset X times for the same email within the duration of the expiration time, there'll be X amount of valid password reset URLs that can potentially be bruteforced.

What does this have to do with whether you're storing tokens or using a hash?
"You don't know x."

"10 things you didn't know about y."

"Everything you thought you knew about z is wrong."

Am I the only one that finds titles like this completely offputting? If you think you have insight that's useful to people, try not talking down to them. As it is, hell, I may not know Javascript, but I'm certainly not clicking through.
Only somewhat. I don't agree with the sentence here, but a full analogy would be a knife-maker who made a custom knife to order for a person who they knew intended to market it as a murder weapon.
Mobile App Performance – J2ObjC vs. Xamarin vs. RoboVM vs. RubyMotion
> There are situations in which it is right to send people to prison without them posing an active and dangerous threat

Do these situations exist only when we consider punishment a valid reason for imprisonment? Don't get me wrong; Bernie Madoff being free and enjoying life wouldn't sit right with me, but you have to wonder if locking people away as retribution really benefits tax-paying, law-abiding citizens.
Can't comment on Linux, but we used to run Xenix on a 286.
You're probably safe if you don't partake in the illegal activity yourself. From the post: "Nomm also admitted that he personally downloaded copyright-infringing files from the Mega websites."

He got slapped with racketeering charges because they proved that he wasn't just "following orders" from higher-ups but actively assisting/committing criminal activity.
If the post was titled "In-depth look at Javascript" or something, I might've skip it. This title piqued my interest because I write Javascript for living for a long time and I was genuinely wondering what I don't know yet about the language.
> Who wouldn't pay $3 for this via Stripe?

A lot of people, I think. I'd guess less than 1% of those who would read it for free.
This.
I'm having a hard time to understand why he waived that hearing. Pleading guilty (basically renouncing to a fair trial to determine if he's guilty or not) is something he could have done in the Netherlands as well.
Arguably, copyright laws in the Netherlands (and in the EU as a whole) are fairer to the defendant than their US counterparts.
So where exactly would that heat come from?
The article mentions that the cars could hire programmers to improve them. Why not also let them hire drivers - that way there would be no need to wait for the technology of driverless cars to become feasible.
North Korea is missing from the infographic.

An interesting aspect: behind all those nukes, are plans of how to deploy them with maximum destructive power over an enemy, within minutes.

If you live in western city, then it is probably targeted to receive a couple of nukes.
Wonder what punishment is going to be given to HSBC and Well Fargo execs ?
No, that's something to do in a Hilary Putnam philosophy class. He's the one who announces at the beginning of the term there will be a two-part final:

A. Write a question suitable for this course.
B. Answer it.
You will be graded on both parts.
I wouldn't pay $0.10 for it.
The biggest problem with driverless cars will not be the safety technology but the people controlling them.

It's not hard to imagine a scenario where most regular cars have been outlawed or restricted in favour of safer driverless ones and bus services are replaced by fleets of self driving cars. It wouldn't be long before restrictions are be placed on the journeys for the sake of profit.

Even if the self driving cars were to stay in an individuals possession I can imagine restrictions being placed by the manufacturers or insurance companies, almost like a drm for cars.
C.I.A. Is Said to Have Bought and Destroyed Iraqi Chemical Weapons
Article quote: In court papers, Nomm agreed that the harm caused to copyright holders by the Mega Conspiracy’s criminal conduct exceeded $400 million.

Poppycock. How is a computer programmer qualified to estimate the pecuniary value of “harm caused” by the shop they're working at? What about the harm caused to Justice by farces and show trials like this?
The Puzzlebox Orbit uses the Neurosky eeg helmet. It uses 1 sensor. It mainly captures whether you squeeze your muscles in your forehead.

Its pretty poor, thanks to the eeg helmet. The helicopter is a pretty sturdy build.
Well, if you invent TCP/IP so that you can then use it to commit illegal activity, then yes, you should expect to have charges levied against you. If you don't, then you're probably fine. From the post: "Nomm also admitted that he personally downloaded copyright-infringing files from the Mega websites."

Not only did he use the service he ran to knowingly pirate things himself, but that also implies that he was aware of content illegally hosted there and did nothing to stop it. Prosecution likely proved beyond a reasonable doubt that he intentionally assisted piracy.
Spotify knows what music you're having sex to
How do I view the 20 different perspectives? Only four are available on the map that's shown after the intro.
Perl 5.20.2 is now available
It's definitely cultural, probably a combination of regulation and dairy industry history. In the Wikipedia article I link in another post this thread, Denmark just to the north consumes hardly any UHT, and Austria to the south-west consumes far less.

Micro-filtered milk lasts for a spooky long time. I've had it in tea and coffee a few days past its best before date, and it's still not soured - three weeks past purchase, IIRC.
You know what, I think you might be onto something here!

That would instantly make things less show-off and just generally motivating.

I could keep the 'apparel for entrepreneurs' within the brand, just not plaster it all over the front of the tees.
Desi classic, Punjabi folk
For me this article, as biased as it is in not noting any of the benefits of cannabis, still points towards legalisation and education as the solutions to this problem. I way prefer to smoke milder forms of pot but these are simply unavailable to me. The market is loaded with 'super skunk' and I have no idea what process I am supporting when I purchase it. If only I could walk to the store and buy a nice organic ethically produced mild weed I would be a very happy chap.
... wouldn't take random binary packages from random sites...
LHC Season 2: A stronger machine
Thank you letting me discover Leo Nefeodow's work, I'm going to get my hands on his book as soon as possible!
Obviously..

Ironically, I am in the exact same situation, having collected many ThinkPads parts, I have a dozen of drives sitting here and am just finishing pushing everything onto a ZFS NAS. Still I'd like to repurpose all these drives (web cache/proxy, DMZ, tiny cloud)
only idiots buy upgrades from the apple store (unless its soldered on RAM like in the new mbp's).
Yep, lets arrest everyone.. FOR THE CHILDREN! Everytime a case comes up you law enforcement bring up the same big scarry bad men.. Drugs, Pedophiles, and Terrorists.. GET LOST
The web was built on shaky foundations which cannot support the weight of its teeming millions.

For instance, a 51% (I cannot seem to find the study, perhaps someone else has it bookmarked) of compromises result from attacks on passwords; many of those passwords were simply guessed, because humans are neither skilled at producing random output nor remembering long, complex strings. Passwords are a poor solution, and it is the wildest dream of the information security industry to replace them, but it is a slow venture.

Security is also quite fickle. What is safe in one environment can be dangerous in another. tar has pretty solid defenses against directory traversal; you have to invoke it with options that explicitly allow files to be placed outside of your current directory, if that behavior is desired. Except wait, is there a symlink to / in that directory? Nevermind then, you can place files where you'd like. Raise your hand if you knew that.
I work for a hosting company, and we get to see quite a few hacked CMSs. The most hacked—of the popular CMSs—would be Joomla, closely followed by WordPress, and then Drupal. However the margin between Drupal and WordPress is quite big.

I can never fathom why Joomla is so popular. It's horrendous to work with. Also, the attention given to security by the majority of the plugin development community, and even Joomla's core dev team is minuscule.
Every type cannabis has been banned since its existence became known to the general public; a decision that took all of five minutes to debate in parliament. What those caring commentators are really suggesting is that cannabis users suffering from psychosis would also benefit from a little prison time. Just talking about cannabis, it seems, is enough to induce mental illness.
Plea bargains is such an odd and dangerous concept. It can be misused heavily. "This petty crime has a max sentence of 10 years, if you confess we will give you 2" may trick even innocent people into confessing.
Porter Plug – Display related HN stories right on GitHub repo page
Maybe it's a play on how horrible the language is?

E.g. "You don't know what callback hell means. You don't know the horror of refactoring a weakly typed dynamic language. You are truly blessed for you don't know JS."
I recently discovered betternet.co, at least it is free on android.
Well, I'm not really sure what it is, but sounds exciting. You should add some pictures and explanation on what you are doing.
What are your favourite sci-fi  books?
>expensive NAS solutions

A cheap case, motherboard, CPU and a little RAM can be had for well under $200. Doesn't strike me as that bad, aside from the effort required to set it up.
just 1.75m? That's nothing compared to the 300M banks lost the other day, and probably more when its all said and done.
I thought it was someone from Slack talking about their infrastructure (or similar).

Instead, it's some abstract theory. I believe everyone can dream of any architecture.
It's probably a play on the "you don't know jack" trivia game.
I had one when they were pretty new, back in 1991.

Had MS-DOS reduced to the minimum, jumping into Windows 3.1 straight after booting and using Stacker to be able to double the hard disc contents.

By the time I came to use GNU/Linux, I was already on Pentium 75 Mhz and never imagine such 386sx would ever manage it.
The Three-body Problem. It raises the bar of sci-fi literature in China.

http://www.amazon.com/The-Three-Body-Problem-Cixin-Liu/dp/07...
How many banks have been robbed now? We must be getting into near 4 or 5 digits by now. Anytime you store large amounts of money in a centralized location, people are going to go after it..

Time to be your own bank.
> Nomm agreed that the harm caused ... exceeded $400 million... group obtained at least $175 million ... Megaupload.com ... it accounted for four percent of total Internet traffic, having more than one billion total visits, 150 million registered users and 50 million daily visitors.

> Nomm admitted that he was a computer programmer ... from 2007 until his arrest in January 2012. ... he was aware that copyright-infringing content was stored on the websites ... which contained the “FBI Anti-Piracy” warning.

> Nomm also admitted that he personally downloaded copyright-infringing files from the Mega websites.

Replace megaupload with any website or service provider (Youtube, Dropbox, Gmail, Facebook) and it gets scary very quickly.
Nobody is suggesting the developer should roll their own crypto. Pretty much every language out there have mature packages for HMAC's. What you need to know are a few basic things about how to use them to verify the integrity of a message.
and did you learn anything new?
just wondering
Sergey and Larry didn't code much though. This one's hilarious:

In the book, early Google engineering boss Craig Silverstein says "I didn't trust Larry and Sergey as coders."
"I had to deal with their legacy code from the Stanford days and it had a lot of problems. They're research coders: more interested in writing code that works than code that's maintainable."
One Google engineer from back then says the most remarkable thing about the co-founders' code was that when it broke, users would see funny error message: "Whoa, horsey!"
It turns out the developers most responsible for building the Google that quickly became the Web's most powerful company are two guys you've probably never heard of.
The first is Urs Hözle. According to one early Googler quoted by Edwards, Hözle was "the key" to Google's early success.
Edwards writes, "Enough engineers sang his praises that this book could have been written entirely as a hagiography of Saint Urs, Keeper of the Blessed Code."
The second is Jeff Dean. Edwards writes that "Jeff pumped out elegant code like a champagne fountain at a wedding."
"It seemed to pour from him effortlessly in endless streams that flowed together to form sparkling programs that did remarkable things. He once wrote a two-hundred-thousand-line application to help the Centers for Disease Control manage specialized statistics for epidemiologists. It's still in use and garners more peer citations than any of the dozens of patented programs he has produced in a decade at Google. He wrote it as a summer intern in high school."
Oh, you're absolutely right, 10M/s is a mistake, which I've corrected.

Few remarks though:

- it's still way below the number of actions we're talking about here (~100k/s)

- since redis is only used as a generic MQ and not as a store, it can be sharded at the app level without the pain usually associated with redis clustering

- I've deployed a similar (but less performant) design for the player of a gaming website, which is in use in production for more than a year, and works like a charm (we're talking ~5-50k users per channel on a daily basis). This is definitely a "second-system" pattern, but I try to avoid the associated pitfalls :)

I'd be genuinely interested by your feedback!
Don't be too sad, earth is not drawn to scale :)
Some landlocked nations would be virtually unaffected but the sea level itself, though. There's also countries that have most of their main cities in the interior (Russia being one).
You spend 60 minutes on something that isn't worth $0.10 for you?
I’m afraid I have no good links for you. And if you really want to to know, you should probably have a security research firm do a survey for you. But that is probably not within the budget of a startup.
Move around, saying "West Europe" means almost nothing. You could be in Spain where your salary would max at ~40K € or you could be in the UK, where I'd expect a recent university graduate to start on £30-35K.
No, I didn't spend time on it at all. Apple does not interest me.
> my own pet programming language (we all do one, or several)

I don't. Thanks to all those that do though. Interesting thought experiment, even as a spectator.
Here is the list which contain 5 top VPN Providers, I think you should look into it too.
www.vpnranks.com/5-best-vpn-software/
You are right that something needs to be stored server side for one-time links.

In the password reset example, something is stored: The new password hash. Hence the example of including the old password hash, as a value that will be invalidated when the request has been processed.

Otherwise you need to bump a value on accessing the URL, but you still benefit by not having to create book-keeping information when creating the URL.
I don't understand. They were using a service were everyone's IPs and other data were logged and could be subpoenaed, now they're using services that add many more barriers to discovering their identity, and you consider that an improvement? What am I missing?
To quote a random article on the subject:

"What is the moral to this story? The record companies have made an entire generation of college students into criminals, and as such, those college kids have resorted to technical means of avoiding detection - which create a gigantic crowd of encrypted and obfuscated data in which 'real' criminals can hide. These evasion methods are the very same techniques which can frustrate legitimate and useful law enforcement, which as an unintended side-effect, suffer. The ability to catch genuine terrorists and child pornographers is significantly limited through the short sighted actions of the major media companies."

http://paranoia.dubfire.net/2007/03/how-riaa-and-mpaa-unknow...
learn something in something you already do as a living new in 17 minutes??? give it a day or two
And now we wait for the job ads to roll in.
"5 years experience in wake language"
Am I the only one that finds titles like this completely offputting?

No, you aren't, though FWIW I try to force myself to at least look at what's been submitted before commenting, in the spirit of not judging books by covers and all that.

In this case, I found very little to suggest that I do not, in fact, know JavaScript.

I'm also assuming that this is a very early draft of the material, but it could certainly benefit from the input of a good editor before any final publication.
Yup. The original talks were called "Advanced JS: The 'What You Need To Know' Parts" - and I'd much rather have a book with _that_ title on my desk, rather than one that makes it look like I'm reading a "...For Dummies" book.
Awesome board, looks like something I'd love to play with.

But: Currently I again and again hear things like this as a critic against Arduino, Sparkcore etc:

The current emphasis on highly integrated, dumbed down hobbyist/educational microcontrollers is beginning to bug me.

I am excited that this stuff is becoming accessible now! I loved that Lego Mindstorms brought basic automation programming into a lot of schools, I love that Arduino makes it possible for artists without a programming background to create interactive art etc.pp.

While the 1337-factor might be lower than implementing your own CPU on an FPGA and then using it to control the temperature of your coffee brewer I believe that making this stuff easier to learn can only benefit us.

(To the author: I know you probably don't mean it that way, I just often hear something along the lines of "These things are getting too easy, it's not really geeky!")