skysight-inc/HackerNews huggingface dataset:
John Oliver explains a "corporate sovereignty" (ISDS) dispute in Australia, https://www.techdirt.com/articles/20150216/17390930032/john-...

"That's right. A company was able to sue a country over a public health measure, through an international court. How the fuck is that possible? Well, it's really a simple explanation. They did it by digging up a 1993 trade agreement between Australia and Hong Kong which had a provision that said Australia couldn't seize Hong Kong-based companies' property. So, nine months before the lawsuits started, PMI put its Australian business in the hands of its Hong Kong-based Philip Morris Asia division, and then they sued, claiming that the "seized property" in question, were the trademarks on their cigarette packages."

Another dispute, between Canada and Eli Lilly on IP, http://www.thestar.com/business/2015/02/11/canadian-reply-to...

"The Canadian government has delivered a scathing response to a $500 million lawsuit from the American pharmaceutical industry, dissecting the intellectual-property practices of the company that launched the case. .. Eli Lilly had filed for 12 separate patents between 1992 and 2004 claiming it could treat psoriasis, stuttering, incontinence, hot flashes, anxiety, learning disabilities, tic disorders and, finally, ADHD. .. “Canadian law does not grant patents for almost-inventions,” said the submission. “Even if the applicant’s speculation at the time of filing is later confirmed.”

There is a proposed US-EU equivalent of the Australia - Hong Kong arbitration panel for ISDS (Investor-State Dispute Settlement) in TTIP, http://www.computerworlduk.com/blogs/open-enterprise/ttip-up...

"So what the European Commission is proposing with the dispute resolution chapter is how future clashes with the US over those key social constructs should be resolved. And the answer is: by a three-person arbitration panel.

That is, key aspects of everyday life - the social, environmental and safety protections that have been laid down over decades or more - can be thrown out purely on the say of those three people if it is decided that they clash with TTIP. And remember: "The ruling of the arbitration panel shall be unconditionally accepted by the Parties." So if, for whatever reason, the arbitration panel says a well-established regulation protecting health and safety, or the environment, has to go, well, it has to go, even if the vast majority of the public that it will effect disagrees."
This isn't unique to Rust, in fact, as modern C++ presents the same dilemma. Here [1] is a Stack Overflow question where someone asks how to make a doubly-linked list out of smart pointers, and all the answers either involve shared_ptr or C pointers. Same pedagogical issue: you want to deemphasize the less-safe pointers (in Rust, the ones behind an "unsafe" gate; in C++, the raw C pointers) in favor of the safer abstractions, but you hit a wall when it comes to doubly-linked lists.

C++ has it easier in practical terms, I guess—few projects actually use smart pointers as pervasively as modern C++ guidelines stipulate (and they're hard-wired into the language in a couple places like operator new and this), so C pointers usually have to be taught pretty early anyway. In Rust, by contrast, unsafe pointers are considered evil things you touch only when you know you have to. But the problem is still there: it feels like something that comes with the territory of manual memory management in general.

[1]: http://stackoverflow.com/questions/15384443/doubly-linked-li...
Others have already explained it well enough, but I'll just add a few important concepts. First, if you remember nothing else, remember this: the p-value has absolutely nothing to do with the alternative hypothesis. In the context of p-values, there is no alternative hypothesis; it doesn't exist. The p-value only says anything about the relationship of your data to the null hypothesis. The second thing to keep in mind is that any null hypothesis likely has lots of assumptions built in to it, and if any of those is violated, the associated p-value is invalid. So you should always be aware of what those assumptions are, and try to verify that your data satisfied then if possible. (Almost no one does this, of course.) For example, the standard t-test assumes, among other things, that your data is normally distributed and that all groups have equal variance. If either of these assumptions is violated, the test is invalid.

Lastly, if you're in a situation where you're performing a large number of tests, always correct for multiple testing (i.e. false discovery rate or some similar method). Also, you can take advantage of your large data set to construct a negative control (e.g. by shuffling samples, the exact method will vary) and verify that your chosen statistical test gives a flat distribution of p-values, which is the expected result when all of the null hypotheses are true. If you have an excess of small p-values in the null data set, this indicates your test is producing false positives and is not reliable (presumably because one or more assumptions have been violated).
I mostly agree, but the calculation is different for different businesses.

The costs of engineering time and hiring a security professional may be much more expensive than the lost business due to breaches.

In this particular case they likely have enough resources to have made it happen, but it remains to be seen whether this will actually cost them much if anything.
My Friend Boris
Every step of the way someone says something like this

"is worth almost as much as say Marriot ... is absurd"

here's an example around the $10B valuation

http://qz.com/190432/airbnb-doesnt-even-own-a-bed-but-its-ba...

I'll just make a meta-point. The parties that are investing in AirBnb at $20B are not some retail pikers chasing a bubble. TPG for example. They're literally among the most sophisticated institutional investors in the world. I'm not going to make an appeal to authority, but I will say that dismissing parties with real expertise in a casual manner is usually poor judgement.

Furthermore, I think its almost certain that the investment research that led the teams at Fidelity and and TPG to value AirBnb at $10B+ is not 'absurd'.

So a more interesting question is 'What exactly is it that the TPG and Fidelity' see?
Tiffany Earrings Silver for Sale
Writers of educational shows try to improve the lives of their audience.
Something you can begin tomorrow - start exercising. Honestly do anything active. Running, martial arts, crossfit, ultimate frisbee, etc. - it will make you more energetic.
What's the best programming language for beginners?
Microsoft, Amazon, Google, Facebook Press WA for $40M for New UW CS Building
He runs AussieHost.com now.
Yeah, that was my first thought -- if Google registers .dev and keeps it in-house, this is good for the open web everywhere because we can all use it internally. Probably they can't say that to ICANN's face, but that sounds like it could have been a plausible intention all along.

In fact, if Google registers .dev and promises to keep it in-house, they can then tell the Chrome team that it's okay to trust self-signed certs for .dev, or something, thereby letting us all use HTTPS for development.
John Doerr: On Obama, What's Broken in Healthcare and How Entrepreneurs Can Fix It
I can't edit the original comment for some reason. Sorry for the n00bism, its my first comment here on HN.

I want to add this:
The profit of an adware company is the difference between its user acquisition cost and the revenue from the monetization phase.
As the monetization phase gets shortened by AV detection and removal, the lower the revenue gets. This cause adware vendor to adapt new methods that transitionally were associated with "more evil" malware (banking trojans): they use crypters and vulnerabilities in AVs in order to evade detection, randomly generated domain names (for the C&C, inject and publishing domains), etc.

Feel free to AMA
42 Artificial Intelligences Are Going Head to Head in 'Civilization V'
I hope tech crunch did this purely tongue in cheek, if it weren't for the likes of them, the terms they are fileting are the argot they and their industry, tech 'journalism,' pick up, amplify, popularize and abuse wouldn't become ubiquitous. Then they have the audacity to ridicule the industry.
Sure. But I've also worked at a billion dollar multinational where my boss suggested I use Airbnb in preference to what he referred to as "the shitty Hilton".
Anecdotes are worthless, sure, but even the richest of my friends would apparently stay in a luxury loft in the city that another soulless hotel chain. Airbnb does luxury as well...
Ermahgerd why do you hate bidness and jawbs...

...will be the response by many Congresspersons. Nothing will happen on this until a number of public figures are doxxed to hell and back.
I tried the same phrase, quoted, and received the exact same results.

The 6th result is the only result that actually has the phrase "history of aviation" highlighted. The other results appear to be a conjunction of pages containing "history", "of", and "aviation", in no particular order.

I understand the advanced ranking algorithms of Google are probably too much to expect of something like this, but "find all the pages containing this phrase" shouldn't be. (The query "find all the pages containing this phrase", quoted, produces http://en.wikipedia.org/wiki/Vladimir_Putin as its first result. What?)
Anybody is still using Paypal?!
"Disrupt" is suspiciously absent from this list.
DMC Corona Widget library
The certificate looks great!
Here we go again http://en.wikipedia.org/wiki/Grunge_speak
Well if you don't trust the big review sites you at least recognize bullshit when you see it. That said, my startup is trying to give an actual unbiased look at what people think about web hosting companies. It works by aggregating and analyzing twitter sentiment about all those brands you mentioned (it only works on bigger guys who get enough volume of discussion). Take a look http://www.reviewsignal.com/webhosting/compare

HostGator/BlueHost is a near identical product from the same company (EIG) and the quality is quite low. GoDaddy doesn't have that much better of a reputation but it's really hard to tell sometimes between quality of their service and people who don't like them because of what they've done in the past (sopa, elephant killing, advertising, etc). Doesn't help that they are huge either.

AWS is expensive if you're comparing it to shared hosting. They are nowhere near the same product. AWS is great if you need AWS features and are a technical person who can handle all that (or afford paying a lot for support/someone who can). The other companies are providing management/support. If you goal is installing owncloud my first question would be are you going to install/manage it or not? That generally cuts down which companies might make sense.
You mean throwing up a Meteor app with a direct db feed and no fine grained security at the server side can lead to exploits?
I searched for nothing but got suggestions for things I've searched for on Google this week. Since, for some, tracking is just as big a concern as ads, can you explain why and how that is happening? Does DeuSu now know those things or anything else about me even if that data is anonymized? If so, will that data be sold?
> The "closed generic" was not something properly anticipated by ICANN when they created the nTLD process

Really? Because its been in their FAQ on the gTLD process since before the application period opened (see questions 9.3 and 9.4) [0] Its kind of hard to argue that X wasn't "properly anticipated" by ICANN when their FAQ on the process said, approximately, "Can I do X? Sure!"

I also remember lots of discussion at the time that the process was announced and before applications were open pointing to the likelihood that many of the new gTLDs would be purchased for closed use.

[0] current: http://newgtlds.icann.org/en/applicants/customer-service/faq... ; 10 Jan 2012 version: https://web.archive.org/web/20120110192958/http://newgtlds.i...
Good to get this news out there on a Friday afternoon.
> It's not okay to have a breach. It's not. It doesn't matter how much money you saved...

If only this were true, they would be hiring security people.

Nothing is going to change until companies are held accountable for the damages caused by negligence. If someone in the infosec field wants to make a difference, I'd reckon their best bet is lobbying to make this happen.
> OK, but many people (including myself) had the opposite yet equally obvious intuition that ICANN wouldn't allow closed generic TLDs

Their FAQ on the process said they would. And lots of people made noise about it before the application process opened.
> that combined with quitting drinking and smoking, just a little bit of exercises, and a good diet reinvigorated my energy

Good on your for changing just about every bad-for-sleep habit you could possibly have. Seriously, keep it up!
I Quit
> I mean, if both methods behave the same, what is the difference?

Not much. They just optimized the yield case so its basically skips the red tape.

"As it turns out, MRI has optimized this common case, providing an entirely separate pathway, from parsing through execution, for blockless yields (it's actually a primitive in YARV, the meta-language to which Ruby is compiled at execution time). Because of this special pathway, calls to yield end up being handled by a dedicated C function in the interpreter (vm_invoke_block in vm_inshelper.c, if you're interested), and are much faster than their explicitly blocked bretheren"
shop.nordstrom.com/sr is for search results. So I guess someone linked to that search result somewhere, likely as a joke

EDIT: Looks like "porn star clothing" search also got indexed: https://www.google.ca/search?client=ubuntu&channel=fs&q=porn... (apparently someone has an edgy blog where that link is the punchline?)
Oh my... I love u man!.

I was a little late to the irc game... Only started at 12.... 18 years ago.

Loved mirc... Made tones of custom scripts

I loved serving and getting files using xdcc from my fansubbing days. I dabbled in some warez, stayed strong when irc.cjb.net came under fire of massive ddos, and jumped many nodes... Always with trusty xdcc to serve our releases before bittorent (was hosting server since initial python torrent server release too)
"Stop fucking ruining people's lives"

Serious, legit question here. How many lives will be ruined by this breach of 50k? How many lives were ruined when 40 million CCs and 70 million accounts (address, phone number , etc) were stolen in the Target breach?

Ruin seems like an awfully strong word here. I hesitate to say that because I don't want to downplay the importance of security. But to take security seriously I think we also have to be non-hyperbolic about the consequences of not doing so.
> In what sense this introduction is alternative?

Well, I wrote our existing introduction, this is a different version, that takes a fundamentally different approach: small example, high level of detail, rather than larger examples at a higher level of detail.

Your point about it being an introduction stands, but that's why it's an alternate _introduction_.
Revealed Community
Probably looked at their logs and found a lot of visits to that URL.
Dear Foolish and Gullible Americans, Net Neutrality Is Not Your Friend
agree, while it may have some technical limitations it is one of the most successful CMS's ever, and gaining in being a very successful open source program as well. I'm a bigtime WordPress user and really don't have any problems with it. Most of my websites load in under 2 seconds (with a lot of tweaking) so I really can't complain.
Why wouldn't they? I imagine there's some driver signup form that saves to some database table on their site.
It's still there for me. Maybe they use a CDN that serves different things to different locations or does caching?
I generally agree with the main thrust of your argument, but this seems way over the top. I don't know if every brick and mortar business in the world can afford to hire a dedicated security engineer. Should they all just close shop?

And if we're going by Wikipedia's definition of PII, probably at least 50% of the websites in the world. Including this one.

Maybe you don't mean all that, but if I am to take what you posted at face value, it seems insanely irrational.
Thanks! It is a bit verbose, that's what I was going with with this version. You have to explore the extremes before finding a comfortable medium, you know?

I do agree better diagrams would help, for sure. And yeah, the right hand numbers were kind of a compromise: they kept the exercises compileable without needing to mess with markup stuff, which is just a weakness of markdown :/
Also very possible. It's something I've been considering for a long time.
I'm a big supporter of free trade, but the article makes some good points. Free trade agreements where companies agree not to impose import tariffs are a simple and good way to encourage free trade. But when it comes to government regulation that might in some sense be regarded as restricting free trade, things are a lot murkier. I wonder why these free trade agreements don't just lower tariffs even further, instead of setting up this sort of agreement. E.g. Australia still has a luxury car tax, which is a barrier to free trade that could easily be removed.
I really wish I was better with front-end tech, creating those kinds of things would be awesome, but above my skill level, unfortunately :/
I do not expect I heard the word "logic" before I heard it on Star Trek. I still don't know what they meant by it (never explain, never explain... ) , but I caught something there.

If you are nerd enough :), you will have caught all you could of the interviews with Gene Roddenberry. Gene was caught genuinely by surprise that Spock was such a hit. If you look at how Nimoy played Spock in "The Menagerie", where they (rather crassly ) reuse footage from the rejected pilot, the evolution of the character is startling.

Leonard Nimoy simply hit that part and the creation of that character out of the park.

One of the things that Frank Zappa used to use to talk about the space-between-the notes in art was "put the eyebrows on it". Isn't that a Spock reference? Were there eyebrows in theater or film before Nimoy?
you may consider the following:

1. once you wake up, try to get out of your bed and do not snooze your clock.

2. figure out your sleep cycle. don't wake yourself up in deep sleeping.

3. make yourself sweat (aka exercise) especially after long hours of work. then have protein powder.

4. give yourself a 1-week vacation which you do not drink coffee at all. you are likely feel that the 1st coffee after your vacation is like a needle poking your face.

5. see a doctor (but honestly they might not know why) however you should get your blood tested and you may find out why you are so tired. maybe it is your nitrition.
Yes, it's always about the right level of abstraction. Making it clear that it's not _actually_ 0x00 would be good, but then you can get into discussions about virtual memory, and all that other stuff that you're talking about, which just muddies the point of the example. It's a fine line.
This is fun! One of the problems I notice is that pretty much always gets itself into a position where a portion of the table is off screen on mobile. Any plans to fix this?
Lol. Yeah, those were fun times. Old school IRC was basically a non stop CTF tournament. I wrote TextBox on a Linux 486 with kernel 0.99.15 I think, or maybe 1.0.x, and a shell account on a Sun SparcStation via a local ISP.

http://adam.ierymenko.name/ye_olde_source_code.html

That page has TextBox and also my first nontrivial c program, a nick collider.
> I wish I could point out -exactly why- I get this feeling, but I'd be lying.

It's hard, for sure. There are certain sentence structures that strike certain people this way, and my style sometimes triggers them. For example, "basically" has no negative connotation for me, but really gets some people going, so I've been eliminating it wherever possible. I wonder which aspect does it for you... thanks for the brain dump, this is helpful.
Leonard Nimoy: 'Star Trek' Star Dead at 83
I also find it unlikely it's just the name and license number. They used to return all of a driver's information (name, phone, address, drivers license, license plate, etc) from the rest endpoint they were using on their website. They closed that hole it after it we disclosed it to them.
hmmh... is that why Dutch people are tall? it's not because short people are selected out? If you gave a new generation of Dutch the diet/environment from 50 years ago would they revert to the height from 50 years ago? if not, why not? dumb questions no doubt but I don't really get how "inheritance by a path other than DNA" actually works, where the additional information gets stored.
I would say the entire mechanism for extensions that can interact with pages is broken.

First, taking Chrome as an example, extensions are given the permission to see, track and interact with all pages loaded in the browser. Essentially, they can inject code, but they can also directly pull data from fill-in forms and other places.

Of course, these are the things that people use extensions for, so the ability to modify pages makes sense. Take one of the original extensions that was was used to modify pages at runtime, Greasemonkey. It was designed to attach a user.css to the page, or to run a transform on the page and inject specific DOM elements. Of course, there was nothing stopping an injected piece of script for posting data to a third party, but a cursory examination of the particular Greasemonkey customization would show that immediately, and the script could be flagged and removed from the collection.

Now we have extensions that do much more than these user scripts did in Greasemonkey and are self contained and harder to break apart and study. Two examples, Feedly which is my chosen replacement for Reader, has an extension which places a Feedly icon on every page. It doesn't add it to the browser chrome but actually adds it to the DOM of every single page that loads. As similar example is a Chrome extension for managing cookies, but which had a donation function that placed links on pages to donate to the project or something of the sort. Either of these could be accomplished with a small installable transform, and neither required the extension itself to have access to the DOM, the transform script could have handled the limited functionality of enumerating RSS/ATOM links or whatever the other extension did. But both of those extensions requested the amorphous permission of modifying every page you access.

In Firefox, at least until recently, unsigned extensions could execute native code in the form of XPCOM libraries, they could modify the entire chrome and run with the same permissions as the browser itself. They could intercept not only DOM calls but low level calls in browser js files which also ran with chrome permissions.

By reading a configuration file for a unique string, or, in some cases, guessing, you could find a path where placing a zip file or directory was enough to install an extension, so these extensions rode alongside installers for applications, BHOs in Internet Explorer that also installed themselves into Firefox, and other places that would have a chance of destroying a users experience and perception of Firefox.
That is way cool!
I think you're going to need to define what a ruined life is. I doubt getting a replacement credit card in the mail will ruin someone's life under most definitions.
Yes, and basic information security involves weighing the cost of security breaches vs the cost of implementing security measures.