skysight-inc/HackerNews huggingface dataset:
I'm a Packtian. We're having fun with the title, and we hope the book will help people have fun with OpenCV and learn some useful CV techniques along the way.
"Still relevant"? Not to be a dick, uh, but who or what in that article was ever relevant? The author? jMonkeyEngine? Open source (for games)? Pretty sure the answer is a resounding no to all three.

That said game devs are pretty open when it comes to open source, kinda. Were it not for fear of patent lawsuits you'd see a lot more source code released. However our careers and livelihoods rely on copyright so you'd probably also see assets under lock and key like all the Doom/Quake releases.
First, use the correct HTTP verb: POST (or possibly DELETE). Googlebot only GETs.

Also as you note, destructive changes should be authenticated, whether by Basic Auth over TLS or the more common cookie tokens.
It helps provide interesting questions.
Apple takes leap into new territory with smartwatch
Unless the online degrees can signal prestige they'll never be seen as official by employers. Traditional Employers don't actually care about what impractical academic stuff you learned. They like that "you're like me" and that's what college really serves as: the Harry potter sorting hat.

It's time we do something else though. Paying 100k just to signal to employers your socioeconomic background is bankrupting everyone.
Ask HN: Should we publish pricing?
Hello,

We are about to launch a typical simple SaaS product. It's a tool aimed for the education market. People would use this tool to create learning material. Business model is subscription based, costing about 75€ / month.

My partner and I decided to offer a free trial and not publish pricing to figure out who would be interested, but I'm really unsure if it is a good idea.

Any feedback is appreciated.
That must be CS6505 after the drop date. I joke, I think we had at least 200 people in that class, but there was a good amount who dropped.

I am guessing you are in CS6290, or one of the newer courses.
Whether or not this is acceptable depends on your threat model. If you believe your adversary might compromise or coerce the service operator, then you cannot trust in-browser encryption even if it is served over https - the code sent to you could be modified to be malicious, and you have no way to prevent or even detect that this is happening. See the Tor Freedom Hosting [0] incident for an example of how LEA already do this.

So, the inability to guarantee integrity of a web application remains a problem. TLS helps, but falls short if your adversary can MITM TLS or compromise/coerce the service operator. Web applications unfortunately make this a very convenient attack vector, since their code gets reloaded from the server so frequently and remote code execution (RCE) is trivial to achieve on the web platform (XSS, browsers are full of exploitable bugs).

[0] http://www.wired.com/2013/09/freedom-hosting-fbi/
About a decade ago I wanted to get into game development because I wanted to see more artistry in games. I thought, why try to use the technology to make things realistic, when you could make it unrealistic? I thought, there's an underground music scene, there should be an underground game dev scene.

I eventually gave up on breaking into the industry given the cost benefit analysis, but it's okay because everything I wanted to see and more came true anyway.
Last I remember the Linux distros were just using a shim to get around the secure boot stuff. In other words, something that just boots from the partition that Linux just happens to be in with no verification of what that is. If things are to be tightened then the keys for the shim would have to be revoked. Then everyone is sad. Otherwise the OpenBSD approach still works as normal with the shim.
What's kind of chilling and awful is the thinking apparently at work: "I want to get a rise out of this guy, so I'll make repeated menacing/disgusting sexual remarks about his teen daughter."

On what planet is that ok?
I suspect you're in a minority for wanting to read all those threads together. My feeling is that people usually will only read discussions that fit their expectations.

Depending on the service, the average commenter's profile will be very different. On Facebook, it's a random man-on-the-street. On Twitter, a besserwisser posing for her own followers in cryptic abbreviations. On HN, an autist who believes he deserves to be a billionaire. On Reddit, someone who lives in a basement. On G+, either a Google employee or Linus Torvalds because nobody else uses it.

Personally, I'm firmly in the autist-with-billionaire-delusions camp.
Maybe it's a resource that should only be used by people in a particular organization?
I'm not sure what you're getting at here?
It's not a purpose. It is a detection of state, however.
Use UltraDefrag.
CFA requires bachelor degree, four years of professional experience and series of exams with cumulative passing rate of 16% - so it's not just certification.
I work for vCloud Air too. Nice to see you on HN Matthew :)
If I were female and I had two superiors in my chain of command treat me the way Vic Gundotra and Rod Chavez allegedly (and IMO probably) did, I'm pretty sure I'd start to see all men as potential harassers in the same way cops start to see everyone as potential perps after dealing with a minority of scumbags.

I don't blame Kelly Ellis one bit. Don't blame the victim.

I blame these two idiots, their co-workers covering their butts, and Google HR.
> “IT’S all to do with their brains and bodies and chemicals,”

If this were true, then why is it only recently that boys are falling behind? This isn't explained by the article at all.
Unfortunately Lisbon will not have a future. No bright american, english or french will go to a city where wages are 20.000 euros per annum. No way.
Can you help me to understand victim blaming? Is it victim blaming to say someone was exercising poor risk management?

I think of taking precautions online as being like defensive driving (or any kind of risk management really). If Alice gets sideswiped on the highway because Bob was on his cell phone and didn't check his blind spot, Bob maybe gets charged with failure to maintain the lane or something like that. Doesn't Alice share some responsibility by recognizing that Bob, being on his cell phone, posed an elevated risk and managing accordingly (say by changing to a more distant lane)?
If anything, this looks very pretty.

I'm concerned with the lack of feedback about _which_ changes are staged + commited. It should be considered best practice to review what you are committing.
Glitched Art: Is Software a Whole New Animal? (2013)
Using node to wrap a few shell aliases seems preverse to me.

EDIT: I partially retract my previous judgement, the prettified and colorized output does look nice.
Authentication, POST requests and CSRF tokens, at the bare minimum.
At work yes. I was under the impression we were talking about social settings outside of work with co-workers. Since none of the scenarios from the OP appeared to have happened at work. Or at least that's the case with all the scenarios I cited in my original comment.

I don't see why compliments of one's appearance outside of work must be off limits. As long as they're not inappropriate or suggestive. It's a common courtesy in some social circles. And I'm also not against women complimenting men on their appearance, or women complimenting women or men complimenting men. I'm an equal opportunity complimenter :)

Now if they report directly to you yes I agree it's inappropriate and boundaries need to be in place. But I didn't get the impression that was the case.

And for the record I'm not talking about "cat calls". That's inappropriate in all cases.
Yes, if you want to be sure that your solution is correct, you must run the compressor yourself. Then you count the number of collisions it takes to happen upon the correct solution and feed this counter to your decompressor. But then you place the burden of solving the halting problem on yourself and then you got more serious problems than compressing random data.
Ask me anything about the implementation. I'm no expert on encryption / security so there could be holes.
They were selfish to start using the drug. The dangers of drugs are known to all, they can not claim ignorance.

On top of that addiction is no excuse to harm others by stealing or other activity. It might feel absolutely horrible not to have the drug, but it is not necessary in order to live.

Someone who is so consumed by their addiction that they have no self control left, and they steal, is someone who is not employable.

This doesn't mean they should be ignored - it's two different things. People should certainly help them, but at the same time they do not make good employees.
Hublot magic gold
You mean a website which can't be used with Chrome or even with Android itself, on any browser.
Thank you. I was about to make a similar comment. Threats are intimidation, and a form of violence.
Agreed, the fact that we even talk about a "business model" for incarceration is horrific. Indeed much of NY state is economically dependent on corrections, it's ugly.

Still, lawyers aren't getting rich defending the masses of underprivileged felons filling our prisons. Defending these folks is a pretty honorable task.
Of course! Please, use it.
Increasing Price Transparency: Implications of Consumer Price Posting for Consumers' Haggling Behavior and a Seller's Pricing Strategies

by Xubing Zhang and Bo Jiang

(Short answer: yes, post prices)
You are still stuck in the past were to start a business you need a lot of capital. It's not like that anymore. Most business these days are about services - you need an idea, not capital.
"We will start issuing the cards by the end of 2014." - well, they're late.

Also, why can't we use an Estonian embassy anywhere in the world?
What does this do that can't be done with git aliases?
I don't see anything here that you can't do with git alias, what am I missing?
Somewhat related, a UK boxer tracked down a twitter troll, and it worked.

http://bleacherreport.com/articles/1563667-boxer-curtis-wood...

Of course, this is not a practical answer as we'd have everyone driving around everyday trying to locate assholes, but I can't help but feel good about the troll being exposed as a coward. Like in those fight videos where the bully gets it. I hate watching fights, hate watching real-life violence, but the bully getting what he deserves is an exception.
Thank you dude. I really needed a good comment on HN.

I personally never had time for school, I needed to earn money and I am glad I didn't go to school/university longer. It would have been a huge waste of my time and it would have massively inhibited my professional success.
Ross, we're launching a kickstarter campaign for such a device in 2 months, that we've been working on for over 2 years. It will have a lot more features than just alerts. Wanna learn more about it?
It's not at all that dubious. Threatening to "shred her hymen" is, well, a threat. Curt didn't know this guy, and he's a father who just had someone tell them they want to rape his daughter. I'd consider that a threat too.
The reason why they provide icons for sharing is not to foster discussion but to generate pageviews. They probably have zero hopes for in-depth discussion but rather want their links spread to many places. Ad-driven websites work on pageviews, not community or quality.
To answer your question for this specific article: dump the url into the twitter search box(there is a lot of activity there and not a lot elsewhere).

Though in general people have selected to have such discussions off site because they want to talk with people within their chosen communities. To facilitate this it is not always in the best interest of the network to invite outsiders into the discussion.

Just look at Twitter for an example of what happens when you don't do anything to insulate communities from outsiders. If you post an article to have a conversation with people in your network, an influx of outside voices can just show up and make that extremely difficult or unpleasant.
Buxton's Rule
Firstly, thanks for the feedback. That sounds like a great idea, although it may be painful to implement.

I'll definitely add this to the TODO. :)
Who Spewed That Abuse? Anonymous Yik Yak App Isn’t Telling
21 tips, tricks and shortcuts to help you stay anonymous online
I am a software engineer and I no longer have friends in the city where I grew up (Coimbra), I would say that 90% of my friends are off the country working somewhere else (mainly UK and DE). Unless you want to work at a sweatshop consulting company, or a service provider, Lisbon is not the place to go.
Sorry, my bad: the line was supposed to divide between those point, not to join them.

Thanks for the comment! I fully agree that these to events are totally different (and that was kind of my point, -to separate between victims of real harassment and professional victims.)
Too many people seem to justify their disgusting and mysogynistic comments by saying "I have a right to free speech".
> Certainly you seem to be able to turn it off in most implementations I've seen, but I haven't seen any that let me add trusted keys myself. Another gray area methinks.

Which systems have you seen that have Secure Boot enabled by default and don't provide any mechanism for key management? Many vendors won't provide a UI for adding additional keys but will let you remove all existing ones and then enrol your choice - that's pretty much how the spec envisages this working.

> Let's say hypothetically that instead of being buried three menus deep, it was a physical switch, with a clear explanation about what it actually does.

And let's say that, hypothetically, hardware vendors refused to add a physical switch that would cost a few cents extra per board and have an effect on their bottom line. What then? And how do I prevent someone with brief physical access from flicking that switch and replacing my bootloader?

> Let's say hypothetically that trying to install an "untrusted" OS gave you a clear error message.

Microsoft don't have enough leverage over the firmware vendors to be able to mandate choice of language, so what you'd end up with is a variety of vendors with their own idea of what a clear error message is.

> DOJ pretends not to notice that Microsoft's secure boot initiative (if not the spec) is anti-competitive.

The number of lawyers I've found who, after having had all aspects of this explained to them, thought that Microsoft's behaviour here was anti-competitive is zero. There was a much stronger argument before Microsoft mandated that vendors provide a mechanism for performing key management and agreed to sign third party bootloaders. Now? Not so much.

> There appears to be a good market to being the go to guy for UEFI too.

I'm doing pretty well out of it. But I did pretty well out of BIOS before that, and if the market decides that Coreboot with a non-Tiano payload is the way forward then I suspect I'll be fine there as well.
How is the teenaged girl, at whom many of these menacing tweets are directed, supposed to know where these men making menacing/threatening/disgusting remarks are?

How is she to know or understand that they're not next door, or down the street?
> So when are schools going to begin grading the girls on one curve and the boys on their own?

College admissions for all the top schools already do this.
Au contraire, that's the perfect cities for startups since they bring the work with them. Why do you think Berlin is becoming the Silicon Valley of Europe? Because for a long time there were not many jobs and rents were low, making a perfect vacuum for tech companies to move into.

On the other hand Stockholm is struggling because despite world class tech talent and high salaries apartments are almost at New York level.
> It's quite possible to envision a regime in which employers do assume a responsibility for their employees.

You are essentially advocating for a form of serf-hood where the person will always be taken care of, but they can never advance.

You also seem to have this idea in mind that business owners are rich landowners. The reality is far from that. Most business constantly run right on the edge of failure. The reason for that is competition - anyone who tries to earn more is squeezed out by others.

No one wants to go back to the old days where you have the worker and the master and a worker can never become a master. Which is essentially the world you are describing.

But the flip side of this ability to advance is that each person has to be responsible for themself - their employer is no longer their patron.

We have made progress in the last 200 years since Adam Smith. Workers can advance now - all they need is a good idea. You don't need tons of capital like before.
I think you should stop speaking for others. Also, the digital nomad lifestyle appeals to me, and apparently others: https://nomadlist.com/lisbon-portugal#v=grid
Or, less cynically, because people want to share the article and having little icons there makes it easier.
Resistance Against London Tube Map Commit History (a.k.a. Git Merge Hell)
Some people don't need wages. Freelance can move there and live confortably, with customers elsewhere in Europe.. This article made me seriously think about spending a few weeks working from there.
Mons, European Capital of Culture for 2015, would like a word with you ...(just kidding)
> Would you complain if these keys were added?

Basically, yeah - it'd remove much of the legal incentive for Microsoft to sign other operating systems, and it'd fuck over the smaller distributions as a result.

I don't think anybody's happy with Microsoft being the effective industry CA here (Microsoft certainly aren't), but nobody else has shown any real interest in taking responsibility for doing it.
I suppose it takes the work of writing them away from you.
There's a difference between "freedom from legal repercussions", and "if you tweet this people all over will think you're a scumbag and maybe even a creep, and in the real world this has repercussions that don't have to involve the justice system".
It's possible, but usually prohibitively difficult. (Superfish was scandalous because made MITM attacks easier on affected computers.)

TLS and SSL use X.509 certificates[1] to identify who you're talking with. They're cryptographically signed by a Certificate Authority (CA), who must be one of a list of CAs stored on your computer.

A MITM attack requires something rather difficult, like breaking the cryptography algorithm, access to the CA's private key, access to install a new CA certificate on your computer, or an insecure CA already on your computer (like Superfish).

Edit: As jacques_chester reminded me, it's not difficult for the owner of computer to set up a MITM server, but I don't call that an "attack".

1: http://en.wikipedia.org/wiki/X.509
comex doesn't work for Google.
You dont have to work for a local company to enjoy life in a certain place. Especially when you are a programmer or similar which allows for telecommuting.
One piece that was not mentioned is the necessity of your UEFI / EFI implementation including integrated chipset driver support for talking to various devices (mass storage, USB, etc) at boot. Additionally how that can interact with legacy Option ROMs.

It also didn't cover the replacement of the BIOS VGA baseline graphical communication standard with GOP (Graphics Output Protocol) - meaning that your graphics card itself specifically needs to be compatible with UEFI / EFI to even boot.

I'm sad he took a negative stance to Apple in the article. Their implementation (of EFI) is very interesting in the choices they made and it's worth noting the differences (they do not, for instance, provide a graphical configuration choice "boot menu" like most PCs - they only provide visual boot media selection).

Another interesting thing Apple did was, prior to all Windows editions natively booting to UEFI / EFI, they still wanted to provide dual boot support for OS X and Windows on their Intel Macs. But this meant that while OS X was EFI booting and required GPT drives - Windows was BIOS booting and required MBR drives. As such, Apple used a hybrid GPT/MBR format where the partition maps in both were in synchronization and GPT reserved the areas where MBR information was stored on the drive.
> "Well, I reinvented it in the 10th grade, and the teacher said I couldn't do that."

I love when you realize these things. I had a similar moment recently when I showed some amateur set operations library I wrote for fun a couple years ago to a friend who I am teaching to program. So she's a mathematician and she pointed out that my source code was actually the exact definition of some of the set operations. Which, in retrospect is funny because what I did was try to emulate a subset of math using linked lists and predicate functions.
Read Michelle Alexander's "The New Jim Crow" for cite after cite. My copy is lent out to a friend and the internet isn't bringing up specific cases. Excellent, irrefutable and seriously depressing book.
That's actually pretty big apples and oranges, not including the difference between a relatively static VM and on-demand instances (GCE, EC2).

It's OpenVZ, not KVM so you're getting a container, not a VM. That might be better for some people, or make no difference, but it's a important distinction. You're stuck with the host's kernel. This can make distro choice/upgrade interesting. RAM overcommit on the host side is easier, etc.

You aren't buying 50GB of SSD storage. You're buying 50GB of RAID10 spinning disk with SSD cache.

No mention if 1Gbps uplink is the host's uplink or if you get 1Gbps uplink out of a link bundle on the server. Given the other things, I'd suspect host has 1 or 2 GigE connections that you're sharing. That could be a big deal if one VM can saturate a significant portion of the server's network capacity.

I'm sure it's fine for a normal blog, secondary DNS server, or something like that but once you go below ~$5/mo on low-end VM/container hosting there tend to be gotchas.
tl;dr: American goes to Portugal without knowing anything about it, realizes there's actually interesting stuff and culture in Lisbon, thinks that means it's a super special city or something.
> Therefore, for a chess enthusiast of 1981-1982, this program was groundbreaking. You could actually get a computer to play against you.

That's a really good point I guess. Maybe if I was a bit older I would be much more amazed by the feat.
His replies sounded like he was defending his family to me.
Nobody expects the Spanish Inquisition (2001)
Single words aren't too useful, because there are many ambiguities. You'd better use simple sentences.

Another thing: Be very careful about capitalization.

I just got "Sie means they". Yes. In a way.

But the "sie" that you mean is written with a lower-case "s" (unless at the beginning of a sentence, of course).

So my immediate reaction was: this must be the form of address "Sie".

Of course, had you shown "sie", the first thought would have gone towards "sie" as in "she"…

Just use sentences that resolve those ambiguities.
> Though in general people have selected to have such discussions off site because they want to talk with people within their chosen communities.

This, in a nutshell, is why the tech utopia that we imagined in the 80s never materialized. We thought that democratized publishing and having access to all information would make everyone better informed and politics would function better. But instead we just getting virtual tribes warring with one another at the edges.
In some ways, it's better to at least be cheap: Italy, where I (an American) am is not cheap any more, but it still doesn't pay well, so you feel kind of trapped in the middle.