skysight-inc/HackerNews huggingface dataset:
How much transducer area do you need at the mobile device end? If you could put a flat speaker across a whole face of the device, you might have enough area. It has to be pointed more or less at the emitter, of course. I don't see this as being widely useful at longer ranges. You have to have both line of sight and alignment.
How to crack MIFARE Classic cards
It'll be better if there are checkboxes next to each permission, and if the user doesn't grant a certain permission, the app can know.

Older apps targeting older API levels will receive fake data, whereas newer apps will be able to know whether they were actually granted the permission or not.

This would prevent apps (and app developers) from being left in the dark, and would also kill the "all or nothing" permissions model currently in place.
I can say as a matter of fact that the body camera system being implemented by the LAPD works exactly as you suggest. This is one of the reasons why it's taking so long to implement. Many people don't realize how important it is for a system like this to be implemented properly the first time.
Not a bad idea - but not there are services that do this by scraping the web page (Instapaper, Readability, etc), rather than requiring a proxy.

I encourage you to check them out - maybe you can do even better.
Its like author rediscovered Survivorship bias on his own :)
Because that would bias the distribution to the corners of the cube.
> Note that the points are no longer independent of each other, hence they are no longer uniformly distributed.

This is false. Random variables can be uniform even if they are not independent.

For example, let X be uniform(0, 1), and let Y = X + 0.1 mod 1. Clearly they are not independent. Clearly X is uniform. When you realize that you could redefine the variables as Y = uniform(0, 1) and X = Y - 0.1 mod 1, then it becomes obvious that Y is also uniform.

It is a common problem to know a variable's distribution without knowing whether it is independent.
"I make my money from investing in startups, not events."

I posted this, despite it being a pitch for Jason, he's street-wise and puts his $$$ where his mouth is... integrity.
Animate Transition – Library for Transition Animations Between Blocks
Rubiks cube record beaten by a highschool student
Police often get calls about domestic disputes that require them to go inside houses. Would you want a video from inside your house to have to be made available to the public by law?
Vaastu Remedies for Health
Are You Facing the Health Problem?
You mean, have I read these books when the entire thing is put on the web? Yes.
version (Posix) {
version(OSX) {
// Weird stuff on OSX
}
// Sane stuff for Linux or FreeBSD
}
version (Windows) {
// Weird stuff for Windows
}

But think that this is processed by the compiler, not by a text pre-processor. Also, you can use your own version stuff, for example here : https://github.com/Zardoz89/nBodySim/blob/master/source/app.... there is a "PFor" version to allow to compile a version of the program that uses a parallel foreach (an N Body simulator)
Read this: http://www.lighterra.com/papers/exceptionsharmful/

There is a reason exceptions are often banned from environments and it isn't because they are awesome. They make code "exceptionally" (zing) hard to reason about.
An Adventure Through the Early Days of LucasArts
Im slightly concerned about having ~5w of beam formed ultrasound tracking my mobile phone as I clamp it against my ear to make a phone call. I will need convincing!
Since the box is anisotropic, this would not give the uniform distribution (it's more likely to draw a "diagonal" direction than a coordinate axis direction).
We are humans communicating not robots. I think the policy i stupid (see previous sentence for argument.)
The language it's itself his own preprocesor, thanks to CTFE. I think that it is what I love more of D.
> D has a package manager. C++ has none that is popular in its community. Therefore, using a third-party library is many times easier.

This comes up all the time in reference to C++. C++ doesn't need a package manager because it has excellent support from distro package managers. Most libraries are in the system package manager. And yes, sometimes you need a newer version of a package or one not quite widely-used enough to be in the system package manager, in which case you need to do compile it yourself or install it manually. But that is a problem common to all package managers and there is nothing about D which will make it any easier.
I'm just tried of the general shitty attitude towards anything security on HN.

Please catch up with the adults; we're trying very hard to solve a problem, and you're all pretending like the problem doesn't exist.
If I want to teach [...] my children in Germany on my own(homeschooling) I go to jail.

As far as I understand the legal situation in Germany (please correct me if I'm wroing), you are free to set up your own school with qualified teachers and teach your children. The law exist to ensure that all those who teach children posses teaching qualifications.
Funny I hear the same things from friends who left Austin to Pittsburgh :)

I wonder where the Pittsburghers move to when Pittsburgh's too expensive/no longer cool?
Where is ?
Sure, just like the Quest CEO who got thrown in the slammer for not cooperating with the NSA [1].

If you're big enough fish, you will be caught either with a lure or a net.

[1] http://www.washingtonpost.com/blogs/the-switch/wp/2013/09/30...
http://www.codewars.com/
How bad does a conference need to be to turn down a good speaking fee?
It's just re-reading old ground. The surface temp data has been the subject of intense scrutiny for years, starting with the competition among independent professional labs in the U.S., U.K., and Europe.

In the U.S., Anthony Watts sponsored a project for people to send in pictures of poorly sited weather stations. That started in 2007 and they collected and reviewd hundreds of reports. The ultimate outcome was that they did not find any significant difference in mean temperature trend between stations.

Richard Muller reviewed the surface temperature data and also found it to be reliable and useful, with no signs of manipulation or obvious error. In his own words:

> Three years ago I identified problems in previous climate studies that, in my mind, threw doubt on the very existence of global warming. Last year, following an intensive research effort involving a dozen scientists, I concluded that global warming was real and that the prior estimates of the rate of warming were correct.

http://www.nytimes.com/2012/07/30/opinion/the-conversion-of-...

Why would this organization re-tread old ground? Because most people don't follow the subject very closely, so the same doubts can be reinforced in the society over and over and over again, for political (not scientific) purposes.
> let the 7-figure job offers roll in.

I would know far more millionare engineers/hackers if that was actually true

> go to federal prison for 30 years

If one was talented enough to find such a vuln, it is hardly a stretch to say they would be smart enough to avoid getting caught.
FOAM, a meta-programming JavaScript framework by Google
Girlfriend's first linux install was Arch. Made her install it herself, and now she has a full KDE desktop.

It was pretty much the sign she was a keeper. :)
Which ci system to choose? circleci/Codeship/TravisCi/Jenkins?
We have a suite of bash scripts that runs all our tests, here are the specifications:

- It runs on mac (for ios-application testing and unit)

- It activate a browser (chrome/safari) for testing the web UI - https://blog.rollout.io/2015/03/how-we-automate-our-sdk-tests-to-support-delivery-to-millions-of-mobile-users/

- It runs nodejs tests on the server

- It need to integrate with selenium

- Our code base is on github

- Our deployment is on Amazon EC2

Any tips on how to choose the CI provider?
The Economist: Man who removed 47,000 instances of “comprised of” from Wikipedia
Great point, you are correct. It's not enough for the distribution of the random vectors to be rotationally symmetric. It must be isotropic, looking the same in every direction from the origin, which a cube does not. (Nor does any other method deriving from a polyhedral solid, as I was thinking might have been possible, through something like selecting a random face from an icosahedron then a random point on that face.)
http://www.nytimes.com/2013/12/08/magazine/the-dutch-elm-dis...

The article isn't particularly about the conference, but what it does mention I wouldn't consider too complimentary.
Why Indian E-Commerce closing down their mobile web platform(flipkart.com)?
If you look at myntra.com or flipkart.com they have completely shutdown their mobile website. Why is that?

Are they not able to maintain it? (They just got huge funding)

Is mobile web dying? (hyperbol)

In any case most of big companies promote their apps not the mobile web, what HN thinks about it?
I found this interesting and upvoted accordingly but I'm hoping to hear why it was submitted. Is there some context we should know about?
Could you expand on how do you use the log data ? How often do you query it, what time periods do you query, have you considered building a data warehouse for your analytics?
I doubt that's fixable.

The Spectrum's crystal was chosen for low price, not for closely matching performance (even day-to-day on the same host), so matching would require finding the hosts' CPU frequencies at that moment and compensating for the differences. Possible using the Spectronet, hardly easy.

The Spectrum was a great machine. The kind where the only way to get amazing results was amazing programming. There was no hardware to help the CPU — if you wanted to so something, you had to write code. But that's about the only nice thing I can say about the Spectrum. Build quality, suitability as musical instrument, and so on and so forth... nah.
Where I work it's 5k for some positions (or maybe even only 3k?), and about half that for most positions. I've also worked places where the rules kept shifting and/or were always overly complex, like we were doing door to door vacuum sales instead of sw development. It's one of those things I'd probably never count on getting, like performance based bonuses.
I did some hobby stuff with it. But I'm afraid that I didn't use it for real stuff. A few weeks ago I try to use it to write a tool to update our Java webservices from the latest Maven deploy (I'm afraid that I work as Java programmer :( ). Sadly I got issues with linking against std.net.curl , and I end writing a bash script for that.

I really enjoy a lot more writing on D, but I keep finding the issue that I need to interface with C++ libs for something (for example Qt 5 for an emulator GUI) or weird errors like these problem with std.net.curl on Ubuntu 14.04 . If not was for that, I would wrote the Trillek virtual computer on D.
Some ideas below in no particular order. Pick the lowest hanging fruit.

- upsell to your customers. Looks like on the average each customer pays $10 per month. Is there anything you can do to give more value to the customers and charge more. (depends completely on your business and customer profile)

- look at new customer acquisition channels - adwords, facebook, retargetting, forums sales threads, affiliates etc

- increase spending on current customer acquisition channels. If you have a good idea on your customer LTV, you can figure out how much you can afford to spend to get a single customer.

- decrease churn - if your churn rate is high, you could analyze why it is so and focus on reducing it. Apart from increasing MRR, reducing churn automatically increase customer LTV and thereby justifies higher market spend.

- increase number of plans - if you have three plans, add a fourth plan priced at 2X-5X relative to the third plan (offering something of value to customers who can afford to pay more - e.g. phone support).

- increase pricing across the board - there is no way to know whether you are undercharging without actually increasing the pricing and seeing no change in customer acquisition numbers. The largest plan in my SaaS business has gone from X to 2X over the last 6 months (in three price increments), with no customers complaining of the price being too high. I plan to keep doing this until a decent number of customers tell me that the price is indeed too high. (do remember to grandfather in existing customers)
Funny, we're running the rackspace-monitoring-agent on CoreOS like that. however we do docker pull/extract before running systemd-nspawn, if i got it right the systemd-tooling can handle docker images as they are, which would be nice.
No, OP is correct; he spoke about an isotropic normal distribution (randn as opposed to rand).
related: http://en.wikipedia.org/wiki/Bertrand_paradox_%28probability...

("choose a random chord intersecting a circle")

If someone is familiar with this kind of thing, I'd like to know a little more about the Jaynes solution described. It seems to me that if the circle were translated off to some distant portion of the plane, it would be very unlikely that any method of choosing chords would have the same distributional properties on the original circle and on the translated circle, because the chords are all originally restricted to intersect the first circle and, given two circles in a plane, there are many lines that intersect one but not both circles. Will Jaynes' method really shade the translated circle the same way it will shade the original? My intuition says the translated one should be shaded more heavily in a sort of "band" parallel to the line connecting the origins of the two circles, or possibly in a crescent pattern with more shading closer to the original.
Open Data in South Africa and Beyond and Does Diversity Matter?
apt-get install xubuntu-desktop

apt-get install kubuntu-desktop

it is as trivial as you'd think.
So... about that gold rush - how much work it takes to be good at it? Could it reliably provide OK income for someone or is it like other gold rushes?
Ask HN: Does anyone have an old computer laying around unused in Brisbane, AU?
I'm currently unemployed, broke and using a 5-year-old laptop to work on my startup. The laptop has undergone multiple emergency surgeries and is basically on life support at this stage, going into cardiac arrest every hour or so.

Does anyone happen to have an old laptop or desktop laying around unused? I'm really, really not fussy about what type of machine it is, or how many times it has traveled around the sun.
I'm in the middle of doing something similar for the Oric-1/Atmos machines, which recently gained newly designed hardware giving them gigabytes upon gigabytes of storage.. so .. what to do with it? Easy: put Wikipedia on it!
Then try "cyber-sharing" executive order. It's the same thing. They are supposed to share "vulnerabilities" and "other data" about the potential targets. Same thing with the new CISA/NPCA bills.
Yes, we can confirm that. We let you generate and run unikernels for JVM apps on AWS at https://boxfuse.com

Disclaimer: I am the founder
>"You get to truly explore who you are with a diverse group of people (race, genders, sexualities, culture, political leanings, economic backgrounds, drug habits) near your age"

Why should diversity be about everything except age? Is regimenting young people by age really doing a service?
Oh, I thought he meant the App or the Play store.. Isnt that how in app purchases work?
Link to the actual article: http://www.economist.com/blogs/prospero/2015/04/johnson-gram...
You're right, the Oric-1 was a much better machine.
> When I DID see it, tried it myself with a quick shell script that that curled and backgrounded the same request a bunch of times, I just kind of chuckled. It was a good bug

That's the problem with OWASP, when developer from a big company sees race condition for the first time and is surprised
The traditional three act structure means books and movies often start with plenty of action, pause the pace in the middle, where characters mostly talk or walk or think or remember rather than doing action stuff, and build up to a big climax with faster pacing at the end.

It's a very popular structure. But now that everyone seems to have ADHD, it's being replaced by episodic structures which end each chapter with a cliff hanger.

Episodic structure isn't new, but quite a few savvy writers have discovered it's a better fit for ebook publishing than traditional long form.
> the only nice thing I can say about the Spectrum...

A restart was always a button-press away if you messed something up. (At least the Spectrum+ had a hard reset button on the side). Not to forget that the OS and BASIC environment were in ROM and took a fraction of a second to boot.
Researchers turn phones into earthquake detectors
> Who are you

And who are you to chastise him for his chastisement? Feel free to ask who I am to chastise you for chastising him for chastising the other commenter, I do love these sorts of recursive finger-pointing discussions.
Wrote to TRAI on net neutrality? Your email address is now public
We have a persuasion-beam as well, so no problems!
What is the animal analogue in that story, where the animals are tortured, then set free to live their own lives?
I just used it to access cmyip.com, and it shows their IP without identifying it as a proxy... I tried to contact them to say that people can abuse it, but there's no way to contact them without creating an account. :( Welp.
We generally run them through central syslog servers or directly to a logstash tcp or udp input. One way or another all logs from around the world end up in an elasticsearch cluster where we either query for things manually or use kibana to interact with them. Works pretty well actually.
enh shows how much i know.

Honestly, I'm pretty excited for Rust. Having a strong proof of lifetime enforced by compiler is very compelling idea.
I use a logging library called Winston (https://github.com/winstonjs/winston). I have it hooked up to Pushbullet with Winston-Pushbullet (https://github.com/michaelmcmillan/winston-pushbullet) so that when an unhandled exception or error is thrown I get an instant notification on my Nexus 5 and MacBook.

Winston is a node/iojs library though, but I guess you could find something equivalent in any other stack. The Pushbullet part is really useful.

Edit: I run a pretty small site however (http://littlist.no). I don't think I would enable the Pushbullet part if I had several hundred thousand visitors per day.
Even if the "one-size-fits-all philosophy" about this doesn't work, it could still be regulated in a way where most of the video is public. Cop responds to a domestic issue and knocks on the door? He records himself prior to that in front of the door saying he will close the camera for that next action.

SWAT team about to enter a home or use a "no-knock" warrant? They aren't allowed to turn off the camera there. Same for the vast majority of the other police actions that happen in public.

Unfortunately, I'm sure the cops will find some loopholes to abuse this, too, and turn off the cameras when they aren't supposed to, especially if nobody ever punishes cops for such actions (which they don't), but I'd probably still take that over making all footage private by default. In many cases the cops doing bad things would still get caught because they forgot to turn off the camera or didn't think ahead to do it.
> Please catch up with the adults

The condescending attitude does not do those of us, who are making progress solving that problem, any favors.
WPKG.org currently undergoing possible attack from Great Firewall of China
This Week's Biggest News and Does Diversity in Business Matter?
> 3. I'm sorry, but you lose credibility by claiming most security reports can be qualified in a minute or less. You can certainly throw out many in a similar time frame, perhaps five minutes, but real vulnerabilities? No.

That was exactly what I was trying to convey: real vulnerabilities can easily be separated from non-issues quite quickly because the later mostly entail things which can be checked in a matter of minutes.

> You will never receive $100,000 for selling a vulnerability in PayPal. You probably couldn't even find a buyer for it on the "black market."

$100,000 may have been slightly inflated, but with a bit of creativity it isn't that hard to believe. Orchestrated correctly one could walk away with a few million dollars from exploiting such a vulnerability.

> This is all to say that I believe your outlook is not consistent with reality, with all due respect. Bug bounties are not a simple decision to make. I've seen development teams swamped, overwhelmed and jaded from the reports they receive.

Or perhaps you and I simply have experienced different realities - as I have not seen development teams swamped from them and have seen major security improvements come about as a direct result to a bug bounty program.

Of the perhaps 15-20 companies (albeit all < $1b market cap) I've spoken/worked with in regards to bug bounty programs or security in general - none of them were receiving more than a handful of reports a week which took up perhaps 2 hours of an engineer's time.
We stage stuff out.

After a week, it goes out of cache.
After a month, we no longer keep multiple copies around.
After 3 months, we gather stats from it, and push it to some tar.xz files, which we store. So its out of the database.

We can still do processing runs over it, and do... but it is no longer indexed, so they take longer.

After 3 years, the files are deleted.
Do anyone know how NASA is measuring these distances? It uses the term odometer, which implies that the distance is not calculated, but measured. Is this true?
It's kind of like security checks at airports, I am not aware that in the long history of terrorism, a single attack has been stopped at one of these security checks.
I know someone in this situation. It is sad having $100k+ debt.

That being said seems good thing the country to need fewer lawyers.

With the excess where is the $49hr lawyer available for people? I have seen some on freelancer/uwork sites for $88 but would think could lower than that.