skysight-inc/HackerNews huggingface dataset:
Well I personally know a physics teacher who does extreme physical experiments using dry ice and liquid nitrogen. One simple experiment is pouring really little amount of liquid nitrogen into a 0.5l coke bottle then wait. We stood away from the bottle (~10m) and let it explode. It is really loud when it bangs, otherwise it's a safe experiment (of course it's done outside and you really shouldn't hold it in your hand).

What's the weak point of a thermos? It's definitely the cap. I think leaving it alone would have just sent the cap flying, it could have been safely done in a park.
I don't know about the US situation, but in Europe, the investors who go to these events tend to be non-savvy local angels.

Actually, a better way to describe them might be "hobby investors": moderately wealthy people who are thinking about putting this year's vacation money into a startup instead. In exchange for something meaningless like 20k€, they'll want to meddle in the company's strategy and expect regular reports. It's fun -- like playing "The Startup Sims" with real people!

If the hobby investor is well-connected, that can actually be useful. But in the typical case they're probably not the kind of investor that any startup would want, given the choice.
We use this at my startup. There's a lot of tools that support pushing to logstash in addition, logstash can parse any on disk log file. It's very useful especially for clustered applications that span multiple servers (since a single user session should be even spread out due to load balancing).
Curious: how much damage could this have done if it actually exploded? What kind of forces are we talking about here?
"The US and Europe is more forested now than it was 100 years ago"

source? (hope it's not your ass)
> Further the techniques to improve computer chess programs are brilliant, but they aren't techniques that lend themselves to domains of intelligence beyond chess.

I beg to differ. MiniMax for instance is a technique that has wide application outside of chess, as do alpha/beta pruning and other optimization strategies.

Chess as a game has advanced computer science considerably. Did you know that the first computer program was a chess program? It was played by having rooms full of people work through the code in order to compute the next move.
Who is adopting Robos?
React Native Fundamentals: A Free Video Course
I'm not doing anything to prevent unsophisticated investors from making poor choices with their money.

However I do not wish to contribute to making their misfortune even worse than it would otherwise be.
Python programming for Arduino
updates generally require a daemon restart (and in this case perhaps a container restart), if you couple it with requisite mounts, the whole machinery has to care for mounts, upgrades and restarts altogether

I suspect it could be hacked somehow with service files, too

This is particularly significant if you use something like btrfs snapshots with a base mount and child mounts, or overlayfs and invalidate inodes during upgrades, instead of a dumb-ish "yum upgrade/apt-get upgrade/etc"

The main difference is that in this case the update is at the mount / container level when propagated from the base image.

Some (most) others also do that with image versions and a full image swap.
Hello, "European superiority complex", really? Please, come on! First of all, superior wrt to whom? And, especially, you use again "European" after my comments about the lack of a European culture? Oh dear, we're entering an infinite loop :-)
Ask HN: How much do you care about security while building an MVP?
I'm in a situation in which I have to decide between security of the application and shipping fast. The idea that we're working is not yet evaluated but we believe it has the potential to go viral. What would be the ideal thing to do here, build the product perfectly or to ship fast and fix later?
No Misbehaving / No Eve Teasing (Stripped)
Yeah, thinking about it some more, "wondering what I would have done" quickly turned into "wondering whether I'd still have hands or a face right now." Scary stuff.
Or you let the cops know that unexpectedly missing footage will be interpreted as strongly confirming of accusations against them.

And then back that up with career advancement metrics designed to motivate individual cops to ensure their camera gear is working and reliable. Missing 2% of your bodycam footage a week without having made a documented effort to get it repaired/replaced is a warnable offence. Missing more than 5% you get your pay docked. Miss 5% more than twice in a calendar year is a sackable offence. Any claims made in court about events that happen while your bodycam footage is unavailable remove your usual police department protection, and expose you to civil suits that you're normally shielded from. If a civil suit rules that "in the balance of probabilities" you were wrong, you become personally exposed to damages.

As the law & order types love to say "If you're not doing anything wrong, you've got nothing to fear." It cuts both ways.
That there was a continuous stream of small bubbles (as opposed to one gigantic one) suggests that the failure mode was a leak, not an explosion. Still, I would have been scared.
Regarding Europe: http://www.washingtonpost.com/blogs/worldviews/wp/2014/12/04...
Having slower individual components running at ridiculously low power is a valid optimization because it allows very close packing of those components and levels of interconnection that we can only dream of in our designed systems.

The optimization is a subtle one but extremely powerful, and it will be a while before we can pack equivalent computational power in something of similar size and power requirements.

Think about the amount of hardware required to simulate a cat brain at reduced speed, then think about the amount of hardware in a cat brain.
As an upside they get a real choice of programming languages (unlike "Open" Web).
I hadn't heard from him either, they are very nice.
You have to read each comic two or three times before you get it. Thanks.
Reminds me a bit of the Spanish photograper Chema Madoz
http://www.chemamadoz.com/a.html
Featured on Tim Cook’s Keynote – What It Takes
> What is needed is law school graduate employment numbers broken down by undergrad degree.

It's too easy to game these numbers if law schools give their grads little temporary (not necessarily temp) jobs right out of school and then lay them off soon after, once the statistics stop following those people.
Because many (most?) of the classes of people most victimised by police are in no financial position to instigate a court case just to find out if the cops bodycam footage show him beating/tasing their son/father/brother.
> Canadians colloquially use "North America" to mean the USA + Canada, leaving out Central American countries.

Just for the record, this doesn't shock me. While Americas are geologically two, I've always been taught about North, Central an South America from a geopolitical point of view.
>That was exactly what I was trying to convey: real vulnerabilities can easily be separated from non-issues quite quickly because the later mostly entail things which can be checked in a matter of minutes.

What about the non-issues that are reported with complicated conditions but don't actually work? Just because you can throw out the obviously bad items doesn't mean the rest are real.

>Orchestrated correctly one could walk away with a few million dollars from exploiting such a vulnerability.

Exploiting it is rather different from selling it, though, right? And since a vuln in a website can literally be closed immediately, and PayPal's got whole divisions dedicated to preventing and undoing the damage you can do even with "account takeover", it'd be rather much a risk to pay someone cash for a vulnerability. At the first slip, the value drops to $0. Plus all the issues of verifying the bug and establishing trust for both parties. Seems rather difficult.
Audi just created diesel fuel from air and water
I track them via the analytics event tracking API. It is really useful and full of surprises when you look at the stats:

https://news.ycombinator.com/item?id=9444862
Interestingly, from the Wikipedia page:

> The patent covering the neotame molecule in the US, 5,480,668,[10] was originally set to expire 7 November 2012, but was extended 973 days by the U.S. Patent and Trademark Office. The patent is now set to expire 8 July 2015.

Give Animats comment below about how Sucralose is being manufactured more now that its patent has expired it will be interesting to see what happens once Neotame's patent expires later this year.
Without specifying the amount of time that is not a contribution, it could be a few years or it could be untold millennia.
We use elmah (https://code.google.com/p/elmah/) for logging our ASP.NET/MVC apps.

It works well for us, nice accessible UI if you need it and a solid database behind it. Also RSS/Email alerts if you need it. We've got thousands of entries in there and even on the old SQL2005 box we use, it seems to work just fine.
A quick observation from an outsider: The article goes into a lot of depth, seems highly technical, well crafted and researched but the whole "pre-poop your pants" thing just ruins all that and makes it looks childish. I understand that not everything about development has to be serious, but I also think that aligning form and content is the surest way to make sure your message comes across.
A gentle nudge with a nuke: deflecting Earth-bound asteroids
Oh, I was totally confused, of course the numbers in every dimension are evenly distributed, silly me - I was thinking of great circles. Thanks :)
Check the craigslist free section.
It seems to be possible to stay with sysvinit in Jessie:

http://people.skolelinux.org/pere/blog/How_to_stay_with_sysv...
Interesting, how do you know it was the actually the DOJ and not lets say Chinese or Russians using faked official looking letterhead to get a backdoor in your system.

This is just an example of how government stupidity when it comes to computer security is leading to MORE vulnerability and insecurity.

You did the right thing if dragged into court you could have rightfully pointed out that you refused for patriotic reasons since the whole thing "smelled" wrong and sounded like an attempt by foreign bodies to infiltrate your network, which would have got you into alot of trouble...

I wonder how the likes of Googles of this world response to similar requests...
That wasn't just highway, but here's a more urban setting, with pedestrian avoidance: https://www.youtube.com/watch?v=AihC5flC-38
Not specifically as a pair with that book, but I found the following books help to build some background to start on Data Science and Machine Learning:

1. Vector Calculus, Linear Algebra, and Differential Forms A Unified Approach http://www.amazon.com/Vector-Calculus-Linear-Algebra-Differe...

2. OpenIntro Statistics 2nd Edition https://www.openintro.org/stat/textbook.php
In picture:
https://www.youtube.com/watch?v=Ldgp3Ton7R4

experiment start at 3:00
That's very true (and I really wish that Lua didn't do implicit type conversion of numbers to strings --- it's a major wart on an otherwise very nice language).

I had totally forgotten that Java does it too, despite having done `""+i` lots of times as a cheap and easy and evil way to convert numbers to strings.

...I am currently rewriting a big chunk of the primary data storage to use immutable data structures, because it makes implementing Undo easier. I am having to fight the urge to redo it all in Haskell.
I mean, it's not like John Collison could turn it down. It's practically named after him.

Really, though... bad experience on the startup side != bad conference in general.
I cannot count what I have read. Growing up (6-12) I had no access to digital tech, apart from a BBC micro, no television, no comics, no games other than chess. The only available recreational activities were reading or spending time outdoors.

I did both in droves, often simultaneously, and it was bad enough that I'd often be caught reading a book under my desk in class. Mind, the school library only comprised "literature" - no kids books, Harry Potter was a gleam in jk's eye, it was Tolstoy, Homer, Proust, Euripides, Dickens, whatever a nine year old is supposed to read.

Come to think of it, reading in class was only punishable by the book being confiscated until the end of class. I remember in my miserable year of middle school in the U.S. being caught reading, and they not only confiscated the book but suspended me. It was a serious infraction in their eyes, as you were only allowed to read pre-approved books on school grounds.

Perhaps people don't read because educational systems for the most part actively discourage it. Initiatives which focus on getting kids to read more tend to be about appearances and metrics, not kids reading. They also tend to turn reading into this exotic, "other", task/chore in the minds of most due to shit like "you must read 500 words tonight" - I remember in 7th grade kids bursting into tears in response to that sort of thing, so well had their aversion therapy taken root.

Me, I'd ban kids from all except the most primitive digital technology until their teens, as well as all other sources of manufactured "fun". Reading is fun, but we have forgotten this. Now it has to be loud and sparkling and expensive, or it's just not fun for our crack-addled minds.
>If one was talented enough to find such a vuln, it is hardly a stretch to say they would be smart enough to avoid getting caught.

... This is plainly not true. First, the ease of finding a bug in a web app varies considerably. This article, for instance, was simply about resending requests quickly. It doesn't necessarily require amazing intellect to come across such a bug. Look at famous "hackers" that dicked around with querystrings and got into all sorts of fun.

Second, even if someone is smart and figures out how to solve a certain problem to gain root, it does not mean they're clever, aware, or dedicated enough to maintain opsec. One mistake, any time, and you're toast.
timber companies? If his tree bombs work this could be hugely profitable.
Ah, but some corporations are run by people with feelings. And for small corporations the situation is a bit different than for a larger one. The turning point is roughly around the time the CEO no longer knows the first name of everybody that works in the company.
TL;DR is that if medicine fails you, mindfulness is better than random chance of getting better
My approach? If the cop's camera suspiciously turns out to be "on the fritz, your honor", all the cops evidence loses it's "magic cop assumption of reliability", and they fail to establish any "balance of probability" in a purely he-said/she-said situation. (even _with_ backdated IT support ticket claims - make it in the individual cop's interest to have working, reliable gear - penalise him personally/professionally if he "lets it slide", just like he and his colleagues penalise you if you let your licence or insurance renewal "slide".)
Trivia / plug: Matthew Westcott, the creator of this project, is also the lead developer on https://wagtail.io/
Yup!

"Shoulder to shoulder" is not an exagerration either. I think it was 50-80 startups per wall - no more than 1 meter each. Like a supermarket. Totally depressing and wrong. I actually did not meet one single investor there. But of course there are one or two lucky outliers to give a testimonial. Ugh! Stay far, far away.
Pick a good shard key. In the case of a per-page-per-user ratings system, if you shard on the PageId, then you can locally check consistency to make sure there's no duplicate (PageId, UserId) keys. You can check the same if you shard on UserId, but then doing aggregates can be more difficult since you need to talk to every shard to find out a page's rating.
> Almost every C++ codebase out there vendor all dependencies. Looks like they are not using the system package manager.

Yeah, e.g. Chromium. But that was also the reason why Fedora refused to provide packages for Chromium. Distros don't like projects that include their own versions of libraries because it goes against how things are supposed to work (maintenance and, by implication, a security nightmare). I know that there are many C++ projects in the various distro package repos, and no way do 'most of them' include their own copies of dependencies.
> The research just shows that antidepressants don't have much of an effect above and beyond placebo

For mild depression. For moderate depression they're better. For severe depression they're better when you get the right one.

An evidence based therapy is always a good idea.
What Google says about your favorite Programming Language / Framework
>only truly safe way

Or put the whole thing in a transaction, right?
Why Google+ Failed, According to Google Insiders
Paradox: 1 – 1/2 and 1/3 – 1/4 and . . . = 0
How to Near Space – Tutorial on How to Launch a Weather Balloon to Stratosphere
If you don't have the cash for a computer, you can get one at very little cost, maybe even for free from an electronics recycler. Branham High School in San Jose operates one as a student club; I purchase five decent quality PCs for fifty bucks total.
Need someone to give an interview
EBay is supporting Google against the EU's antitrust probe
No. It is SaaS with an installable client. But we do have a free tier that is perfectly aligned to the AWS free tier. Also there is no lock-in per se as you give Boxfuse an app in a standard format (.jar/.war) and Boxfuse turns it into an image in a cloud native format like an AMI for AWS. All this with just a single command.
In Q1 2015, European companies raised €2.6B in 345 deals (report)
This matters because you get access to the full Verilog code for a modern CPU and a complete toolchain to boot Linux and write software. This also matters because these two vital elements (hardware and software) are coming straight from the source.

Open cores might get close to an implementation, but usually they break code compatibility or implement older versions of the architecture, which limits your ability to run (or update to) a modern Linux kernel or use a standard toolchain from established providers.
I wonder why this map don't contain Edogawa.
That city is cheapest in Tokyo Metropolitan Districts.
Unless the code is doing read-write-read. If you're using a system that doesn't reflect writes immediately (like Elasticsearch), waiting after the writes can give time for the system to flush and make the other writes visible then you can execute rollback logic.

It'd be much better to make sure you're updating the same unique key and/or use the DB's conflict resolution system.
What will you do if/when it's in the hands of 100K users, you are working as hard as you can to keep up with bug reports, and some 14 year old figures how to exploit a security hole to do something that will make everyone angry with you?

Security is really, really hard to back-patch - some would say impossible. If it's not there at the beginning then you will either never have it, or you will have to do a complete re-write.
I got a speedup of around 13,32 on a 16 core Opteron machine a few years ago, using a simple parallel foreach on a N Body problem simulator. I didn't do anything special for it.

I thought using SIMD to accelerate it more on the integrator and acceleration calculation, inside of the parallel for.
A link to the article is better in my opinion.
The easiest way I know how to do it, call rand 3 times: you get a cube -> Calculate the length of the vertex if outside of the sphere reject the sample -> Normalize. IIRC this should be well distributed, yet not fast.
> There are about 144 million active adblock users around the world.

That is a small number of people of the total Internet population.

It's a bit surprising that you think an advertiser pushing ads is a suitable source for information about ad-blocking. Obviously they're going to say that ad-blocking is prevalant and that you need to run better ads to stop people running ad-blockers and oh, we just happen to be an ad company that runs that particular type of ad.
Works fine here from Norway.
Yes. That's what I said.
This is the same kind of thinking which has not changed since 1990 when Improving the Security of Your Unix System¹ was published. It was good in 1990, but even five years later seemed to be an obsolete kind of thinking, and today seems positively archaic. If there are known security problems, they should be fixed in the operating system itself. If there are known bad defaults in software as distributed, this should be fixed by the packagers for the distributions.

All talk of "hardening" and "scanning" is symptomatic of this faulty way of thinking.

However, I fear that these kinds of things will continue to exist, for one simple reason: Running these programs and applying these fixes manually feels useful to the sysadmin. It gives the sysadmin a little boost of self-esteem, merely for, essentially, pushing a button. If instead these fixes were applied upstream, there would be no need for hardening or scanning, and the program would be useless, but this would deprive sysadmins of their free feeling of usefulness.

① http://csrc.nist.gov/publications/secpubs/curry.pdf
Linkedin Training Courses for Job Seekers
Just wondering b/c where I work, sessions are persisted to a single host (there's load balancing but cookie based persistence through Citrix netscalars). Admittedly it's not great b/c if that host goes down, user session is lost, but it does simplify matter a bit.

Do you persist sessions in some global cache (We'd use Oracle coherence at my work, but I guess you could use redis/memcache/infinispan?). Side note...does anyone have experience with Infinispan?
I guess it's a personal thing. I don't know much about Rust, but the title explained the severity of the problem pretty good right away.
an aluminum scuba tank is filled to around 3k psi; they're quite energetic if they explode

http://www.kirotv.com/news/news/dive-shop-explosion-sends-ta...

This guy died and damaged cars 100ft away from the center:

http://abcnews.go.com/US/scuba-tank-explosion-kills-iraq-war...

Now, the article says 100psi not 3k, but you'd still probably rather not be near it.
This title made my day!
But I'm not asking designers to guess what visitors will like. I'm asking designers to avoid a narrow range of colours that we know people hate.

There is no reason to use light grey text on a mid grey background for text that you want people to read.
Does the digital era herald the end of history?
I really like the title and the first sentence.
"Much existential anguish and ennui was recently triggered.."
I hope that the Rust devs end up doing the "right thing", which from this article seems like going back and fixing Rc, instead of just marking mem::forget as safe. They're still pre-1.0, and anything they do now they will be stuck with for a long, long time, especially if Rust succeeds as much as I hope it does.

Delaying 1.0 by a few weeks may seem like a big deal, but ultimately it is a self-imposed deadline. It's great to have those, but following them dogmatically might not be the best strategy. In cases like this, I generally lean towards slowing down and doing things right: otherwise you will pay the price ten times over later.

(That said, while I understand this issue, I don't know very much about the context in the Rust community, so I'm not actually sure that mem::forget should be unsafe. It was just the impression from the article and from previous Rust code I've read/written.)
Another nice thing to say was that the CPU was clocked balzingly fast for the time period.

Also it has a real actual genuine soul connected to a higher plane of existence that you communed with every time you used it.