skysight-inc/HackerNews huggingface dataset:
Growing up I lived in a town where there were hippy dealers and there were dreadlock dealers. They both got harrassed pretty evenly and the users I knew also would get stopped and issued summonses for small possession. The police would also confiscate beer in the car, etc. They were nice enough not to cite us for underage drinking, but I think the police were busy with the car thieves and guys testing out the small time illegal arms trade.

So if the police get complaints from neighbors they respond to that. If your rich neighbors tolerate your coke addiction, they don't come knocking. If you have a noisy neighbor who complains they do come knocking. Police respond very much to community complaints, from my experience with them growing up.

Whenever the police came to "bust" activities, it was mostly due to neighbors calling in "suspicious activity" I.e. Underage drinking and weed.
Imagine you are sitting in the bunker and only get some bits of data from outside world. You cannot have any other trusted source of information about these bits except from the bits themselves. And there's a plenty of reasons for someone to actively try to deceive you ("active attackers" as in "hostile environment"). You have no idea how many people are out there and how much they are connected and who is connected to you. You are just sitting in this blinded box with a radio station.

Your goal is to make sure that whatever bits you receive are exactly the same as everyone else is seeing. In other words, that it is practically impossible for an attacker to produce alternative bits satisfying your requirements and show them to someone else (and not showing to you). One way to make it is to make these bits fully predictable (like digits of Pi), but that's not useful. Another way is to implement a gigantic ever-growing proof-of-work that implements the condition of "practical impossibility". You receive some bits with such a big pile of PoW that you can be sure it's not possible for someone to quietly build an alternative bunch of bits with the same PoW and unleash it on you or anyone else.

Protein folding and proof of stake do not help with this problem. You need abstract ever-growing scarcity implemented by converting energy into a short number.

You might ask: why should we be so strict with the security requirement? Well, because history of civilization shows that people always try really hard to build hierarchies of power to manipulate property and human beings. Any system of global consensus outside of existing power structures will face huge amount of resistance and therefore must be designed from ground up to withstand it.
I flagged this for an awful clickbait headline - the article spends 3/4 of its length explaining how iterative improvements to technology work, and the final 1/4 explaining that, yes, BTC isn't perfect, has some weaknesses, and some other cryptocurrencies do certain things better.

In other news, water is wet, the sun rises in the morning, and the "death of bitcoin" has been greatly exaggerated.
Hi guys, I'm a founder at Domino Data Lab (one of the other companies mentioned in the article). I'm happy to answer questions anyone has. I can also corroborate the opinions in the thread here: many of our customers are in finance and insurance, and many of them don't want data leaving their networks at all (hence the need for an on-prem offering).
"Windows Complication Foundation" is how we called it in my team :)
I assume there will be multiple SKUs for on-package RAM capacities. Neither Intel or AMD has ever had qualms about adding more SKUs to their lineup.

It would come as no surprise if addon RAM became a feature of the higher end CPUs (e.g. i7, Xeon, Phenom, whatever)
Google's CS-First program, http://www.cs-first.com/overview , is great for this.

CS First is a free program that increases student access and exposure to computer science (CS) education through after-school, in-school, and summer programs. All clubs are run by teachers and/or community volunteers.

I'm a volunteer and I've been quite successful starting them in various schools thus far.
>Because we understand that having a revenue model leads to software that is maintained and developed more actively

This needs a huge citation. uBlock Origin is revenue free (as far as I know) and is well-maintained and arguably far better than ABP.

Anyway, most of the work is done by the maintainers of the block lists (including the community), not the software that translates those lists.
Savelist – Free price and availability tracking in every store
Came here to ask this as well.
You can't meaningfully fix something when the problem is that the core concept is flawed.
Designs, Lessons and Advice from Building Large Distributed Systems (2009) [pdf]
It isn't hard to put together low power hardware with two or more NICs, and you can then toss something like pfSense or similar on it.

The biggest challenge is whether this will impact your internet speed. If you have a faster broadband connection, you can quickly exhaust the throughput capabilities of such a limited platform. Things get significantly worse if you are relying on the router for your LAN traffic as well (i.e. you don't have a switch to offload the LAN only traffic).

With the more commercial solutions, whether for SOHO or SMB, the biggest advantage they bring to the table is the ability to utilize hardware optimizations such as offloading for checksum, TCP segmentation, and large receive.

pfSense actually has code to perform the offloading, but you have to ensure the hardware you're using is capable of performing the work.
Podcasts are coming to Spotify
Ext4: fix data corruption caused by unwritten and delayed extents
Don't they have quite a bit of oversight since they're a monetary transmitter?

What more oversight would be needed?
What they say is that a lot of their clients use Java (since most of the products have a dual Java/Scala API) and Java is not the most typesafe language there is.

Also Akka is not very typesafe, with the actors message being of the "Any" type!
Mobile Optimization Startup Taplytics (YC W14) Has Raised $2.4M in Seed Funding
Love the sheer simplicity of this answer.
you're supposed to handle disputes for ebay merchandise through ebay channels, not directly with paypal. This may have been part of the cause of difficulty.
This doesn't delve into the implementation, but does have a much deeper dive of how it all works within Postgres - http://www.depesz.com/2015/05/10/waiting-for-9-5-add-support...
Full source will be up on Github (with possible exception of any code that needs to be secure like server stuff). It will get leaked/pirated anyway, so not going to bother charging for the source.
I have always disagreed with that.

Microsoft also used stack ranking, one of the worst management practices from an employee perspective that I know about. It operates on the same principle: arbitrarily execute everyone at the bottom of the perceived bell curve.

That leads me to a translation of a quote by Stalin: "Those who cast the votes decide nothing; those who count the votes decide everything." The counting method has a greater effect upon the outcome than the actual votes.

How you measure the worth of someone may have little relation to the value they can actually provide. If you rank people by how quickly they can move 100m, and subsequently hire Carl Lewis and FloJo to manage Justin Gatlin, Tyson Gay, Mo Greene, Carmelita Jeter, and Tori Bowie, you're going to be disappointed when they try to do the same 5m 20 times, or 100m up a vertical rope, or 100m across the surface of a lake, or 100m while carrying a 50 kg backpack, or 100m across ice and snow, or 100m across a tightrope, or 100m on a flat, straight, level track, at local noon, in June, in the Sonora desert, with only 1 L of water.

So that Gates quote sounds to me a bit like begging the question, defining an "A person" as "someone Microsoft ranks well", a "B person" as "someone Microsoft ranks neutrally" and a "C person" as "someone Microsoft ranks poorly". Without establishing the ranking metrics, all he's really saying there is that Microsoft hires people with a good cultural fit for Microsoft.

That doesn't make them the best people. It makes them the best people by Microsoft's method of estimation.

There really are no 10x or 0.1x developers. The worth of the worker cannot be meaningfully separated from the conditions of the job. Someone who is 10x while working alone on his own side project may be 0.1x on a team using a management-mandated process. You can't really know ahead of time how well someone will do when thrown into your unique variety of bullshit. (And pretending that your company has no bullshit does not make it magically disappear.)
Sorry, I know you worked hard on it but this comes from real experience. We had an absolute nightmare debugging strange issues in the cache and traced it to this. Probably an older version though.
Node.js example:

return new Buffer(sig).toString('base64') == signature;

PHP example:

return hash_hmac("sha512", $string_to_verify, $shared_secret) == $signature;

Yeah, like fdomig said: timing attacks. The Python example included a mitigation. PHP includes hash_equals() and a constant time comparison in Javascript isn't difficult to write.

Possibly also, the Ruby example:

return OpenSSL::HMAC.digest('sha512', shared_secret, string_to_verify) == signature

(I don't write Ruby so I don't know if this is overloadable somewhere.)
Right, crack is illegal so they can sell guns. Are you for real?
While I agree that in programming we should break our code in logical paragraphs, just like in prose, such conventions (placing closing brackets on their own line) are detrimental for that purpose. For me this doesn't have anything to do with wasting vertical space, as it has to do with aesthetics.

I'm not really speaking for LISP, but in my projects what really bothers me are people that don't have common sense when indenting / formatting their code and so they start using IDE or build plugins, using common conventions and formatters that will never be able to understand the meaning of the code being formatted, making a total mess of other people' carefully crafted code. And we go round and round on this.
Software Engineer Front End – Jibe – NYC -full Time
How Facebook Exposes Domestic Violence Survivors
Yep, it uses SDF in the detail pass :)
"How Walt Disney Motivated His Employees?"

Weird grammar. Is this sentence structure in the title an import from EFL speakers?
> so for that month my data usage doubled because most major US carriers consider "app data" as separate usage.

Are you saying that they sent all your data to their backend servers and stripped ads there?

Or is it just that they were doing it client side, but your phone company erroneously double counted data even though it wasn't sent twice over the wireless?
Lotteries are a symptom of the problem of poor financial education. Lottery-funded scholarships are the only way a lot of kids get to college. Ban the lottery, and their parents will blow it on something else. That something else will probably not allocate most of its funding to scholarships.

edit: If this country were rational enough for the solutions proposed in replies, we wouldn't even be having this conversation.
TED is like www.edge.org combined with the recent trend of presenting ideas only in videoed live "talks" you have to sit and watch and listen to, rather than as textual documents you can peruse silently at your leisure.

It's a perfect forum for R.U. Sirius and Jaron Lanier. Not people who get shit done.
I think it's had a significant effect on the UK unemployment statistics. I'm not familiar enough with the US system.
No. A timing attack is used to determine the shared key that creates the HMAC. Because == and === (depending on the language) use memcmp(), the time of the comparison varies. EG:

36D5F4EA999342FED17D7488CB260FC92926
36D5F4EA999342FED18D7488CB260FC92926

The code would compare only up to the difference and return, indicating through the time spent analyzing the HMAC how many characters are the same. The attacker can then work the HMAC like they would a combination lock, till they reproduce the key used.

That's why a constant time comparison is so important: it leaks far less information.
I can see how it would be easy to read my post as a judgement as to whether the Snowden leaks were worth it, but I wasn't trying to make that point. If I was to rephrase my original comment using your analogy, I would say it something like this.

"The doctor who used chemotherapy to remove the cancer in America's body has caused spillover damage to other organ systems, but this course of action was only necessary because recommendations in the early stage of the disease to remove the tumor before it spread were ignored. When we ignore the warning signs early on it forces subsequent treatments to be far more indiscriminate"

Hopefully that clarifies
It's up to the programmer to decide what code/data is trusted and untrusted. So you wouldn't `eval` any S-expressions that could be submitted by a user. It's really no different in terms of security implications than any other dynamic language like Ruby, Python, Perl, PHP, Javascript...
No, this even better because it means devs would yet another group middle man to pay off just get their content to users.
Strangely that's the one area where I've always had success with WCF.
For what it's worth, here's a proof that the primes are unbounded (and hence infinite) in the proof language Metamath: http://us.metamath.org/mpegif/prmunb.html .

I would classify myself as a "proof programmer" who works with Metamath for much the same reasons as people use Coq (I just happen to prefer Metamath's set theory foundations to type theory). I find the article's claim "Set theory has sufficed as a foundation for more than a century, but it can’t readily be translated into a form that computers can use to check proofs" as outright false for this reason. Mizar is another set theory-based proof system.

If I wanted to prove x <= n -> x = 0 or x = 1 or ... or x = n, I would use http://us.metamath.org/mpegif/leloe.html to turn x <= n <-> x < n or x = n, and http://us.metamath.org/mpegif/zltlem1.html to prove x <= n-1 from x < n. Repeat until you get down to zero to get all n cases.
Aw. Amanda Palmer is fun. I liked her cover of "Making Whoopee."
Author here, happy to answer any question :)
PayPal has some serious issues with regards to what you say, but I used it last summer to transfer money from USA to Europe for my daughter and the fee was a fraction of what the bank wanted. Banks can be pretty scummy in their own way.
What are you first memories of Java?
Much better headline than WaPo ran on their version of this story.

RT: Apple, Google and 140+ tech firms urge Obama not to give police 'backdoor' access to encrypted phone data

WaPo: Tech giants don’t want Obama to give police access to encrypted phone data

Notice the difference? In WaPo's spin on it, "Tech Giants" (who are automatically unsympathetic as "giants") selfishly, or perhaps criminally, don't want Obama to let the police do their jobs. In RT's spin, "Tech firms", many of them, not just Big Search and Big iStuff, want to keep an overreaching police force from backdoor access.

I'm kind of shocked at US mainstream media's take on all the mass surveillance. Even NPR appears to tacitly approve of all of it because terrorism.
It sounds good in theory, but large websites cannot be added to the whitelist without paying. This implies to me that revenue is higher on ABP's priority list than encouraging "good" ads. If ABP really wanted to make the biggest impact they would actively encourage the largest websites to get whitelisted.

https://adblockplus.org/en/acceptable-ads-agreements#payment
Kitchen table uses no electricity to regulate the temperature of your apartment
Are you holding Snowden responsible for the New York Times' failure to properly redact documents?
Looks like AWS is HIPAA complaint at least for some services:

"Customers may use any AWS service in an account designated as a HIPAA account, but they should only process, store and transmit PHI in the HIPAA-eligible services defined in the BAA. There are six HIPAA-eligible services today, including Amazon EC2, Amazon EBS, Amazon S3, Amazon Redshift, Amazon Glacier, and Amazon Elastic Load Balancer."

http://aws.amazon.com/compliance/hipaa-compliance/

Notably, I don't see Elastic MapReduce. It seems that if you wanted to run heavy data crunching, you'd have to run you own cluster on EC2.
Totally agree with that. The key with the App Store is to get a perfect storm of PR and feature to rise above the noise at least for a few hours/days. Then it's up to the product. Without this storm, even a good product (unless it has an immediately high viral coefficient) risk oblivion.
PayPal does not consider conferences a "false positive". Small events often fail: the speakers cancel, the venue falls through, not enough people buy tickets to cover costs... if you are using incoming ticket money today for things, you are essentially taking investments, not payments. PayPal's response to this is to hold most of the money until one day after the conference, as otherwise, when your conference fails, and the attendees make a ton of chargebacks, they know they are going to not be able to get their money back and they will be out thousands of dollars.

This is not unreasonable behavior on their part, and is part of a very consistent pattern of response: they don't let you use their service to sell promises of any kind. This actually leads to PayPal being very user-focussed--essentially always protecting users from even having to think about whether something might end up stealing their money--which is actually good for those for users, and by proxy, good for those of us who use PayPal to sell legitimate products.

(FWIW, you can use PayPal to sell event tickets, but be prepared to appreciate what is happening in the mind of PayPal--which should hopefully cause you to not being unreasonable or abrasive in your communication, though even if they were being bad that isn't an excuse to get angry at them--and reach out to their underwriting department to prove you are financially solvent in a way that doesn't rely on the success of the event, and preferably also provide evidence that your event will also work.)
The laws are terribly flawed, but they do change.

For instance, up until 2010, there was a 100:1 (one hundred to one) disparity between federal criminal penalties for crack cocaine possession vs. powder cocaine possession. Crack possession also carried a mandatory minimum five-year sentence. Obama signed the Fair Sentencing Act in 2010, reducing the disparity to 18:1 and removing the mandatory minimum. The law is still influenced by the incorrect belief that crack is more dangerous than powder, but the legal system is capable of recognizing and fixing its flaws (even if the fix is partial).
I've not read about Pixar doing this, but I found it interesting that IKEA does:
http://www.cgsociety.org/index.php/CGSFeatures/CGSFeatureSpe...
Yacht harnesses waves to produce power
That's good to know too, yes, but using the nginx binary itself to test is always available, whilst a service command normally involves an init script, systemd config file or similar to be available, and they can vary between packages and distributions.
My first thought. I looked at their logo and then was expecting something in the lines of gettypesafe.com, but was pleasantly surprised that they own that domain.

Typesafe is an excellent name, and it sounds very professional for they space they're in.
And/or people aren't much interested in reading about variable names.
I want to listen to experts.

I don't believe expertise is solely the province of straight white men.

If the interviews I see are overwhelmingly with straight white men, then there is surely expertise I'm not being exposed to.

It's not complicated.
I really like the Clojure's minimalistic EDN format syntax. In comparison, Scheme and Common Lisp seem like they have superfluous parens.
The elevators are quite cool but it seems like turbolift (vertical and horizontal) in Star Trek. Still cool.
That reminds me of Neptune's Pride, which is a game that leverages latency for dramatic effect: http://np.ironhelmet.com
Netflix Needs BitTorrent Expert to Implement P2P Streaming
Rename it Datacode.
> Anyone with a large amount of Bitcoin mining capacity is implicitly incentivised to not mount an attack on the integrity of the Blockchain because doing so would probably dent confidence in Bitcoin, causing the price to drop. That would reduce the "net present value" that the miner can expect to receive going forward, likely by more than the short-term "win" they could achieve through a successful attack.

That's the argument Bitcoin advocates always use, but it oversimplifies the problem. The assumption is that no one would do this, because it is not in their long-term best interest. What it leaves out that mounting one attack of a series of attacks in quick succession may actually make it worth the costs in the short-term. This is especially true when we talk about large amounts of real assets. Furthermore, there may be malicious entities that are prepared to pay the costs just for the sake of wreaking havoc. The argument that 51% attacks cannot happen has, in fact, already been disproven since there is evidence that the GHash mining pool did perform such an attack [1]. All it takes for something like this to happen is one rogue employee in an organisation that controls enough hashing power.

[1] https://bitcointalk.org/index.php?topic=327767.0
Typesafe is a great name. Don't bring disturbance in.
Elon Musk’s Craziest Project Is Coming Closer to Reality – TIME
There's definitely a "silent majority" (and not always that silent) of good people here. If you stick to the technical posts especially, there's a good crowd.

I got most of my karma before my account was "moderated", which is California Passive Aggressive for having your posts downplaced into obscurity (also called "rankban" by some) and guaranteeing that you never have the top post, no matter how many upvotes you get (and you won't get many, often, given that your posts are insta-buried). I also deal with a slowban (5-second load times when logged in) and will often get 4-5 downvotes within minutes of each other, for which I don't know who to blame, but it's annoying.

I've kept posting out of a sense of resistance more than anything else. I refuse to be run off the board. The passive-aggressive "moderation" to my account actually backfired and kept me on the board, even as my increasingly justified sense of indignation grew.
Ah, bummer. I tested in csh too but not fish.
Look - it's really what business comes down to. Most of what seems to happen organically was actually facilitated by creating and maintaining relationships. But that's not the main point I was trying to make, rather that as developers, we need to understand the mindset of the team behind it. They think of themselves as store managers and they want to bring the apps that will do well with their users above revenue. Another point to seriously consider which I didn't incorporate in this post is that both Apple and Google will push forward apps that make use of their latest APIs in a way that they approve of, to serve as examples to other developers and increase traction of the new OS features (example: material design, Wear SDK, Apple Watch, etc.)
>>Not unlike the lottery, which the poor regularly spent their meager pittance on. Taxation of the poor as Lincoln noted.

Not sure if you're trolling. Assuming you aren't, allow me to point out that your analogy is ridiculous. Fines are mandatory: you have to pay them or you face stiffer fines, and even jail. Lottery is completely voluntary. No one is forcing them to play.
yeah, it's only for twitter users - the code is open source, added the github ribbon, so you can check what it does - just reads your tweets and discards the ones without images...