skysight-inc/HackerNews huggingface dataset:
MS responds very well to a whole range of therapies that have no proven disease modifying abilities. It is an almost perfect disease for a methodology to claim success on. The Relapsing Remitting course is variable, so people with the condition are likely to seek new treatment during worse periods, and thereafter regress to the mean. The knock on effects of the lesions in brain and spine can often be self-limiting (tiredness, pain, lack of coordination, mood changes, diminished vision), so are very conducive to placebo effects. MS can in some patients plateau and relapse rates drop off or cease (not often, but sometimes), so it is perfect for testimonials of dramatic benefits, if you don't systematically count the failures.

If you check out just about any 'alternate' modality, you'll have a very good chance of finding it claims high success on MS. In comparison, most modalities don't tend to claim success rates on amputations. Though both involve the destruction of tissues.

It's a great case study in science based medicine.

"what do you have to lose?" - in general time, often money, and a demonstrated reduced likelihood of pursuing scientifically valid treatments. The more claims of beneficial treatments adding to therapeutic noise, the harder it is for individuals to assess treatments properly. On aggregate, we're worse off for the claims of well meaning (and hucksterish) folks.

"it would be worth the inconvenience of trying it out for a few months even if the odds of success are very small." - isn't that the sales pitch of every snake oil salesman or true believer?

FWIW: I have PPMS, and I've heard literally hundreds of claims, ranging from many different (and contradictory) diets, through 'eastern medicine' to revival prayer meetings. The details of the method change, but the structure of the claims, and the way they use evidence, are remarkably similar.
how hard let's see:

-use lawyer to open up LLC as trust in Nevada as we can have those things not listed publiclally

Is FBI new at this?
Should software engineers unionize?
The continuous delivery strategy Chris Satchell brought to Nike
Then there is no noticeable cost for the rich perpetrator. The cost to him is beyond negligible even at $1,000. He can easily afford the cost of the fine, and if he chooses to steal all the time, the eventual cost of having to pay it will be a drop in the hat. This is exactly the problem with bank fines, they become costs of business, not deterrents from illegal activity.

It's like speeding tickets, a speeding ticket isn't a deterrent if you can continue to pay the cost. It simply punishes those whose marginal income is deeply affected by the cost of the ticket, in essence it deters the poor(est).

The perpetrator in your case, should be charge $500,000 because he has more than enough money to not steal. How Finland deals with speed tickets comes to mind as the correct approach:

http://www.theatlantic.com/business/archive/2015/03/finland-...
I'm not who you're replying too, but I'll try:

An assumption is reasonable if it follows logically from facts we know about the world to some conclusion. For example, cars with more features usually cost more than cars with fewer. A washing machine with a detergent dispenser and 11 different wash modes costs more than one with 3 modes and no dispenser. A thermostat that just sets the temperature and does nothing else will almost always be cheaper than one with wifi connectivity and a companion iOS app.

Based on that knowledge, its reasonable to assume that a TV with more features will cost more than one with fewer. This assumption is wrong of course, but it wasn't unreasonable.

So that means an assumption is unreasonable if there's no reason you'd make it in the first place.
Hmm, depending on the exit, on my 100/25mbps connection I tend to get about 30/10 from PIA. It isn't perfect, but it's an acceptable tradeoff for me, and I don't run all my machines through it all the time
Using D3 to visualize and link to blog posts
According to The Verge[0], Senator Wyden -- who I trust very much in these matters -- said the passage of this bill is "the most significant victory for Americans’ privacy rights in more than a decade." That gives me some hope that this bill represents actual change.

[0]: http://www.theverge.com/2015/6/2/8714651/senate-passes-usa-f...
Actually, it looks like the public key can be derived from a packet capture of SSH. See https://tools.ietf.org/html/rfc4252#section-7
PIACC – PISA for grown-ups
See the last comment on that page about this being mechanical in nature.
JavaScript: Difference between microtask and macrotask in the event loop
So, no security patches?
Tech808 is, unlike many meetings and conferences in the entrepreneurial and tech worlds, all about inclusion, where coders and UX people talk and learn from one another. This is an experience that crosses industries, generations, and personality styles. Boss UP.
A beginner is definitely not going to need assembler to ship an app. It's unlikely anyone with just a few days/weeks/months of experience will be able to touch what optimizing C/C++ compilers do.

Mandelbrot you'd do anyways easily as a pixel shader. I'd guess it's trivial to get 60 fps full screen for something like 30 iterations. Second best option is using ARM NEON. But I doubt anyone is interested seeing another useless app in any store.

Amazing performance wise on Raspberry Pi needs to be written in Videocore IV assembler. 24 Gflops there. On RPi2, you could also try NEON vector instructions, but I doubt it can hold a candle to VCIV even if using all 4 cores.

And don't forget soon ARMv7 assembler is thing of a past. 64-bit ARMv8 is rather different to code for. In a few short years only place where you'll find 32-bit CPUs are cheap microcontrollers.

But anyways, it really doesn't matter which CPU architecture is used for educational purposes. 6502 would do. Or heck, PDP-11. For most programmers, it's enough to just have some idea how things work under the hood.
Thanks! I just fixed the typo. The article looks very interesting too.
"Commercial display panels NEC" led me to this: http://www.necdisplay.com/category/large-screen-displays
I agree with you on the cryptographic point: you shouldn't (have to) expect to get cryptographic security from the secrecy of a public key, regardless of how the public key is used. My point is that there could be other reasons not to publish it, even though it's not a source of cryptographic vulnerability.

It seems to me that in crypto there are plenty of fields where the protocol designer would say "this value is nonconfidential" or "this value is not required to be kept secret" -- reasoning from the protocol's internal cryptographic security goals -- where publishing the value still has other adverse consequences. For instance, TLS session tickets per RFC 5077: "since the ticket is encrypted and the attacker does not know the secret key, a stolen ticket does not help an attacker resume a session".

But the protocol's internal security goals aren't always the only relevant security goals, and in the session tickets example, there is also a privacy sensitivity about disclosing them in some contexts because they can be used to show that a particular party was responsible for a particular TLS sessions (like if you were using Tor to access a web site but then posted the session tickets under your own name because RFC 5077 says that they don't need to be kept secret).

I think that's precisely what's happened here. If you read SSH protocol specs, they will say that public keys never need to be kept secret -- from the point of the SSH protocol's security goals. That's great, and it's a fair point. Users can still have other perfectly reasonable security reasons to request that people not publish them in particular circumstances!
I would really like to see what would be the glorious future of the "dated", and "clunky" Unix-like environment.
an interesting cookbook does not his patent trolling undo!
pdfmake was not meant to be a LaTeX replacement

If you want to print a book or a perfectly aligned article do it in LaTeX

If you have a web-application however and it prints invoices or other documents pdfmake can be a good choice and an efficient solution

People don't want to wait 2-3 seconds these days to get a simple document on their printer. With pdfmake lots of standard documents will print in less than 300 ms and... it scales - as you do everything on the client side you don't have to care about server overhead, no matter how many concurrent users you have
I wish Transatomic all the best but they have an uphill battle :( to convince a populace for whom unfortunately "nuclear power" brings up an image Homer Simpson.

aside: I think Greenpeace also has a lot to answer for with their campaign against nuclear power. Thanks to them my children can look forward to a world where a coal plant is build every week and fossil fuel fueled climate change is a certainty.
Interesting. I'd like to see someone grab all this data and then do some analysis and come up with a list of addresses that may be under surveillance.

You could probably even come up with probability data per address, based on how likely it is to be at the exact center of however-many flight paths.

Here's an example of an especially regular flight:
http://www.flightradar24.com/data/airplanes/N539MY#667fc34

It looks like they followed someone from one of those neighborhoods over to that big circled-in area just south of the Pentagon. You can even tell that whatever they followed was probably driving on I-395.
Disclaimer: I'm still stuck on FF31 for dev testing purposes (internal application targeting FF31 ESR), and haven't tried newer builds.

My biggest complaint about both Firebug and the FF Dev Tools is the way they list downloaded content files. FF Dev Tools seems to only have a flat list of filenames, which is ridiculous. Firebug has a dropdown that can be filtered by name, which helps, but is slow.

I'd always been a Firebug user, but I finally gave Chrome Dev Tools a shot a few months back and was sold by a combination of its speed and general usability. In this case, stuff like having an actual tree of content files that I can expand.

Also, to echo another comment, Firebug seems to go haywire every so often while trying to set breakpoints. Either the breakpoint symbol just spins and never actually sets, or when you reload the page it acts like you set the breakpoint on the last line of a module, etc.

Haven't yet tried out Firebug 3, as it requires FF35+.
I have read that rather lengthy article and still didn't get the reason "why not?". From the article "The amount of information an attacker would need to get right, measured in number of bits or bytes is a fairly useful measure". So yes, port knocking means one need to know more bits in order to gain access. If some one got the message, could you please provide points "why not?"
FWIW I'm surprised you got downvoted, and it wasn't me. Is privacy part of the threat model? The closest thing I could find is http://iacr.org/archive/asiacrypt2001/22480568.pdf , "Key-Privacy in Public-Key Encryption" (2001), where they conclude most RSA encryption schemes are not anonymous.

If that applies to SSH, I see no problem in asking for "public key secrecy" as a requirement/option in a layer above the crypto.
Kind of wish he'd pick up the pace a bit...
I feel as if this comment is an exemplar of Microsoft itself.
Is there any reason to assume it'd stop anyway?

If it hadn't been approved, I doubt the real outcome would've been different.
Hey all,

I actually cover this story in my book Tragic Design

(http://shop.oreilly.com/product/0636920038887.do)

In my opinion, the software bug wasn't to blame but bad user interface design. When the error occurred that caused patients to get a direct blast of 10x rad more than what were supposed to get, the error was caught and displayed. But because there were so many erroneous errors, users were used to bypassing them. I go into much more detail in the book but I thought I'd chime in here. What do you all think?
You still can: 917-ASK-NYPL
I wish they would be more up-front about the specifics of their technical proposal and how it compares to other proposals, since it was not at all obvious to me at first glance.

What I think they're actually proposing (correct me if I'm wrong): a uranium molten salt fast breeder reactor that drives a steam turbine. So, much more ambitious than what's currently on the market, with better fuel utilization. As compared to, say, the Flibe Energy/Kirk Sorensen/LFTR crowd, it's mixed: it sounds like these folks have some new innovations around moderators and salts, and the stuff about consuming existing waste is compelling, but they're sticking with a uranium fuel cycle rather than thorium (though it sounds like they're getting proliferation resistance in other ways), and they're sticking with a steam turbine vs. proposed gas turbines that could yield some more efficiency and compactness in proposed thorium MSR designs.

EDIT: looks like I might have been wrong about the neutron temperature; their white paper says thermal, not fast.

EDIT 2: the white paper actually has all kinds of great stuff in it, now that I've read the rest: http://www.transatomicpower.com/wp-content/uploads/2015/04/t... ... In particular, it sounds like this is the first planned design, but they offer some potential future variations. They say this design could be adapted to Thorium fairly straightforwardly, but advocate uranium at least initially because of advantages in the existence of a supply chain around it and the availability of uranium spent nuclear fuel. They also mention Brayton cycle gas turbines as a possible future improvement, among others.
No. Bulk metadata collection will continue, but is in the custody of the telecom companies. The only obstacle to NSA running amok through the data is having to say "please" to the telecom companies first.

AIUI, there's still no need for a warrant, and there's still no need for a specific individual as target.

Nothing was reined in, it was just shuffled around a bit.
I keep hearing this, but the fact is that both companies continue to use Scala for core functions. There are plenty of Scala jobs out there.
SEEKING WORK: Seattle / Remote

I'm potentially leaving a full time gig and looking for a short term contract.

I'm a devops / systems engineer with a ton of AWS and puppet experience. My main responsibilities of late have been migrating huge production applications out of a traditional hand built datacenter environment into a fully automated and autoscaled AWS environment, as well as being a lead on the architecture of brand new environments for new projects.

I am largely self managed and independent, and I pride myself on thorough information discovery prior to building anything. I also complete projects with excellent documentation.

Some bullet points:

- 12 year career in building and supporting production web applications

- 8 years experience on AWS

- 3 years experience with puppet

- Wearing a developer hat, I have also built production stable applications in rails, php, and nodejs

- At my current job, I am a lead engineer on supporting our flagship products supporting $100MM+ revenue

- In 3 years I have built, automated, and/or maintained upwards of 110 separate production environments

- In general, I don't maintain an ego, I don't add risk by way of over-confident planning, and I am huge on transparency and documentation.

That's a brief introduction. Contact me if this sounds like what you are looking for and I can send you a resume. I'm interested in finding the right fit, where I can jump in and quickly start adding value.

jdvogt+hn@gmail.com
There is no reason to make this assumption (about smart TVs costing less) in the first place. You can retroactively justify anything by twisting and cherry picking facts. A product with more features may cost more if it costs more to produce or customers are willing to pay more for it because they see it as more valuable. Neither of those applies to smart TVs.
High Thread Counts and Slow Process Maps
Is it possible to have side-by-side installs of the current stable release as well as developer edition?
There's some significant sense to what you're talking about, so I'll share some pointers into deeper waters.

The idea of a value being a type is the nature of "dependently typed" languages. However, they do it the other way around: types are merely values. This is very similar to what you're saying except DT languages would not have that

5 : 5

Instead, we introduce the idea of a singleton type. It works like this: for any type A and any value (x : A), we have a type (Sing A x) with exactly one value, (TheSing x : Sing A x).

The other thing to keep in mind is that subtyping is kind of a rocky place to lay your type semantics. This is rough because most people are used to subtyping in their types. Instead, we note that whenever we have that (A :> B) then we have a function (A -> B) which is injective (really, an "epimorphism"). This broaden's our view to consider any injective function between types instead of merely some subtyping relation. Immediately it ought to be clear that (a) this is intractable automatically and (b) it's far more rich. Then it turns out that subtyping itself is fairly intractable (which subtypes are the right ones? there are many types intermediate between (Sing Integer 5) and (Integer)).

So throw away automatic subsumption and require explicit coercions. This is workable and indeed in use today.
Or bots who subscribe to Twitter feeds and open trades based on sentiment
SEEKING WORK (Remote, Greater New York Area)

Technologies: Graph Databases, Amazon Web Services, Elasticsearch, Google Bigtable/BigQuery, AWS Redshift, AWS DynamoDB, Talend, Tableau, Nutch, AWS Kinesis, Storm, Python, Machine Learning, Predictive Analytics

Résumé/CV: https://dl.dropboxusercontent.com/u/9893126/tomgriffin-resum...

Email: tom@thegrif.net

LinkedIn: http://www.linkedin.com/in/tomgriffin

Background: Most recently held the position of Director of Innovation for IEEE (Institute of Electrical and Electronics Engineers). Ran the company's skunkworks program. Career progression is a blend of business analysis, enterprise architecture, user experience design, and innovation/r&d management. Often cast as a utility player.

Looking For: Full-time and freelance assignments focused on product design, prototype development, UX, and experimentation with emerging tech.
We saw some performance issues with Intel's DC S3500 firmware. But they were able to fix them without too much hassle.
> Waiting it out is not an option.

The last time we "had to" intervene in the Middle East because "waiting it out is not an option", we generated the conditions giving rise to the Islamic State.

Perhaps we need to consider more than whether there is something we don't like going on in the region, but also whether we have a the capability to actually execute something that has net positive result, when considering the social/political impacts of our involvement, including the reactions of people in the region to the US specifically acting in the region, given our historical and current involvement with regional actors.

Everytime the US acts in the region, it promotes, rather than reduces, anti-western Islamic extremism. There's lots of obvious and subtle reasons for that (the least subtle being the convenient propaganda magnet for extremist groups that our involvement with Israel, combined with the Israel/Palestine conflict, combined with pretty much any of the inevitable accidents of war -- and even worse, any actual abuses by US troops, whether as policy or by rogue bad actors -- provide.)
“Redistricting with growth” –structuring and defining roles for junior employees
Apple’s Tim Cook Delivers Blistering Speech on Encryption, Privacy
I'm the founder of AmbitionTrek. just wanted to say that the site is in its prototype phase & I'm just looking for feedback/opinions. Don't forget to click the "view our journey" tab as well to see the journey of AmbitionTrek. Thanks in advance!
I wish it had put "book excerpt" in the HN header because I was looking for the rest of the article when I got to the bottom. Not satisfying.
From what I could gather, is that because most port knocking examples use 3 port sequences, that boils down to 3 Unicode characters. Likening that to a password, I think he's saying putting a layer of security in front of SSH, protected only by a 3 character password, is not a great idea, and that he's seen slow brute force attacks that seem to be able to overcome such things.

(Edit: For what it's worth, when I tried out knockd, it supported arbritrary port sequences, so you could easily have a 16 port sequence, making it as robust as you want. Timing however, was quite a pain. I had to use specific timeouts (relative to the RTT time from my network to my VPS), and manually enter each port in the sequence).

Personally, I've found that whitelisting IP's for SSH access, as well as a default block-all policy, disabled root login, and Key authentication have been enough to keep people out of my VPS.

Sure, seeing all of the denied traffic in the logs is annoying, but there's not much you can do about that (other than not log it).
Just to back this up, the NYT has been incredibly biased over and over and over and should not be treated as a reliable source of news.
It merely exploits some fundamental differences on how humans operate between two markets and turns that into real-time information for me on which I can make trade decisions.

This isn't stocks, shares, futures etc for ref either.

I don't want to say any more nor post any code as it's unique and a good earner at the moment.
I don't believe there's much causation between SK's infrastructure and the kind of software they make. What they described in the article - horizontally integrated apps, cluttered websites, higher adoption of online payments and a well developed delivery culture are common all across SE Asia, including China which until recently had pretty bad internet infrastructure (and it's still not good).

This nature of SE Asian tech has been there for a while. It seems like they are generally faster at adopting technologies that have been validated somewhere else but perhaps not widely adopted.

There's definitely lessons to be learnt but I think they're sociological.

EDIT: "information-dense" is perhaps more accurate than "cluttered"
Thank you very much for this, it is concise yet thorough. I'm going to use this link as a boilerplate reply.
Meeker, tell us something we don’t know: boring truths of 2015’s Internet report
A reasonable question.

Only ones that affect the network surface footprint, so none here as it's on a private VLAN.
That'll never happen. Congressmen and senators would then not be able to say "...and my opponent voted against the America Awesome Act..." in the next election.
Not sure why this gets downvoted - the NYT has a terrible track record reporting about issues like this so it's a fair point.
X11, KDE, GNOME, GCC, Emacs, Mozilla? Any huge project I guess. The GNU command line tools are not as lean as the BSD ones but so what?
My wish for where Swift goes next: polishing rough edges.

1. Get experts to improve the tutorials and classes.

-- This year I especially want to thank Ray Wenderlich (http://www.raywenderlich.com) for his clear tutorials and Rob Rix (https://github.com/robrix) for his focused classes.

2. Do spring cleaning on incompatibilities in Swift vs. Obj-C vs. Foundation, such as incompatible types that require casting, or bridging, or different semantics.

-- For most iOS code that I personally write, I value readable Swift syntax even more than fast toll-free bridging to Obj-C and CF. For examples, look at ints and strings.

3. Create some kind of dependency manager, to make it easier to have a Swift code that uses other Swift codebase.

-- The current approaches are Xcode project embedding, Carthage, and Cocoapods; this past year all of them have had struggles.
By all accounts (to which you can add mine if you like), that cookbook is a pretty incredible accomplishment.