skysight-inc/HackerNews huggingface dataset:
It seems like you've turned some things off. One if the demo videos had a question like "What is the population if the capitol of the main that has the Space Needle?" When I tried that question tonight, it returned a Wikipedia link for Washington DC and second answer was strangely Pyongyang. Asking directly about the population of Washington DC, it gave that answer. Who is the President of the United States, returned a Wikipedia article about the (office of the) POTUS. I intended to follow that question with "How tall is he?" -- a question Google demonstrated at Google I/O 3 years ago.

"How is the weather tomorrow?" "How about Saturday?" "And Sunday?" That line of questioning worked surprisingly well.
In case one has ever wondered why the huge preponderance of drug use (particularly EPO) in endurance sports:

Pre: EPO microdosing:

I managed about 10-and-a-half minutes and a power output of 350 watts. ... score a 58 on the test, which compares favourably to the average person's 35 but rather pathetically against an elite athlete's 70+.

Post EPO microdosing:

I flew past my previous mark and hung on for more than 12 minutes and 375 watts. This gave me a score of 63, a 7% increase in seven weeks.

How on earth could clean athletes ever expect to compete, particularly given that the chances of getting caught are so slim.
Brace yourself, Britain – totalitarianism is upon us
I've recently become really interested in things around the periphery of secure systems keys etc.

For example in this scenario, what happens if one of key-holders dies? Presumably the remaining are enough for a quorum, but say something bad happens at a conference that many of them are at? It makes me think of why the President and Vice-president aren't in the same place at the same time.

In this case, I expect it would be possible to start again and select a new group of keyholders but what downstream effects would that have? In any case, I'm looking forward to seeing this progress.

(Incidentally, one of the contributors is also an author of the OCaml TLS stack.)
You get the ability to make all of your friends jealous because you have the hot new X a month or so before they can buy it.

It's much more likely you have an overhyped dud a year late but one month before anybody else can buy it. If the game you're playing is to one-up your friends, it's a price worth paying.
Why would you be happy to sell your company for $1M when you've already had revenues of $2M? Have sales declined so much since?
Payment gateway integration not easy for Online Pharmacies
Transfer Pics,contacts,vidz from iPhone/iPad to iPhone/iPad or Android SmartIO
Virtually everyone agrees that a default by Greece is the least desirable outcome for both Greece and its creditors

That, I think is a key part of the problem. In the US context it's known as too big to fail and applies to banks. In Europe it's unnamed.

The reality of every loan and every indebted entity is that default is a possibility. For a state to essentially become insolvent is no less likely than an individual or company. For some countries it is virtually inevitable on a 10-20 year scale. Before the euro, Greece dealt with this like all other countries, by printing money. They use the cash to pay debts and the resulting inflation actually helps manage national finances, that tend towards inefficiency and overpayment to vendors, employees, etc. If loans are denominated in foreign currency, debtors do not participate in the "haircut" and the danger of inflation notches up a bit.

No one thinks this is an ideal system. It's certainly not better than not becoming insolvent, but it usually works.

The Eurozone took this away without providing a working alternative. They solved liquidity issues using bailouts, emergency loans and nationalisation of debts and bad assets, but liquidity<>insolvency.
Using GPG keys for SSH authentication
Its not possible to use only Go for Android application development. The goal of both the Go team and the Android team is to make Go a candidate for JNI development as an alternate to C/C++. The rest of the Android app, especially the UI can only be written in Java.
Estonian startups honoured with dedicated postal stamps
created my portfolio : when will I know that I won ? ;-)
(Edit: I think it is great that we're working on signing software. I think that is very important, so important that I want to see it done right. So I have questions, in particular about TUF vs the more knee-jerk alternatives. But I would like to see signing, whether through TUF or the more well-known options.)

It seems that in order to add a new package or developer, a quorum of administrators must go to their secure signing machines and approve the key for that delegation. I don't see how that scales to active communities with lots of new developers.

Despite that administrative work and delay, it doesn't seem that the end result offers any guarantees about the repository other than that files haven't been tampered with. The repositories can still include malicious people or malicious software, because the administrators aren't doing any form of validation.

I also wonder what happens if people start squatting names and how the administrators will determine who has the legitimate claim to names.

This feels very similar to the CA system, except that we have pinned a particular CA (our "trusted administrators"). We have to compare that to choosing a CA (e.g. LetsEncrypt.org) and requiring that all keys be signed by that. I'm no fan of the CA system, but it does seem that the CA system (with pinning) is more tested, and has already implemented stronger procedures and guarantees than what we are getting here.

The timestamp signing system is nice, in that it allows for easy mirroring without requiring TLS. Given the timestamp signing key is online, it does seem we could more easily just serve the timestamp file from a central server though, over https, and then allow everything else to be mirrored (the https://security.debian.org model, I believe)
Thanks! Results every month!
The quorum definitively helps. If too few keys/people are remaining, there are two options: download and install an updated opam (with a new set of keys) out of band OR using another opam-repository (with e.g. trust-on-first-use) for an update of opam itself (which then ships new keys for the main opam repository).
The brain is constantly evicting, shifting, and changing memories as new stimuli come in and change the connectivity of our neurons. In that sense the brain, from inception, is full in the same sense that in an artificial neural network every neuron has a weight. The only thing that changes are the weights. (Note that I realize ANNs are a dramatically overly simplified representation of the brain, but the point remains).
Is there some sort of unwritten rule of dietary advice that one should never cite one's sources?
I think you answered your own question. The reason most pieces on web development are opinionated is because there is no 1 way to do something. Everyone has they're favorite stack and everyone has limited knowledge; even "great" programmers haven't written in every language / framework.

https://wappalyzer.com/download - one of my favorite tools - will give you a little more insight into what smartsheet uses - they're homepage at least, is a LAMP stack with Drupal.

Smartsheet would be a tall order for your first or 5th project. Get a cheap server somewhere - start with PHP, Rails or Node and build stuff. Learn how to communicate from the frontend to the backend - make mistakes, rinse repeat.

I haven't bought or read a book in years; once you get the basic concepts down, searching google / stackoverflow for how to do something will come much easier.
WTF: Really Wicked
It's a parody of clickbait.
For those who are interested in following the discussion that the maintainers/devs are having, you'll find it starting at:

http://lists.ocaml.org/pipermail/platform/2015-June/000595.h...
That'd be tricky to set up because drugs are discriminatingly life-threatening depending on dosage and individuals.
A bit of context would be nice. Is this the go-to book to learn SML, or just a random source?

SML has been on the higher ranks of my to-learn stack, because apparently it has some nice features Haskell does not, most notably I've heard great things about the module system.
Not at all: adding new packages or developers is automatically signed (by the snapshot bot). Administrators may later sign the keys and delegations, individually or in batch, after verifying the developer identity out of band (the specification doesn't yet include the mechanisms for this verification, but with a git repo based on GitHub, the GitHub login gives a good start).
You should briefly think how opam does updates currently: a repository on GitHub where developers submit their pull requests. This won't change too much.

Guarantees are: if a new package from a new developer is submitted, basically none. The signing of delegation and developer keys (by repository maintainers) enables a web-of-trust style system: once package `foo` has been claimed by the well-known (and signed) developer `alice`, there's no way that `eve` will successfully update `foo` (without getting `alice` key, and also then need to go via GitHub and repository maintainers).
The problem is that they're probably nearly all life-threatening (or at a minimum longevity-threatening) in high enough doses.

Fully permitted-doping would escalate into a bloodsport where athletes would be competing to show how many drugs they could take before keeling over.
My post was a response to a claim that the Canadian media offers a higher quality product than its US counterpart. I disagree and gave my reasons and provided a couple of examples. I did not, however, claim that US media concentration isn't high. It is, but it's not as extreme as the Canadian example.

Independent media is almost non-existent in Canada, online or otherwise. Viewpoints that deviate from the mainstream are far and in between. The only online independent journalism site I can think of that has gained a wider audience is The Tyee based in Vancouver. The Canadaland podcast, created and hosted by journalist Jesse Brown, also seeks to provide a wider variety of viewpoints and it directly addresses the sad state of Canadian media culture (something Brown is intimately familiar with).

You picked one example I provided and took it out of context as if that disproves my point.
More info about the Parks Canada/CBC story http://www.macleans.ca/society/technology/what-exactly-did-p...
I-FERRY
Sales Call Structure – Sell Successfully
So essentially back when Greece had it's own currency, it could decreate the cost of e.g. it's pension payments by printing more money, decreasing the value of the payments without decreasing the face value of the pyments. They'd pay pensioners the same amount in drachmas, but those drachmas would be worth less. Now they are part of the Euro, the only way to cut the cost of their pension payments is to actualy cut how many Euros they pay to pensioners.

For ideological reasons, the Greek government isn't willing to do that. Membership of the Euro is a lens that reveals exactly how many clothes the Emperor is or isn't wearing.
SQLite on iOS:Using a SQL query result as a UICollectionView data source
Empire of Code – Space Strategy Game from CheckIO
Yeah, but a normal distribution centered on 29, with a lower bound of ~18 doesn't actually imply all that many 40+ year olds.

(on mobile, someone else can reply with the math for an upvote)
Frog Mutations and the Fukushima Butterfly Mutations (2012)
>I wonder what use the tunnels will be put to in 2120?

Being as the tube opened in 1863, I guess the same one :)
It's very saddening how much discrimination and hate this society has and still is suffering from. Their grand-grand-grand-...-parents were ruthlessly killed, today they're accused of taking jobs away from other citizens. The media keeps creating horror stories portraying them as the ultimate evil, and the only time someone ever people stop whining is when there's a war to win. It's very nice and refreshing to see a different attitude.
The brain may also choose to re-encode a memory as part of a recognized pattern, in a sense, finding a way of compressing memories as recognizing them as part of a kind.
wappalyzer is very cool thanks for the tip.

I realize I won't be building Smartsheet anytime soon, but I want to start learning the tools with enough power to get me there.

I do plan to "Start with PHP, Rails or Node and build stuff," but first I would like to have a broad understanding of the frontend to backend path you describe. I know nothing of this process. I am looking for the basic concepts. In some ways, I feel like I'm trying to take derivatives with a fuzzy understanding of algebra. Following the book's example can get you from x^n to n*x^(n-1), but not to understanding.
I cannot follow your claim "stronger procedures and guarantees than what we are getting here". CAs might be useful for a single resource, but we have here a bag of packages and want to distribute the whole repository (with end-to-end signatures). Also, please read the TUF paper and specification which elaborates on the motivation.

And serving sth over http/s and the repository out-of-band opens possible attacks - that's why we decided on a single connection. Git gives us already some linearity/monotonicity conditions.
As it's open source maybe you can make a fork with the same code but name it something better?
FAQTORY.CO – World's Largest Repository of FAQ's Is Now Live
Normally when you cite a source, the source is supposed to support your argument.

A Japanese man who wins predominately USAian eating contests does support the statement "Competitive eating is popular in Japan".
BlueGreenDeployment (2010)
Interesting I was walking near mansion house (in the City) yesterday and could feel something rumbling underneath my feet through the pavement which I assume was Crossrail.
which was also started at Airbnb.
More likely the underground I would think.
What an NYPD Spy Copter Reveals About the FBI's Spy Planes
"Privacy, above all other things" is not the same meaning as "Companies should help us ‘prevent encryption above all else’"

Some one has an axe to grind and is deliberately misusing the FBI's quote.
I wonder how feasible it would be to run this kind of thing against frames of a running video to periodically adjust the colours of the page container playing the video, sort of like that Phillips Ambilight TV:

http://www.philips.co.uk/c-m-so/televisions/p/ambilight

Also, writing the Gulpfile in Coffeescript and having "compile the Gulpfile to JS" in the installation instructions kind of made me frown a bit...
The dynamics of a GPL-based project are somewhat different from an Apache-based one. Maybe that difference could be meaningful here.
We know. The culture in Unix was always sharing source and user collaboration. When AT&T finally tried to exert control there was a large movement within the community to go free of AT&T code. GNU and BSD were both a reaction to that.

The rise of x86 and the availability of free Unix (in the form of BSD or GNU) was destined to destroy the proprietary Unix market. In 1991 neither BSD nor GNU had kernels booting on x86, leading Linus to eventually release Linux in August.

Linux had the luxury of being the only readily available Unix-like kernel on x86 for several years.

The USL v BSDi lawsuit slowed BSD efforts for nearly two years while Linux gained mindshare and features (specifically x86 features & drivers). Once the suit was settled out of court development took a long time to regain momentum.

Net/2 was released in June of 1991 (before Linux!), so if the USL lawsuit hadn't happened, we might all be running that instead.
I'd love to read up on how this is done.

The only source code I was able to find is : https://github.com/kieve/Archive/tree/master/projects/Oscill...
Graph Engine vs. C++ unordered_map: memory consumption test
The fundamental problem here is signing keys as authoritative over subsets of a namespace (I believe). CAs are pretty good at that, so we should compare TUF to the CA system (with pinning). In practice, that means that you have to get a certificate for your package, which also requires a DNS name and SSL hosting. You could also use the PKI infrastructure, but only to sign the packages, and not require TLS. If you wanted to eliminate the cost requirements, you could offer subdomains of opam.ocaml.org, (and make sure that your CA would sign sub-sub-domains). But then you're taking on the burden of allocating those subdomains.

My fear is that even allocating subdomains of opam.ocaml.org is a tough problem in the real world. And you're not only doing (the equivalent of) that, you're also running an alternative CA, with alternative signing software. I wish you success, but this seems ambitious.

In contrast, we know the CA/https system works and we know its failings (in particular the evil CA attacks, mostly fixed by pinning). That system is highly distributed and needs no custom software. It also needs little extra work, which is always a good thing.

I've looked at the TUF papers. Can you elaborate on the attack you're describing? They don't seem to compare TUF to alternatives (that I could find). (Edit: and to be clear, my straw-man here is serving the initial git revision information over HTTPS, fetching the hashed data over HTTP & mirrors, and then verifying the hash)
The point is, you may want that money to be spent stopping that someone before he makes / releases it, and that seems to be at odds with privacy concerns.
Planning to visit DIA 2015?
Yup +1, there a bunch of problems with the fastmail user interface, I have run into most of your issues and more. That said, I'm just coming up on my second year, and will gladly be renewing for $40.

They can have as much time as they want to improve the UX, I'm just really glad to be away from Google.

Was also very impressed when I contacted support with a bug in the rich text editor, they quickly responded and fixed it within days.
I don't know - I think it's more akin to spending 20 years as a dev in various companies, then one day saying "I'm finally going to take a chance on that start-up idea".

We'd probably be saying pretty much the same thing (regardless as to whether some of what she/he'd done had made a real difference to those companies) - "she/he spent 20 years writing code, but XXX was her/his first real accomplishment/success..."

As I've been told many, many times - overnight success is usually preceded by 10 years of hard work.
New York sets rules for running Bitcoin exchange businesses
relatively few tunnelling operations of this scale have been attempted

More than you think, I suspect; TBMs are a fairly mature technology. Crossrail is not as impressive as the Channel Tunnel, which is a major feat of alignment as it was tunneled from both directions to meet in the middle.
I've had a few ideas stolen.

- In one case it was some fairly novel code, and the guy who stole it and put his name on it was soon called out because he didn't understand it enough to continue improving it. Elements of that code still keep me employed a decade later, but I've moved vastly beyond it. While he's out of the industry and looking for work.

- In another case, it went to another company who threw millions into marketing a collection of ideas that they had re-implemented (they had stolen ideas, and code, from a few places and used huge venture backing to buy their way into the market) and millions more in hiring groups of smart engineers to maintain it. For a while the company I worked for was able to simply out-innovate them, but their tens of millions in sales teams vs. our handful of many hatted engineers pressed into sales service wasn't sustainable for us and we closed shop.

However, recently I heard that in the places where we've both been, one of our customers had achieved such better results with our more innovative software that they simply bought up all the old assets from my company (and dealt with the debtors) and are now paying a new team to modernize the code and bring it all back to life.
Can anyone do a rough cryptoanalysis of the code? It uses AES block cipher in CBC mode with a random iv. Which attacks is this open to?

First, I suspect it's lacking a secure integrity check (MAC), so is weak against chosen ciphertext attacks.

def encrypt(self, plaintext):
plaintext = self.pad(plaintext)
iv = Random.new().read(AES.block_size)
cipher = AES.new(self.key, AES.MODE_CBC, iv)
return iv + cipher.encrypt(plaintext)

I'm also not sure about his padding of zeros to attain the AES block size - was there a more secure padding?

def pad(self, s):
return s + b"\0" * (AES.block_size - len(s) % AES.block_size)
Other comments have mentioned LLVM (and its optimization passes) as a reson for slow compile times; just for comparison, using LDC (the D compiler with LLVM backend) on an older computer (1.6 Ghz Athlon 2650e, 2G ram, spinning rust), for a release build at -O2, it takes about 35 seconds for 10,000 sloc
Looks like fb got the same idea now. http://techcrunch.com/2015/06/04/download-facebook-lite/
wrt monetization you can try adding a splash page, which the users can see they when login/log out of the app. Can connect you to some Indian app / game guys if you are interested.
Wow. Fascinating perspective.

I had just commented with my own bias/perspective on what the central problem is (I have some background in economics, hence a relatively mature opinion set) and this is another undeniably key piece of the problem, this time from a political economy rather than an institutional perspective.

I will definitely follow this guy. Very convincing. thanks
Thank you for the clarification. Can I install these "not yet trusted" packages? Presumably I can, I just get a big warning. And how do you deal with squatters - can I (as the "real developer") submit a second claim on an unverified package name (that an impostor has claimed)?

Edit: And does this mean that the snapshot bot automatically merges (well-formed) pull requests for new packages?
One thing to be aware of, these replacement zlib libraries are not always "drop in" safe as some software such as nginx pre-allocate the zlib state buffers by hard coding in the original zlib structure sizes (the original zlib makes guarantees about memory usage that technically makes this behavior somewhat OK). Depending on how well the software is designed, the forked zlib versions may result in buffer overflows or other crashing. (nginx is fine - it spams your log file with errors and re-allocates).
> The rules don't work as you would expect: eg messages from "a@b.com" do not match "sender ends with" "b.com".

The documentation implies that 'begins with' and 'ends with' only work for subject, message text, or mailing list ID - letting you set 'sender begins with' is probably a UI bug: https://www.fastmail.com/help/receive/rules.html

> Rules can only filter on one thing at a time -- no compound rules on eg sender and subject.

You can write Sieve rules, and hence implement compound rules using the 'anyof' and 'allof' commands: https://www.fastmail.com/help/technical/sieve.html

It would be nice if you didn't have to do this, though.
Here's the discussion over at Cyclingnews' 'doping' sub-forum: http://forum.cyclingnews.com/viewtopic.php?f=20&t=29527

Interesting to read what insiders have to say/think about it.
Since when Turkey and Russia became "Europe"? Don't get me wrong - probably both are super-interesting places in their own right, but including them into "Europe" is like including Mexico and Brasil into "America". Again, nothing wrong with those as well, they are just vastly different places, far outside of "education and taxes in US vs. that in EU" discourse.