skysight-inc/HackerNews huggingface dataset:
I can't remember the name, but there's a good documentary I downloaded from the internet on Lyme disease that goes into some rather conspiratorial theories on why Lyme disease isn't treated. Doctors have lost their license for not adhering to the 30 day antibiotic treatment approach.
Ah, do we so quickly forget the predatory tactics that Microsoft used to kill many startups in the '90s? Viable and game changing startups like RealNetworks, Netscape, etc
I wish I could learn to write like that.
The problem is you've got patients who have run out of options. Maybe they've got some complicated autoimmune disorder that medicine hasn't even begun to understand. Maybe the patient is just getting older. But the mainstream physicians don't have acceptable solutions or sometimes even good answers. "Lyme literate" medicine practitioners then offer an explanation and a possible treatment, regardless of whether or not the patient actually has Lyme disease. There's even a lab that will do a four month long blood culture + PCR for borrelia to give that official positive diagnosis when the immunoblot comes back inconclusive, despite the incredible false positive rate with the culture.

For those who aren't looking to use the Lyme hammer to explain and treat everything that can't be explained by conventional diagnosis, Lyme disease is well understood. The standard antibiotic therapy is very effective at stopping the infection. If treatment is delayed too long, there are lingering symptoms that are difficult to treat. There is no evidence that IV antibiotic therapy for years at a time provides any benefit and much evidence that it harms patients. People haven't lost their medical licenses for prescribing such therapy because of some great conspiracy. People have lost their licenses for administering treatments that clearly harm their patients without any benefit while charging large amounts of money for it. It's quackery.
Major League Baseball Advanced Media (MLBAM) is a company that has streaming video deals with HBO, Sony, ESPN, WWE, and the PGA Tour. They measure their non-baseball related revenue with 9 figures. Their streaming service exceeded Twitch in both number of streams and revenue in 2014. They are currently evaluating spinning-off as a company with a valuation in the neighborhood of $5 billion [1] . MLBAM actually is one of the best examples of a successful tech startup created by a pre-Internet company. But since they are a private company that never took venture capital, they are mostly ignored by people in our community. Granted the Dodgers are only 1/30th of MLBAM, but I think your overall view of baseball is outdated and in turn you might be overly cynical regarding this accelerator.

[1] - http://www.wsj.com/articles/mlbs-streaming-tech-unit-goes-pr...
Hand sanitizer will usually have moisturizer. It's better to use isopropyl alcohol as close to 100% as possible.
Yyyyup.

Which, by the way, is the entire point of the Fed reducing interest rates - to stimulate growth by encouraging increased spending (including investment) of cheaply-borrowed money.
wow - thanks. did NOT know about this.
I am sorry but 10ms is really too short...

You need to consider physical latency into the equation...

If you live next to a Amazon data center you can hope to achieve such result, otherwise...
Use Desktop as a Service to Create a Push-Button Learning Lab
Show HN: Extract links from webpages and download files, unzip and execute them
I believe it's possible. It's why I only use it in cascades. Yet, where's the practical attack where IDEA and Blowfish traffic are decrypted with ciphertext? If it's malpractice, then they're either fully decryptable or will be soon based on existing attacks on specific numbers of rounds or implementations.

I would appreciate you to cite evidence of people decrypting files protected by Blowfish or IDEA by breaking the cipher.
Thank you. For some reason users are bouncing off after viewing the pricing page, and I'm not sure why. I think the pricing is fair relative to competitors.
Western Firms Caught Off Guard as Chinese Shoppers Flock to Web
Interesting! I sometimes work with SSDs as storage media for cameras (where Sandisk is the most popular brand by a mile) and I seriously doubt any camera firmware is doing drive maintenance. From what I know of digital imaging technicians, neither are they - if a drive starts acting up in any way, the usual policy is to just take it out of service immediately, recover anything that was on it, dump it, and buy a replacement.
1999-2000 was insane.

Regulators killed the IPO market such that all the gains are being made by venture investors and the public is totally missing out.
Is Ubuntu the only distro which is affected, or are there others? Presumably any which have overlayfs enabled will be.

It is also possible to list directory contents for any directory on the system regardless of permissions

That's basically a "duh" once you get root...
The LastPass breach could have been worse
Are you still permitted to do consulting on the side working for 18F/USDS?
I've been using go-json-rest, which is by way of "just enough on top of net/http to make APIs easier."

https://ant0ine.github.io/go-json-rest/

Gorilla is useful, but more for its range of standalone components than as a framework.

https://github.com/gorilla

Then you'll want database-related packages like redigo and gorp.

https://github.com/garyburd/redigo

https://github.com/go-gorp/gorp
Point them to this helpful link. :)

http://rumkin.com/reference/whiteboard/index.php
Lack of support for proper sockets is a real bummer.

If binaries can't be used or talk to the app the applications are quite limited.
First Half of Mumford and Sons at Bonnaroo
Thanks for the info. You are right, it's probably in one of those agreements from Apple. Wonder how ios devs feel about this.
The Idea Maze and Failure vs. Persistance
Copypasted my product annoucement:

Most people start reading long articles, wander off into their favorite time-wasting website, and then later ask: "How can I focus on intelligent writing without being distracted by stupid images?"

I ask instead: "How can I make it even worse?"

This question and a few hours of my free time has resulted in what you see above.

Inspired by a lengthy blog post that I will now never be able to finish, InstaCats is a browser add-on that inserts random cat pictures between paragraphs on any webpage.

Before Instacats, being less productive on the internet was thought impossible. Now, with InstaCats, your attention span will shrink into oblivion. Text longer than 500 characters? Instacat it. Subject matter too intense or intellectually stimulating? Instacat it.

With 15,000 random cat images, the possibilities are endless. Or really, just 15,000 possibilities.

Enjoy!
I don't think this is accurate. All the companies I know would rather go public in order to enable investors/employees/shareholders to get some liquidity (and for the company to gain credibility). The secondary market, while fulfilling this desire to some extent, is still not even close to what you get in an IPO. The onerous regulations are still clearly depressing the IPO market.
I'm just going by what I read on indeed and glassdoor.

EDIT:

Oh, maybe you guys mean contract work or consulting. Yeah OK, but the reason you have to charge so much is all the risk you take on, so that makes sense. I thought maybe it was like, "translated into salary". Most people don't average > $100k a year as a developer, I don't think anyway?
No meeting of the minds, no contract. Unless you take some positive action to confirm your acceptance of Apple's terms, there's no contract.

(I am not a lawyer, and this is not legal advice).
> My point applies to that too. Images, text, CSS, video, etc. I'm saying I don't have a problem with requesting an HTML file, receiving it, and then choosing to not render/execute/display certain parts of it.

I think this is a fundamental difference. I think there's an implicit contract. Would you feel any different about it if it was explicit? If there was a preamble to every page that said you were licensed to view the content only if certain conditions were met, such as all included ads were displayed, does that change what you feel comfortable doing or not?

> I agree, but that doesn't sound like your previous position.

I don't think it's any different. It's about intent. Is someone using a text browser specifically to bypass ads? Then the text browser is in essence an ad-blocker (to the degree it works). If it's used because other circumstances that make it desirable or necessary, then it's up to the content provider to either disallow that access mechanism, or provide ads that work. This is the difference between a party failing to collect on their side of a contract, and a party failing to fulfill their side of a contract.

> I'm not talking about programmatically requesting large amounts of content. I just meant a single individual running a single cURL command.

It goes back to intent and text browsing. Any ad that could be made useful in text browsing would be just as applicable to what you got back from cURL. Either it's plain text, or you can parse the output. If oyu can parse it, you can see any included ads.

> I guess I'm arguing that you don't need to be a hypocrite, because it's not troubling behavior.

Eh, I think it is, on a small scale. Similar to littering occasionally with very small items.
No part of this comment addresses anything that I said. This is a pattern with our interactions: I bring up something specific, and you change the subject, usually to a flurry of Snowden jargon (this time it's the spy-mall catalog).

We were talking about the transparency of the Windows kernel.

It's a little funny that you feel like you need proof that the code has been reverse engineered, as if there were like 4 people in the world who could do it, one of whom is in a mental institution, 2 of whom are in Russia, and the last is hiding in a monastery in Tibet. You know, as opposed to something you could literally learn from a book that was on the shelf at Borders, back when they still sold books retail.
I remember that being linked from this article.
If you're able to sell a sock for $1m then, yes, it's worth $1m. But I strongly suspect that you could not. Which is why the analogy is flawed.
Classical mechanics worked problems book
"Pizza? Now that's that I call a taco!"

https://vimeo.com/90127834
Yeah, I'm guessing cbd1984 is confusing it with 'vim'.
I am currently about to finish Chap 6 on momentum, and working through this book has been one of the high points of this year for me. I have done all the problems but one, and I always try first, then look a little bit, then (often) throw my hands up and just try to memorize the answer. I also makes me tear my hair and think I am infernally stupid, but hey, it's physics.
>Inefficient for whom?

For those whose income is being reduced.
OK reading the rest of this subthread, I believe I understand it now. He's probably just misguided or simply incorrect. And I admit that most of my crypto knowledge comes from reading his and Ferguson's book, Practical Cryptography (and the 2nd edition, Cryptography Engineering - I'm not sure there is a better "popsci" crypto book.)

To make a simple comparison: if someone smarter than me says 2+2=5, my probability of 2+2=4 will move go down from (1 - epsilon) to something a bit lower.
I'm actually more surprised that it's a single POSIX app. I would have assumed that there were separate GNU and BSD sudo projects.
Only if you want to use that approach for syncing; you can also sync strip with local files, then delegating cross-device accessibility to network share, btsync, or something else.
I use Bitbucket almost exclusively but would like to use Github as well or instead.
Oh, certainly (I was just talking about passwords)!

Cryptography Engineering is something I hold very dear and have lent out to colleagues. Very well written, so it's an enjoyable read. And a good length, not a thousand pages tome.

My main problem with Schneier at this point is that he pivotted (Ha! This is HN after all...) from cryptography and technical analyses to political commentary. And I haven't found him very convincing in that regard. Even annoying at times.
If your cloud provider is AWS how do you make so many concurrent requests with monthly pricing. It seems the pricing would incentivise you to use a single machine for all the requests.
You can get black dry-erase boards too, with white markers, if you prefer light-on-dark instead of the other way around.
If you don't understand why people prefer Github, I'm not sure what to tell you. And if you don't understand why people would prefer to use what they prefer to use, then, well, I really don't know what to say.
I've been using Postbox for a while now. It's nice. I don't love it.
And that last paragraph explains why you want that to be true. However, if your company reward system only rewards power and position then that is where the problem lies.

Your developer why does a great job maintaining a hairball should be rewarded with life boosting things: paid for conference trips, a workspace of his/her choice, a book allowance, training courses of their choice etc.

Maslow's hierarchy of needs should guide the reward system, not Machaveilli's Prince.
Thunderbird. Not an amazing UI or UX, but it gets the job done.
I guess I'm not understanding why you'd use lambda that way instead of just using container instances -- what would be the point?
Alchemist v1.0 is released Thanks for all the support
> My bank wouldn't take longer than 8 characters

Ugh, that is seriously infuriating. Of all the websites I have accounts with, that's the top of my "Shit I care about" list.
Get out into the sun. I don't know why, but something about about getting a minimum amount of sunlight (hour?) every day improves my mood immensely throughout the rest of the day. The Seasonal Affective Disorder is real
Why are there lots of G forces? once you are at cruising speed it might not feel like you are moving at all.
>That's basically a "duh" once you get root...

The bug/exploit is that you can do it without getting root.
There's an improved algorithm that finds a better lock, one that can do 1,410 words: https://blog.glyphobet.net/essay/2770
Diet.js – A Node.js Web Framework in 335 SLOC
I'm getting dismissed too, and people won't even admit it's a problem, much less give a coherent rebuttal: how are we not headed towards a classic 'Tragedy of the commons' type of scenario where no one wants to compromise (watch ads) but everyone wants free content. I can only conclude quality will degrade and we will get either behind paywalls or crappy content. Serious journalism is clearly suffering imo, for example. In this scenarios privacy degrades, since behind the paywall the provider knows your full identity along with all your browsing habits.

We need solutions for this, not a dismissal. No large company is engaging this in the public because there will be obvious backlash from adblocker users: they are currently fine, getting free content and seeing no ads -- why would they want change? While they don't see the trend is probably unsustainable, in the sense that services will generally be worse than they could have been.

My opinion is that some unobtrusive ads is a price that is worthy of payment, but this scenario is running out if we don't change some rules of come up with solutions. I'm very open to alternatives also such as some kind of internet-wide subscription model. It needs to be discussed, not tossed aside, imo.
Show HN: Spread the spirit of Ramadan among friend & family with divine blessings
Do you need to be so negative? Even if everyone agreed that these principles were gold, and I'm sure I know people who don't agree with everything here, it would still be more than worthwhile to say "this is what we think being a good engineer means." I honestly don't know why you would view that document with such disdain.
I... need a guide or something. I expect I'll do more research this weekend, but just sitting and listening to myself breathe? I have plenty of calmness in my life, but surely there's a difference between meditation and relaxation?

Sorry, not really directing this at you, its late, kinda just stream of consciousing before sleep. I do appreciate your response : )
mail.app, if only cos it's there and does the job.
Last Updated:	Jan 29, 2015[0]

[0]https://duckduckgo.com/?q=whois+nyud.net&t=ffsb&ia=whois
Peer-to-peer file transfer or torrent over webRTC (webTorrent) maybe? https://instant.io/
Password Manager LastPass Warns of Breach
The documentary is called Under Our Skin.
State of Node for the Enterprise
I do something very similar to this, but I sync the key file to a second service (both services have 2FA logins). Keeping it off "the cloud" entirely is indeed safer from a security perspective, but think about how many copies of your key file you have, and what would have to happen to destroy all of them. If you've just got the key file locally on e.g. your laptop and maybe a smartphone, it doesn't take much more than a petty theft to cause you to lose access to every service in the database (in which situation of course you'd paradoxically want access to those services right away!).
There is usually a "relationship waiver" that eliminates the fees on all the accounts you're party to as long as you have enough total wealth parked with that bank.
I have a maxim: "If it's not documented, it doesn't exist". Programmers can spew out lines of code to their hearts content, but if you don't tell people what it's used for and how to use it, it's just going to be ignored by the next guy.
No, the difference is we're distributing devices that, at no effort whatsoever, strip out all the ads. An ad blocker is literally a few clicks away on google chrome to never see ads again. His analogy is pretty solid compared to that. It's so easy to use an ad blocker that there's no reason not to, no matter how low impact the ads are. And no single user can make a measurable impact on a website's revenue through advertisements, so his actions don't have a direct content degradation impact either.

Of course, the collective actions do degrade quality. It's classical 'Tragedy of the commons' [1].

[1] https://en.wikipedia.org/wiki/Tragedy_of_the_commons
Can you elaborate ?

You want socket just to bring down latency ?

You want different client to connect to the same environment so that you can keep a local state of your application ? I am thinking about a videogame or a collaborative office tool.

You simply want to send binary data to a function ?
Why the Return Trip Feels Shorter Than the Way There
Unfortunately, there's no "herd-immunity" externalized benefit, so the efficient way to allocate it is by individuals buying doses for themselves. (Well, for Homo economicus, rather than Homo sapiens.)
I do something similar in concept. I start off with a base password with numbers, letters, and symbols (to fit most website requirements). Then, I generate 2 random words based on the website name (based on the syllables). For instance, Gmail -> GM -> Green Mollusk or Amazon -> AM -> Aromatic Mitten. I find that it helps with remembering them naturally since the random words form a mnemonic on their own. The solution space is still large enough that knowing the rule should still be secure in real-world applications.
That's true, but you have a local copy by default. I'm not sure what happens if the local and the server copy get radically out of sync - I don't know if it would purge your local copy or not.
Fluid App
Before that sentence it says "The attached exploit gives a root shell", so I felt it was rather redundant to then say that all the directories on the system can be read.
To me, this sort of thing brings home the value of not running your own machines. Sure, Amazon's/Google's clouds have quirks, but it's far less likely that you're going to have to debug faulty hardware in this way. It sounds like a team of more than one person worked on this at least part-time for weeks -- how much is that worth? It's not just the cost of hiring extra people to do the work; often small companies simply can't hire enough good people -- when you do find them, do you want to squander them twiddling servers?
I'm pretty sure this problem is specific to Macs; other OSes allow modifiers from one keyboard to affect keys pressed on other devices.
The Myth of the Training Montage
Lumberjack: America's Deadliest Profession
Unix tools are very powerful, but they are not as intuitive as I would like. It would be nice if we can have an httpie for process management, one for text manipulation, another for system stats, and so on.
Turning PHP apps into executable single-file Phars easily
> "absence of evidence is evidence of absence" fallacy

It's not a fallacy. Absence of evidence really is evidence of absence. The fallacy version is "absence of proof is proof of absence".
The CVE states:

"Hello, this is CVE-2015-1328 which allows a local root privilege escalation
in the default configuration on all currently supported versions of Ubuntu."

But when I look in the /boot of a randomly picked Ubuntu 12.04 server, which has 3.2, 3.8 and 3.11 installed, only the corresponding config file for 3.2 has CONFIG_USER_NS.

What happened to CONFIG_USER_NS in later kernel versions?
I was not allowed to have a blackboard in my office because the boss said the chalk dust gets into the computers and causes problems (or makes you have to clean them frequently). We were a software company, so there were a bazillion computers around.

I don't know if this is true or not, and if it is true whether or not with careful use you can avoid the problem, but if you ever do ask for a blackboard, make sure you have some answer for this in case someone brings it up as an objection.
Progressive Apps: Escaping Tabs Without Losing Our Soul
On the topic of writing-surface ergonomics, I've always been curious about what it would feel like to write on a sufficiently-large magnetic drawing board (i.e. a scaled-up version of one of those toys containing iron filings that comes with a magnetic stylus.)
You are almost certainly correct that the averages employee salary for a Python web dev is sub $100k/yr. My numbers were for contract/freelance hourly rates and all that entails (increased risk, no benefits, higher taxes when working 1099, gaps between clients).

I'm assuming that's what OP was asking about since they asked for hourly rates as opposed to yearly salary, but I could be wrong :)
Why Learn Basic Electronics? [video]
> The Go standard library is so strong around web servers it's hard to recommend anything else.

The http packages provides the bare minimum. A serious app requires way more features than what is provided,a router than handles route variables, a middleware stack, a proper context, a proper session mechanism if one writes a website...

So it's normal people write their own libraries on top of it ( like mine @ gopkg.in/interactiv/expresso.v0 ,still alpha )
I'm not sure public markets are a unique way of getting "real" prices. Private-equity sales are a real market with real money; if Google buys a company for $50m, that's an actual market transaction that valued the company at $50m. Is the idea that public markets provide better price discovery than private sales do? If so, is there empirical evidence that publicly traded companies really are more accurately valued than privately held companies are? (Genuine question; it's possible there is such evidence, but I haven't found a good article on the subject.)
What's with all of the pacemaker shocks?

Is that a bug or a safety mechanism?
The Future Is Full of Broken Machines
Snowden and Greenwald aren't independently funded, though, so you're not answering the question.

Greenwald is bankrolled by a generous billionaire, for now. Relying on such generosity does not seem wise. Would he be as effective if he had to balance a full time job?
No, but you may be able to sell a 0.01% stake in the sock to someone for $100 and tell everyone that makes it worth $1m.