skysight-inc/HackerNews huggingface dataset:
Haskell lets us have generic "mocks", which is -way- better than any kind of expectation-based mock. (admittedly, the example in andy's blog post doesn't show the power of this technique very well)

But my experience with mocks is that expectation-based mocks are fragile and make it easy to write tests that pass but are fundamentally wrong; if you just say you expect XYZ to come out of the database, even if your code gets refactored to not insert XYZ into the database earlier, the test will pass despite the code being completely broken.

With the haskell World approach, you don't have that - the fake database is fake because it's in memory (and thus very fast and uses a blank state for each test), but it's actually implementing the same semantics as the real database.

Some of the other IO stuff we've encapsulated is just expectation-based mocks and as you said that's not new, but it's still clean and doesn't require any changes to the code under test to make it mockable, which we did when we used mocks in our PHP.
No, typically Sony is hostile towards hackers. Being ignored is the best response from them. I think after the bad press for PS3 and psn hacks, Sony hired security consultants to secure the Vita. They did so many things right that frankly it's suprising. Not everything rolled over into the ps4 though so the vita is more secure than the ps4.
How much runway does the company have given what they raised?
> Apple should front the costs during that 3 month trial period. It's just not fair to not pay artists.

Why? Apple negotiated that arrangement with those artists' labels, who agreed that this was a fair and equitable situation. You and I might like to think that we would have chosen otherwise, but the people involved in this contract were happy with the outcome.

Remember, Apple didn't unilaterally come up with this. They didn't just open a service and announce that they weren't going to pay anyone.
I worked for Plain Vanilla when they received a big round of financing lead by Sequoia. If you want to ask me questions: jokull@solberg.is
Code Combat is a game for learning programming. They used to be a marketplace and hold competitions. These days I think they are experimenting with microtransactions.
Thanks so much for all the advice so far!
Compiling a Functional Language to C++ Template Meta Language
One important aspect to take into account is the fact that a company 's size is determined also by the size of the market it operates in. In US or China you'll get megacorps while in tiny countries the size will be way smaller.
If we add in the fact that the economies get globalized, all of the sudden you Apple and the like. Any successful startup in a global market, starting out in a large national market will be flooded with capital and still grow to fit the size of their success.
40% of US Americans believe the Earth is less than 10,000 years old
Is this some kind of inside Muslim joke?
The page gives me random units of time until another time, which in turn is until something else. Simply makes no sense to me.
Low-level stuff. C. Assembler. Firmware. Debuggers.
I did a search of Oddball and Madcap as characters and came up with nothing.

https://en.wikipedia.org/wiki/Oddball_(comics)

https://en.wikipedia.org/wiki/Madcap_(comics)

I'm certain that they exist in the Marvel universe.
Not being a mathematician, I have no idea whether Geometric Algebra is in fact superior to the systems in general use currently, but it sounds exciting.
No, he doesn't have a point. You can't just splice some genes and add 'language' and 'intelligence' into an existing organism. (Assuming that you define them currently as un-intelligent and without language). It's not quite the same as changing some config bits. Though that doesn't rule out that one day we may be able to do so but for now this is simply (according to my knowledge of the state of the art of genetic engineering) an impossibility. Besides the ethical questions it would raise.

Building the bomb, breaking enigma and landing on the moon (and ITER, for that matter) were 'mere matters of engineering' by comparison, at least there we had a good idea of what we needed to achieve and what possible paths there were to that solution.

For the atomic bomb, for instance, the Uranium atom had already been split (in 1938), for the moon landings we already had the German V2 rocket and so on.

The steps may seem huge but the theoretical underpinnings were firmly in place when the technology moved forward.

Usually this alternates, one step is made by science to advance the theory which then can be put to the test and put into practice by engineering and experiment. This may lead to new insight and so on.

It's very rare for someone to say 'oh, it would be nice if we could do 'x'' and then to turn up with a complete and solved problem on the next iteration.

There's a reason the moonshot and the atomic bomb took several years and very large amounts of money to complete, and in neither case were we 100% sure that we'd achieve them.
You very much have to be flexible. Most valuable would be C and assembly knowledge (and knowledge of the low level details of both is pretty much required).

As for tool writing, any high level language (perferably what your employer uses). For example, if MetaSploit is used knowledge of Perl/Ruby would be required.

Picking up multiple imperative languages is easy, though. Fortunately most languages in the field are imperative.

Depending on the software in question, knowledge of how virtual machines operate can also be useful.
Does the cost matter? Both the iPhone and Music have value regardless of cost.

Does anyone know how other companies like Spotify, Rhapsody, Google play and others treat the trial period?
How do those unmotivated people expect to keep their jobs?

Perhaps by doing their job to a satisfactory standard and abiding by the conditions of their employment?

If that's not good enough, the contract should make it clear just what the job really entails.
I get the feeling there's a lot more to this story, would be interesting to hear the other side. Were they really that doughy?
I dont see any ads on the sites. Wouldnt one expect those to be there?
Whats up with the second part? Don't you just mean x hours until sunset?
What if it is the difference between your schema working under high transaction rates or not? Or, the difference between buying much more database hardware and having smaller shards to avoid index contention. (which, is $$)

Facebooks mysql architecture (at least used to, likely still is) based on this: https://backchannel.org/blog/friendfeed-schemaless-mysql

Note the simple schema, and lack of FKs.

FKs are rarely present in extremely high transactions per second systems that operate on the same few tables. This is due to index contention and locking.

I say this with lots of experience working on different production systems that see hundreds of thousands of transactions per second. I have yet to see one arrive at these kind of numbers using foreign keys, unless it's something like a giant shared hosting platform, that is operating on hundreds and hundreds of different tables. (therefore, less index contention)

Often, in these shops, data correctness is not validated in realtime in this way, but often in a way that is not in the critical path of answering queries. (more like, eventually consistent). Some places have entire teams for this.

To your point on correctness, my experience ranges a lot in areas where correctness can be eventually consistent. For something like healthcare or banking, you would rather spend the money on way more hardware, because you can't afford correctness to be off. However, with things like globally scaled social apps, this is just not the case.

Most people tend to still use Oracle in those situations. Which is legions slower , and legions more expensive than mysql or pgsql.
App economics are much different from music economics.

From what I have observed, most people (the casual listener) will listen to the free streaming services (pandora, apple radio, etc). When people want to listen to a specific song they listen to it on youtube.
I know many people that have converted an E3 to a green card, the main thing I found with US immigration is that you want a good lawyer.
Nah, I assure you it is not. He made a mistake in displaying it is all.

Edit: turns out it is!
I remember attending a talk by Eric Diep from "A thinking Ape" (gaming studio) at Hack the North.

If I am not mistaken, he mentioned that they were backed by YC and a couple other high-profile investor in the valley.
Managers shouldn't be trying to fix mental illness - what did I say that made you think that?

Managers need to understand mental illness so they don't fire people who have mental illness (suggested a few times in this thread and often on HN) or so they can do manager stuff like offer reasonable adjustments (or whatever those are called in the US).
First off, obviously there isn't really a clear black/white answer to this. Secondly even security is such a broad field that it really depends on your focus (a similar question could be what programming languages/technologies are the best for web development, where you'd get answers ranging from classic LAMP stack, to Node.js, python, RoR, Angular and many others, and it depends on whether you want to do front-end, back-end, both or whatever combination). So firstly I'd say it's important to pin-point what you are personally interested in; I'd say that if you want to be working on some "serious" exploits in widely used software, you are looking at C and Assembly, and C++. Obviously for web hacking, you'd be looking more at scripting languages, both in terms of their usages as the underlying technologies, as well as to automate those mundane repetitive tasks, so PHP, ASP, Perl, Python, Bash scripting etc. is something to look into.
But you should also be well versed in sys-admin tasks, things like maintenance, event logging, filesystems and permissions... And lastly there is networking and all the issues and things associated with it, tcp/ip stack, routing and so much more.

The thing is, working in security isn't really dependant on the programming languages you know, either what will matter is your specialization (if you have any), or the overall skillset that you can offer to the company (if you can secure a web application on a shared host, but don't do anything about file permissions and other settings on the server, either someone else needs to do it, or the security of the webapp is pretty useless); be aware that you will be (or should be) learning something all the time, again depending on your interests, and at the same time you have to stay on top of news in research and exploits, so in a way it's really tough but also very interesting.
Could one use self-modifying code (such as rewriting the SIGILL handler) to simplify this a bit?
It's not that I'm unsympathetic to the artists, but I think that it's unrealistic that they'd expect otherwise.

A career in tech has a crazy pile of expenses associated (Stanford isn't giving away comp sci degrees; continuing education unless you want to end up a one-trick pony), in additional to all the unfortunateness of having to live in a hyper-expensive tech hub for as long as you want to make money at it.

Yeah, you can much cheaper degree (I did) and live in a cheaper region (I had), but that almost guarantees hitting a lower career ceiling than if you have a Berkeley diploma and live in San Jose.

Almost all careers involve tradeoffs. If you want to rise to the limits of your abilities you're going to have to make some hard decisions. Otherwise you'll be competing with the other workers who are happy to get paid less for easier work. In tech, this means a mid-range job in a small market. For musicians, this means playing gigs in Des Moines instead of clubs in LA. Them's the breaks.
I don't think you can pin it all on piracy; it's just the usual race-to-the-bottom. The App Store has had a constant (low) piracy rate ever since the first jailbreak, and nevertheless free-to-play revenue is 80% and increasing.

Music is always competing with its back catalog, and old music weathers the years a lot better than old video games.
Creative robots, the Kurzweil fallacy and what it means to be human [video]
Prasadam Industries cigarette filters contain tree seeds
I chided thoughtpolice for being a little uncharitable, but this comment breaks the HN guidelines outright. It's unsubstantive and uncivil (though I don't think you meant it to be). Please don't post such things.
Sure. Some examples include: TinyCo (a16z), ngmoco (acquired by DeNA), Gree, Kixeye. Maybe you mean "in the last year"?
No, not true. The strength of electromagnetic fields is governed by an inverse-square law. The reason the town bans WiFi is that even a low-power router can overpower the signals from space, even though a 100 meter diameter dish is focused on the space signals.

The same phenomena means that people who complain about radiation from cell towers while not avoiding cell phones are being irrational--the signal from a phone in the same room (or in your pocket) is far stronger that from a tower hundreds or thousands of meters away.
Unless you happen to be this Summer's big record... in which case your one profitable window for your track will have has just been obliterated.
The way you said "Debian testing or unstable policies" suggests that you aren't very familiar with Debian (they are distributions or repositories, not policies). If the package you're updating is in testing or unstable, then its dependencies will also be updated as necessary. If other packages with the same dependencies won't work with the updated dependencies, then they will be updated as well, automatically. That is not always necessary; it depends on the library in question, whether the ABI changed, etc.

It sounds like you don't know how the Debian packaging system works regarding security. If you are installing from Debian repos (as opposed to third-party repos), then all binary packages go through the ftpmasters. The packages are checksummed, and the checksums are GPG-signed. Each package's maintainer or team handles building the binary from source. Of course, you can also download the source package yourself with a simple command, and then build it yourself. But if you don't trust the Debian maintainers to verify the integrity of the source packages they build, then you shouldn't be using Debian at all. This is no different than using a BSD. The ports tree could also be compromised.

Third-party repos are always a risk. That's one of the nice things about PPAs: their maintainers can use the same security mechanisms that the regular distro repos use, but with their own GPG keys. Again, if you don't trust the maintainer, I guess you should be building everything yourself. LFS gets old though, right?

And that's another good thing about Debian: almost anything you could want is already in Debian proper, so resorting to third-party repos or building manually is rarely necessary.

For long-term use, you can use testing or unstable or both, which are effectively rolling releases. There is also the backports repo for stable. And if you need to build a package yourself, between the Debian tools and checkinstall, it's not hard.

Debian and Ubuntu are the only distros I use, and for good reason. They solved most of these problems a long, long time ago. Compared to Windows or other Linux distros, it seems more like heaven than hell.

By the way, I'm no expert on BSDs--but do they even have any cryptographic signatures in the system at all, or is it just package checksums? Checksums by themselves don't prove anything; you need a way to sign the checksums to verify they haven't been altered. Relying on unsigned checksums is akin to security theater.
This is why web developers shouldn't be given control over scrolling.
Amazon tweaks customer product reviews system
Yup, Durand and Freeman worked on both. The Eulerian video magnification isn't just limited to color changes, of course, as the video shows. This new technique is still based on Eulerian magnification, if I understand correctly.
Indeed: http://www.gamasutra.com/blogs/NicholasLovell/20100324/86975...
This reminded me about the Dwarf Fortress Map Archive, where you can play back ASCII recordings through a flash player:
http://mkv25.net/dfma/browsemovies.php

Dwarf Fortress records the game to CMV format:
http://dwarffortresswiki.org/index.php/User:Jifodus/CMV_file...
We plan to use all the resources for a year. If it really takes off then we'll go for the next round of investment. But they want me to finalize first whether I can join the next round if we meet our goals.
I joke with my labmate about the time until sunset by breaking it up. He say's it better to break up the times, for example "2 hours until 4 hours" instead of "6 hours" :)
The notion that there's only 13/16 registers (assuming x86) hasn't been true for a long time. There's hundreds in the latest cores from Intel. It's true there's only 13/16 names for them, but with register renaming there's way more places to actually put data than that.
> don't forget that in apple music people only can listen for the sone they liked once and can not select a song they want to play, thus forcing them to purchase if they really like the song

What? This isn't in the least bit accurate for Apple Music. That was the deal with Apple Radio, not the new service being discussed here.

EDIT: I guess he deleted his comment once he realized his mistake.
Yes, its just a funny way to saying it.
Yes, YC has invested in multiple gaming companies the most successful of which is Machine Zone. As for other VCs, the most active in the sector are Bing Gordon, Rick Thompson, and IDG Ventures USA. Lots of others throw money around, but it's common for investors to specialize in the sector.
> Absolutely, but that is fixed cost not unit cost.

Isn't your unit cost = Cost of Goods Sold / Units Sold?

Wouldn't the fixed cost producing the music be amortized (over some arbitrary number of years) into the Cost of Goods Sold to produce an accurate picture of unit cost?

> A better analogy to giving away iPhones would be to play a live gig for free.

Or how about this analogy: 3 months of free wireless service with every iPhone?
> I would say that the Vita is the most secure consumer embedded device that's out today

Moreso than the PS4 and XBONE?
And sometimes to be seen to be in a growth phase when in fact they are stagnant.

It's pretty easy to puncture that though, simply ask how many open positions they have for each department and when the last hire was for each department. That will show quickly whether or not they are actually growing and at what rate. (You can't lump them all together because with a larger company one department may be growing while another is declining).
That's true -- out of the box. As with all things JVM, this, too is very pliable. You can create a new permission -- "access clock" -- and then it is quite easy to use an agent to inject a call for the security manager to check for this permission whenever the clock is accessed.

In fact, since we started this discussion, I've written a small library that uses an agent to fake all clock accesses on the JVM with a user-supplied virtual clock, that can be set globally or per-thread. Injecting s security check is even easier.
We spend so much effort trying to engineer intelligence, when we would get a lot farther reverse engineering intelligence. Whenever AI makes a big advance the analog was already known my neuroscientists.

The problem with attempting to understand intelligence by reverse engineering the human brain is that we cannot know a priori which aspects of the human brain are necessary for intelligence to arise, and which are merely consequences/side effects of biology and chemistry. Once we discover some technique that works in a practical setting (e.g. on ImageNet), then it is fairly straightforward to find the biological analogy in the brain.

In fact, Geoff Hinton explicitly advocates an approach of "try things, keep what works, and figure out how it relates to the brain". The inverse is like finding a needle in a haystack.

There is also clearly no comprehension of the importance of the topological (circuitry) defining a neural network. We always assume a fully connected network, and draw the out as such, but we don't stop to consider that many of those Wijk interactions are completely spurious, meaning they have no information bearing role.

The purpose of training a deep neural network from data is to automatically discover what the topological circuitry of the network should be, rather than engineering it by hand. In the brain, some prior knowledge is encoded via genetics, while the rest is learned. The effect of sparsity of the weights in deep neural networks is an active area of research [1].

If you strip them away you'll start to reveal the underlying circuit at work. I've published theoretical results using artificial gene networks, but the results should be similar for ANNs.

Very interesting. If I understand correctly, the cost you are attempting to minimize is phenotypic variation, which you measure as the gross cost of perturbation (GCP). Would this cost be analogous to sensitivity to adversarial examples in the case of convolutional neural networks [2]?

[1] http://www.jmlr.org/papers/volume14/thom13a/thom13a.pdf

[2] http://arxiv.org/abs/1412.6572
The Complex Relationship Of Turf And Technology
Seems to me you might be kicking yourself for years if you don't take this opportunity while its available. Hate to say it, but school will be there should it not work out.
How SurveyMonkey Is Coping After Death of Dave Goldberg
Onevest Launches Crowdfunding Campaign as Regulation A+ Takes Effect
Now for a program to turn iPhone apps into web pages. Immediate download! No app store! No space tied up on your phone! Searchable with Google!
>To your point on correctness, my experience ranges a
> lot in areas where correctness can be eventually consistent.

"Eventually consistent"? Explain. (Do you mean in an ACID transaction?)
No, he doesn't have a point. You can't just splice some genes and add 'language' and 'intelligence' into an existing organism.

And you know this how? Because of the copious amounts of experiments that have been performed, attempting to do this? I think it's equally silly to declare this certainly out of reach as it is to declare it certainly within reach. We haven't even tried, so how do we know what's possible? Perhaps all it takes is splicing a couple of genes from the human genome into a chimp embryo and kabloom: you have an intelligent chimp who can be as miserable about his or her condition as the rest of us.

No one has sat there and run the years' worth of experiments required to prove whether this is achievable with today's technology. We obviously can't say it's easy but we can't say how hard it is either.

The more interesting rebuttal, imho, is that genetically engineering some intelligent apes that can speak will not advance the cause of non-intelligent apes who can't speak, it will just create a new species of apes with a catastrophic uphill civil rights struggle ahead of them (if you think there's racism in the world today, wait till the chimps start demanding the right to vote, work, etc).

Which probably helps explain why we have not pursued that avenue of science particularly much: why do such a thing? It'd be ethically unconscionable, to set out to create another intelligent species who will be condemned to decades, if not centuries, of abuse, for no other reason than because maybe we can? Only a monster would set out to do such a thing.
Ask HN: Is there a defacto “standard” for API authentication with Node?
I'm looking at building some APIs with node, but I'm not sure whether to go with some sort of OAuth library, simple token based authentication, or whatever. Is there a decent, secure solution that is used regularly?