skysight-inc/HackerNews huggingface dataset:
Hahaha I don't think putting stimulus generalization in parentheses makes my explanation any more complex. I explained the phenomenon in 2-3 simple sentences and then I used two words that could substitute for those 2-3 sentences--stimulus generalization.

If you compare our two analyses some of the claims you make cannot be tested via experimentation, such as "convoluted unnecessary cognitive path." I'm not sure what that means, how we would determine if the user has gone down that route, or how we would measure the convolution of a "cognitive path."

Nonetheless, I like this discussion. I think UX is really cool and represents a great application for applied behavior analysis.
Ask HN: Help me validate a business idea
If you’re an HN regular, you’ve probably heard of the growth vs. fixed mindset idea. Here’s an article, just in case:

http://www.brainpickings.org/2014/01/29/carol-dweck-mindset/

During my last job search, I noticed that the vast majority of companies approach recruiting with the fixed mindset – they need someone to do X, so they look for someone who has done X before. That works well enough most of the time, but I’d like to start a business that matches up companies and individuals who have growth mindsets.

HN has a lot of smart people, so here’s a few questions I'm trying to answer:

-Would you use this to find good companies to work for? To find talented individuals?

-How would you filter out teams or applicants who just pay lip service to this idea?

-How would you structure this business? A website, recruiting firm, consulting firm that helps shape the interview process?
So you could say that the VM is a sort of browser condom...
List of messiah claimants
My perception is that F# is attracting the open source folks in the .Net community http://tomasp.net/blog/2015/why-fsharp-in-2015/
Then don't use .Net.

While there are exceptions, the .Net community hasn't ever really been about OSS.
Will Teddy [0] even read to you from your Young Lady's Illustrated Primer [1]?

[0] https://en.wikipedia.org/wiki/Super-Toys_Last_All_Summer_Lon...

[1] https://en.wikipedia.org/wiki/The_Diamond_Age
And all the crazy artwork. The conspiracy theorists go nuts over it.

http://mysteryoftheiniquity.com/2011/03/20/denver-internatio...
Not entirely true. I learnt to read Korean before visiting South Korea. I don't understand a word (ok, actually I understand about 7 words in Korean and can count), but it really helps when reading street signs because you just need to look for directions to the nearest Palace and then find that on your map.
There is a joke in my country (Poland) about every little town needing:

-an airport

-an aquapark

-a huge sport stadion

All of them as a way to transfer some state/town money to political cronies. The sad part is that some of those make sense as an infrastructure improvement (most doesn't though, at least here) so it's easier to sell the idea to people. The way the business is done is to just pay 30%-50% more than it should cost and pocket the difference.
I know! I've found it very difficult to "research" this online.

I'm kind of hoping that enough people know the principles behind the laws of their own countries that we could productively compare notes.

What are the parameters of the "integrity" right for IT systems in Germany? What kinds of stories could I look for to see what it's limits are? Rights always conflict with each other; there's always a "but".
Not exactly. Have you noticed the products inserted into some movies and television shows?
Nice goalpost move.
Code with Us: Let's learn to code by building projects for nonprofits
I suggest you hire a native English speaker to write and edit the copy on your site. There are numerous grammatical issues that instantly reduce your credibility. Just to name a couple:

"Find best Online Doctors to get instant medical advice and second opinion for your health problems." <-- Reads like spambot copy

"Talk with a Doctor on Phone." <-- Try "Phone a Doctor" or "Talk with a Doctor on the Phone."

"Subscribe a plan & Get Unlimited Medical Advice." <-- This is how my technophobe mother would text-message "Subscribe to a plan and get unlimited medical advice."

"Helping over 1000's of users everyday" <-- "over 1000's"? Does that mean several thousands? Or just more than 1,000?
Is there a relationship that gets built between patient and doctor? Or do you start fresh every time?
Show HN: Watch comedians hijacking YouTube videos with this new iOS app
Cook rice in a coffee percolator to avoid arsenic
Is this legit? Does anyone have experience?
Humans doodle, so it does too, I guess :)
That's what Canary Releases are for. You roll it out to (say) 2% of your users and see whether it shits the bed. If it does, NBD, you roll it back or patch. If it's good you roll it out to everyone.
> As a relic of the CGI spec, a header called "Foo" would be turned into an array index called "HTTP_FOO".

Usually, yes. But CGI has some headers that don't get that prefix, things like "CONTENT_LENGTH".

It looks to me like whoever added the HTTPS variable feature to Apache implemented it as an unprefixed header rather than a proper CGI variable, for some reason, and that's the issue.

That, or it is a CGI var, but some error in Apache allows HTTP headers to set it.
You mean the "At least I don't have to use Java" developers?
How about using two browsers? one of emails or banking and another one for regular browsing?
Germany: none at all (barring extreme cases), and that's really the overwhelming mainstream opinion of German scholars. Only defenders lament it.

The idea is that much harm comes from letting people walk, just because the police did an honest mistake. Or even a willful, outrageous thing.

Punishing the police officer should be enough to deter such behavior.

I think that it's a reasonable stance, but I'm not invested into it much.

I tend to see it as another example where we try to find a reasoned and weighted position, whereas America usually takes a very black and white approach.

I don't mean that disparagingly, it's a valid position. Just an observation.
Nope. They're all as bad as eachother, except the UK which is by far the worst of all of them (USA included).

In the USA at least though, there is the illusion of having some form of debate over privacy and surveillance (USA Freedom Act).

In the UK and EU they aren't even pretending to have this debate. They're just steaming right on ahead with draconian and regressive policies.
At least they're finally building a light rail link to downtown Denver...
Bromium loads each HTTP request in a separate "micro VM". A subset of their technology will be in Win 10: http://learn.bromium.com/microsoft-partnership.html
"That Dragon Cancer" if you're looking for more info.

http://thatdragoncancer.com/ and the kickstarter https://www.kickstarter.com/projects/godatplay/that-dragon-c...
I've got a site that has some basic Spanish grammar.

http://thespanishsite.com/spanish/grammar

http://thespanishsite.com

I'd like to repurpose it to cover the basics for several languages. With all the localization, it's handy to have a quick reference.
Google+: A Case Study on App Download Interstitials
I am absolutely blown away with the 100 PB for every customer... Meaning all together they must have somewhere in the exabyte to zettabyte range or are completely betting on the fact that no one will be able to/actually be willing fill this/their cloud. I guess I am just not used to the fact that on average most people have at least a 1 TB hard drive or hard drives that add up to 1 TB...
Also, Wil Wheaton did QA for the Video Toaster (source: https://en.wikipedia.org/wiki/Wil_Wheaton#Post-Star_Trek).
If they aren't safer online, that'd be a sign to me that I shouldn't bother trying to do everything right.

I don't want invest the time and energy developing expertise when even those that have it don't use it.
Because they'll stick to one solution. For distributed computing most people use something like NServiceBus, which is by far the most popular solution.
I liked this analogy. Why is it getting downvoted? It's totally true. Too much cognitive dissonance between open-source on a for-profit foundation.
Pure speculation here: But objectively I think my money was perceived as "dumb money" and YC had a great rep even back then. When you compare the offers the YC money is clearly the best deal and smarter move.
Yes, the author is correct. There is a distinct lack of OSS in .NET. I've been trying to find a project to contribute to among the graveyard on Github. However, I think the author falls flat explaining the why. I have a few thory on this. For so long C# has been a walled garden of closed source software. This closed source software, for the most part, works damn well. Why reinvent a square wheel when there is a shop of perfectly good OEM ones? At work, I'm focused on Getting Stuff Done and the .NET library is great for that.
Here are the things it can monitor out of the box: http://bosun.org/scollector/
Getting Started with Kafka in Node.js with the Confluent REST Proxy
> It depends on what you mean by saying "our".

By "our" I mean "humans", though it is actually true of all living things.

> Ever heard people saying "God is Love", "we are all one" or "nirvana"? That's it.

Of course I've heard people say it. I've also heard people say that humans are not the cause of climate change. Just because people say something doesn't mean it's true.

Nirvana is not a natural state that humans have abandoned (and thus can "return" to.) It is an artificial state that humans have invented. We don't "return" to Nirvana, we have to make Nirvana. We have to design it and build it and maintain it. And that requires work. Simply reciting empty platitudes won't do it.
Prompt Joins the Travis Foundation
previous discussion: https://news.ycombinator.com/item?id=9502049
Based on poking around the site, it looks like there's something seriously wrong with the data.
Very important decisions of our Constitution Court are actually officially translated into English. The translation is only informative, of course.

http://www.bundesverfassungsgericht.de/SharedDocs/Entscheidu...
Do the police officers actually get punished in Germany?
Cable manager for new MacBook
I was 13-14, and a member of Telenet's "Net Exchange" BBS, which existed to support members of its "PC Pursuit" [1] service. I dialed in via a backdoor on one of Telenet's 800 numbers, using (at first) a 300 baud modem on a HP 110 laptop.

I got to be friends with a number of the folks on the system, and at the time, my main system was an Atari 520STfm (it was all we could afford). A bunch of the guys on the board took pity on me, took up a collection, and (secretly) called my mom. A month or so later, a Very Large Box arrived in the mail.

The guys had gotten together with one of their own who owned a computer store, and bought me a used, but well-equipped, Amiga 1000 system, along with an adapter that let me use my Atari monitor with it. The letter that came along with the system said "No smart kid should be without a decent computer. All we ask is that you do the same for someone else when you're able." It made my mom cry.

I used that system every day. Took it to school to show off a couple of times (we were using PS/2 Model 25s there, in comparison). It was used to do titling for the public-access news show my media class produced, among other things. It was my main system up until I had to "upgrade" (blech) to a 386sx-33 so I could run 1-2-3, Wordperfect 5.1, and DBase III+ for college classes. Over the years I acquired numerous A2000s, an A3000 or two, and even an A4K, but nothing beat the fun of firing up that A1000 back in the day.

I turn 41 this year, and have had a great 20+-year career as a UNIX/Linux systems administrator. I'll never forget those guys who pitched in and helped out some kid living in a tiny rural Oklahoma town - they really helped get me to where I am today. To continue the tradition, I build and give away at least 2-3 computers a year to people who are less fortunate. It's the least I can do.

[1] https://en.wikipedia.org/wiki/Telenet#PC_Pursuit
Tl;DR There can be no single point of failure in the delivery of securities nor the payment stage. Identical information is relayed to all market participants at all times, consolidated on a single global ledger

(although the option to jump between private 'permissioned' ledgers is possible, and being researched by certain institutions as more suitable for their needs)
Not that the author doesn't have a point, but isn't Amazon Prime totally worth it if you order more than 3-4 times a year? I probably order something from Amazon once a month, if not more. On every other website I order from, I have to pay for shipping. Ordering something once a month could easily go over $100 in shipping costs.

I mean, maybe Amazon is shifting things around to get you to sign up for Prime, but to me, it seems like a no-brainer anyway.

Not to mention Amazon Prime Instant Video...
The Importance of Twitter Engagement
Ask HN: Be honest; Why do you want to achieve something?
According to George Orwell - Sheer egoism (be popular etc), Aesthetic enthusiasm (art), Desire to discover something and boast about it, Desire to change the world - are the only motives for achievements.

I will add a few more: Make lots of money and join elite club, To help the needy, To make your people happy, To get yourself out of misery, To have some pleasures for yourself. I hope I haven't duplicated the motives.

So, which of these push you and how much?
> Isn't the Chrome sandbox a better assurance than Chrome-under-Docker?

Sorry, are you referring to Native Client or Chrome's site isolation?
But you don't just contribute to your own "user value", you interact with friends and they with you and together, they know where you all are, what you like doing, and what you like to buy.

And it's actually worse than you make out. It's not just Facebook pages. They could track you on third party sites that have "share on Facebook" code on them (lots). They have real ability to track almost everything you read online, if you have an active Facebook session (or had one on your IP recently).

They could then sell this data bank out to third parties for A/B switching based on real demographic data.

We assume Google knows everything, but Facebook probably knows more.
I think one of the key problems with the overall layout was the desire to run a toll road that connects TX-183 to the northern highways through the airport, and to use this road as the two entrances.

They still could have designed the individual terminal layouts better though, as the road and garage layout of Terminal D shows.
Bar charts are free but histograms are not?
As electric cars become more common, we can lower gas taxes to the point that they only cover environmental externalities and switch to a weight x mileage tax for roads.

(Mileage to be measured at vehicle inspection time and incorporated in registration fees.)
I am 100% certain that I have already purchased mayonnaise in a plastic jar advertised as being non-stick.
Odd that they did not mention VPN, Tor, User Agent spoofing, tracker blockers, flash blockers, and so on.
See, also, the followup post from 2014:

http://shkspr.mobi/blog/2014/02/i-still-dont-want-to-be-part...

(and its discussion on HN: https://news.ycombinator.com/item?id=7304488)
Not entirely surprising the experts ranked "install software updates" #1, but it didn't even make the non-experts' top 5.

We, as an industry, still have a long way to go in making it easy and safe for consumers to keep their software up to date. Have you ever tried to explain to someone (outside the industry) which "click to install the latest version" messages are important to obey, and which are malicious?
Honestly it's a PITA when you fly, but how often do you fly? I'd rather the airport be far from downtown than have the approach/departure routes right over populated neighborhoods. That gets really annoying really quickly.
How are startups funded on AngelList doing?
I was able to play an early version of this at sheffield doc fest (https://www.sheffdocfest.com/interactive/overview), and was really impressed. It is one of the better examples I've encountered of somebody using the mechanics and language of video games to tell a truly personal story.

Very worth encountering if you have the opportunity.
Are the security experts are target more likely to attract those who might want to compromise them for bragging rights?
It's uhh.. cool. Haha. I can't think of a good reason either, but we're all hobbyists here, right? It looks like a fun weekend project.
We (rsync.net) maintain 's3cmd' and 'gsutil' in our environment, so you can do direct cloud <--> cloud transfers from either amazon or google to and from rsync.net.

We don't have a cold storage product, so perhaps not relevant for nearline ... but it is relevant for their online options. You do have the ability to migrate to another provider.

Two random notes:

- we're announcing zfs send/recv[1] as a transport in the next few days and there will be s3-competitive pricing for this product at TB+ levels.

- "HN readers discount" is still available all these years later. Just email.

[1] over SSH
Schooling Vietnam: How tech companies are training the next wave of workers
Non-developers probably do everything that would be valuable to an attacker in the browser and/or via email. (Heck, what else do people do on a computer?)
I was born in Switzerland and as a child was interested in Morse telegraphy. The military paid an amateur radio course for everyone doing this. When I was 20 they realized this and put me in the electronic warfare department. Every year everyone from military has to do some repetition courses. I my department everyone was actually working on real world data during this weeks. They did regular background checks if anyone of this group had any police records. To get this records, I always had to sign a paper (I just write this to show that not even the military could just access personal information).

Every year and especially during my initial training we had to do several tests. One of the main questions which was repeated thousands times and hammered into our brains, was: on who can we spy. It was not allowed to fail in this basic tests or you had to repeat them ad nausea.

The main rule was: Never ever spy, on any circumstances, on Swiss citizens. You want to spy on foreign things? Go ahead. But never ever on our own citizens.

I actually cannot say how reality looks, just what every soldier within the electronic warfare department had to go through.
FWIW, I've never had any luck with Theine or Drip. But --dev is good stuff - it basically turns off the JIT and invokedynamic, which are great for long-running processes but not that useful for shorter script runs or consoles. JRuby defaults to "good for long-running processes" mode, which is great for production but less useful when running short-lived tasks.

Yeah, certainly understood WRT JDBC. But, as nirvdrum pointed out elsewhere in the thread, you might look at Sequel rather than AR if you do want to do JRuby stuff and AR-JDBC is holding you back - it's well-supported and I know lots of folks use it well.

The domain sockets thing is unfortunate, but AFAIK, they just aren't supported by JDBC.
Every API Company Has Three User Interfaces
I have a really hard time believing that the US is categorically better than Europe on this. Could you maybe be a bit more specific?

I think I share the opinion about the UK being worse than the US on this spectrum, and could probably flesh it out if someone very familiar with UK law was here to fact-check me.
@phillmv - +1 for the Docker+supervisord version !

Would strongly recommend an "in-container" version, so that I can bake your agent into my Docker VMs. Remember that if I run my Docker VM on CoreOS, then it is very hard to install something on the host.
Maybe Redmine's wiki feature would work for you. As a bonus, it integrates with your VCS and has issue tracking so your PM and source control are all viewable in one place.
Stuttgart 21 is mentioned in the article, as well as an unnamed concert hall in Hamburg.
Why does it have to be public and distributed? Why not a central authority?
He's expressing that he didn't see it coming:

Even with this knowledge base I failed to pay attention to what I knew was a deep systematic fissure in the financial markets signaled by the fall of Bear Stearns. I was focused on user acquisition, growth and resolving litigation as opposed to revenue, a mistake when the Black Swan appears.

He's not claiming to have the ability to time markets perfectly. He had enough experience where he might have some awareness of the bigger economic and financial picture. He's saying that even people in the financial industry were caught off guard, especially investing professionals who are key to keeping startups funded.

I found this context to be the most interesting part in addition to the role of how companies behaved in an oligopolistic way.

It could also be taken as an argument for greater financial transparency, or recognizing that the stability of the financial sector is another risk to startups and innovation.
Its a different use case, cold storage vs content delivery...
Yes, because no one ever passes the buck entirely. I believe this accountability is a good thing; see for example this discussion:

This is how Visa works https://news.ycombinator.com/item?id=4396414 (900+ points 3 years ago)
I'm glad that Microsoft is absorbing enough young guys who went through college realizing open-source is cool to actually influence their future direction, but based on the entire self-interested history of Microsoft (https://en.wikipedia.org/wiki/Embrace,_extend_and_extinguish or http://www.pcworld.com/article/2901262/microsoft-tightens-wi... or http://techrights.org/2010/09/17/microsoft-management-mocks-...) and especially its deep insecurity around, AND open hostility towards, open source, they can truly go fuck themselves.

I know the latter is a downvotable attitude, and I apologize because it's very unlike me, but it is one of my few sore points, and this comes from years of web developer hell dealing with IE, years of working at places which only considered solutions that Microsoft invented, years of dealing with Microsoft BS left and right.

Before you downvote- If you honestly consider yourself a developer who cares about their craft and career, I want you to read these 2 books- https://en.wikipedia.org/wiki/The_Cathedral_and_the_Bazaar and http://www.paulgraham.com/hackpaint.html (yes, I just plugged a pg book on HN... It's part of why I'm here, actually!). And THEN come back and try to downvote me.
Yeah I read the draft and the rationale seems very weak. What's wrong with just sending the Content-Security-Policy header in responses and letting UAs do what they will? Nothing. Same as redirecting to HTTPS if you support it. But for some reason, they had to combine things and want to know if it's "safe" to use HTTPS. They didn't appear to list any real scenarios for this behavior. (Maybe there are, it's not readily apparent though.)
Just to be clear, do you browse and read email in a virtual-machine or is this statement referring to the behaviours of security researchers more generally?

If so, have you ever forgot to use the virtual machine and instead browsed or read email on your host operating system? If so, what did you do?

Furthmore, is it possible to break out of the hypervisor and into the host operating system?
> Be the change you seek

He is: https://petabridge.com/about/
A pocket-sized medical lab
Iceland? They kicked the banks out and the pro-USA goverment and their three letter ties.
RESILIA: When InfoSec Meets ITSM
IME: No, it's because they know virus scanners are ineffective. Security experts on windows also don't run virus scanners.
"Plotly.js Basic Charts is now free"?
For the lazy:

https://addons.mozilla.org/en-us/firefox/addon/ublock/

https://www.ghostery.com/en/

https://cs.nyu.edu/trackmenot/

https://addons.mozilla.org/en-us/firefox/addon/self-destruct...

https://noscript.net/

Anything I missed?
I was really hoping for a quick and easy chicken tikka masala.