skysight-inc/HackerNews huggingface dataset:
So I think there are (at least) a couple of separate issues here.

1) Is Something ethical marketing tactics.

This is mostly what I was trying to address. If something is the result of ethical marketing then I'm of the opinion, "We'll allow it!" The reason for this being that "the better product" will fail if marketing is poor; and so people are typically better off going with an inferior product that survives.

2) Is Product Hunt allowing/perpetuating voter rings?

I think this goes to your issue of, "THE SAME people be in the first 10 upvotes". Honestly I'm not sure, but I do think Product Hunt's model is flawed. I think this message on Product Hunt alone gives some indication to the problem,

"Product Hunt is a community of product enthusiasts. Submissions are accepted by our most active members, specifically those that have been invited by others in the community."

It is an invite only, non open community. So in a certain sense the entire site is one giant voter ring; we all can vote, but we can't submit. So all voters are limited to voting on products from those deemed worthy by Product Hunt of posting in the first place.

If we were to contrast this with Eduhunt.co (same as Product Hunt, but targets only educational products) it is an open community that allows anyone that registers to post.
It's probably not robotics per se that are supposed to improve the boys so they won't fall behind over the summer. It's probably anything that gets them thinking systematically.

They probably went with robotics over something like French history because the program can only work if it is interesting enough to get kids to sign up.
This is based on twilio?

Any thoughts on going open source?
From the FAQ:

Why isn't it free? So many things are free!

This is a question we're surprised to get as often as we do. The short answer is we want to run an actual stable business so people know we're profitable and can meet their needs. We don't think someone's phone number is something we would trust to anyone but a business that will be there tomorrow. We also think it's a better relationship if we're trying to sell you a service instead of provide a service to you and sell YOU as the product to advertisers. Not everyone agrees, and that's ok, but it's worked well for us throughout our careers.

We need more of this. Death to Ads!
I agree re not using externally-hosted Javascript. In fact I seem to remember a year ago Google Code having connectivity issues and jQuery all over the place failing to load. I was glad on that day that I always host my own jQuery.

Re tracking, I ran into this embedded in some webfonts CSS a project was using (downloaded from one of those font websites):

/* @import must be at top of file, otherwise CSS will not work */
@import url("//elided.example.com/count/35d82f");

@font-face {font-family: 'Foo'; font-weight: 300; src: url('/webfonts/foo.eot');.....}

That @import returns nothing. It is just part of their tracking/licensing. And it was really slow! And I love the lying comment they included.
Hiring H-1B for cost reasons is not possible.

Then explain why, in 2001 while working for Lucent, a more qualified for the job H-1B engineer was paid 45K to my 80K?

While I hear from people like you and other sources that there are H-1Bs being paid what they're worth, all the cases I actually know something about are paid significantly less than market or the like (e.g. too many cases of more expensive, experienced US citizens and permanent residents being replaced by cheaper H-1Bs; we've been reading in the general news about some particularly notorious cases of this happening en masse lately at that California utility and Disney).
That's not really true. I'd say any basically intelligent guy will have immediately figured out the injustice of the world when he matures, no matter his class background. And what action to take after this realization also differs a lot. Maybe he'll just think "fuck it I don't care climbing the ladder with you lot" and sets his sights on some other pursuits. And also a lot of rich kids are just spoiled and do nothing well. It all depends.
History’s weirdest-looking guitar pickups
If we were talking about C this would be called undefined behavior. If you don't satisfy the preconditions before calling a function then the not only is the output invalid but the entire program which uses it is invalid too.

I don't think a language like PHP, or indeed anything written in it, should have undefined behavior but I'm not the author of the library.
I don't agree with that. From the point of view of the user that content might as well have come from a third party since - just like the headless browser used in the testing - they have absolutely no way to verify that short of doing a bunch of whois lookups. And if there is one thing that a user should be able to verify then it is that the entity sending them the main page is the same entity as the one that sends them the rest of the stuff on that page and to refuse all or part of the transaction if that isn't the case.

After all: there is only one slot in the URL bar, which strongly suggests to the user that that is the entity they are transacting with.

What technical tricks are pulled behind the scenes have no bearing on that.
The growing Kubernetes ecosystem
> I assume things are much better now

Nope: http://grimoire.ca/mysql/choose-something-else
>> Spreadsheets are also a very visual environment compared to a text-based programming language.

I like to think of a spreadsheet to be a REPL for the masses.
Apparently http://www.federalreserve.gov/econresdata/frbus/files/frbus_... (thanks @ihsw!)

Lines 48 through 57 of example1.prg:

' Turn off zero bound and policy thresholds; hold policymaker's
' perceived equilibrium real interest rate constant
smpl @all
dmptrsh = 0
rffmin = -9999
drstar = 0

' Set fiscal policy
smpl @all
call set_fp("dfpsrp")
I agree that there is scope for JITing in Haskell.
But JITing is not without cost, and in statically typed languages, some of the big gains that make JITs for Javascript or Python so powerful, go away.

If you are using C in a way that requires frequent invocation through a function pointer in hot code, you are probably using an OO-idiom, so casting, so circumventing C's typing.
I helped someone sitting next to me on a flight deal with the fact that the touchscreen wasn't calibrated, you had to move your finger around and see where the cursor ended up, then start to translate your pokes a few inches. ;d
I think fail2ban does not do IPv6 yet.
Video: We Put Donald Trump into Google’s DeepDream AI, with Terrifying Results
Going from the incidences of pure-computer attacks, the main issues are:

1. Ability of attackers to probe many systems for vulnerabilities safely. Someone walking down the street pulling handles to check for unlocked cars can only get at so many cars.

2. Physical distance of the attacker from the victim and their property. Specifically, they can be in a different legal jurisdiction, making it very hard to prosecute them, and therefore reducing the deterrent effect of law enforcement.

3. Abstract nature of the act from the criminal's perspective. The decision to commit a crime, and the processes that deter it, are not entirely rational, and have to do with things like social anxiety, perceived safety of the environment, etc. Just like trolls say things online that they would never say I'm person, some online attackers do things they would never have the nerve to do on person, even with the same level of actual risk.

As to motives, these are fairly well-studied, and some are very applicable to this class of vulnerabilities.

1. Direct acquisition of valuable goods/information. Doable with this vuln, but not for someone sitting in Russia. Strike it off the list.

2. Extortion. Most DDoS attacks are aimed at this. You can't get anything directly by causing someone harm, but you can (and many people do) perform a "demonstration" attack to show capability, then call you up and make demands. Very doable with these attacks.

3. Ideological motives. This tends to lead people to want to hurt others in particularly visible ways, so I can see the psychological appeal of using this kind of vulnerability for a terrorist attack. A bit out there in terms of probability, but possible.

4. Nation-state action. Not many consumers worry about this too much, but I think the appeal of this vulnerability to an intelligence agency is pretty clear.
Google doesn't back-port fixes to JQuery.

You can link without specifying the version number, but then you don't get full caching, so it's not common in practice.
Would you support redefining glitch to be specifically only the class of errors that "cosmic ray event" falls under?
[citation needed]

http://www.wired.com/2015/04/hackers-commandeer-new-planes-p...
I find myself using scriptjs (on which this is based) to download browserify bundles for libraries which we don't want on every page load and also to load external API libraries which we want to fetch directly from their publisher (e.g. Mozilla Persona.)

It looks like webpack solves the first problem (http://webpack.github.io/docs/code-splitting.html) but for external unmanaged libraries they recommend scriptjs.
Excellent questions, I'll field them as best I can, if there's clarification needed just ask.

- Voice data passes through the POTS lines to our VoIP cluster, eventually getting routed to another call channel or to a recording. Freeswitch is the node of choice here, though we're doing rather simple things with it so eventually we'll probably replace this with something more homegrown. Every vendor along those legs can listen in, just like normal POTS lines. Until people get off the POTS system, this is just going to be reality. Plans and plumbing are in place when viable to make this a strictly end-to-end pass-through fully encrypted service if you're not going over POTS. VoIP is pretty awesome stuff.

- Any vendor servicing the lines can listen in. Unless the NSA has stopped, they're definitely processing some of it. If this is a concern, you really just don't want a phone number at all. I'd love to offer better privacy there, but it isn't in anyone's hands but users' really.

- No SLA for the consumer product yet. We have a track record of no downtime outside our maintenance, but we've only been doing this for a few months so that's easy. That said, everything's modular and I can replace any given piece with a new virtual server in under 10 minutes from start to finish.

- Redundancy in the web portion is there, redundancy in the database is there, redundancy in the VoIP level is sort of there, but if any node along your call chain goes down you're going to lose that call and have to start it again. This is yet another failing of voice communications in general, and not something we can do anything about.

- POTS quality is the best we (or anyone) can do. No compression, just straight uLaw without processing so it's as clear as can be expected from a phone. You can actually see this phenomenon displayed from any cell phone currenty. Call another cell on your same network, you get pretty good quality comparatively. Call another cell on another network and depending on peering you could degrade quite a bit. Call a line connected to any copper telco and you're back at the lowest common denominator. Someday if we can get people off telephone numbers (a haughty goal, unfortunately) we can do quality limited only by your hardware on each end.

Let me know if you have more.
Look SRI up on this very page.

Web pages can make requests to other origins (GET image, script, XHR, POST to iframe, XHR). CORS allows you to read the response. But what you're asking would probably be hard to transition the whole web to without too much spam and DOS'ing.

The sandboxing for an external script you want already is feasible with an iframe with a different origin.
TeaBOT (YC S15) Makes Customized Cups of Tea with the Touch of a Button
Looks like the filters from the notebook are a re-organized view of figure 3 from http://www.cs.toronto.edu/~fritz/absps/imagenet.pdf (as the caffe page cites at the top). I'm not a lawyer, so i don't really know if making a 'new' image using the components of the copyrighted image is derivative or not.

> Thanks for the feedback though, I will set up a landing page instead.

Please do, if this is really legit, it's in your best interest to set it up in the most professional way possible. It'd probably be better to get the organizers of the festival to put the content of the post in one of their pages and you link there.
> Did you store results from the response¹ metadata object for every domain and process it later or use Regex to parse the HTML content?

That would have constrained throughput too much so I opted for culling it during the crawl to just content-type and url, this was then processed to extract the various bits of information. I did use the 'resource received' trick you linked above. Very useful.
Why this over Twilio? As far as I can tell, this does what Twilio does, but they're much bigger and more established.

With my setup, inbound business calls get routed to the right person during the day, an automated message if we can't pick up at the moment, and a different message outside of business hours. Outbound calls from our personal numbers get forwarded through the business number our numbers aren't exposed.

It all takes less than 70 lines of Python/Flask.
Yeah, not only do we preserve the MD5 of the uploaded file for photos, we preserve the uploaded file itself fully intact. So getting the Original back will result in exactly the same bytes and thus the same MD5 hash. (You're correct that we used to apply some transformations to the photos that didn't materially change the pixel content, but changed bytes and thus the hash. We don't anymore).

For videos, we don't preserve the uploaded video for a variety of reasons, but the primary being that our intent is to support Internet-deliverable formats & filesizes. Customers regularly upload videos that vastly exceed Blu-ray bitrates (literally hundreds of megabits-per-second) that just aren't Internet-useful.

That's different from a JPEG, GIF, or PNG where the original file is Internet-useful, deliverable, and makes a meaningful difference. That file is very useful for sharing, which is what we do - we share.

We don't consider ourselves to be a backup service, and there are lots of great backup services out there to choose from that would love to take a 3GB 5 minute video. We take extraordinary care with our customers photos & videos, but we're a photo & video sharing service, not a backup service.
> I also want to take a moment to make fun of people measuring character passwords in bits (as opposed to characters).

You took an uncharitable interpretation of something another person said using standard jargon you apparently don't understand, and then went off on a rant doing exactly the thing you deride.

> The whole bits thing started when people are contrasting character based passwords with other types of passwords like certificate based (as a way of showing how much more secure certificate based authentication is).

You've misunderstood the discussion around this: it's about the bits of entropy used in the generation of passwords, all of which are digital in nature (or as you put it, in "characters"), and not how many bits it takes to store the character in the password.

Talking about "bits of entropy" related to a password means a password generated by a process using that many bits of entropy, regardless of how long its output is. It's the way to talk about passwords independent of encoding, since it talks only about their information theoretical content (stemming from the manner they were generated).

Thus, talking about "a password with X bits of entropy" is standard industry jargon for "a password generated by a technique which consumes X bits of entropy", without disambiguation between binary keys, randomly chosen characters, or randomly chosen words. (They all have the same cryptographic strength, for a given number of bits of entropy.)

tl;dr: You were overly literal and seem to have misunderstood standard industry jargon, and then gone off on a nonsense rant.
At the risk of coming off as crude, the only difference between those two concepts are the marketing copy and public perception, in my opinion.
browsers themselves offered built-in mechanisms to support advertising that respect privacy & performance?

I wonder which kinds of proposals you would suggest. It should also cover analytics.
Fantastic idea, but they should be clearer about what happens if someone sends you a text message. It seems from the FAQ that maybe you wouldn't get it? If I ported my number over, and didn't get texts anymore, I'd be pretty sadface about it.
> This is a red herring: this idea that the user will already have a cached copy of [open-ssl] is bogus

He says this is because of many different versions in use

While this isn't true for a managed repository of software, it is still true for most software releases so the mismatch just might happen further down the line.
A letter from Stockholm about rent control
The only time these designs seem to work is when there's never any water (islands) or they have a complex cogeneration strategy.

For instance, ship the brine to someone who needs chill water, and then ship the warm brine off for salt extraction (apparently it's hard to profit off of sea salt if you can't get free BTU's from somebody, like a neighbor or the sun)
We've discussed this possibility of this and I would really like to make an attempt when we have more data!

The practical application is this is sort of an 80/20 proportion though. Currently we see fairly significant improvements in some situations just by the system being there. Factories will pre-test units before passing them over to our system in order to demonstrate better quality, when prior to installation they weren't testing a majority of units at all.

It'd still be really cool to try, haha.
>But to be clear, drug cartels, spy agencies and criminal organizations have been able to do that for quite some time. They've just had to send a person to plant the bomb or the bug or the location tracker in person. And it's not generally regarded as the car manufacturer's problem to deal with that threat.

But those sorts of methods require orders of magnitude less plausible deniability.

When people hear on the news that some controversial political activist (in any country) died during an armed robbery, from a propane explosion, suicide or a car crash which one do you think they'll question the least?

You're a fool if you think intelligence agencies (around the world) haven't been weaponizing these sorts of vulnerabilities (and they're fools if they haven't been). The major hurdle I see is that the people they'd risk exposing this sort of capability on, don't ride around in cars with the required features or live somewhere where it's more sensible to get them some other way.
> signature checking is well understood and rarely goes wrong

I would argue otherwise, plenty of signature schemes give you enough rope to hang yourself. The Playstation 3 example springs to mind!
Doesn't help that the title is misspelled
Elixir documentation right at your fingertips with Alchemist
EURUSD did go up a bit since the statement (~ 2 hours ago), nothing substantial though.

Ref: http://finance.yahoo.com/q?s=EURUSD=X
It sounds like you just don't know how to use Ruby and Rake. Rake doesn't depend on Rails and is a system for automating things and resolving dependencies. It's also cross platform(Mac, Linux and Windows) and has plenty of Books, Blogs and documentation. It sounds like you got scared of something you didn't know how to use. I started Ruby with a weekend of study and a background in C++ and Java, and I've been doing it for 7 years. When you try new things, try harder.
This is not good advice.
Versus the data scientists and HPC communities that buy hundreds of Nvidia GPUs for CUDA and associated applications.
With vesting options, can you still exercise all of your options all at once even though you haven't vested yet?

It's just you have to return the unvested stock when you leave?
Interesting thought, but then again, maybe they would just use external acceleration on such planets (ie catapult launch assist).
It fundamentally changes things because it's so easy to do anonymously. If someone drops rocks off an overpass, it's pretty easy for police to track them down and arrest them. If someone attaches a bomb to the bottom of a car, sure it's harder to get caught than dropping rocks off an overpass, but you still need physical access to the car, and it's still relatively traceable. But if remotely hacking a car, it would be pretty easy to stay anonymous. Plus, in both those other cases it's obviously foul play, whereas if a hacked car runs into a wall it's probably not going to be so obvious.

Plus, the anonymous nature of the internet makes it much easier to become detached from the real-life consequences of your actions. Just look at all the examples of online harassment from people who would never say things like that in real life. Look at people who go and grief kids' minecraft servers, yet wouldn't go and kick over their sand castles in real life. Look at morons who swat people.

Actually, come to think of it, maybe it's not so different - if it was found that a big car manufacturer had a problem with their door locks and you could open it just by sticking a toothpick in, you can bet they would take the blame once they started getting stolen.

I'm not saying the responsibility is solely on the manufacturer, but they definitely bear a major part of it. When you buy a car, you expect a reasonable amount of security. I guess the question is where we draw the line as to what counts as reasonable.
I'm criticizing her emotional perception, not her intelligence.

She self-identifies as ASD, and the problems of ASD people with emotional perception/empathy/mindblindness/etc are very well-documented.

Would you rather take coding advice from the person who wrote a ball of mud in PHP, or John Carmack?
Blackstone CFO headed to Airbnb
The southwest US is naturally semi-desert, water has to be brought in or people couldn't live and grow crops here.
Often your shares come with proxy voting agreements that go to the CEO / Founder. So the employee stock pool becomes the founder voting pool, until IPO.
Thanks Kat! Hi HN, I'm one of the founders of teaBOT and I'm happy to answer questions you might have about our tea robot!

Rehman
What is social justice anyways? I only ever hear it in a negative way, that of Social Justice Warriors.

Here in the states, the republican right has historically been the people's party too. Part of their appeal is being the 'party of Lincoln'. Really, both of our parties have made good appeals to being a 'people's party' in their history. But trying to say that the international left was historically a party for all peoples is tough too. Russian reds started as an all inclusive bunch, but became quickly co-oped by anti-Semites, racists, and nationalists. Still, I think you can very well categorize them as Left through and through.

I still really believe that the internet has cemented our commonality. White folk in America are now seeing the daily interactions of black folk with the cops, and how unjust that is. And they are going out and protesting with them now. Cries of 'we are the 99%' are being made by all of us now. The treatment of women in Tech and elsewhere is at the very least, known to be a problem now. Say what you will for solving these issues, but the Internet has incited just communal outrage in it's short time in our lives. I say give the internet time to work itself out. There are still congresscritters that boast about not using email and we are just now raising an internet-always generation in many countries. This, like all things human, takes time.
Awesome thanks. I will be definitely taking a look!
BlogSpot is owned by Google, they should know better.