skysight-inc/HackerNews huggingface dataset:
If the band is 20-25, they charge everyone based on age 20, otherwise they would be subsidizing high risk drivers instead of generating more profit on 21-24 year olds. Actuaries are applied mathematicians, and typically of above average intelligence compared to the general populace.
If you have 4 GHz of processing IEEE but getting a wrong answer at the end, how do you compare that to a smaller number of FLOPS with a rigorously-bounded answer? I'm not saying they're apples to oranges, I'm saying that you can't just compare the quality of two foods based on calorie count alone.
> There is only one thing being valued by a rational investor: net present value of future cash flows.

This only holds under the assumption of rational expectations.

Under the more reasonable assumption of heterogeneous expectations, it becomes necessary to think about what the market on average expects (or, possibly, other functionals of the agent population if the assumption of competitive markets is violated); the more so the shorter your investment horizon.

See for example

[1] F. Allen, S. Morris, and H. S. Shin. Beauty contests and iterated expectations in asset markets. Review of Financial Studies, 19(3):161–177, 2006.

which shows the failure of the law of iterated expectations (which is used to establish your original assertion) for the average expectations operator.

You then have

[2] P. Bacchetta and E. Van Wincoop. Higher order expectations in asset pricing. Journal of Money, Credit and Banking, 40(5):837–866, 2008.

who derive a gap between price and fundamental value (understood as the NPV formula that would prevail without the interference of higher-order beliefs) in the presence of heterogeneous expectations.

And last but not least,

[3] M. Kurz and M. Motolese. Diverse beliefs and time variability of risk premia. Economic Theory, 47(2-3):293–335, 2011.

who generalize this from the asymmetric information frameworks used above, where expectations are coordinated by the public signal, to a symmetric information setting where it is the correlation of beliefs that coordinates expectations.

In the end, this is all building on Keynes's original intuition that if agents hold diverse
beliefs about the future "the energies and skill of the professional investor and speculator are […] concerned, not with what an investment is really worth to a man who buys it ‘for keeps’, but with what the market will value it at."

So no, it is not necessarily the best strategy to only focus on NPV of cash flows. The shorter your time horizon, the more you depend on what "other people" expect too, whether you think them foolish or not.

_____________________

PS: Of course, if you believe that you have no predictive power w.r.t. what "Mr. Market" thinks (to borrow from Ben Graham's exasperated simile), then by all means your optimal strategy becomes to lengthen your horizon as far out as possible and concentrate only on NPV of cash flows, just as you said, in the spirit of value investing. I'm only pointing out that the optimality of this strategy hinges on both your investment horizon and your belief about your relative predictive powers w.r.t. "Mr. Market" and the fundamentals (leaving aside positive feedback loops or what Soros called "reflexivity" between price and fundamentals for now).
It's utilitarian to the max in that it cares little for graphical design. The layout is fairly functional, though I did initially think the menu links at the top were disabled given that the links below were classic blue underline.

I can easily see why someone would call that terrible; it looks like a time-warp back to the mid-90s when Netscape rendered the default HTML background as grey before everyone eventually standardized on a white background. You actually have to go out of your way to make the logo and menu medium grey on light grey when the same amount of effort could have been put towards a cleaner, more modern, and higher contrast look without changing the utilitarian layout.
That still is less harmful than extending the copyright of many other works just for Mickey Mouse, which is what I am really complaining about.
And my point is that that's not really so. If the adaptations are indeed 'natural' (eg a Snow White scene where the Evil Queen consults the magic mirror about who is the most beautiful and the mirror affirms that she is, followed by another scene where the mirror identifies Snow White instead), then I say that's certainly defensible in court. Disney doesn't have first dibs on the idea of an Evil Queen with a magical talking mirror, seven dwarfs who live in a little house and so on. Anyone can use those elements. What you can't do is call your seven dwarves Happy, Grumpy, Dopey etc the way they are in the Disney movie, as those don't appear in the original story.

This sounds very much like an argument about clean-room reverse engineering as a defense to claims of copyright infringement. But that's a totally different situation.
>Responsible disclosure is intended to be ethical, the opposite is ... well, irresponsible.

It turns out the name was chosen for its connotations, i.e. to sound good. If you call it "coordinated disclosure" it doesn't come into the discussion cheating.
Not at all.

A rational investor knows how others value something and acts accordingly. What you described is one way to value something. If it was just you and me buying stocks, I would know how you act and get in front of your behavior to profit from it.

In finance you don't have to be the smartest person in the room to succeed, you just need to know the most about what everyone else is thinking.
"Hardware has permanance"

That automobiles are recalled for reasons other than hardware replacement is a recent phenomenon.

However a software patch would keep Def Con busy while replacement hardware is developed.
Walmart has its own trucks and truck drivers on pay roll. That could be a decent part of the difference.
I thought about this too, but they're replacing the firmware with their own custom firmware OTA. How do you know that your hypothetical "very simple listener" won't be bypassed or re-appropriated for other means?
Surely, but I'm not disagreeing about that, a fact which seems to have escaped all the downvoters.
Are there any cost advantages to hosting a static site on S3+Cloudfront when compared to other services?

My first thought when reading this blog was that you can get the same results by placing your static content in an Nginx docker container and pushing it to ECS or Triton.

The docker container tagging would also avoid the rollback limitations mentioned in the article.

AWS offers so many ways to accomplish the same things, it's hard to figure out which solution is the most cost effective.
If a photographer is deleting 95-99% of the images that he takes, that photographer should either take fewer images or improve his skills. I know and travel with a number of serious amateur and professional photographers (not shooting for clients, but shooting on spec for images that they hope to sell) and they delete very few, if any. First, the technical and artistic quality is good to begin with. Second, the time required to do so can be better spent on post-processing or shooting more subjects.
Usually it is implemented by reshuffling stack frame + jumping to the call destination. See how it is done in .NET, for example.

Do not confuse tail recursion, which is the least interesting narrow case of a tail call, with tail calls in general.
Probably, but remember that if you're maximizing profit then one $100 margin customer is as important as 1000 $0.10 margin customers.
Don't Settle When It Comes to Enterprise Search Platforms
Interesting — I had no idea of those "side effects". Thanks for the links!
Smallpt ray-tracer using SYCL for OpenCL
Researchers claim they’ve developed a better, faster Tor
Haskell is nowhere near an ML-like language, it's lazy, while ML is eager. And Frege is nice and all that, but it's very far from being efficient, nothing close to F# performance.
Sure, maybe those facts imply that developers at Amazon have it worse than developers elsewhere, but I wouldn't exactly characterize any of them as Amazon being "terrible" to employees.
The World According to China
> For small spreadsheets this will take a minute or so. For large spreadsheets it is best to run it overnight.

Ah, Ruby.
Robokassa Brute Check by MastaDan
ProcessWire 2.6.10
Presumably very little since the natural gas is a by-product of oil drilling.
There's also inhibitions to talk about. It's one thing to go lay a spike strip down in the middle of the road and it's another to do something over the internet.
We've heard similar feedback on the security front before, so we'll get to work on adding more clarity around that.

Can you enumerate what else you'd like to know about how the app works?
Immediately followed by a Canonical employee saying that no, that's not true:

"Ubuntu is actually very careful to not release anything ahead of CRD unless the
CRD is broken elsewhere. Not saying we've never made a mistake, but as you can
imagine it is quite annoying when a CRD is broken-- we certainly don't want to
be the cause of that annoyance for others. :)"
I think you see for yourself where your example falls apart.
You are unqualified to determine the level of risk that was imposed on the other drivers. You have no idea how many zeros to add or remove to how likely an accident was to result from this. I'm not sure there exists a person that could give an accurate representation beyond generalities, so please don't present yourself as this person.

The point, the only point, really, that people have with their actions is that they endangered other people on purpose and without their consent. I wouldn't defend someone weaving between cars in traffic and leaving inches between bumpers doing so (I'm sure many of us have seen this) for the exact same reason. There are far too many variables to accurately account for, so they are raising the risk to all the people around them. Even an expert driver can't claim to know how every other driver on the road will react.

That the researchers did this for what I'm sure most of us believe is a good reason is irrelevant, given there were alternatives. They made a judgement call, and now we are all upset at their poor judgement.
Have you tried talking to her about it?
Well, there's a "Report vulnerability" link right on the front page of nexmo.com as of right now...
>Can it block unknown callers?

>The FCC doesn't allow phone companies to do that directly. It drives me nuts -- it's always spam callers.

I think T-mobile is wrong. You can block anonymous/spam calls with my (US) phone provider: https://i.imgur.com/0zCcbpN.png
No. Qualys sells primarily the tools you use to detect if you have bugs like these; by publishing exploits, they're actually giving away some of their own assets.
The fact specific exercise is: not {all acids} introduced into {all alkaline solutions} make for end-state simple (ie, potable) water. The result is often, water with residual mineral content. And often that is, in fact, quite toxic. EG,

Another definition of a basic salt would be a salt that contains amounts of both hydroxide and other anions. White lead is an example. It is basic lead carbonate, or lead carbonate hydroxide. These salts are insoluble and are obtained through precipitation reactions.

So good luck with that exercise.
I think you can control for socioeconomic class of the areas. Though I would argue that an area where black people are more likely to be unable to afford proper maintenance for their vehicles, are more likely to be poor in general, may be an area where other disadvantages (like the lower wealth per family and employment rate for African Americans, and were blacks got worse loan terms, or weren't allowed to rent or buy in better sections of town) may contribute to a systemic bias.
this was meant for https://news.ycombinator.com/item?id=9905363
And you could set the environmental variables to be as precise as you need. If you need 29 digits of precision, you can quickly show that you know 1.4142135623730950488016887242 and nothing more.

A reasonable metaphor would be that you cannot draw all of the Mandelbrot diagram, but you can render any piece of it to any resolution you choose. Being able to describe it precisely, and to know the limits of your accuracy, is useful.
AIG :O
That's not "a portfolio of the 20 or 30 most profitable" companies vs the S&P 500. That's a portfolio of ten companies that were at one time the most profitable and then not regularly adjusted compared to an index that was updated regularly (only 312 companies in the index in 2005 were still in it in 2015[1]).

A realistic portfolio to prove/disprove your theory that investing in highly profitable companies is a losing strategy would be to take the 25 most profitable companies (I said 20 or 30 so let's just go with the middle) and update it every year.

With only the eight most profitable making up ~15% of the weight a portfolio of 25 is probably going to approach 30%. It's hard to imagine the largest components representing nearly a third of the index weight are going to move completely and drastically divergent to the index as a whole.

[1] http://marketcapitalizations.com/changes-in-sp-500-component...
Jason Wang (YC S11) Went from Having $10 to Selling His Startup for Millions
I really like your article on Medium on initiating UI Engineering questions.

It took me a while but as an interviewer myself, i realized that I need to move away from an interviewing style that is strictly looking for answers that can be evaluated objectively. A couple of them are good to check for fundamental know-how but a process designed around just them just doesn't bring the right balance. Both left and right part of the brain need to be cross-checked on for a good candidate.
> perhaps you should make sure Red Hat releases patches hours before the CRD, like Ubuntu does?"

We could end up repasting the entire thread, but the very next comment is from Ubuntu denying that behavior. Releasing early is basically violating the embargo.
Rogue Dairy Queen has been ignoring corporate HQ since 1949
Slide 21:

> I have been unable to find a problem that breaks unum math.

Then perhaps try (x+y) != x, where x is a very large, and y is a very small positive number.
The same people/method the company is using to determine the strike price of any new options they are issuing?
Today, we're still using AM line of sight radio, on a frequency that can only accept one transmission at a time.

First innovate a better system for drones. Then replace the legacy ATC system in stages for Class A, Class B, Class C, Class E IFR, and finally Class E VFR. And only then can the altitude restriction on drones be lifted, and integrated into the rest of the ATC system. But even getting Class A and B under the same modern and scalable system as drones, even if they aren't sharing airspace, is something pilots, airlines, ATC, and the FAA have needed/wanted for a long time.
As a modifier, most driver's licenses can be used as a form of domestic government-issued photo identification. States also issue id cards, which might be used by those who cannot drive or afford to take the driving test. In addition, some driver's licenses, like the Pennsylvania license for people with religious objections to being photographed, don't have a photo.

Those details, aside, my question remains even if there's a switch from state issued driver's license to state issued identification - why do you think a state-issued identity document affects one's federal immigration status?

When I was in high school, we had a German exchange student. He got the license so he could drive in Germany under the US license, as otherwise Germany has a higher minimum age to drive. The validity of his license was not tied to his immigration status. If this thesis - that holding a US driver's license somehow makes it easier to change one's immigration status from "undocumented" to "documented" - is true, then problems should have arisen decades ago for people with valid state licenses who later returned to the US without first getting permission from the US, or who overstayed a visit.

I'm not aware of that happening, but I haven't looked hard. Still, if it really is an issue then we should see historical examples, and they would have been brought up by opponents to the new law, so I expect we would have heard about them by now. Do you know of problems?
A $500bn Amazon would be more valuable than a $500bn Walmart though. Walmart succeeds by being the low-cost leader, which inherently limits their margins. Amazon on the other hand has the capability to generate massive margins due to the network effect in it's marketplace.
michaelochurch has advocated "open allocation" which should help.
Advice for not adding more founders?
They reported a quarterly profit just yesterday.
This sounds like the equivalent of sending UDP over the Internet. If you're receiving UDP from a server, you're not going to get access to the server just because it spouts UDP. If that's the _only_ thing the server does, you're just not going to gain access to it.
"Responsible disclosure" is a term of art coined by a group of vendors and consultants with close ties to vendors. Baked into the term is the assumption that vendors have some kind of proprietary claim on research done by unrelated third parties --- that, having done work of their own volition and at their own expense, vuln researchers have an obligation to share it with vendors.

Many researchers do share and coordinate, as a courtesy to the whole community. But the idea that they're obliged to is a little disquieting.

If vendors want to ensure that they get some control over the release schedules on their flaws, they can do what Google does and pay a shitload of money to build internal teams that can outcompete commercial research teams. Large companies that haven't come close to doing that shouldn't get to throw terms like "responsible disclosure" around too freely.
You're right about the age of Snow White, but things aren't always that rosy for Disney. When they made a film from Kipling's The Jungle Book, that book was 73 years old. If Walt (who took strong personal interest in the project) felt comfortable making money by adapting a work that old to a new medium, why shouldn't I feel comfortable adapting his even older older works?

(Yes, this is a Tu Quoque argument)
The "ends justifying the means" is not a fallacy, unless you think Consequentialism is completely wrong[1]. In this case, it seems a lot of people do think the ends justify the means. In other words, the risk was morally justified given the results.

[1] https://en.wikipedia.org/wiki/Consequentialism
Process.nextTick vs. setImmediate
While it's widely believed that once contracted you can't get rid of malaria, you actually can(though not in all cases, and it might be hard to prove you are malaria free).

http://www.cdc.gov/malaria/about/faqs.html#treatment
There is no basis in the statement that witholding gives people more time to patch their systems. Even if these authors don't release their PoC, there isn't any way to prove it isn't already known to bad actors. Without the PoC, it is more difficult for legitimate users, particularly legit users with custom deployments, to know if they are vulnerable and to verify that patches actually fix the problem.
As I said over on /r/netflix, great app, and the implementation is hands down better than rabb.it's RTC method.

Did you start after Netflix switched to HTML5 video? I'm curious how you might've dealt with the old flash player- I basically gave up on any actual control of Netflix in my side project because it was too black-boxy.
Its better performance/availability to use a CDN and you have the same problem with any CDN, not just Amazon.

https://www.keycdn.com/pricing

$.04/GB is pretty cost effective.

But yes, on a pure cost-basis, publishing it via a single $5 DO node is cheaper.
Presumably a naive implementation would run the risk of having an infinite loop? Have you got any references of the theory proving them safe and/or removing the references?
> Add four or five more zeros and you'll be in the ballpark.

So the 1:10,000 should be between 1:100,000,000 and 1:1,000,000,000? You're saying that, on average, between one hundred million and one billion vehicles would need to pass a stopped vehicle on the highway before causing an accident? Sorry, but if your arguments previously strained credibility this takes the cake.
1. For ADS-B out, you, of course, need all the requisite sensors (GPS, etc).

2. The correctness of ADS-B data protects human life. Naturally there will be much stricter requirements (certification of reliability) on something that produces this data and introduces it to the system, than for a "just for fun" receiver.
Fair enough, but I don't feel any obligation to make his argument for him, and the original claim that I first replied simply seems mistaken to me - and that's not me being uncharitable, because there are other people building new arguments on that incorrect understanding elsewhere in this thread.

Frankly, I think part of the reason there has been so little progress in reverting to more sensible copyright terms is that many opponents of the current standard don't bother to fact-check their arguments, and so they damage their own credibility. Copyright is a political issue, because when we advocate shorter copyright terms we're arguing to reduce the scope of a property right. Inaccurate or hand-wavey arguments work against that end.
This is a local privilege escalation bug. If you're a SAAS company protecting user data and you were relying in some way on RCE not being a gameover flaw because it wouldn't give attackers root, you were probably already boned.

It's also a 90s style Unix file management bug. It's not like patches and vague advisories were going to keep the exploit under wraps.

That doesn't make it unreasonable to complain about exploits being released in advisories (though: this is a complaint that is approximately as old as security advisories), but it should dampen the outrage a bit.
Don't let GE find out about this.
Not according to the growing wealth gap in the U.S.

If you considered the entire globe, then yes, there are growing middle classes in certain Asian and Latin American countries.
If you care about efficiency, then you are burning significantly more energy to run at 4GHz, and are still moving the same amount of data in and out of your local memory. If that is your bottleneck, then you are running at 4x the clock speed for no real gain, as your memory can't keep up with the speed of your functional units.

But to answer your question directly, we are targeting 1GHz conservatively...we think it could do more, but as we are focused on efficiency, we think it is a good middle ground between performance and energy usage. We'll be able to make a more informed decision (and possibly change that) when we have silicon in hand.
Surely I'm not the only one that remembers someone doing this with Lotus 1-2-3 in the 80's...how far we've come. What's next, a database in a spreadsheet? Word processor? Modem application?
There's an excellent point being made – if you try to engineer a world by insulating children from the harsh realities of it, you'll make the next generation extremely vulnerable to the simplest exploitation or difficulty.
OpenShift 3: private PaaS with Docker
Yeah, the HTML5 was key. It's way easier to listen to player events without really interacting with Netflix-specific stuff. I probably would have given up if I was doing it with silverlight. Actually, this is why this is only a chrome extension because Netflix uses silverlight in Firefox.
You are running that in shell by hand. The python program running here is not shell. If you do a print(os.environ["GIT_EDITOR"]) in the python3 program you'll still see ~/bin/vim .