skysight-inc/HackerNews huggingface dataset:
"but can anyone suggest how much risk is in these risks."

Twenty years ago maybe this argument carried the day. Don't even consider using it today. The tooling, techniques, and skill are far higher than you could dream if you are not in this world.

This is not quite the same thing we are talking about, but let me give you a different example. An obscure cross-site-scripting attack is no big deal, right? Well, courtesy of BeEF [1], if the XSS can be leveraged to get you to download a script, which is a low bar, BeEF can then be used to proxy web access in, allowing an attacker to lever up from "small XSS" to "crawling your intranet with the internal credentials of the compromised user".

Yow!

Do not ever count on difficulty of exploit as a defense anymore. In many cases the reason why these people aren't providing off-the-shelf exploits for this sort of thing isn't that it's too difficult to make practical, it is that in the security world it is now too trivial to be worth spelling out. Attacker capabilities (and pen testing capabilities) have skyrocketed in the past ten years, but the defense team still for the most part is operating like it's 1995 and the idea that a program might be used on a network is still like some sort of major revelation.

(I'm on the defense side personally. It feels about like this: https://youtu.be/MPt7Kbj2YNM?t=2m11s In theory, I am powerful, in theory I control the field, in theory all the advantages should be mine, but....)

[1]: http://beefproject.com/
It could also be that there was a technologically advanced civilization which destroyed itself.
As long as you aren't constantly bricking/breaking things, as has happened to me with updates from Windows 8 and Office.
It depends how fluid I need to be.

If I have a very specific, quantifiable goal in mind, then I use test driven development - added bonus of having a test suite at the end.

If I am working with large datasets on servers, then I simply subsample, and then scale up
Thanks. I had an idea similar to this while working at a larger company. I wanted to start a tiger team to follow startup technically. Leveraging the employer name we could have vetted them to increase our success ratio and be sure both of the business idea as part of the vetting and of the technical side. Sadly this project would only have netted millions and the previous company wouldn't touch anything under billions.

Go figure. They prefer to acquire company after they hit success for top dollar and run them on the ground instead of actually fostering innovation.
http://www.universetoday.com/15403/how-long-would-it-take-to...
Some of the hardest working people in show business. Congratulations!
"Microsoft's behavior for the last 10-15 years"

The 'bad stuff' from an OSS point of view is, generally, longer ago than that.

- "Embrace, Extend, Extinguish": 1995
- US vs. Microsoft Corp: 1998
- Halloween Documents: 1998

Scraping under the 15 year bar:

- Microsoft vs Sun settlements: 2001-2002
- Ballmer "Linux is a Cancer": 2001

SCO vs IBM was 2003, so I guess fits into the '10-15' ballpark, but I think "over the last 10-15 years" makes it seem more continuous than the evidence suggests. If you were to describe Microsoft's behavior over the last 10-15 years with respect to open source software, I think a fair assessment would be "improving".

I'm not, honestly, trying to be an apologist for this stuff - it was, clearly, Microsoft policy for a long time to deliberately and pretty unscrupulously undermine Linux and Java and open source adoption. It doesn't appear to be policy to compete unfairly any more, and in some cases MS is producing technologies which support usage of non-MS-originated open and open source technologies. Can we begin to move on a little?
Citation Needed: A Chrome Extension That Highlights Anonymous Sources in News
I think the basic procedure is to see what chemical signatures can be observed when the planet passes in front of its star (I believe all Kepler-discovered planets do, it's how it finds them) and then try to infer if those could have occurred through purely physical/chemical reactions or if some form of "life" had to be involved.

But, consider that there are a few places in our own solar system that "could" support life, probably with more confidence than we have in this planet so far, and yet the question is still wide open. I wouldn't expect a firm answer for many decades to come.
As a side note I think this brings up another interesting problem than just dealing with the storage, which is, how to enjoy so many photos in a lifetime.

Personally, I decided to severely restrict how many images I keep after a trip, so I'm more likely to actually view them years from now.
I follow sports, but I don't know what you're talking about.

edit:http://www.tmz.com/2015/07/09/deandre-jordan-clippers-may-ha...

Possibly this? Interesting term in there re: handshakes, called "promissory estoppel".

http://www.investopedia.com/terms/p/promissory_estoppel.asp
Really the simple issue has always been the same with MS-platform based OSS; People look to MS to provide the canonical frameworks, tools, and libraries. MS is far more used in corporate environments as a portion of their market, and are more subject to business decision making; much of that focused on RAD / designer tooling.

There's a different philosophy in the open source world - python, perl, c - none really have 'de facto' answers to persistence, logging, services, etc so There's a plethora of approaches and libraries for any needs. MS provides EF, so you have to defend any alternate solution to business; it's perceived as risky. Even using tools not of MS origin, despite no close surrogate from the 'official' tools (ala Redis, 3rd party libs) is something you have to find approval for. MS tooling is automatically excluded from this. This isn't great for MS either, because they now have to produce these 'ideal' libraries, and the strength of their platform is now judged by library implementations.

I'm really not sure what the solution to this problem is unless they really get to sponsoring projects with effort, money, and tooling. They have programs in place for this, and I can see there's a lot of outreach going on for this reason.
Sampling like this is precisely what a lot of folks do with New Relic as well. It would be extremely dubious if they disallowed that.
> If Microsoft open sourced Windows and Office they would instantly stop making money

It's funny because I don't actually think this is the case. Not completely, anyway. That's their fear, but I think that the upside in the end would counteract the immediate downside.

It could also be structured interestingly- Basic Windows could be free, but certain diffs/patches/drivers could be for-pay (such as higher-performant stuff, graphics stuff etc.) A mix of free OS and proprietary profitable stuff. They could also employ an army of Windows consultants...
Fascinating to see HN's best brightest and their view of the rule of law. How is it good for democracy if a well-funded corporation can flout the law by its very existence? People make the excuse that taxi regulations are unjust. But it is still the law, and for Uber it didn't matter whether the law was unjust, only that it was in their way. These guys are not crusaders for justice, they are profit-seekers who decided the law didn't apply to them and went about their business until they amassed enough power that they could not be stopped.
Can't interstellar travel just be impossible?
I'm not sure sure you can blame it all Nvidia. The versions that Microsoft ships are written by Nvidia, yes, but they're torn down to essentials with a bunch of features removed. Among those, Nvidia's various control panel type addons, and apparently some important OpenGL extensions that LWGL relies on.

By going through WHQL, Nvidia gets to have better out of the box support on Windows, and Microsoft gets to ship a stripped down driver without Nvidia's control panel cruft and with better support for DirectX than OpenGL.

I don't see what Nvidia's motivation for the last part is unless Microsoft said "Don't bother including all of the OpenGL capabilities, DirectX is fine for basic drivers."
I think your priorities are closer to what they should be for a natural biological being.

Also, I think people who work extra hard to just to move from their ordinary social circle to elite circle are missing the point. The goal is not to change from being an average person in one social circle to being an average person in a higher social circle, but to stay in the same social circle and become the best in that circle - doesn't matter which circle it is.
>Why are you sending the full file contents from the agent to the client?

1. We only send files you tell us to send in the configuration, and you're not going to be storing any sensitive information in your Gemfile.locks or package.jsons.

It's not functionally any different from us parsing it client side - but allows us to support new platforms without having to update the agent.

>CRC is not a hashing algorithm.

2. You're absolutely correct! Which is why we're not using it as a cryptographic hash, i.e. as part of an HMAC.

We're only using CRCs to determine if a file has changed, which is the purpose of CRCs :).

Do you have any other concerns? We've spent a lot of time being paranoid, and we know it's a hard communication problem.
It depends on the context. Is this data being rendered as a PNG for use in a blog post? Or as an interactive application on a webpage?

For 2D time series, any 2D application is fine if the data is pre-processed, even Excel. For 2D plots in general, I'm more biased toward R and ggplot2, though (see my tutorial: http://minimaxir.com/2015/02/ggplot-tutorial/ ).

Graph data structures are a bit harder. I know Gephi is used for creating PNGs, but I have less experience with it.

For interactive web charts, you have to use libraries like d3.js or Highcharts, but I am not a fan for using interactive charts for static data unless necessary. (Mostly because they never play well with mobile devices without significant QA)
How about taking fewer photos? Do you really need two nearly identical photos of a hand reaching for food in a Japanese restaurant, or three photos of a bowl of miso soup?

On my last trip, I shot four rolls of 120 film (645 format, so 64 photos total), and maybe 500 digital photos, of which I deleted 90%. I still save about 5,000 RAW files per year, or about 100GB/year, but this is a relatively manageable amount. I'm approaching the saturation point on my iMac's hard drive, but should be able to last for another several years by shipping the oldest RAWs off to Glacier and keeping high-res JPGs around locally for reference.

edit:

also, next time you're up here in Seattle, you should visit the Jose Rizal Bridge at sunset, and the observatory on the 73rd floor of Columbia Tower.
Can you develop a big infrastructure project using agile methodologies?
Meta-answer: type 'b' in the magit status buffer and take a look at the help. Or ? for a list of commands, including 'b'.
Set-upstream is how you make it so pushes go to a specific place.
Can't be more specific right now, but this should get you where you need.
> Honestly it's a PITA when you fly, but how often do you fly?

I was a Delta Gold Medallion flyer for years (50k+ miles), and couple of times flirted with Platinum (75k+ miles). So...basically on a flight a couple of times a week, every week. There are large numbers of us. Denver is a pain in the ass.
What benefit could that possibly have for humanity? /s
America's Most Gerrymandered Districts, According to Math and Maps
> looked down upon by many to be just "walking simulators"

I played through Dear Esther in a single session in VR. It was a magnificent walk.
As I understand, star transits by Pluto helped to better estimate its size before NH. But as you said, it's complicated to get a full spectrographic analisys of its atmosphere this way.

Kepler is a mission that mostly works with photometric measurements of planet transits in front of their stars.
Namecheap Launches iOS+Android Apps
Yeah, that is how I read the pricing page as well and its consistent with how all other Google and Amazon products of this nature work.

The bandwidth cost is simply too high. They really need a "low quality" v. "standard quality" option. Plenty of people sell bandwidth at $.01-$.04 a GB with 99%-99.99% availability
Also http://rocknrollnerd.github.io/ml/2015/05/27/leopard-sofa.ht...
How many servers and metrics are you expecting?

I know for prometheus.io we can handle at least 1M metrics per server.
The engineer in me says that it's overwhelmingly likely that there's nothing alive there.

The little boy in me so wants me to be wrong.
Do you backup the library to something outside of iPhoto? I've been wondering if there's a nice automatable way to backup that library onto a home Linux computer.
It's highlighting elements that have the data-reactid attribute. Do the rows not have that attribute? I am also working on a table-based view and all of my rows show up blue.
How Can This Be a Billion Dollar Company?
Mark Spencer pulled off Asterisk; now sets sights on avionics hardware/software
For what it's worth, there's some debate about that. The creators have specifically said "C.H.I.P. will still be $9" -

https://www.kickstarter.com/projects/1598272670/chip-the-wor...

Of course, time will tell...
Opensource: F-Droid

Another one I know is SlideME.
How big is it? They have 2 numbers:

>> Kepler-452b is 60 percent larger in diameter than Earth and is considered a super-Earth-size planet.

And then:

>> Kepler-452 is 6 billion years old, 1.5 billion years older than our sun, has the same temperature, and is 20 percent brighter and has a diameter 10 percent larger.

I noticed the lack of "b" on that second one, but they seem to be talking about a single planet.
This can be done now with bright enough stars. The trouble is that the stars in the Kepler field are typically very far away, and thus not really bright enough to do these sorts of studies. Spectroscopic observations of exoplanets have occurred with nearer and brighter targets.
In general, most data scientists don't need to see the entirety of a data set to get an idea. A lot of the initial data exploration is about separating signal from noise...what of the data is important.

After that (similar to your examples), it completely depends on what you're trying to see. Am i looking at per capita data? Then chances are simply toss it at a choropleth. Time series tends to work pretty well in a simple linear graph type structure (as one will often overlay), etc.
> If Microsoft open sourced Windows and Office they would instantly stop making money

If Microsoft open-sourced Windows and Office and offered enterprise technical support contracts at the same price they offered enterprise licensing contracts for the same level of support that was included in those contracts, they'd probably keep making money, though perhaps somewhat less (they'd probably decrease costs, though, as well, since both the administrative side of license management and building license enforcement mechanisms into all your software has a cost.)
> Apple knows that they can't compete in the market

Have you been paying attention at all the past 10+ years? Please explain they success they have had and how it came from their courtroom escapades.
Amazon Appstore's probably the next-biggest market for English speakers.
(disclosure: am work for Google).
Not sure on AWS.

Google's Network is a vast, secure, and performant Global SDN. This allows us to do some cool things. Therefore, Google has a fundamentally unique value proposition:

- Traffic between zones/regions at Google never leaves Google Network. Therefore, no need to setup VPC or VPN between zones/regions. Makes deployments much much simpler.

- Google Compute Engine is a VPC out of the box, even cross-region. You can carve out your own sub-VPCs easily using firewall rules.

- Traffic from Google to end-user is not being dumped off of Google network as soon as possible. Google carries your traffic as close to the end-user as possible.

Edit: take a look at this as well.. http://googlecloudplatform.blogspot.com/2015/06/A-Look-Insid...
Kind of OT, but has anybody read this book? How good is it? Seems very interesting and the articles on the site are good too, but since it’s not on Amazon I haven’t seen any reviews.
Apparently it has a diameter 60% larger than that of the Earth, and so if we assume it has the same density as the Earth it would have about 16m/s^2 gravity on the surface, and an orbital velocity of around 12km/s @ ~1000km (in comparison to the Earth, where a 1000km circular orbit is closer to 7km/s).

This means that merely achieving orbit would be approximately as difficult as launching a probe on a Hohmann transfer orbit to Mars is. (Except that such a launch vehicle would need nearly twice the thrust/weight, cutting down the mass ratio even further.) It is not unreasonable to think that a species on such a planet would have never seriously developed space travel.
I wrote the Chrome extension -- it's just a nicer package on a one line hack someone (Pete Hunt? not sure) tweeted. The one liner modified the current DOM nodes while the extension inserts a stylesheet so it will highlight both current and future nodes.

It doesn't highlight at the component level yet. The React dev tools are good at hooking up to components (but I don't know if they rely on dev builds). It would be fun to try to get it to the component level.
This explains a lot. I've been a (large) customer of compose.io for several years, and since the rename to compose support of our MongoDB clusters has really gone downhill. They recently pulled much of the monitoring that was available to us via MMS, they disabled New Relic monitoring for several months with no explanation, and support has been awful for what we're paying - 13 hours for a first response on a CAT-1 issue, due apparently to a corporate outing that took their entire support staff out of the office.
Those sounds good but I'm shying away from Firefox at the moment for security. I love their open source approach and would prefer my browser to be open source.

However Firefox does not have tab sandboxing, extension sandboxing, or process isolation. These are pretty standard features in most browsers now (except for process isolation which seems to be Chrome only at present).
Or at least, highly energy-intensive and fragile (due to problems like cosmic radiation) to the point of impracticality, particularly when it comes to something like panspermia (or, for that matter, sending high-energy signals directly at a planet that doesn't detectably have life from the perspective of the originating species). This possibility is not weighted nearly highly enough in most analyses.
Well, thank you for your technical contribution, but your lead strikes me as an anti-metaphor that should be avoided:

I give names like Starburst and Stork to my cattle and form bonds with them.

Cattle can actually have as much personality as dogs or cats.

You can't just "put down" cattle if they are sick; they are far too expensive for that and I have spent well over $1000 saving one steer. I just finished getting foot surgery for a bull. Branding is mostly resigned to history although I suppose there are people on BLM land somewhere that still do it. "Put down" usually means euthanasia and that cannot be done or the meat is inedible; instead cattle around here are shot in the head with a rifle at point blank range by the butcher.
Show HN: Presets.io – Adobe Lightroom presets manager for OS X
So is the idea here that you're just monitoring the libraries my web application is using? So for example:

1. I have library X version 1.2.3 in package.json.

2. My package.json file gets sent to you

3. You parse this file, and tell me library X version 1.2.3 has a vulnerability, and that I should upgrade

AppCanary then doesn't monitor for the fact I have an outdated version of httpd for example?
Even if you don't use Emacs, I believe you _have_ to try magit. It will quickly become an essential part of your git workflow. You could zoom out to grasp the overall state of your project, dive into specific details and perform intricate surgery of your git history, all with single-key presses. It is pure genius.
Customer development. Why are you doing product development, without any customer development first? Google: Steve Blank
So wouldn't a good next step be to point a bunch of radio telescopes at this system and start listening?
- it shows a page action icon if the page contains elements rendered by React (have data-reactid attribute), the dev plugin does not do that

- for better or worse, it highlights all of the elements with data-reactid attribute so it is a different view than the developer plugin
Growth Hacking Techniques for ECommerce Businesses
Ok but why is ethics the most important consideration here? The consideration for the community is that the quality of the links is good and whether ethical or not, posting everything publicly and having THE SAME people be in the first 10 upvotes means there is a system that takes quality of the article into account less than the identity of the submitter, and it's been doing this over and over.

So ethics may be not the important question here, for the community.
So best case about 28,000 years.

Which is a bugger as I'm out that week.
Why Is It So Hard to Get a Great Bagel in California?
IIRC once you mount an ext2/3 volume as ext4, you can't go back.

ext4 has made a lot of improvements, but has also had a lot of corruption issues, even if corner cases. If you don't need extremely large files or extremely cluttered directory structures, you don't _need_ ext4, though I haven't compared directly in a few years, and I suspect a lot of these stability issues have shaken out.

The worst I experienced was kvm guests with ext4 filesystems stored in files on ext4 filesystems causing the not only the guest, but often the _host_ filesystem to go corrupt. Obviously, using LVM volumes or basically anything but filesystem images for production VMs would have avoided this, but the infrastructure I supported at the time already had a lot of this in place and too many other problems to solve to focus on it.
I can see why you'd say that but not in this case - we had it baking for a while on mobile. I am glad they found it valuable to build too.
Your dollar value should actually increase (assuming we're not talking down rounds). You still have the same amount of shares, but an "up round" means that each share is now theoretically worth more than it was when you bought in. Practically, however, it's hard to put a true "value" on the shares until an actual sale of the Company or IPO.
Nice! I wrote the Chrome version -- I'll link the README to your extension for Firefox.
Fiat Chrysler Files for I.P.O. Of Ferrari
There is a lot of truth in this.

I think there is a shift happening slowly that simply needs to progress and happen fully. With more developer stuff coming from Microsoft embracing open-source, people just need to realize that Microsoft is a part of a larger .NET ecosystem space. Not the other way round.