skysight-inc/HackerNews huggingface dataset:
>everyone should become an entomologist.

You really think my reading skills are so deficient that I thought she was lecturing everyone on becoming an entymologist? Really? Or are you not engaging with the meaning of what I actually said?

>that there is value in doing nothing, or, well, reading something several times,

No, you misunderstood her. She wrote:

>It’s all here, inside and in the room — not on the screen — before us.

In other words, how about not spending "screen time" on harpers.org reading her essay (especially if you've already been exposed to it like many HN'rs already have).

Instead, she advises to appreciate doing "nothing", savoring "boredom", and experiencing "empty" time -- such as watching ants, sharing coffee, listening to rain, whatever.

(And no, I don't think she's lecturing us on becoming meteorologists to study precipitation -- so you don't need to go there.)
Do You Need Technical Skills to Succeed in Marketing at a Tech Company?
If I add (1/2, 1) to (1, 2), then I should get (3/2,3), which is not representable with any of the above values.
So what is the result and in what sense is it correct?
The #1 and #2 expressions yields different results.

>>> dict([n, 2 n] for n in range(5))
{0: 1, 1: 2, 2: 4, 3: 8, 4: 16}
>>> { n: n 2 for n in range(5) }
{0: 0, 1: 1, 2: 4, 3: 9, 4: 16}
Please follow the HN guidelines when commenting on this site. This comment would be fine without the first paragraph.

https://news.ycombinator.com/newsguidelines.html
It makes the idea of a trying-to-be-helpful AI scarier. Imagine a post-scarcity world in which you merely have to ask for whatever you want and it'll be delivered to you for free, but everyone still lives in squalor because if you ask for a coffee table you'll instead get one of every type of coffee table ever made and then starve to death in your house because the food delivery drones can't fit through the wall of coffee tables.
Use mochi if you really want to use FP in python.

https://github.com/i2y/mochi
And again the point of Titanous is that delaying the PoC provides a false sense of security. Saying "some time is better than no time" is the problem, you have a false impression that you have time while the fact that the PoC is not published does not mean it is not already used by some attackers. Delaying does not provide an incentive to people to update.
I agree that there is a tradeoff, but it is not a simple a you present it (delaying means giving some time).
That's a lot of work for something that the dynamic linker on OS X supports out of the box. See, for example, http://toves.freeshell.org/interpose/ or search for "OS X interpose" on your favorite search engine.
I liked The Wire, particularly Season 4, but I too like a lot of things more than it. What are your favorite shows? I'm always looking for recommendations.
I think you make an excellent observation that FE is a system engineering challenge.

Algorithms do play an important role as you can see in this great presentation by Marc de Marco (https://www.youtube.com/watch?v=90NsjKvz9Ns)

However I think it's fair to say most FE engineers apply existing solutions and the system design is a bigger part of their role.

I differentiate between UI Engineering and Front-End Engineering. The former emphasises design integration (pixels) and performance (rendering). The latter is broader scope and emphasises the systems engineering.

Both have to deal with system design. UI is about components and messaging across the components with the front-end application being the "system". FE is about components that integrate the front-end application with what have traditionally been back-end APIs and services.

In many cases when people say FE they mean both FE and UI. I would not get hung up on these but they help to clarify what you are talking about and who you are trying to hire.

In the case of design and pixels there are specific challenges around dealing with layout and CSS and achieving 60fps. Creating UI components is an exciting area. For example see Pure UI (http://rauchg.com/2015/pure-ui/) by @rauchg. Mess in Web Components (https://hacks.mozilla.org/2015/06/the-state-of-web-component...). Challenge of style encapsulation...

So there are a lot of unique challenges and skills and experience required in UI engineering.

There are also exciting developments that start to push more overlap between UI and FE. For example GraphQL - the UI is "language" that "programs" what was traditionally the back-end API.

I sounds like you have had some unfortunate interview experiences. The interview process should be about uncovering the talent and potential - not one-upmanship.

I have an article on Medium that is the foundation of my interviews: https://medium.com/@johanstn/initiating-ui-engineering-conve...

What are you missing? I would not say you are missing anything. Rather a case of pulling together your skills and focussing them on what you really enjoy doing. It sounds like it is UI more than FE. If that's correct then your engineering expertise will lie on componentization, engineering applications ("system") and UI performance.

Demonstrate your skills with real examples, projects, code you use to learn and experiment.
> So why is it that we're so quick to assume that because a safety-critical computer system is exposed to the internet, that this is the worst thing ever?

Because of the Greater Internet Fuckwad Theory (or, more nicely put, the "online disinhibition effect"[1]).

We don't worry as much about random strangers harming us in person because most people are generally well-behaved when they are face to face with someone in real physical space.

On the Internet, where all you see is a screen and all you do is click your mouse, "reality" gets a lot more tenuous. In that environment, people act worse.

If you were walking over an overpass and saw someone left a cinder block up there with a note attached saying "Throw me!" how likely would you be to lumber it up off the ground, carry it to the edge, and heave it over onto to a car you can see passing below, whose occupants are visible to you?

Now imagine you stumble onto a random web page with a button labeled "Click to drop cinder block off overpass". Tempting?

The way our behavior differs in these two circumstances is a big part of why Internet security is so different from physical security. (The other big difference is how data can be replicated for free. It takes 50x as much effort to steal 50 cars. It often takes no more effort to apply the same have 50, or a million times.)

[1]: https://en.wikipedia.org/wiki/Online_disinhibition_effect
Terry did attend university at a very young age. He got his PhD when he was 21.

If he sounds normal in talking about his generals, it's because his peers are some the best young mathematicians in the world (and about 4-5 years older) and his evaluators are some of the absolute best mathematicians in the world.
Let's not forget to that they had to sell the fabs due to Intel anti-competitive market squeezing. They would offer the chips for free, but vendors would still be better off with the Intel kickbacks.

They were later compensated, but the damage done was incredibly destructive.
Do you also support closed source software companies being able to rip off any open source code released under a copyleft license? Because the legal recourse offered to them relies on the same mechanism.
Amazon is only worth its current market cap if it can increase sales by at least 5x.

The market disagrees. The market capitalization is set by what people are willing to buy and sell ownership of the company for. It is not set by the amount of revenue generated.
That's called a pull quote. Magazines have used them in print for a very long time.
Yes, and this guy, quoted by the article author:

"I wouldn't call that an OpenSSH bug. I would call it a systemic design flaw in PAM."

is then clearly wrong, it is an OpenSSH bug.
Come Reengineer Healthcare  Vida
Attention to all you full-stack devs out there looking for high-impact careers that truly make a difference in our customers lives.

Vida is a platform for chronic disease prevention, uniting human health coaching with algorithms to increase our coaches' effectiveness in client interaction - truly the intersection between technology and human interaction.

We place immense value in Product Engineering. Our engineers take ownership over a portion of the product and either manage or directly build every layer of the stack to achieve our product goals. We believe this is a much better approach than dividing up responsibility by stack layer, at least for driven and broadly capable individuals like you seem to be.

Some other highlights…

Small engineering team (6) = big impact
Our product changes our customers’ lives! People with serious health issues who’ve failed to make positive changes are seeing success with Vida
Our strong founding team has a history of multiple acquisitions and an IPO, collectively.

If you or anyone you know maybe interested, shoot me a note at tyler@vida.com

Tyler Mabry
Head of Talent @ Vida
> Amazon revenues are a lot more diversified than Walmart

Diversified into lots of "nice to have" items. In a really bad economic downturn, Amazon would be wiped off the map. People would still be buying bread and milk at Walmart.
This wasn't your fault, wasn't it?
I'm having a wonderful vision of a global group of friends all tied in via headsets and shushing them all whenever they try to talk.
Shellshock and Heartbleed both provide good examples of why public exploit code is a net good thing.

Researchers put Shellshock proof of concept exploit code into fuzzers[0] and managed to find five more bugs subsequently[1].

Heartbleed required a patch to OpenSSL, which is typically a dynamic library. I'd wager that without publicly available exploit code to test with many admins would have just installed the patch and failed to restart the server processes, leaving their systems vulnerable.

The solution to improving patch deployment timelines is automated updates, not having admins always online. Admittedly this is still an area that is underdeveloped.

[0] http://lcamtuf.blogspot.com/2014/10/bash-bug-how-we-finally-...

[1] https://en.wikipedia.org/wiki/Shellshock_%28software_bug%29
The meta-irony is that an article lambasting the "TL;DR culture" needed a TL;DR to be palatable. I always appreciate when someone takes the time to summarize these "wall of text" articles, since I tend to not have 30 whole minutes spend while the author tries to get to the point. I need things to be boiled down (I'm looking at you, New Yorker!) and I personally find more utility in skimming 10 articles than fully investing in a single one.
Please don't insult other users on HN, even when you think they're wrong.

When the site guidelines ask you not to call names, "nonsensical mindless garbage" is the kind of thing they have in mind.
Any NMR people on HN? :)
> You really think my reading skills are so deficient...

I don't know you; I don't know anything about your reading skills. What you've shown so far isn't promising, though, IMHO.

Let's agree to disagree and go do something else. It's midnight in Paris, I'm going to bed.
Yandex? Opera (the browser people) also do an appstore for a bunch of non-English markets I think.

For Latin America I think the Play store is the only good option, I know heaps of android users here in Costa Rica that only use that.
Its actually based on https://github.com/kyamagu/js-segment-annotator which implements two algorithm SLIC and PF.

Regarding compiling C using emscripten, I wanted a pure JS implementation so that it was hackable using Chrome Developer tools, E.g. using LAB data internally produced by SLIC algorithm. Hopefully in future, I will use a emscripten implementation. It might be important for version that proceses short gifs or videos.

Also there is a developer mode on top right, enabling it allows visualization of superpixels and change parameters of the algorithm.
My goodness this is really not going well for me.

Basically there is no notion of to or from really. When you push the vol+ button on the steering wheel there is a controller that sends a message trying over and over again until there is no collision. That message has an ID in it early on. In this case it will be like I dunno $412 okay. That means audio controls or something. A bit later is some length and then the data, say the data is $C.

The infotainment unit is listening to everything just as the controller for the steering wheel controls is and everything else on the bus (it has to, because of how collision detection works). When the controller in the steering wheel sees that $412 ... $C it goes, well isn't that nice, me or someone else sent the vol+ message out finally, cool, I'll stop sending that now. When the radio sees that message with an ID of $412 it goes, oh that's an audio control message command, I should pay attention to that. Then it looks at the length and data and sees $C. It goes oh that means someone pressed vol+, I'll make it louder.

But here's the thing, there might be a knob too for volume and there really is just one board doing the infotainment. It's not like the old days where it's a potentiometer, it's not even wired directly into the board that handles infotainment. All the IO pins that board has are already used-up handling the screen, CAN bus, and other things. When you twist it, it also sends the same $412 ... $C over CAN from it's controller! The radio did not know what sent it, and that's by design in CAN bus.

There might be mobile phone integration, it can do CAN too, say also a $412 with with a different payload (and possibly length) that might mute on call. Also there may be a touch screen, but that will not do a thing over CAN if you press the vol+ there, just do it's normal IO from screen to SoC on the board.

Am I doing a better job of explaining? The take away is lots of things can send the same message and lots of things might be interested in that message and that is how it is intended. To some extent you can mitigate this in hardware. You can make long runs or some shorter star shaped topologies as long as you get the termination right. For the star shaped topologies you can stick gateways in there. The controllers can be setup to filter on certain conditions and the bus is the limit for filtering if you are using a programmable part. What I mean by bus is the limit is things like there is no notion of to and from.

That's what you get in CAN bus cause that's how it works. You can thank Bosch for that.
I'm mostly addressing the last half of your comment.

I agree that polarization is very bad (about trolls vs. yes men in comments). It prevents real discussion.

Perhaps, but consider the following, which will be a reason to encourage off-topic conversations. You have multiple 'similar-interest groups' that you belong to that are orthogonal - my work buddies have different religious views and my fellow congregational members have different occupations than I.

IIRC, Facebook edits what they show you in the feed based on what you click a lot - so what you are provided with tends to be what you agree with. And other non-interactive material make it harder to have conversation. Lastly, I think things done online usually happen in the context of an online community that tends to anchor the conversation there - not necessarily bad, but potentially if the conversation/community is homogenous.

Really the solution is to try and talk about things we disagree about - and with children, it probably happens rarely unless we consciously try to do so.
At a company where I worked previously one team only noticed one of their systems hadn't been correctly patched against Heartbleed because there was an exploit available that they could use to test.

Who knows what would have happened days/weeks/months later if that hadn't been the case.
Show HN: Chil – Receive Emails Only from People and Businesses You Know
Maybe there should be tiered embargoes then, so that the fix is released before the exploit?
Steve Klabnik Talks Rust on CppCast
It was hard to get an idea of the final result in the demo gif because the last frame disappeared so quickly. Here it is http://imgur.com/fduYXCi
I agree.

What I meant was that much investment is speculative, and that speculative investing is not solely, or even mostly, based on a purely rational model e.g. one that is based on a prediction of future cash flows.

It is usually based on betting on the the future price of the asset, independent of fundamentals. Some of these approaches are more justifiable than others: market momentum, qualatiative prediction of the company's valuation trajectory, trendy but questionable financial metrics, sophist technical analysis etc.
The current deep dreaming fad is going to last about one more week before everyone gets sick of looking at those stupid pictures. They really serve no purpose other than "look how crazy this stuff is" - deep learning is cray-cray.
couldn't find that specific commit for some reason...
But I found the bug (indeed too many files, but I coped with it earlier...)
In the latest ruling on TCPA by the FCC they are allowing carriers to research solutions to offer their customers to allow call blocking.

See Section 9, Call Blocking Technology - https://www.fcc.gov/document/tcpa-omnibus-declaratory-ruling...
You can "sell" tweets to followers for money.
I strongly disagree, and don't follow this logic.

Responsible disclosure is intended to be ethical, the opposite is ... well, irresponsible.

I've worked with irresponsible security disclosurists before, and even those that agree to a window only to dump another small variation after the window is up - rather than working to make sure the product is as good as it could be.

Giving end users time to patch so they are not owned is quite a ethical thing to do. The end goal is less compromised systems.

Doing this at the same time achieves the opposite effect and increases the amount of compromised systems.

It's never been "we're giving you two weeks, get it done fast because the exploit is going out then", it should be "we'll give you enough time to fix this properly, and then give the customers time to update once announced".

I personally would always release when something got done early, just because the person on the other end is usually unpredictable. However, the person on the other end shouldn't assume development of the fix didn't take the full interval.

Let people pen-test after they had a chance to update to secure the systems. Having the ability to prove a fix is not worth systems being owned prior to being able to fix them. The damage is already done at that point.

I've worked a lot of CVE reports, and about half the time, the person on the other end just wants credit, they aren't really going to hang around and try to help, and often they supply terse information (i.e. no exploit PoC to the vendor) as some form of game. I'd much rather this always be more user focused, the ultimate desire should always be to help the end user, and often users are less educated and don't have dedicated security teams.
They probably already can, if the use the right exploit.
Steve Jobs: The Man in the Machine – Trailer Released
a lot of what you're saying is untrue.

1. https://support.google.com/voice/answer/1316844?hl=en you can port your number out of google voice.

2. I highly doubt google voice is going anywhere with Google's commitment to mobile.

3. The voice message app was updated last year. Yes it hasn't got the full treatment, but I assume this is because its primarily a background service. sms is done primarily through your favorite messaging app and phone calls can be made all the time through your gv number or you can choose when making a phone call.

4. You're not forced to use dialer. GV can be set to prompt you to ask you when using dialer or just use your GV number everytime. Your last point makes no sense and is completely false. I have hangouts, google voice and route my number to my phone. Calls come in through the main dialer app.
In the readme file, you have "License: Copyright 2015, Cornell University. All Rights Reserved." Does that mean there isn't a public license to use it?
It's not like they slammed on the brakes - they cut engine power. Totally different. The car gently glided to a stop.

Add four or five more zeros and you'll be in the ballpark.

And if you're serious about saving lives, consider that this is a trivial fix (unplug the sim card) and the car company has known about this for months since these researchers told them about it. These a non-zero chance that this attack could be broadly deployed at any time, causing a sizable portion of the 500,000 vulnerable vehicles (those in traffic) to almost certainly crash - probably into other vehicles, etc.

The researchers caused some non-zero but incredibly minor amount of risk for some people to save a vastly larger group from a vastly greater risk.

This is why you sounds like anti-vaxxers. Even discussing this at all is a total failure of proportion. Yes - the 'risk' of vaccination might be non-zero but it's less than the risk of Polio by many orders of magnitude.
@bodil is very respectable in terms of tech. The problem is she frequently goes on really bizarre, sometimes completely illogical SJW-style rants. She really comes off as a crazy person sometimes. It's a shame because she has a lot of very interesting programming language knowledge and programmers could learn a lot from her.
This is funny, but even Mathematica gives bad answer for that equation from slide 25...
sales/employee ratios:

Amazon: 670k
Walmart: 220k

Assuming the ratio stays the same, when Amazon gets to Walmart level sales, it will need about 700k employees which is still 1/3 of Walmart's current employee count.
When I first read this, it seemed really odd to me. Before cellphones and the Internet, nearly everyone in a region had a book with nearly everyone else's phone number in it.

How have we ended up in a situation where phone numbers are now used for authentication?
Previously: https://news.ycombinator.com/item?id=9942647
Yes and no. This is a bug and a high severity bug once exploited. But as long as the main software product works "well enough" for a customer to pay for the development and be happy with it, an agency doesn't care. The prioritization of security varies by industry

That said, my point is moot since it's a bug in a security fix. From the other comments Nexmo is going through some growing pains as it transitions into the enterprise and their IT department is struggling with prioritization.
I hate receiving voice messages. Sure, it's quick for the sender, but it's inconvenient for me. Reading a messages is better than listening because:

1) I can easily re-read a couple of words I didn't parse properly the first time, or which are details (like addresses).

2) I can read pretty much anywhere, without disturbing anyone around me.

3) I can read much faster than I can listen.

Thankfully, only a couple of my WeChat friends think sending voice messages is a good idea.
There's another solution called https://rabb.it/, but it also has HBO, Hulu and a bunch of other stuff, seems like a better alternative.
Previous discussion: https://news.ycombinator.com/item?id=9942647
It will be released under Open Source compatible license, I just need to make sure since I am a PhD student.

Note that the underlying algorithm implementations are MIT licensed.

https://github.com/kyamagu/js-segment-annotator/blob/master/...
Hobby ADS-B receivers are super cheap is there any reason an ADS-B transmitter for a drone couldn't also be made cheaply?
HP bans T-shirts at work
I actually find his arguments rather convincing, even though I'm partial to a functional approach to programming, myself.
All good points. This is definitely an issue that I think deserves as much discussion as it can get. Talking about the economics of what might be required, I'm sure that many people would like to help to work on solutions.