skysight-inc/HackerNews huggingface dataset:
You still need to pay your taxes in one year to claim it as a credit in a successive year. Uncle Sam and California don't take kindly to IOU's (nor does your credit score).

What if you exercise a little every year, triggering AMT each year? No credit for you and the credit is reduced the older it gets. Like you said, each situation is different, but most people are going to pay a boatload in taxes on this and not be able to claim it as a credit later on.
How would the closure compiler figure out what bits and pieces of the library are triggered from the html portion of the site? (I can see how it can track the javascript bits but unless your site is entirely generated from js you'd have to start with the html)
Hilary Clinton proposes sharp increase in short-term capital gains taxes
Wow connecting cars to the internet? Sounds insanely dangerous. Not everything should be connected to the internet or "smart".
Understanding the Impact of Cassandra Compact Storage
That's the sort of thing that sounds like you're closing the loop, but has some serious flaws the deeper you go. First off, where is that water coming from? You mention desert, so is it an incredibly saline salt lake or briny fossil aquifers? If you're pumping out mass quantities of fossil water, be prepared for an eventual end, and localized subsidence, depending on the depth/structure of the formation.

Then there's the salt. Salt's actually kind of on the downslope in terms of its use in de-icing. You're literally salting the earth around roadways. Places that see a lot of snow and have a lot of waterways (from personal experience, like Northern Wisconsin and the UP), actually use sand instead. You expect there to be snow on the roads for a number of months regardless, so you're just offering some traction. Certain places in the Northeast are the same as far as I'm aware. Here's a resource on road salt from New Hampshire[1]. Pickle brine[2] and beet juice[3] are also beginning to get some play. Not to say the rock salt market couldn't absorb some additional supply, but I don't know where the limit is if we're talking mass desalinization.

[1] http://des.nh.gov/organization/divisions/water/wmb/was/salt-...

[2] http://news.nationalgeographic.com/news/2014/02/140204-melt-...

[3] http://time.com/5761/salt-shortage-triggers-beet-juice-chees...
Good question. I think eventually it's a given probably using your data connection or any SIP phone or soft phones we might provide, but not yet, no.

We're not sure of the value add here and it's a lot more work to get happening (and expense of development). If there's user demand we'll obviously do it, but so far feedback has been requests for SMS and MMS support (we're ready when our providers are, which they say should be later this year, or we'll move providers to providers that are).
We'll take your salt in the midwest, too.
This article should be read as ranty research, not practical advice. It'd be fine to fix these issues, but not at the website developer level.

"If you have to use externally hosted resources such as javascript libraries then at a minimum you should verify regularly that the code has not changed "

No, you shouldn't. You should focus on stuff that matters to users, not existential internet security holes. Let someone else fix this problem for you, when it stops being existential.

By far the safest approach for website owners that care about their users and their users privacy is to simply not include anything at all from other people’s servers.

FTFY "A safe, but impractical and productivity-destroying aproach..."
Google has "Offline Disk Import" [0] which is an "alpha" release at right now

[0] https://cloud.google.com/storage/docs/early-access
The only faith developers should have is that the owners will fuck them, it just depends how hard and if lube is used, or they are tossed out without a dime!
If you want something more NodeJS oriented you can start exploring Ghost source code [1]. It has amazing Promise-based + express infrastructure, in which you can find a lot of patterns to help you build your next project.

1 : https://github.com/TryGhost/Ghost
He says it is not cost effective to run. You said he is wrong, but don't seem to have addressed the same topic at all.
So in short store the keys in some place that you have easy access to by a password. Kind of a version of two factor "something you know and something you have" whereby the "something you have" is the cloud storage device with the key.
That's an old myth, the theme engine is now stable and even if it breaks it is only a matter of minutes to fix it.
The Varian Story
Tao's work on Navier-Stokes: https://www.quantamagazine.org/20140224-a-fluid-new-path-in-...
> Interesting that she is autistic. Autism is apparently more common among boys than girls. Could this be one reason why tech attracts more men than women?

"Maybe this group of people has more of X because X is more likely to have a neurodevelopmental disorder"? Nice. Thank you so much for associating a whole industry with autism.

A disorder that apparently 1-2 out of 1,000 people have, at that.
I haven't looked for a few years now. Most of my current data is hearsay. Interesting to see that the trend swung the other way. Thanks!
I was disappointed that the author repeatedly mentioned the Twin Prime conjecture, but neglected to mention the recent work done by Yitang Zhang: http://www.slate.com/articles/health_and_science/do_the_math...
The messenger reported the problem privately 9 months ago[0] and it was only fixed as they were preparing to go to the press. The day before the "stunt hacking" Jeep were claiming it was not a problem[1].

[0] https://twitter.com/0xcharlie/status/623492229714313216

[1] https://twitter.com/daviottenheimer/status/62351634451271270...
Indeed, and I remember the vast majority of the people getting super excited at the possibility of "getting an OTA update that can improve your acceleration by 0.1s" - without realizing what exactly that means in terms of security. In particular, that others could also control your engine and car the same way through updates.

The car manufacturers who do OTA updates for their cars are sitting on time-bombs. The clock is ticking for them until people get killed this way (regardless of them using HTTPS or signed updates - which some manufacturers don't even use now).
I see many responses but no one seems to have asked a question that I view as fundamental: what's the role of that employee in that company?

1. Is this employee supposed to man the lines? Is he a support line person who has to answer phones? WHAT are his primary (and secondary) responsibilities? Is he there to help manage the infrastructure of the company so that his teammates can continue to focus on customer support tasks?

2. What are the specific task(s) that he does that the manger is impressed with and that he so good in? Is it his ability to grasp customer tech problems and provide resolution in a manner that no one else in the company can do? Or is he doing something else entirely like developing solutions that enable his company to enter new verticals or automating infrastructure provisioning and monitoring?

It seems like most of the answers on that post seem to assume that the person in question is in a developer kind of a role and then go on to enumerate the merits of productivity over timeliness, but I am yet to see a confirmation of that assumption. The answers will vary wildly depending on the role the person is supposed to serve.
I worked at a company for about five years. It became a unicorn while I worked there and I saw the value of my initial grant increase tremendously (something like 35x) over the years. I was significantly in debt and very nearly out of savings when I started there, so early exercise, while available, was not affordable to me. By the time I had money to exercise my shares, the potential AMT liability plus lack of liquidity made it unrealistic to do so. If I left, I'd lose it all. I ended up feeling held hostage by loss aversion. It was not good for my mental health. Feeling stuck can make an otherwise awesome job terrible.

I was very lucky - when I left I was able to just barely cover exercising everything by liquidating my non-retirement investments and savings, then sell enough on the secondary market (which took many nerve wracking months) to cover the AMT bill, pay myself back and set aside enough to pay the tax bills for selling shares.

Very much "Silicon Valley Problems", and I don't expect much, if any, sympathy - especially since I had a good outcome. I'd just like to see the AMT rules changed to make it easier on employees who don't have the luxury of liquidity.
Some people can't drink because of health reasons. By your logic, they should "suffer less social success and poorer network" and are probably "being intentionally lazy." That's not only illogical, it's downright cruel. Not to mention closed minded.
R125 is often used to refer to resistance of 0.125 Ohms - They may be high wattage resistors (I didn't load article because I am using roaming data while travelling!).
Experimental Therapy Prevents Long-Term Brain Damage in Severely Injured Mice
Thanks for the idea. I will try to fit it my current plan, which consists of improving current adapters and implementing ones for HipChat and Twitter (not sure if the last one is good thought).
Hire a 12 Year Old
frankly, i am much less bothered by the cross-domain visit tracking aspects than the js injection. cookies are not going anywhere in a thriving, behavioral analysis driven ad industry. i dont know how logged impressions/clicks can be trusted for accuracy if they had to be proxied by or entrusted to their customer's servers.

i will live with cookies, but absolutely will not live with injected js behind https.
Fiat Chrysler Recalls 1.4M Vehicles to Fix Hacking Issue
Not to go all law school on you, but criminal actions are defined by statues. There are many actions that are ethically wrong, but perfectly legal.

Now, for a civil action, it is always fuzzy. Whether or not it is negligent is going to be based on many things, a big one being whether it was "reasonable". Shipping cars before this event may have been reasonable, but continuing to do so many be negligent. But at least in the US, that needs to be decided in court, not on the internet.

I'm pointing all this out because you said "Certainly". That word really has no place in the US legal system.
I have read that before, sounds like something a sales person would say. I have never seen a proper source for the statement.

And even so if the screen in-front of every passenger did then started to spew a bunch of boot logs and generally behave strangely. I beet people would become quite scared.
Co-founder here! Tilt differentiates from just about every other crowdfunding platform by focusing on smaller, bite-size objectives - typically among groups and communities that know each other (so instead of a $50,000 documentary, it's a $1,500 birthday for a friend or a $500 block party). Think of it like the twitter of crowdfunding built for a mobile experience.

We've also released developer and enterprise tools powered by our api like Tilt/Open, which is the most popular enterprise crowdfunding tool in the world (currently powering some really cool projects like Navdy, Lily Drone Camera, June Smart Oven, etc)
It sounds like the role reviews did curb recency effect,and the new system throws that away
>Is it that as far as physical security of your Jeep goes you only have to trust the people in your neighborhood, but for internet security we have to trust the whole world?

Yes?

If you connect a system to the internet, you have to consider attempts to attack that system (automated and not) to be part of typical operating conditions.
What does "emotionally brilliant" mean, and how would it benefit users?

The best interpretation I can think of is building software which exploits user's emotional responses in order to gain acceptance and widespread usage (e.g. Zynga), but I'm not sure why this is something the world needs more of.
I could, but JavaScript has such a broad application these days that you should be more specific as to what you're goals are
I'm sorry you feel that you have to assert your status over a dead man with performative masculinity.
Not them, but this is arbitrary, and frankly a confusing way of even defining a password's strength. A password's strength is measured by both how it was created and also its absolute length.

In this case they're simply calling anything longer than 12.5 ASCII characters or 6.25 Unicode characters secure. While those are good solid lengths for passwords (in both cases due to the larger character set of Unicode), without knowing exactly how they were calculated it is completely arbitrary.

For example for a sentence-based password, 100 bits is insecure. But for a password generated using the secure random number generator, it is absolute unbreakable e.g.

"goodnight moon": Insecure but 120 bits (16 chars) of 'entropy'

"5%ML#_rjMe": Secure but "only" 80 bits (10 chars) of 'entropy'

Now you could argue, that the word 'entropy' would discount any sentence based passwords by definition, but that's not how I've seen people [mis]use it. They call any content of a password that password's 'entropy.'

I also want to take a moment to make fun of people measuring character passwords in bits (as opposed to characters). The whole bits thing started when people are contrasting character based passwords with other types of passwords like certificate based (as a way of showing how much more secure certificate based authentication is). It makes absolutely no sense to use bits in a discussion about purely character based passwords, and people only do it because they witness others do it but have no concept of WHY.
There is actually a pretty interesting experiment going on in the Salton Sea area called the Vertical Tube Evaporation project. It uses geothermal rather than solar power, but given the region, if they were to scale up solar or wind would certainly be on the table. The Salton Sea is already basically a giant brine sink. I believe one of the plans calls for a pipeline from the Gulf of California.

http://www.usbr.gov/tsc/water/research/VTE.html
http://www.sephtonwatertech.com/projects.html
Java mixed-mode flame graphs
Is it safe to presume that the service is restricted to the US?
Depends on how much effort it would have taken to get it right the first time, which is what I'm suggesting be done.

And in this case, these vehicles were manufactured pretty recently, so even conceding your point, I don't think we've passed the 'let stuff go' point in this case.
So public markets essentially make long-term thinking impossible?
That's a fair reluctance and I can't take it away because at the end of the day you'll just have that lock-in with anyone. Such is the nature of telco lines. I have the same problem (having carried my home phone line through multiple stacks).

What I can say is that I can cover costs out of pocket every month indefinitely (because each user covers their telco costs of that line, I'm just covering infrastructure) and my hosting fees are easy to cover even if we have no users.

We're probably not a typical startup in that sense. We have sustainability and independence in mind. At this point the only thing investors could offer us is the ability to grow faster. An important thing, but I like giving stability its own rights, too.
Huh. Interesting that mine is so bad. The PageSpeed report is fair, though. I didn't optimize images, set expires headers, etc.

Weird that Amazon isn't serving things up gzip'd - oh, interesting, I have to gzip the stuff in my build script and deploy it compressed.
Hey HN! We created this for internal use and had a bunch of people ask us to release it. So now we have! Would love to hear your feedback.
I asked what was more or uniquely interesting about Palantir, and even if I did think what they did wasn't interesting (I don't think that), what's so absurdly surprising about that?
They talk about FreeBSD in the original article and the guy tests that on other OS and say it's not a serious vuln?

This is a serious vuln for FreeBSD. Period.
Are modern updated browsers resilient against those "evercookies" or not so much?

To be more specific: I have my Firefox configured to delete cookies on exit. Does that deal with "evercookies"? I must admit, never heard about them before...
And since rock stars are toxic on teams, this is great. Of eveeyine agrees X is a rock star, they'd happily push for X to be their lead.
I wonder what's considered external though. If I compile / minify my javascript and CSS and then use a CDN to cache or host it -- is this considered external?? If so, how is it different from trusting my hosting provider to host my site in the first place, or my domain provider for resolving for me? How can this analysis know whether or not the resource is external? based on dns records alone? because I can still use *.my-domain.com but point it to an external resource...

The concerns raised are valid, but I'd like to see the methodology for analyzing the data because it can definitely skew results.
War on Terror as a series of Unix shell interactions (2005)
It'd be interesting to incorporate this "safety score" into a more detailed analysis of the properties of projects that use the languages such as the size/turnover of the team, age of code-base, etc. Safety is just one of many different concerns (ie. performance, time-to-MVP) people have when choosing a language, and it would be cool to have some real data showing which ones are more useful in different situations.
Show HN: Deep Learning Shirt for Charity
Future HN headline:

Hackers Remotely Kill a Boeing during Flight - With Me in It
Face it tech-tards - the founders "own" you like vassal, and can burn the stock to send you into the poor house for the next ten lifetimes! hahahaha
Same author as GORM so its to be expected.
Don't some VOIP services offer slightly less powerful versions of this? The one I used to use (Primus Canada) allowed me to set call treatments (with a limit of 50, but that was plenty for me). Some of the options included send to voicemail, forward, hang up, etc. and offered some time-of-day rules too.

It's the one big feature I miss after switching to Ooma. All I want is to direct anyone not in my contacts to voicemail by default, and add exceptions, and I can't do that. :(
If you're willing to learn about patterns, jQuery and Underscore.js are excellent places to look at.

If you're looking for something harder and unconventional, see React source. It also has some low hanging fruit for pull requests.

If documentation and comments are important for you to learn, Backbone.js is way ahead of everyone else in those terms.

I would also look at smaller indie projects. The source is smaller, forking and adding something is easier. Pull requests are easier too.
I noticed the unmistakable X Windows "X" cursor and gray loading screen on an in-flight entertainment system that crashed on me. I think it was Virgin America, one of their early flights after they launched.
We did something like this in OfficeWriter [1]. We built a set of APIs to create, edit and generate Excel (and Word) files programmatically without the need for MS Office in the server. In addition, we had a "template mode" so a user could place datamarkers within an existing Excel spreadsheet. At run-time, our code would open the spreadsheet, populate data from a provider data source and then expand all associated cell references such as formulas, charts, etc.

so it was not fully declarative but would not have been difficult to map a high level language to our API. Some sophisticated customers did something to that effect with a web based wizard type interface.

Microsoft purchased the IP in 2007. The independent product is still sold and maintained for existing customers.

[1] www.officewriter.com
An easier way to call an api from your web app
I've done some CAN stuff (not on cars though), and that is the way that everyone I talked to advised to build your system, if suitable. However, we still pushed firmware from the master, so if the master were ever compromised, then all of the nodes would be potentially compromised as well. There is only sending and receiving data. All nodes receive any data from anything else on the bus. A node typically ignores data not addressed to itself but not always, that is up to the programmer. Any node can potentially impersonate the master, or another node. There is no way to prevent this, other than through the firmware.
No, the writers were.
I agree - I think the backlash is because "frat party" is supposed to exclude women. Never mind that "frat" refers to the location, and not the attendees. Any actual "frat party" that I ever attended in college welcomed women with open arms.
We offload a ton of our scripts to S3 buckets on random unrelated domains and it's a pretty common practice. Did this take that into account?
> The myth that "having lots of shareholders increases costs too much" is also just a myth.

No, it isn't a myth. I used to work for a company which had to re-incorporate for various reasons, and had three shareholders too many; They managed to buy them out before the reincorporation, but it was a big problem (with lots of drama), and if an agreement wasn't reached, the company might have had to fold, and would definitely not have been as profitable, if it couldn't reincorporate.

IIRC, in the US it's 500 shareholders; We were subject to laws in several countries, the minimum of which had 40 shareholders trigger these problems. Regardless, it is not a myth -- having lots of shareholders has weird and unexpected costs.
Why not just a QR code? I've seen some institutions already QR code their campus trees for their own tracking purposes. Info about the tree does not change much over short timescales.
Still no updates on this bug report: https://bugzilla.kernel.org/show_bug.cgi?id=71211

[tumbleweeds]
> I guess this isn't "false" since you're just stating your belief, but if it's totally opaque to you, then how can you be so sure? I mean, OK, I guess, but... [citation needed].

You really think a for-profit company that doesn't have to or doesn't disclose the process to do surge pricing, having the knowledge and capacity to use surge pricing to maximize profit, will sacrifice profits in favour of the consumer?

Its opaque on Uber/Lyft, it's not opaque on taxis, so thats definitely a reason to dislike Uber(Sidecar does disclose prices before you get on the car)

> What? Yes it does - it tells you up front the multiple you'll pay, and even makes you manually type it in to confirm before your ride is started.

A multiple is not the same as the number you are going to pay. A multiple of what? I don't see a ticker like I do in a cab that tells me they are not gaming the numbers.

You say the driver gets the same 80%, but I dont know how much it cost me until I'm out of the car. If Uber tells me it cost me 10 dollars, and tells the driver that trip was billed 8 dollars for him, I would never know, and neither would the driver.
Learning, Remembering, and Thinking (2006)
> The infotainment system should never have access to the CAN[1] network in the first place... ever.

The problem is access to the CAN bus is necessary to change various vehicle settings from the infotainment system. I know for a fact that changing the door lock settings in my car requires the infotainment system to access the CAN bus to apply settings to that system.

This is not an unsolvable problem; this is basic software engineering. Processes should be isolated from each other. I imagine everything in the infotainment system effectively runs as "root" because they consider the whole thing a singular black box.
If the company does a good job codfying your contribution in a role+level, there is no problem giving everyone in the same role+level the same pay.