skysight-inc/HackerNews huggingface dataset:
As others have pointed out, this is more specific to the Humanities. I had a Classics professor who probably averaged 150 page reading assignments per lecture -- of non-trivial authors like Thucydides, Aristotle, or Livy -- with many assignments going north of 200 pages. As a junior and senior Classics major, I probably read 1000 pages a week on average between all of my classes, plus maybe another 30 pages of reading in Latin and/or Greek, which obviously took a lot longer to get through, lol. Computer Science coursework always felt like a welcome relief from the time spent in front of the printed page: a lot of programming lab and project time, but only about 50 pages of reading per week, if even that much.
No, because you need line-of-sight from your position with the gun, whereas with the drone you need line of sight from the drone which, because it flies, has more options, including dropping straight down - fast and from an angle the authorities don't expect.
Ask HN: How can a SAAS win a chargeback dispute?
My SAAS business has had over 3000 transactions and only a couple of chargeback requests.

In both cases, I provided the customer what they paid for and it was a case of an employee using a personal credit card and then quitting the company and filing chargebacks instead of just emailing my support email and requesting a refund.

I sent all the documentation of receipts and email correspondence with the business showing that they indeed did request, receive, and intend to pay for our service.

In both cases I lost the dispute and was charged the fee + the refund.

Neither Amex nor Stripe had any answers for me. Seems unfair.
Have a look at PC Engines ALIX.
Congratulations!

Sleep now, because the next 18 years are difficult. :)
Um, no. I no longer remember where I read it and some web searches only show up a paper studying its use as a therapeutic tool, which isn't the same thing.

I don't believe I hallucinated it, but if it did happen it's obviously not widespread.
You can get surprisingly good performance, but sometimes it might be the only way to get a game working on a particular machine.

My Lenovo Y50 has an nVidia GPU with Optimus switching. I have a few games that don't seem to run (Street Fighter X Tekken and Blazblue Continuum Shift), but I can get them to run at 60FPS@1080p on a VM.
> It is configured to work with any link with MTU 1450 or more by default.

Does this means that if you set the MTU to < 1450 OpenVPN wouldn't set the MSS value in the header?
Unlikely, unless they need it for C++. Even C99 only gets better when they need parts of it for C++ anyways, and is not developed further.
C++ has volatile.
There's not really any downside to wrapping that interface in function calls, and then you don't have to worry about optimization.
Grid-based software for disabled people
Most have some sort of caching logic but you can't rely on it to do what you want. Always benchmark, and never assume that just because you're paying for something or that it's the industry standard, it does what you want. I've seen a number of devs completely surprised by the throughput & latency numbers they get from their databases because they assume everything is going to be cached in RAM and the database is really hitting disk for some obscure reason on every query.
URL watcher with YO
Well...its always going to be easy to say the leadership is stupid and backdoors are a horrible idea.

What's hard to answer is how do you stop the next Boston marathon bomber. No good answers to that, which is why we see all kinds of partial solutions, with all their well known consequences getting deployed.
The database is doing row caching, though, and isn't going to be caching lower levels of the trie in close proximity to the higher ones. It's not the same logic in the general case. At a prior gig with a very heavily used typeahead, we loaded the entire thing into a memory cache inside our typeahead service, because even relying on memcache was too slow.
Not enough buzzwords.
One man's obsession with rediscovering the Doves typeface
You can hold a TCP connection open through an ELB basically as long as you want. The default idle timeout is 60s but can be increased to 1hr, this is a non-factor if you are sending any sort of data though.

When the "routing rug" is pulled out from under you all you need to do is re-resolve and re-establish the TCP connection which will likely live on for days (in most cases weeks) without disconnecting again.

This is fine for most use cases I am aware of.

As for Websockets, you will need to run the ELB in TCP mode to do that and probably run a real HTTP proxy behind it that supports Websockets/UPGRADE and uses constant source-ip hashing and supports the TCP PROXY protocol. i.e HAProxy.
You can run HAProxy or other any other proxy that matches the above in an ELB to get good highly available Websockets proxy layer.
It's also a way to test new investment strategies as well. Basically, with what amounts to play money for them, they can test out new ways of evaluating teams and startups at an earlier phase and see what works and doesn't. They have a good idea how to evaluate companies that already have users and customers, but no idea when it comes to raw, unproven ideas. The value of that information when applied to their main batches could be pretty big... if it makes them catch one good startup they would have missed otherwise, it will have already proven a nice return.

I doubt many if any VCs see as many applicants as YC, and they're finding every way to leverage that data advantage they can against the competition
Well ... since the only thing good the DNA for is discrimination - not a single surprise here.

After outside of legitimate research you can use a DNA DB to find:

data about people that are something
data about people that are not something

And I am not sure if it is illegal for a non commercial service to require its members to be something.
C++ incorporates nearly all of C99 directly, save for VLAs, restrict, designated initializers, and a lot of small stuff that won't affect any modern-ish C code (e.g., no implicit int). VLAs and restrict are explicitly not in C++ because they're somewhat broken (C++14 did add "dynamic arrays" which are VLA-lite, and there's work on a better restrict-like functionality, cf. https://isocpp.org/files/papers/N3988.pdf), while designated initializers does not mesh well with C++ semantics.

In practice, then, C++ without RTTI, exceptions, or the standard library is basically a strict superset of C and C code compiled as such will tend to be legal and identical in semantics. The same cannot be said for C# or Java. Given that C++ has some rather useful features (most notably, the ability to guarantee cleanup even in the face of inattentive developers), the only real valid reason to not be using C++ instead of C is if there's no C++ compiler.
You leave tips depending on the quality of the food? At only a minority of restaurants do tips get shared with the cooks. You're doing it wrong.
Author of the system here.

I do agree that speech-based interfaces can be very cumbersome. Part of this is that current systems aren't perfect yet but part of it is also that speaking aloud is just plain strenuous for people. At least the second thing isn't going to go away.

Some of the things you touched on are certainly valid points, but spoken language systems also have big advantages. For example, having to spend effort for fully form a thought (to articulate it coherently), forces users to spend a second think about what they actually want. Also, and this was a part of this research, the spoken voice carries quite cool side-channel information that can be exploited in aiding recommendation.

In any case, please note that the current UI (which, btw, did show the gathered preferences to some extend by coloring / bolding the shown specs proportionally to the level of satisfaction of your determined preferences / the level of influence) is just a research UI. It does not implement the best I could do, but rather implements an interface that I allowed good interpretability of the results of the conducted study (which, for example, excluded any multi-modal efforts which would have potentially made drawing conclusions harder).
Yeah, paywall. It looks like you can't even see the price without creating an account.
And it's a ridiculously huge umbrellla. ;)

Of the three parts mentioned (CPI, CPS and SafeStack), SafeStack had the
least performance impact, so it seems it was the easiest to get
committed upstream [1]. The differential revision comments are also
interesting reading. [2] Though their CPS and CPI work exists (linked in
article), I'm not sure if or when it will be ready for prime time.

[1] https://github.com/llvm-mirror/llvm/commit/7ffec838a2b72e684...

[2] http://reviews.llvm.org/D6094
I applaud every effort to improve Javascript as it all takes eons to download over my dialup but commonly does not actually work.

A favorite contribution is called something like "You Don't Really Need jQuery". I will dig it up,in a little bit.

Of most serious concern is how to convince the working JS coder to actually avail themselves of better javascript? Most dont read HN. I find it is of no use to point out the errors of their ways.
You are suggesting here that someone might pay $80,000 for a Netgear RCE to help them run DDOS attacks?
Why go the donation route? Why not first one is free and future ones cost pennies? If people found it valuable they will pay for it. Going with free also encourages those that want to send ads to use your service and so you would spend a bunch of time stopping them while still not making money.

Lastly how are you printing the postcards?
I work for a public university, so when we make new sites or webapps we are obliged to make them usable for people with disabilities and we have at least one person who focus only on testing this... but without javascript? That is not even considered. The web IS javascript driven
You can also use Nginx for the PROXY protocol, that was added in version 1.5.12. You should just add "proxy_protocol" to your "listen" directive: http://nginx.org/en/docs/http/ngx_http_core_module.html#list....
What's the "m-word"? (I certainly didn't flag that comment).
The zero-days used on high-dollar commercial pentests give attackers remote code execution.
I think it's probably possible to change the URL each step without creating a new history entry, at least this Stackoverflow Answer seems to suggest so:

http://stackoverflow.com/questions/20937280/how-to-change-ur...

That seems perhaps more elegant that having a separate keypress?
I thought I'd made it clearer than I did that I was skimming, but that was indeed what I was doing. This is after all what the article suggests you should do. And that's how I got through the article in 2 minutes. And that's why the article tells you to do it!

Once you've got through 3,000 words in 2 minutes, you might not recall all of it, but you'll at least be able to tell whether it's worth going back for a closer look, or just making a mental note, or forgetting the entire experience.

This isn't a useful technique for everything. But when/if you have a huge pile of big, thick books to get through, all printed in small type with thin margins - probably the sort of thing the author here is thinking of - your options are a bit limited.
Neptune 4.4 Demo – Great Debian-Based Linux Distro with Nice Design
Key is that you don't need to phish, you can just wait until the user downloads an unencrypted executable.
> It made me wonder in my own professional work: should I also focus more on getting things done instead of trying to find the best solution? Will that approach give better results in the end?

From personal experience: yes. The problem is the perfect solution is usually only obvious in hindsight, after you've done the work, so the quicker you get there the quicker you can get to where it "should" be.
Using Mozilla Investigator (MIG) to detect unknown hosts
I wonder if employees will start treating stat-ups like VCs do, by joining many firms for fractional equity of a single employee.
Flagged for paywall. Will unflag if the link gets changed to something where I can actually read the article.
If someone were to buy out the residents of Mexicali, Imperial, Indio, Brawley, El Centro, Coachella, etc. the area could nearly fill to the ancient extent of Blake Sea/Lake Cahuilla, and a canal would need no locks. Aside from the buyout compensation, actual construction of a canal suitable for international shipping vessels would probably be only about $5 billion.

As most people every remotely familiar with politics might guess, the technical challenges are not even remotely the most difficult obstacles to be overcome for such a project.
> If we were running our economy on steam and gold we would have even less problems.

Absolutely. I've lost a lot of coins in various hacks so this is experience talking, not theory ;).

> propose to blame everyone using it for occasional consequences you do not like.

Not blaming anyone and I'm still quite hopeful about crypto (albeit much less now than before), just saying this is a dark side of crypto which people are afraid to look at and it's not going away.

You may remember this discussion if god forbid somebody hacks the service were you hold your coins at (https://bitcointalk.org/index.php?topic=576337) or exploits a vulnerability in your OS and steals your wallet OR does the thing in the article.

Right, we are literate, we don't keep our wallets online or on our hard drives. For maximum safety we keep our public key pairs on a piece of paper or wood and hide it away in a dark place.
HP bans T-shirts at work, and employees are furious
Agreed, I like the way they have embedded startup mentality within itself, you dont see this with many other VCs.
That's like saying "turn off the ability to execute programs on your computer". Nobody's going to seriously start gearing web-dev towards a no-javascript world.
Does it seem likely that this is the easiest way to get that information, however? If you get someone's email or files you get what is likely to be more detailed information in a conveniently easily searched and summarized form but if you get an audio recording you either have to listen to it yourself or spend time getting a high-quality speech recognition system up and running.
every company resembles a drug gang
I was watching this lecture last night about tries and suffix arrays. Pretty cool stuff!

http://youtu.be/NinWEPPrkDQ
Cool, does it allow you to control the balancing to enforce source-ip -> backend mapping?

This is required due to the nature of Websockets UPGRADE and most semi-stateful Websockets servers.
I've sort of run adjacent to the field of machine learning in the last few years, but haven't really dove in to the existing literature. This seems to be a pretty interesting overview.

Out of curiosity, do many implementations of convolutional neural networks take advantage of FFT, DCT, or some other fast orthonormal transform to compute the transition between layers, or are the kernel sizes small enough that there isn't a great advantage to that?
A bunch of software and devices assumes (or can be configured to assume) anything on the local LAN is safe and can be trusted. So routers seem like a good place to look for unsecured file shares, security cameras, printers and whatever else is on that LAN. I have strong doubts most network protocols are properly secured against eavesdropping or MITM in a LAN either.
I think it's because at the very basic level we hate working for someone else on their ideas.
That's actually a very interesting idea.

The break down might look like this:

($100-$120/hr contracting + 0.025% equity)

- 20% time to company x

- 20% time to company n

- 20% time to company z

- 40% time to company y
Another tool that becomes useful as your npm dependency list grows is npm-shrinkwrap. It is too easy to get large projects into a state that the existing developers can build and test, but break in production builds and for new developers. Being able to strictly version dependencies and control minor package updates can save you from debugging bad builds and losing new contributors. It's not a silver bullet, but can save you some frustration when packages deviate from proper versioning practices.
Sure, that's not really related to the protocol used. It's instead handled by the upstream module and the "ip_hash" flag: http://nginx.org/en/docs/http/ngx_http_upstream_module.html#....
I didn't say they're outbidding the black market, but they are quite generous and it is a legal action at that point. Makes sense to me, because they actually care about security and it's worth paying out to protect users and the brand. It also serves as a unique recruiting tool.
Google and Mozilla pay bounties for vulnerabilities in their browsers, too. Yet the market for these bugs is striving.
Was the respondent on craigslist's premises? IIRC their office is San Francisco.

If thevshop is open to the public its not actually trespass until the shopkeeper asks one to leave.

One fine day I discovered a gross electrical code violation at the Hacker Dojo in Mountain View. I called the fire marshall then tripped all the circuit breakers then unplugged every electrical cord in the place.

One of the members called the police. The cop called the owner who told the cop that I was no longer permitted in the building.

"What exactly does it mean not be be in the building? Where cannI be without violating the law?"

"Just outside the door."

I assert that the plaintiff in this case is just like someone standing outside the shop, on a public sidewalk, looking in the window.
Other recent stories from that site:
"Why has NASA not disclosed the 5-mile high white tower structure on the moon?"
"Dwarf Planet Ceres In Asteroid Belt Surprises With 3 Mile High Pyramid"
"TEXAS DELUGE: Was it a geoengineered weather event to enforce compliance with Agenda 21?"
No, Im suggesting that's one use of router compromises. Already told you that $80k is asking price, not selling price, for its likely application: cyberespionage. It will play a support role for beginning or maintaining attackers' presence in network.
So, it's likely to be defeated.
Talk to a lawyer to find out what your options are. If the customer has enough money or assets, it may be worth suing them. There might also be grounds for filing criminal charges, e.g., theft of service.

It's possible that all it would take to get paid is having your lawyer send a letter to the company demanding payment (plus legal fees), and explaining that lack of payment will result in legal action.

Of course, if the total amount in dispute is less than thousands of dollars, it may not be worth your time and effort to sue. In that case, you could consider turning the debt over to a collection agency, or just doing nothing. And definitely never do business with this customer again.
I have been sitting next to my mother when she took her last breath after fighting cancer for a year.

Yes, I agree, comparison may not be appropriate and I really am comparing apples and oranges here, but dedicating 2 years of your life and sacrificing everything else (relationships, social life, sleep, etc.) does come at a cost - you feel really attached to what you do. That's why a lot of people say "my start-up is my baby".

I didn't mean to offend anyone, I'm just emphasizing the fact that it was a really really emotional time.

Love & Light.
I personally prefer looking at the relevant parts of the documentation and getting shit done.

Advantages:

1. shit gets done
2. concepts that you learn get applied immediately, so the concepts stick in the brain better
3. harder to lose motivation since shit is getting done
4. it is harder to understand certain concepts abstractly, after all we are talking about programming, not theoretical physics; most programming concepts are better understood in practice esp. web based stuff. So reading and applying immediately is most often the right way to go.

Disadvantages:

1. there might be advanced functionality that you might miss if you skim through and apply, however most advanced functionality are optimizations and as we all know 'premature optimization is the root of all evil'. Donno who said that but it was someone famous. So this isn't a real
disadvantage at all.

In summary, I would recommend a depth first approach, with the caveat that you go really deep into the things that you do need in the project and ignore the things that you don't need at the moment.
had the same thought, why do I have to do everything with JS, sometimes I think it's only to satisfy "Atwoods Law" again and again :) would do it in Go lang, not as raw as C but good and up to date enough for this purpose.
Universities – Where Does the Money Go?
TL;DR it's cron jobs as a service + a managed result database + GUI + API to the database, all for free (donation-supported) and intended for nonprofits trying to expose government data.

For instance, the table at https://morph.io/planningalerts-scrapers/city_of_sydney is created by running https://github.com/planningalerts-scrapers/city_of_sydney/bl... daily, and the PlanningAlerts organization uses this API to send email alerts when scrape results change. They've created dozens of these scrapers: https://github.com/planningalerts-scrapers .

It's great to see services like this. The need for this does underscore, however, how difficult it is to write a generalized scraper that will work on multiple websites.

Google has been attempting to do this structured-scraping-at-scale with its WebTables team: http://googleresearch.blogspot.com/2014/09/introducing-struc... . I remember seeing a talk on the underlying technology - there's a lot of machine learning used to determine whether a <table> is actually structured data, and how to associate things with Google's Knowledge Graph. Solving structured scraping in 100% of the cases is an "AI-complete" problem, but there's definitely progress on getting partially there in an automated fashion.
That does not seem possible.

It's a heck of a lot more possible than perfect security without putting everyone into padded cells, alone. Some countries in Northern Europe are evidence of this, as are declining crime rates after the banning of leaded gasoline and legalization of abortion.

If you want to solve a problem, solve it at its roots. Focusing on the symptoms instead of the disease is a harmful attitude that is far too prevalent in America and elsewhere.
Previous discussion: https://news.ycombinator.com/item?id=9945543
http://sci-hub.org/10.2514/6.2015-4083
Webstorm on OSX actually became more of a burden to use as my projects grew large. Excessive memory usage and crashing forced me to dump it in favor of Sublime Text. It's version history saved my butt a few times, but it was nothing that better Git habits couldn't solve.
The Mystery Money Creating the Unicorn Herd
A Modest Proposal – Drones and Video Games
Unlike when serving people with disabilities, which you can't understand and test well if you're not disabled yourself (or specially trained), as a developer you should automatically be aware when you'd exclude people without JS. Nobody special needed for testing, just a resistance to implement navigation with JS only, or worse, JS-only content.

Until now most content-heavy sites (like most university sites) are not problematic for the most part (1). Which I suppose is why there's no complaining till now. By having a healthy community of users with JS disabled, hopefully there will be enough complaints when it gets worse.

(1) the static parts, which is most URLs used during the day. If I encounter a site that requires JS to log in, I'll open a separate browser with JS. If I encounter a page that only shows the content with JS, I just close it unread, unless in the very rare case that it's important to me (most important content is still not relying on JS).