jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
How far the gluster server has fallen. Here's the text of the article:

----

How far the once mighty SourceForge has fallen…

[Editor's note: This post is the opinion of the author and not necessarily that of the Gluster Community]

TLDR:

SourceForge, once a mighty force for the good of Open Source, has fallen far from its previous lofty heights.

Dice, the new owners, bribe strongly encourage the top projects to use a new (closed source only) installer that pushes spyware / adware / malware.

Developers using SourceForge should migrate away from it if they want to keep their integrity. End users using projects hosted on SourceForge should immediately find an alternative.

Full version:

When people download software from SourceForge, or any major repository of Open Source software, they expect the software to be trustworthy. (baring unintentional bugs)

They do not expect the software to be a source of “drive by installer” style malware, spyware, adware, or any other unrelated/unintended software.

SourceForge’s new owners, Dice, have consciously and deliberately moved to a model violating this trust.

With their recent changes, users downloading from SourceForge now receive a special closed source installer which attempts to foist unrelated third party software onto them.

For example, when a user clicks on this:

http://sourceforge.net/projects/filezilla/files/FileZilla_Client/3.7.3/FileZilla_3.7.3_win32-setup.exe/download

They instead receive this:

http://ak.pipoffers.apnpartners.com/static/partners/dynamic/SFFZ/SFInstaller_SFFZ_filezilla_8992693_.exe

This is a “drive-by installer”, designed to catch less technical users and the unwary, to fill their computers with malware / junk ware / crime ware. As abused by the notorious ask.com toolbar and others:

FileZilla_drive_by_downloader_smaller

It gets worse.

When SourceForge introduced this, it bribed encouraged the top projects to participate by giving them a cut of the take. So these co-operating projects are also knowingly selling their users down the river.

I’m not against monetisation at all, we all have lives and need to pay our bills. But not through abusing user trust. Not through preying on the unskilled or unwary.

To misquote Marge Simpson; “They not only crossed the line, they threw up on it.”

If you’re a developer or contributor to a SourceForge project, please ask them to move to a new project host (there are several). And cease all further involvement until it’s complete. I’ve already done so with mine.

If you’re a user of a SourceForge project, please find and use an alternative project instead.

We should all demonstrate our commitment to user safety and personal integrity around this issue.
The Ruby equivalent would be XmlSimple: http://xml-simple.rubyforge.org/
Doesn't this defeat some of the advantages of using XML though? Like Xpath?
Priceless comment.

The alternative, to be like me, a stuck-in-the-past old guy who knows how to use only a few tools really well is probably also not optimal.

But the chase-the-next-fad attitude can be just as lethal for your productivity as having no options at all.
https://en.m.wikipedia.org/wiki/SHA-2
Well you have the right to feel offended, but he really didn't "follow logical steps and make a fair enough point" as his idea was completely wrong when it comes to signing installation packages.
When i started (1 week ago), my first customer had a mailing list with similar clubs. I gave him discount on the application in return for using the mailing list as a promotional list (not much, 50 emails or so).

Had some visits to the web application but untill now, it hasn't had any result.

I'l personalize the email list next time when i send it and improve the overall experience of the web application before my second try.. (that's my last try left).
Life and consciousness are not the properties of a complex state machine, but the properties of the universe.

The universe is not the mathematics or physics that we use to describe it.
They almost certainly would have ignored him. If he were lucky, he might get a form letter that boiled down to "No."
This will damage the weapon, very much dissimilar to human flesh.
Nice, does somebody know another solid logo generator?
Google is distributing this library under Apache license "as we speak". But I would not use OS lib if it has such question mark.
I find these terms strange. I have to pay for the high resolution and SVG but still have to check for right violations.
For a payment of 5$ (compare stock photo prices), I expect the right to use it
It sure seems this is the current trend. However, I am not sure that after a few millennia, people would not get bored and start experimenting with more extreme activities like base jumping or space travel.
Can you recommend a good book on negotiation please? You make a very good point.
But not the average programmer's estimation of their own ability! ;-)
Is the title confusing?

On first read, I thought it was something that neutralizes antibodies, rather than antibodies that neutralize the virus.

My layman's assumption was that the antibodies would always neturalize, so adding the adjectives threw me off the meaning.
Only if they will save more lives by being vaccinated than if the 70 year old was. We should be focusing on people who are higher risk of being transmission vectors, such as grocery store employees etc, at the same time as vaccinating the weak.
I’m working on a (very beta) product that hopes to address a subset of your complaints about spreadsheets. https://inflex.io/ Based on your phrasing you might have already heard of it. In particular my two blog posts mirror what you said: https://inflex.io/blog

I haven’t added a date type yet, but it will be a distinct type (not just a string), with explicit import. Pretty much similar to the Haskell time API.

If you like the idea I would welcome any criticism. I have 50 things that I think the product needs, but your input would help.
If you look at some of their published Phase 2 data, they were actually getting good responses from their 25mcg dosing. But you're correct--this was the fastest vaccine development in the history of mankind, and they errored on doing the 100mcg version just to make sure the efficacy was high enough because they didn't have time to test it on a wider population or do challenge trials.

Imagine the blowback on mRNA vaccines in general if they went with the low-dose version and got lowered efficacy...
Scheme.

As still the best "small" language to teach fundamental principles (everything is a first-class value, symbols are references to values - naming, procedure composition and nesting as the basic building block, ADTs, immutability of the data, evaluation strategies - eager and lazy, and what is meant by "mostly functional language", etc.) and shapes of data structures (list, three, table).

It will pay back with any "stack" or a "framework".

Haskell.

To learn that static typing done right (type inference) is a very clever feature, but it catches only simple errors (it cannot catch flawed logic or wrong abstractions), so it is not a silver bullet, and, perhaps, to realize why "extremes", like "pure-functionality" or "lazy language" are rather unnecessary complications than big gains. And that monads are mere accidental, awkward ADT to ensure an order of evaluation in a "lazy language", where it is undefined by definition.

After that one would find everything in industry is rather easy and boring and develop a healthy aversion to Java and other "packers" stuff.
RethinkDNS does support chaining out to any SOCKS5 (TCP) endpoint on-device. SOCK5 UDP should be on its way, too. https://github.com/celzero/rethink-app/issues/100

I'm not sure if we'd ever embed the Tor or I2P library in the app (because we'd need to constantly update it with upstream to ensure we don't slip up on security issues), but never say never.
i thought about that too, but as you said it would be impractical :)

waifu pillows on both sides perhaps?
Poles can and will be damaged due to external forces (car accidents, lightning strikes, wind, snowfall) all the time.

A properly buried cable (buried below freezing depth) will last as long as no one manages to hit it while digging.
The only other search result for the phrase "genderless no form-factors" is an HN comment from four days ago, also by a brand new user (not the same username, but I'm guessing the same user). It is, as far as I can tell, a nonsense phrase.

What are you trying to say, and can you say it in English?
"Absolutely" the norm? Maybe in your neighborhood, but some parts of the country actually expect their kids to show some work ethic and gumption rather than expecting parents to pay for everything. A kid ought to have some skin in the game or else they end up majoring in women's studies or some such nonsense.
how do you downvote here?
The before of all the designs in my list above was a lack and some requirements - that's how design usually starts, not with a previous design. So I think presenting design as a before/after is actually not productive in most cases - ideally it's the process of reifying an idea, not prettying up some information while not considering the broader picture.

In the case of the example presented, a better design would wipe the slate clean and ask if all that information was really required at all. The flyer needs to get people to the aikido class, so you probably need a couple of things:

Why do I need this?

How do I join?

The medium and context is also v. important - is it on notice boards at a distance (needs impact), in people's hand, via the post, all three? There are many ways to get there, but I'd suggest if you want a satisfactory solution you wouldn't start from here (the examples in the article). This is what is damaging about before/after - it stops you asking the hard questions about what information is required and what the priorities are.
As the (dead) sibling comment points out, my (non-lawyer) understanding of US copyright law is that simple collections of facts, when compiled in a way that requires no creativity, do not enjoy any copyright protection at all.

I would be surprised if a simple list of addresses, even a very large one, is something that could be subject to copyright.
Loved the article as well as the previous HN discussion.

Having a bit of trouble understanding #5... I'm not very familiar with (ie: I've never written a line of) ARM asm, but with my naive understanding of the code:

06000264: E28FE008 add lr, pc, #8

..I end up with lr pointing to either 06000268 or 06000270 (depending on when the program counter gets incremented), how does the article get to 06000274?
https://frbservices.org/app/status/serviceStatus.do
This is a very good summary of the state of the front end.
A platform is always a bad idea.
That's assuming "cutting edge machine vision" isn't offshored to third party contractors in foreign countries where the students and parents have no recourse.
Thank you again for your answers. I must admit that at this point I'm thoroughly confused by references, CoW, Passerine being pass-by-value, ownership (new information today!), and fairly advanced rules for when something needs to be copied. It probably makes sense to leave you to write that blog post where you can give a consistent view of the whole rather than iterating on small examples. I'm intrigued, and I'm looking forward to reading more, though I'm also getting a nagging feeling that there's a lot of ceremony here just to avoid garbage collection...
While I agree that this is a confound and as someone who also went through the same process, GCP also knows that you're applying as a YC company, and is a PITA regardless - in that way, there's a normalization factor of applying to both entities' startup credit programs with similar social factors. I've heard the same pains with GCP from non-YC founders about the free credits process and from non-YC technologists about bad customer service.
This is why I like rich text editors like google docs instead of IDEs jammed with markdown extensions. Rich editors come from a lineage of word-processing tools that are first and foremost for writing paragraphs of text and content. They go out of their way to make the experience of reading and writing pleasant, not mechanical.
no unfortunately the editor supports only Chromium based browsers but we are planning to expand support to other browser engines as we grow :)
Fabric is just so much easier to catch thats why things like short sleeves and no gloves are so important, it is probably much less likely for your hand/arm to get wound around the machine because the muscle and skin doesn't catch as easily.

But yes you'd end up hurt either way.
How much did they pay for delicious?
Good for all delicious users.It's time to innovate the social bookmark again.
Does anyone else find this ridiculous?

"And on Square’s homepage, the company depicts a user swiping a credit card on Square’s mobile reader using a Visa Signature card. It is telling that Square chose to feature Visa, when the reader accepts MasterCard, American Express and Discover, which are all widely used across the globe."
Why didn't you just click the 'Install' button and let it send it to your Android automatically?
Neat.

...but it's still violating the iOS developer agreement. Specifically the no interpreter rule except those provided by Apple. They probably didn't notice but blogging about it may get the apps pulled.

Take it from someone that has been on Apple's bad side: this is a bad idea and will probably get you pulled. They also don't like braggers that figured out ways around the rules.

I've dealt with these things. There are few options though. Compiling to native (in a AOT style) is one way, (ala MonoTouch and Adobe's Flash Convert tools). The other is just embedding a UIWebView somewhere (even if it's not visible) and IPCing over stringByEvaluatingJavaScriptFromString and URL change notifications.
The "mobile payments" part helps, since otherwise I'm unfamiliar with Square, but I agree that the opinion words are unnecessary.
It has often bothered me that many people will simply ignore you or pretend not to hear you when they don't know the answer to a question rather than say "I don't know."
The initial release contained every amateurish security hole in the book. The errors were the sort of one might see in a WordPress plugin written by someone with three months PHP experience. I wouldn't call those a 'TODO' since I can't even write a basic PHP or Django page without doing the basics like sanitizing going towards the database or making sure the user owns a photo before deleting it. The fact that the Diaspora team didn't do any of that shows that they had precious little experience. Not sure why anyone would want to build upon something written by absolute amateurs - in the past, that is how the world ended up with WordPress and PHP.
> We have no reason to believe this is happening, and it’s hard to imagine that the institution in charge of running the nation’s most accurate clocks would also be putting fake timestamps on the Beacon data.

This is hopelessly naive. We don't need to imagine that the NIST has been compromised: this has already happened. The NIST collaborated with the NSA to put a backdoor in the Dual_EC_DRBG standard[1]. Given this, I think we have to view the NIST as a compromised, untrusted entity.

As such, we must assume that an attacker has both the seed values and the NIST's private key. Given an attacker with this power, none of the approaches mentioned in the article provide security:

> SHA-512 is not known to be broken at present, and so even working backwards through one of the SHA-512 stages is essentially impossible; two rounds is impossible squared.

The proposed attacker knows all the inputs to the SHA-512 hash and therefore does not need to reverse the hash.

> So if you’d like to make your adversary’s work super-duper difficult, combine the Output Values from today at 7:00 pm and yesterday at 7:00 pm. Your adversary will have to work backwards through 2 x 24 x 60 = 2,880 SHA-512 stages to make the chain verify, still assuming that he knows the NIST’s secret key.

The proposed attacker knows all the inputs to the two SHA-512 hashes and therefore does not need to reverse the hash.

> But suppose SHA-512 were broken and working it backwards were easy instead of being ridiculously difficult. Nothing prevents you from writing your contract to take the Output Value, add one to it, and run this value through a better hash of your choosing. Now the bad actor inside the NIST has to reverse your chosen hash function as well.

The proposed attacker knows all the inputs to whatever hash function you choose, and therefore does not need to reverse the hash. Adding one does effectively nothing, and I'm not sure how to prove what it doesn't do, because I'm not sure what the author thinks adding one does.

A better try might be to use an adequately-sized random secret key with a unique, incrementing nonce to generate the random numbers via a pseudo-random function. However, you shouldn't trust that this works without seeing a mathematical proof--something sorely lacking in the original article. And even if it does work, it's counter-productive to use the NIST random numbers as input for your function. There are plenty of other sources of inadequate randomness, and at least if you're using your own inadequately-random numbers you can determine how inadequate the input randomness is and act accordingly.

In short, the first step toward the perfect coin flip is to stop trusting the NIST.

[1] http://en.wikipedia.org/wiki/Dual_EC_DRBG
C has macros, which allow you to create something close-enough to generics.

And as somebody who developed in Java and C# before generics, those languages were awful before those features were added.
Isn't it obvious? It's bad enough that the government does stupid stuff in secret on its own, to other countries. Imagine if you had thousands of companies starting conflicts with other countries by hacking them. What if Sony thought Turkey hacked its servers and hacked Turkey back? (even though it wasn't Turkey). And what if then Turkey will consider it an act of war?

Letting companies hack is a very stupid idea.
Congratulations! Your accusation of Stroustrup's strawman is strawman itself.
If you can set a chromebook to developer mode, it's quite simple to then sign your own images containing either another bootloader or a custom kernel. The only annoyance from my point of view is that vboot images don't seem to support an initrd.
I understand, and I'm sorry I seemed to be specifically targeting you. It's more of a general complaint: I've seen too many people using that kind of measure in a context where it's really not appropriate.
Could you perhaps add this to Github so others can make contributions to the database?
My previous job was in the healthcare industry at one of the top two patient information companies. I left because we had spent the last 8 years working on a protocol that was extensible enough to handle all the different kinds of data available. At first it was interesting, but once we passed 100+ individual .xsd files, it got to be a bit unwieldy.

Accessing patient data is tough because it's tough to model in a database. It's tough to model in a database because every single vendor exposes data in a slightly different way. HL7, the protocol that is used as an industry standard for this sort of data, has several flavors and everyone implements it their own way.

Also, the industry as a whole has no incentive to move forward. Healthcare providers (aka hospital systems) don't really want your data to be portable because it makes it easier to keep you as a customer. On the other end of the spectrum, FDA regulation has scared the big players into spending 5 hours on documentation for every 1 hour of software written, meaning it costs $20-50,000 (depending on the salesperson you talk to) for a hospital to buy a server that handles a few hundred beds' worth of patient data.

Needless to say, I'm glad I left.
But you can't ignore customers as a whole. It similar to having a boss, but not exactly the same.
I get "snap" reliably from Chrome 5.0.375.70. I get crashes from Safari 4. OS X 10.6.3.
Most of this sounds like I wrote it. I hate time, I'm 23 and feel like I'm so far behind where I want to be.

Think about it this way: 15 years ago, we were in 3rd grade. I don't even remember anything in third grade. Since then, I've gone to and finished middle school, high school, college, worked multiple jobs, had multiple girlfriends, cycled through different groups of friends, partied hard, and lived life. All of this while my mind and brain were still developing.

Now we're 23 and smarter than the average person, technically and entreprenuerly aware, and impatient because we aren't where our 30+ year old friends are in life. I regularly am spoken to like I'm equal in age to my 30+ year old coworkers, who even make fun of "dumb college kids just out of school" but don't consider me in that group.

We're not as old as you think man. I waste time on the weekends all the time. It's because we think we can handle 100+ hours a week and hate ourselves when we break down and veg out.

Cut back your hours, wake up and stand in the sun every morning for 30 minutes, and take yoga or go running every day. Write in a journal.

Remind yourself that there is a world that doesn't give a shit what we think of ourselves or where we want to be, and the only thing that can get us farther in life is our own determination and willpower. Start thinking long term and tell yourself you are badass.

Feel free to hit me up if you want to chat more, sounds like we have some stuff in common.
I had some small amount of issues getting started with Braintree as well, because of my business model. We had to provide a ton of documentation... but the end result is worth it. It's been great after that initial hump.
The rep may have been talking about flexible spending accounts. FSAs are fine if you can predict how much you'll be spending on health care, but if you overestimate you will lose what you don't spend.

One big advantage of HSAs is that if you lose your job the HSA money is still there to draw on if you need it.
Yes, because blind people can't be thieves.
You're welcome! :-)

Yes, if there was a standard query language for NoSQL, that would be priceless.

Gremlin appears to be closest thing, today. I like what I've seen with JSONiq, though...

This seems like a good somewhat related link: http://stackoverflow.com/questions/12043086/graph-dbs-vs-doc...
The Houston system uses bluetooth, not 802.11.
Cryptology and psychology are related.

Equally cryptogrammar and cryptoempathy.
god this sounds awesome
You have made quite a few interesting posts, from valuating bitcoin to trading strategies. So I subscribed.
While I mostly agree with the rest, this part:

> However, even if gastarbeiter were free, they would not necessarily be entitled to the welfare state that Saudis enjoy

is not the (only) alternative. The alternative is working under better conditions in general, not necessarily in Saudi Arabia. This shines some light on which countries (?) one should cooperate with, in order to make this cooperation benefit average people the most.
That's exactly what I mean. Great use haha
I (and I think a lot of poker players) would disagree.

Everything in life involves some sort of risk, but doesn't mean it's gambling. Gambling is defined exactly by those two properties. You could die driving to the store, but the odds are tiny and the benefits are huge. Driving to the store isn't gambling. Are casinos gambling when they let you play blackjack? No, the bets are +EV, even those they are only a few % different than the player odds.

You say poker players are gambling and then say gambling is taking a high risk bet. Good poker players make positive expected value bets, and have correct bet sizing (via Kelly Criterion) that means they will be able to survive variance and win.