jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
I understand why it does it that way; I've written programs in Clojure and quite like it (with math expressions I've been using "let" a lot to break them up and make them more readable, but this also makes them a lot more verbose). But contrary to the GP, I still see prefix math as a cost, not a benefit.

edit: I love Clojure's literals but I still think even with editor help, nested parens are a less readable form of structure than c-style blocks. I understand why it's done that way (uniformity for macros), but that doesn't mean I have to like it in and of itself.
Ok. But:

* The former fix is somewhat theoretical. Back around 2003-2004, there was a Bellare paper that proposed an attack on SSH based on its use of "chained IVs", where the IV of packet N is the last ciphertext of packet N-1. This reveals the IV of the next packet to attackers (ciphertext is public) before the packet is encrypted; it is OK for IVs to be public, but not OK for them to be predictable, or else attackers can use a chosen-plaintext attack to make guesses about packet contents. Angelos got rid of this construction back then, and this fix makes the rest of OpenBSD's crypto consistent with the fix. Interesting, but certainly not a crypto backdoor.

* The latter fix isn't a security flaw; they forgot to bump a constant and so a for() loop wouldn't be able to find an item in a list.
Thanks for the feedback Max, and being an early user.

We've been internally discussing many, many directions we could easily (most without having to build much else and using our current technology) take with the product. Agreed that it is rather broad at the moment and the lack of a single powerful use case makes it hard to evangelize. The next few months will be interesting. :)
That ad doesn't look like it actually has a car for sale. Doesn't craigslist consider that spam?
Or maybe it's the more-than-full-time job he was working until very recently. I think that sounds more plausible.
As usual, Wondermark said it best: http://wondermark.com/368/
I really don't know much about this, but I understand that VP8 was designed to deliberately avoid patents. (Thus some of the weird decisions Dark_Shikari comments on.)
good news for one of my clients - http://ming.ly - they're a social CRM for gmail similar to etacts (but a bit more full-featured)
Were hiring, http://portablepixels.com
It wouldn't be so bad except cookies aren't invalided when you change your password. I changed mine a few days ago, and didn't have to login again on any of my other computers. So once your cookie is sniffed, that person is you forever.
> it's also important to acknowledge the occasional usefulness of language that you might be personally offended by.

I appreciate the emphasis on usefulness rather than right or wrong. I certainly didn’t interpret “inexplicably, self-destructively foolish” when I read the comment and apparently that extends to others too, which also speaks to usefulness or lack thereof.

On the internet, writing anonymously to a large anonymous group is very very much communication on hard mode. Things like Poe’s law reign supreme. If your goal is to get idea X into as many of the comment readers’ heads as possible, then it’s useful to use language that means the same thing to as many of those readers as possible. I think that’s what people mean when they talk about “inclusive” language?

The HN style generally seems to be choosing the clear inclusive phrasing over the stylistic(?) phrasing, choosing “inexplicably, self-destructively foolish” over “literally retarded.”

(Not trying to be language police. Just a language nerd who likes to talk about language.)
Discord is a for-profit unencrypted proprietary centralised walled garden. It’s forbidden to connect unofficial clients to their server, and there’s nothing stopping them from monetising your data/metadata in future.

Matrix is a non-profit open source project that defines a decentralised communication protocol that forms an open global end-to-end encrypted communication network. Anyone can run a server to participate, and anyone can use whatever client they like. You could see Matrix as descended from IRC, and Discord from AOL chatrooms.

The only advantage to Discord is that historically it has slicker UX than flagship Matrix clients like Element, more users, better room management, and exposes voice/video chat as dedicated chatrooms. Matrix is steadily catching up however.
> binaries in Linux reside in a few directories (/opt and /usr)).

and .local/bin and $HOME/bin and $that_path_where_python_and_ruby_put_stuff and let's not forget that one executable which is in /usr/lib/name_of_the_app for some reason...
Clarification, in my context I'm typically talking about the IT Security and employee relationship. But the dynamics you outline still hold, although my experience has been reverse (they value what they perceive as "the company" over employees).

> I would imagine companies like that are generally toxic across orgs, and not just in IT, but probably any area where investment is forced and it isn't revenue-generating

I'd agree this is probably a key contributing factor.

It's been my fortune / misfortune to work for a number of companies that qualify (healthcare, financial, insurance).

But it has also been true (in my much more limited experience) with healthier, IT-as-profit-center companies.

I'd hazard better framing (than profit/cost center) might be "incentivized to improve" vs "penalized for mistakes."

Unless it's the former, it's in no one's personal interest to go above and beyond or suggest change. So you get glacial, incremental processes, and lose people who are impatient with working that way.

As you note, I think monetizing security is a key step to establishing a healthier balance.
I recently setup Traefik 2.x to front a self-hosted Docker Registry, with automated Let's Encrypt renewals - I found the config to be really unintuitive and confusing! It feels like an awful lot of really finicky config for such a simply setup. Next time I'll try something else.
reasonable thanks. You're probably right
> Http requests already provide an excellent threading container

Yes, modelling code around receiving requests and returning responses was a good idea.

> It’s harder to walk a BA or non technical manager through functional code and stand a chance of them tracking what’s going on.

Jane Street adopted OCaml as its main programming language early on because the language's functional programming style and clear expressiveness made it possible for code reviews to be performed by traders who were not programmers, to verify that high-performance code would do what it was intended to do.
Head of line blocking in http/2, and performance/reliability on dodgy mobile connections. It's definitely getting to the point of diminishing returns, but given how widely http is used it does seem to justify the effort.
Wow smokers went from 42% to 14%?! I knew I noticed fewer smokers but had no idea it was that dramatic.

edit: ahh the 42% stat was from 1965, not 1999 like the rest of the information.
My sense is that that is unnecessarily self-inflicted. Companies' focus on hiring people who already know the language they use is penny wise and pound foolish.

Even if a new developer is a complete novice at a language, I would still expect that to be less effort than learning the business domain, getting to know the codebase, and socially integrating oneself with the team.
My advice for people like you is to try a super small dose (e.g. 1/8th of a "normal dose"). This will hopefully take the fear away as it will have minimal (if any) noticeable effects and is a baseline to work up from. The people who have bad experiences are the ones that take a large dose the first time they try something.
So there's gotta be a million of these. What's the best one for pre seed to post seed, startup school and paul graham?
A few weeks ago filling up at Costco the attendant was inspecting the pump from top to bottom, I asked what he was doing and responded "looking for skimmers or alterations" to the pump. I asked how often do you do that, he said "every hour". I was impressed.
He doesn't live there - has never lived there - and has said he will never live there. He's just completing the lawsuit "for the principle" of it which is as insane as it sounds.
Another good reason to get an EV, don't have to visit gas pumps again! :)
The native tribes in the US would beg to differ.
On the large scale, I think Orwell's view is correct. The pattern always repeats itself.

However on the individual level, you can reap the benefits of the revolutions and will die before the next cycle, so there's always at least some incentive to challenge the status quo.

It doesn't change the fact that it's hopeless on the large scale.
Thanks for the clarification.

I am aware of the difference of MailChimp the service, and Sendgrid, but MailChimp the Company owns Mandrill which is the equivalent of Sendgrid.

My question was which company is most likely to sponsor a tiny startup.
If you define science as anything that's falsifiable, then of course anything that isn't, isn't science. And hey, free sciencecountry, that's your prerogative.

That said, the philosophers of science who originally discussed falsifiability have gone on to say its inadequate, and a huge chunk of work that's published and funded as science these days isn't strictly falsifiable.

Science is a word like any other, that we all agree on to make meaning. Right now lots of practicing scientists work on a definition that includes but isn't limited to falsifiability, but of course the great thing about it is you're welcome to decide what criteria is most comfortable to you. I like to think that the work Einstein did on Special Relativity before 1915, that wasn't mathematically distinct from Lorentz or Poincare, was scientific even though it wasn't falsifiable.
My sentiments exactly. I don't want to have my full name displayed on a social network. But once I change it on G+ it also changes on the emails I send.

Bye Google.
"MySpace is huge in Japan"
lol silly ron paul.
Both the original "10,000 hour rule" and this rule run afoul of http://en.wikipedia.org/wiki/Sorites_paradox unless you rephrase the statement to something along the lines of "we have found that most people either succeed at X and continue doing it for the rest of their lives regularly or give up, and that of the people who give up, 95% of them give up before doing X for 10,000 hours"

I believe the question is, "what is the mean and standard deviation of the time investment at the point when a sustained positive feedback loop is achieved?"
Even if it is theoretically enough to have them do business with you, you should ask before you do -- which shouldn't be hard because you only need to ask twenty or so, so it does not require that much optimization.
How do they justify the longer service for men?
Our very own zackattack might beg to differ. I can't imagine he put 1000 hours into his AwesomenessReminders, which are making him a pretty penny.
I found this react-flux implementation much more approachable: https://github.com/kjda/ReactFlux

I've added an isomorphic design to it as a starting point for what will eventually be a fantasy draft application: https://github.com/rblakeley/fifa-heroes
The W3 standard for the meta referrer element was linked in this post:

http://www.w3.org/TR/referrer-policy/
1) Even if twitter fizzles it won't be worth $0.
2) It's possible that the investors in this round have a preference to get their money out first.

So 25% chance of nothing is almost certainly wrong.
Well, no. From Warren himself: "I made the bet... (2) to
publicize my conviction that my pick – a virtually cost-free investment in an unmanaged S&P 500 index fund – would,
over time, deliver better results than those achieved by most investment professionals, however well-regarded and
incentivized those “helpers” may be."
[1] https://www.berkshirehathaway.com/letters/2017ltr.pdf.

And, regarding being skeptical of things like "hedging risks" and "complex portfolios," I don't know. I'm just not sure enough hedge funds really do a great job handling tail risks to not be skeptical of all of them as a group. And, surely sophisticated investors can target specific sectors and build arbitrarily complex portfolios (if they're into that sort of thing) with passive things like ETFs for much lower fees on their own.
Why is it necessarily Cryptography’s fault that Python Ansible was taken by surprise? Or any of the other affected parties along the chain? That Cryptography was starting to include Rust in the project was announced on the mailing list by Gaynor last summer. And that email said exactly what future (at that time) release would require a Rust toolchain if the project was to be built from source.

The reply to that by the Gentoo guy (who started the Github issue) was that package maintainers cannot follow every single mailing list of every dependency. That is debatable (e.g. maybe you should make an exception for security applications), but let’s take that as a given for now. In that case, what is Cryptography to do? Where should they announce such things in a way that orgs like Gentoo will see it? And also notice it and not just mentally gloss over it as some kind of “spam”? If the Gentoo guy didn’t see it half a year ago, would he have seen an announcement (or the reminders) if it was made five years ago?
Am I missing something here? To me, Buffett's argument sounds like a reformulation of Sharpe's Theorem[0] from 1991, which states that active investors cannot in aggregate outperform passive investors. This is an easily proved theorem, so what's the catch here? Why would anyone bet against a theorem?

[0] https://web.stanford.edu/~wfsharpe/art/active/active.htm
> The subtractive Grid model starts with a three column grid and allows zones to be created by splitting and merging zones, resizing the gutter between zones as desired.

i3wm is basically like that except ad-hoc instead of preconfigured, and starting from a single full-screen window.
Note that after I pressed Pete in the replies for details, he went into some actual specifics: he has concerns about things like thunks and sagas, and also is frustrated by people complaining about "React" when they really mean "the React ecosystem".

That's a completely different set of topics for discussion than "never use Redux".
What stops an attacker from spoofing the webcam with a looping video of the subject staring at a camera instead of a still image or holding up a picture?
Author here.

My argument is actually that Rust cannot replace C because it's not portable enough.

I would love for Rust to be portable enough.
considering I haven't checked my (physical) mailbox for two days now, I wonder the effectiveness and necessity of the service. I know many people that do depend on their services, but I think the USPS will become a thing of the past eventually.
I'm worried that we're only hearing one side of the story on these scanners. If you listen to the net you learn that they are a total waste of time and money, security theater, they are harmful to our health, the images will be stored and leaked, agents will laugh and joke about passengers' penis size, manual pat-downs are tantamount to sexual molestation, male agents feel up female passengers, requesting a private room for a pat-down invites abuse, and more.

There is no evidence of critical thinking or questioning whether all these claims are correct. Even here on HN, people who challenge the conventional wisdom are voted down. And make no mistake, opposition to the scanners and stricter pat-downs is very much the conventional wisdom around here.

It may well be reasonable to conclude that the costs of the scanners are greater than the benefits. But please don't just accept everything you are told because it supports your conclusion. Intellectual honesty requires challenging evidence that favors your beliefs as well as that which opposes them.
link: http://getsatisfaction.com/instagram/topics/password_is_not_...
It would also be interesting to see this survey conducted using natural frequencies instead of percentages. Humans are notoriously bad at reasoning with percentages.

Compare the following:

"I prefer a 1% chance of losing $1000"

"I prefer a 5% chance of losing $1000"

with this:

"I prefer a 1 in 100 chance of losing $1000"

"I prefer a 1 in 20 chance of losing $1000"
Does the Federal Reserve turn a profit?

Yes.

$45 billion in 2009: http://www.washingtonpost.com/wp-dyn/content/article/2010/01...

Earnings beyond the cost of operations are returned to the US Treasury:

http://www.federalreserve.gov/generalinfo/faq/faqfrs.htm#6

kb
What's not to like? If they under-prepare, the worst that happens is they get all kinds of press on how hot the product is. If they over-prepare, they just waste money. Seems to happen repeatedly -- Jobs & co. are too smart just to keep underestimating demand all the time. And this coming from a company that always issues extremely low earnings guidance....
It's interesting that the value of a degree is measured in increases in income later on in your life. The traditional role of universities was as a place of learning and for the advancement of knowledge through academia, not as a social engineering tool.
they do if you're using at&t in the NY/NJ metro area. it's at least a daily occurrence.
JQuery does the same.

$("#element").html($("#element").html() + custom_html);
Still winding down, these are the few last "Hurrah"s. Having said that, the system still only being semi-automated, I'm taking to heart the comments and trying to be "softer" in the comment. The comment is auto-generated (and then submitted by hand), but I've changed the templates a little.
I quite frequently hear or read complaints about companies' ethics -- exploitation of tax loopholes, spreading disinformation about global warming, getting their press releases to appear almost verbatim as newspaper articles, etc., etc., etc.

Perhaps there's a correlation with politics? Most of the politically-charged stuff I read has a leftward rather than a rightward skew, and generally lefties are more concerned about the ethical behaviour of businesses and righties about the ethical behaviour of individuals. (Yes, I know that's a sweeping generalization. And is it just me, or is "lefties" quite a commonplace term and "righties" really weird?)

Note: Please let's not turn this into a discussion of any of the particular ethical transgressions I mentioned; the point isn't whether, e.g., oil companies are really spreading disinformation about global warming, nor whether that's a bad thing, but whether they're commonly accused of doing so by people who think it is a bad thing. My experience is that they are.
I'm pretty sure I recently used a non-US credit card to pay for MTurk. They require you live in the US, but they don't seem to verify that.
There is no way to design a solution to an internal debate. Nor should that debate be passed along for your customers to suffer through.

I'm gonna file that away
To be fair they are being fed and housed so it isn't like they are going totally uncompensated.
you shouldn't need to do that manually. That's what package managers are for: handling updates and uninstalling old software in favor of the new version.
Most of these sites have some free service: http://en.wikipedia.org/wiki/List_of_social_bookmarking_webs...
What's funny is there are already a ton of these on the market: http://www.amazon.com/s/ref=nb_sb_noss?url=search-alias%3Dap...

He just has a sexy video and Kickstarter page.
Mobile networking is imperfect. An app capable of waking in response to a push notification may still fail to create a network connection with the sender.
And you better believe that after being harangued by the President and Congress for years following 9/11 to "act more creatively", the Intelligence Community is using exactly these types of loopholes.
As a pilot who flies for fun, I totally recommend it.
> I live in Vancouver. I can wake up in the morning take the Canada Line -> YVR -> SFO -> BART -> your SF office by 10AM.

In theory, yes. In practice, no (unless you are part of a minority that can afford to fly across borders multiple times a week)
In Switzerland, train connections are optimised for minimising time and allow for distance between the platforms in question. It's stunningly efficient.
Looks great on your iPhone. Can't wait to see how it will look on mine. If ever...
I just mean footnotes in general. If I see [x] after a phrase, I instinctively feel the need to look up the footnote and find out what the author wanted to say or reference there. Adding footnote links that aren't actually footnotes would drive me crazy.
The WakeMate was just sitting on my desk so it's not an accurate reading :).
I guess they're not journalists after all.
Similar to tines thought speech in "Fire Upon the Deep".
I don't see how this has anything to do with politics, since SpaceX is a private company. Also, it's not SpaceX's first launch. It may be the first launch of the Falcon 9 rocket, but there have been others that SpaceX has undoubtedly learned a lot from.
He actually is broke, liquidity issues as I understand it.
http://www.laobserved.com/biz/2010/06/elon_musk_is_broke.php
I actually had to have a test for it as part of my working visa application to Belgium. I thought it was really weird, and so did my doctor!
I'm certain that when you were coming of age your parents' generation rolled its collective eyes just as hard.

Rest assured your pop culture of choice is just as odious to someone as Honey Boo Boo is to you.
To be fair there's quite a big difference: Lionel Messi is an individual footballer whilst in Fifa you have more control over the team strategy.
On top of what you said there is also the naked assertion that this virus is in “exponential growth phase” when the truth is we aren’t testing the right population to prove or disprove it.

And before you downvote this comment... consider all the “exponential growth” you see on those stat counters could correlate to number of tests administered.
At a recent sim competition in Miami ("Miami's Fastest Gamer") in which various real-world drivers competed with sim racers, the top three spots were real-world drivers -- Juan Pablo Montoya, Ed Jones, and Eduardo Barrichello. However, the best sim racers can definitely hold their own (eg James Baldwin came in fourth) and perhaps some of this boiled down to experience more than anything else. Although there's definitely a lot of differences, the skills between e-racing and real-world racing seem somewhat more compatible with each other than other e-sports.

Reference:
https://wtf1.com/post/juan-pablo-montoya-won-a-sim-racing-co...
https://www.essentiallysports.com/f1-news-juan-pablo-montoya...
This is clearly a troll post. Mods, please remove.
I think the down voters are missing your clever joke regarding "literally" - I appreciated it.
(Intrusive) lists were useful when the cost of a memory access didn't matter relative to CPU speed, so that cache thrashing wasn't an issue, and you had a scenario where list nodes had to be inserted and removed frequently, but you don't need random access. In C such intrusive lists are also easier to manage since you don't need to care about dynamic memory management since the list nodes are embedded in some other existing data structure.

Today where avoiding cache misses is the most important optimization, traditional lists have indeed become quite useless, especially the non-intrusive type like std::list.
We did economically recompense some former slaveowners. Not the slaves or their descendants, of course.

https://today.uconn.edu/2021/03/there-was-a-time-reparations...
Looked another way, it may make our security systems more robust. Much rather have to pay money to some hacker to get my data back then wait for some future where a nationstate does it to cause harm.
Yes, incoming warheads would be tracked by ground radar, with guidance beamed to the interceptor.
I believe the front-facing Twitter.com is all Scala, but a lot of their internal and smaller sites are RoR.