jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
>This just shows one more time that SHA1 is deprecated

This just shows ignorance about hashing functions, especially fast ones. If they had used SHA-512, or say SHA-65536, it wouldn't be any more secure against brute-forcing / dictionary attacks. Barring SHA1 being cracked - ie, finding an efficient way to find SHA1 collisions - ie, "reversing" SHA1, it's no more deprecated than any other non-cracked hashing function.

About your only option is s/bcrypt, or something similar, which are intentionally slow / hard, to defeat brute-force attacks like this.
HN is teaching me that I'm not so abnormal. Amazing.
maybe if you are posting under an alias and want to throw people off the scent? it's emotionally useful to post, and sometimes internet sleuths like to track down anons. hopefully nobody's posting disinformation but didn't someone less than a year ago come out with a script that tried to guess the writer of some text based on their punctuation, capitalization, blah blah blah parameters?

meh.
the reason? photoshop
why is he being downvoted? not cool. guess what? it's also a tremendous BUSINESS OPPORTUNITY.

what is pg's #1 rule? build something SOMEBODY LOVES? don't you think jhrobert would be EXCITED if this was offered a service?

he's getting excited about a cool technical, (business) and social hack

jhrobert, of course it's possible to fake this. do i personally know how? my guess is copy/paste the text and fake the email headers. could you make money offering it as a service? yes.
Your difficulty was due to the line spacing, so in fact you don't disagree.
Back then we hunted or scavenged.

Those non-human animals we hunted were living freely and we lived in more harmony with the natural world.

Now we breed, torture and kill millions and millions of non-human animals and in the process destroy our biosphere [0]

We can live perfectly healthy on a plant-based diet - see the Physicians Committee of Responsible Medicine: https://www.pcrm.org/good-nutrition

We have the brains & technology to create food that is healthy and nutritious without having to continue to support the destructive and cruel factory farm industry.

So the question should be how come we accept this immense cruelty and destruction caused by the factory farm industry?

Damian Mander - founder of International Anti-Poaching Foundation put it best: https://youtu.be/BUMGBwgGYWw?t=100

----

[0] https://www.ox.ac.uk/news/2018-06-01-new-estimates-environme...

https://www.un.org/sustainabledevelopment/blog/2019/05/natur...
All data is independently researched. In some cases you will inevitably have overlaps, because it makes the most sense to order content in a certain way.

The datasets are also fundamentally different, because I have drawn my own conclusions during my research.
Professor Louis Appleby is always useful.

https://blogs.bmj.com/bmj/2021/03/10/louis-appleby-what-has-...
I agree with your irritation (I too would like more authoritative information about this, as it is outside my expertise). However, with regard to the links you posted, I think these are actually the same source and and the HuffPost "article" is just reposted content, not a second opinion on that other viewpoint.
This is the latest version of the Economist Style Guide - http://cdn.static-economist.com/sites/default/files/pdfs/sty...
Sure, but they're still constrained by the Courts of Appeal and the Supreme Court. And that bias would show up in the final decision: merely having a letter saying the NLRB will take up the case is multiple steps removed from the political appointment concerns.
Yeah, but we're talking about public positions here (public office). High visibility into both the good and the bad that you do.

Hardly comparable with software development work which is generally completely out of sight and therefore hard to quantify or verify. And I say this as someone who's been through the whole interview dance a bunch of times.
> I am able to watch 1080p Youtube videos with html5 just fine since, yeahh... always

Did you enable media.mediasource.enabled in about:config? Check it for Firefox 36, and if it's true, see if it's highlighted or not. If yes (and you are using the stock Mozilla build and not Gentoo custom one) it means you don't have the default.

Sure, you could enable it already for a while there, but it was buggy. For me the default was false. Strangely, it's false even in Firefox 37, which contradicts the release notes. But at least it works well now in actual videos when enabled.
That sounds like a fucked company.

FYI, this doesn't happen at Raytheon SI. They're mainly in Florida, Maryland, Virginia, and Texas. They're hiring. Desired skills relate to reverse engineering, disassembly, emulators, JIT, hypervisors, compilers, binary static analysis, and embedded systems. It's a place with extreme flex time, T-shirts and jeans (or shorts even), normally 40-hour weeks with the option for paid overtime if you want it, your choice of desktop OS, real walls (most locations), and lots of mischievous bright nerds with maker attitude.
Just add garbage collection!
Or just start mailing them at random a la AOL.
Imminent inflation isn't the only problem to worry about. The main problem is investors believing that the market has topped. If we keep rates low and the world's central banks keep buying assets, eventually prices will reach a point that people stop believing. The other option is that when expected inflation goes up, people will predict that interest rates will go up, and as a result, they'll believe that the market has topped.

If asset prices drop precipitously, we might be back in 2008 (or worse).
If it all goes as planned, you will likely have that too automated(More like automated detection if you are running out of groceries, in some way), either self driving cars or drones will deliver it to you.
If there were some incentive for municipalities to install unambiguous signage, we could be confident there wasn't a perverse incentive.

But no citizen can actually protest a parking ticket on the grounds of bad signage.
Great comment and excellent intro to React for interested devs. I've been successfully using React for small and mid-sized apps, and agree that Marty looks like it's an elegant solution to the Flux pattern. (for application state in React, I've also had some success with passing around an immutable cursor, like react-cursor[1]).

One cautionary note about how easy it is to integrate React with other frameworks: this statement is true as long as the framework in question doesn't touch the DOM (e.g., using Backbone models). But if you try to integrate React with any JS library or framework that mutates the DOM, you should be aware that this will interfere with React's DOM "accounting" and potentially cause lots of problems.

There are certainly ways around this (look into the lesser-used React life cycles), but it's much easier to stick within the React ecosystem for any libraries that manipulate the DOM, or build your DOM manipulations from scratch (easy to do with React). Already, there's a fairly feature complete React Bootstrap library [2]. I've started work on a React charting library, using d3 for path calculations and other utilities (and temporarily for chart axes generation, but library users shouldn't have to worry about any DOM issues) [3]. And I'm sure there are a thousand and one other React view-level component libraries I'm not familiar with, most of which are likely available via NPM.

But I agree that React and the other virtual DOM libraries and frameworks (Ractive, Mercury, Om, etc.) are the next generation approach for client-side views. They not only make DOM manipulations much snappier, but they also make them much easier for the developer.

1. https://github.com/dustingetz/react-cursor

2. https://github.com/react-bootstrap/react-bootstrap

3. https://github.com/esbullington/react-d3
They are "zero volume" because they don't have an inside. Everything that looks like it is inside can be reached from the outside without breaking the glass. The same can't be said for a (corked) wine bottle.
It's also possible that big orgd are big because they overshoot their optimum riding a rocket of early profit, and slowly colldose under their own gravity to chase ever marginal returns.

Is Larry Page getting richer at 50000 Employees that he was at 10K?
Bluntly, People magazine does more in-depth coverage of its subjects than pg's post does of this guy. They would have felt compelled to give a number of examples of things he's done that a reader might actually see as good, as opposed to just asserting it a few times.

Beyond that, the post is just some hand-waving about a claimed trend with little support. That's why the torture thing blew up - it was an actual, specific ethical matter involving the guy instead of a generic business hagiography (he's good, but you wouldn't want him mad at you, blah blah blah).
Nice documentation. But I don't see anything groundbreaking here. The whole rationale for Flux is to unidirectional state flow, and it does that quite well. A lot of library creators have focused on the tiny quibbles with "ease of use" around stores and constants –– "state management" is a good euphemism for this need –– but that's not really a bottleneck for me. I can manage my constants manually with Flux, and add listeners myself. If I need to indicate a dependency between to stores, I can use a waitFor in the switch/case block. It's that simple. Why should I learn a bunch of abstractions that make only an incremental difference?

My only pet peeve with Flux is that it does not let me dispatch from within an ongoing dispatch, which is not a huge deal yet because you can just defer the callback to the next event loop, but it's not allowing me to pipeline actions as I thought it should. I have to wait for the stack to empty out before I can dispatch a new action, which sucks. Also, there is no indication as to when a dispatch is over, so I am deferring dispatches by instinct –– or wrapping them in a promise might be the same thing.
How does Coggle pay for server cost if it's free to use and always will be?
Dup of https://news.ycombinator.com/item?id=8922996 submitted almost two hours earlier.
>why it's not as hyped

I don't know how relevant that is, but Rust has Mozilla (and Samsung?) and Go has Google plus some Unix / Plan 9 people behind it. But Nim? There are probably other factors as well.
I am incredibly excited for this. Can believe how nervous the control engineers must be for this. Not sure what quality of the footage to expect from this.
Billionaires would absolutely not pay a lot in sales taxes, you are correct. Especially the sweatervest billionaires who are almost conspiciously frugal (at least in public). And even the ones who flaunt their wealth won’t buy one yacht for every day of the month or something ridiculous like that. Or terraform the Ghobi Desert in order to turn it into their own personal mega golf course.
They’ll just increase their base pensions and budgets to calculate in the expected costs from the settlements. All this will do is destroy the budgets and pensions in one-off cases where the act is egregious enough for the cost to be 10x any expected costs.
How is painting a different caricature label for your political opponents really helpful to the overall discourse? Shameful article.
Backwards. Not sure if it's the square of the distance but you do need more than double the size at twice the distance.
If I were Slack, I would pretend to get hacked. Slack critics often point to its centralized architecture as a weak point, because rational corporations should not entrust security of their internal communications to a third party. Particuarly when that third party aggregates communications of its many clients, it becomes a target of hacking. Why hack a single corporation when you can hack Slack and get all their clients at once?

This is a valid criticism. Slack can do all it can to mitigate security risk. But at the end of the day, there is always at least one vulnerability, somewhere.

As Slack matures as a company, it needs an answer to this criticism. Because security is so naturally unpredictable, it would be disingenuous for Slack to respond with anything resembling "our security is perfect." Because, of course, as we see time and time again, no security is perfect.

Now that Slack has captured the low-hanging-fruit of the market, it needs to pick the high-hanging-fruit. The most profitable clients for slack will be the largest, conservative, enterprise clients who will join the Slack platform and then never leave. The long term survivability prospects of Slack depend on capturing these large enterprise customers.

Strategically, Slack needs to find a response to the criticism that its security is prohibitively weak, so that it can convince these large enterprises to join its platform.

Perhaps, the best response to security criticism is that "we got hacked, but our internal policies mitigated any cascading effects and customer data remains safe." [0] [1] So would it be in Slack's best interest to stage a hack on itself? Or to report a hack occurred when it really didn't?

It seems feasible that by setting precedent for its reaction to a hack, Slack has a chance to demonstrate the competence of its security team. Now investors can point to this incident as one handled well by the security team. In a world where, unfortunately, corporations will always get hacked, Slack was able to survive with some dignity.

[0] or, as safe as it can possibly be according to computer science.

[1] debatable.
I think a more correct assessment would be:

If you think you haven't been hacked, you probably have (or you are so small that you may have only been probed by bots).

If you haven't actually been hacked yet, it is only a matter of time. Ideally you start designing security layers now, before you are compromised.
I'm curious why cygwin/msys isn't enough for you. I do a lot of development on windows, and as someone who primarily used linux for ~10 years it's 'good enough' for most of what I do.
RISC or CISC? Perhaps they'll borrow from each other enough that the distinction won't exist.
Sure, should have s/much stickier/sticker/. I'm not going to comment on whether the tradeoffs are worth it, I just thought the hammer analogy doesn't work due to material differences in how you switch between hammers vs package managers.
That’s the absurd thing about Trump. His words are interpreted like a horoscope by his supporters. They mean whatever you need them to mean.
That's something that eludes software people: reproducibility in science is the ability to create independent tests. Making software available, while useful, does very little for reproducibility from the scientific point of view.
There is a substantial set of material which the USPS does not permit to be mailed:

https://www.law.cornell.edu/uscode/text/39/part-IV/chapter-3...
> What we saw today was precipitated by mass deplatforming and censorship.

Seems rather like the opposite: a mob got riled up by misinfo and conspiracy theories that they never would've read or seen if [your outgroup here] were any good at censorship and deplatforming.
Illegally stormed? What are you talking about? No one kicked down doors with pipe bombs and guns in hand at the Kavanaugh hearings.

This kind of positioning is frustratingly confusing to me. What do you personally gain exactly by saying something so obviously false?

Truly am curious what is forming the foundation of such a position you have?
Psychology research would say that building a shed together or surviving a bear attack together would lead to people getting along even better afterwards https://en.wikipedia.org/wiki/Realistic_conflict_theory
If you are not paying, you are the product https://archive.is/lrCEe
What about physical safety of Senators? They let them in an ~hour after the mob ransacked the place. Not enough time to scan for explosives, and they already found two pipe bombs, Molotov cocktails, not to mention some guns in nearby parked truck. This is crazy :o
I think its pretty big everywhere else in the world. People in South Korea use it for "muk-bang"(watching pretty girls eat a TON of food) and Chinese use it for gaming(most gaming channels with 10k+ viewers are chinese channels). I assume Europe has a lot of gamers live stream channels, but the number must be dwarfed by Chinese.

It's really interesting to see cultures evolving around this technology despite America's lag on adopting it.
I don't let my mail clients display remote content by default, and if I were to receive an email where the actual body was just a remote image, I don't think I'd show the image.

I don't understand the reasons for someone to use a service like this
Definitely add this modern classic: Measurement by Paul Lockhart.

On a related note, I've been compiling a list myself for an even younger audience (basically all ages before 14)[1]. I bet there are a lot of influential materials for younger ages, but people don't realize how influential it was once they're grow up.

[1]: http://mcsforkids.herokuapp.com/
I agree that this is not a good reason to give a 1-star review, but it still conveys information to me as a potential buyer. Are there more of these reviews, is the device prone to failure?

They pose a problem for a low number of reviews, but with enough of them it can indeed be a valuable metric. You have to know how to read it though.
They would promote the Semi pickup instead.
It means that F=ma - the bigger you are, the safer you are. The driver of a small 2 seater car is going to be worse off than a huge semi if they both collide.
Chevrolet SSR vs AMG HMMWV pickup with SAM missile battery

(1) https://en.wikipedia.org/wiki/Chevrolet_SSR

(2) https://en.wikipedia.org/wiki/Humvee#/media/File:SAM-HMMWV.j...
Have you tried Psiphon? It's one of the few free ones I trust (I know the guys in the team very well) and is built with the journalist threat model in mind
Jordan has many incredible locations. Petra and the wadi rum desert are the most known, but there is much more than that. This land had an eventful history and that shows (from roman ruins to ancient muslim castles).
It is also detached from most conflicts in the region.

We went there with my girlfriend around the beginning of the year. It was a very nice trip as a whole, but I feel obliged to express my discontent about how aggressive are the merchants and salespeople at the touristic places there.

You very much feel like you're seen as a walking wallet when you're walking in Petra and the huge amount of merchants selling souvenirs there - inside the site (which is an unpleasant sight on its own) - begin to talk to you uninvited to convince you to buy their stuff. Same thing for wadi rum, when you see how the different "bedouin guides" are neatly organized to sell you an "experience". It sadly feels very unauthentic at the moment when you're looking for the opposite.

For sure that's something to be expected from most touristic places in the world, but I felt that this behavior was particularly present there. As a whole, I found relation to local people you depend on (to eat, to move, to sleep or to visit) to be hit or miss, with a lot of misses (but also two incredibly nice guys on two separate occasions, so I cannot generalize).
Just to compare with a neighboring country, I also visited the Palestinian territories a few year before and did not have the same experience at all, quite the contrary even.

That was just my experience and I know someone who also visited there around the same time with a better experience. She rented a car (we used local buses), and stayed less time in the most touristic places but much more time than us in the north.
I would advice people wanting to plan a trip there to do the same thing.

The last day, we payed an expensive guide for a tour in the remaining locations we did not have time to visit. This guide was helpful and it was a more relaxing day than the rest of our trip (which lasted around 10 days, I don't remember exactly), so I guess having a local guide also helps.

\End of my rant about the caveat of tourism in Jordan
> I don't see any advantage in using XML to be honest

Well, it's great for what it was intended for: structured documents.
I work at a library, where I'm dealing with thousands of digitized books and I haven't yet found a proper non-XML alternative to something like TEI.
> Python: Direct memory access: no

Wrong. `ctypes.c_char.from_address(a)` and enjoy your SIGSEGVs like a seasoned C programmer.

(Well, that is unless you're on Jython or IronPython.)
Ship an MVP and iterate.
The "1 month of battery life" is such bullshit, and I'm surprised so many people, especially on Reddit, believe it without question. Nokia announced a phone like this a year ago, too, and the same happened.

The "2 weeks" of battery life or even 4 weeks thing is at least a decade old. It's nothing new. Old Nokias and Sony Ericsson's used to promise that all the time. The thing is that's just idle time. You're not going to keep your phone in idle that much.

This type of marketing definitely came from the Nokia guys themselves - this "old type of thinking". It reminds me of when laptop makers used to promise "8h of battery life" on their laptops 5 years ago, when their laptops only lasted 2-3h with normal use. They were also thinking idle/almost no usage-time, and being misleading about it in their marketing campaigns.

For most people here, I imagine that phone will last them 3-4 days, which is nothing to scoff at, but it's also not nearly as much as "1 month" of battery life as they imply, and you also lose so much more compared to a smartphone. Yes you get "Internet", but it will also be a pain to use it on that non-touch tiny screen.

The price is also not that special. There have been feature phones costing that much for years. The only difference is now some components have become cheap enough that they can also add some that make having Internet on it a little more usable than before.

People here are aware Firefox launched a $25 Firefox OS smartphone right?
This is an excellent reply, but it makes crystal clear one point: Go doesn't produce "native" code other than in the very limited sense of binaries that can be loaded directly by the OS. Go is a lot more like Java than C or Rust. It is Java with some different decisions than HotSpot: all code is AOT-compiled, and the result is statically linked with the "VM". In fact, because the JVM spec says nothing about JITs or static linking, a JVM that is implemented just like Go is a perfectly compliant JVM, and, in fact, there are some JVMs ([1], [2]) that behave exactly the same way (they're used for hard realtime embedded software in avionics and similar domains)

[1]: https://www.aicas.com/cms/

[2]: http://www.atego.com/products/atego-perc/
Poly1305 is significantly easier to implement than GCM. Carter-Wegman MACs have been a research focus for DJB since the 1990s.
Hello,
nice project, just one thing, as reported here: http://www.grappendorf.net/projects/6502-home-computer the author states the 6502 was "...an 8-bit MOS 6502 CPU that was used in many popular home computers of the 1970s and 1980s like the Commodore 64..."
which is not correct, the 6502 was on the Commodore VIC-20, when the Commodre C64 was equipped with a 6510 :-)
I'd never enter the SF renter market as a landlord, given that it can basically only go down.

I meant to suggest it as something you could short - it's an asset class that is tied to the health of the sector. Since it's hard to short the companies in the sector, you could short the RE as a proxy.
You can buy a USB keyboard with a Trackpoint built in. Check Amazon. For putting one on a laptop without an external keyboard, I'm not sure how that would work.
I'm the same, can't work without the track point, trackpads are inefficient if you type a lot.

One of my colleague in the same situation ended up buying a Toshiba.
Also, there will be a long lag time from when driverless cars are introduced into the car-sharing market to the time that everyone is comfortable using them and there are enough to saturate the market. In the meantime, you'll be able to choose between the different options via Uber.