skysight-inc/HackerNews huggingface dataset:
Note: I know the topic isn't on the front page, but am writing this for completeness.

I did check all of these out and as you pointed, they are all BI (Business Intelligence) tools.

What I believe will be easy-enough and useful to do with Pagehop's Team Support is to disperse simpler tools for simple checks into your production data. For example - a support person talking to a customer on the phone (representing the company BigCorp), complaining about being tricked into submitting a payment for a product feature twice. The support guy/gal can open Pagehop with Option + Space and write "pay :company bigcorp" and this would result in a list of all transactions from BigCorp.

Checking activity logs, user data, payment transactions... the list goes on and on. These are all simple queries that don't need a special visualization and almost no customization - you simply need the info, fast. This is where Pagehop shines - it's a launcher, so it's always a shortcut away from you.

Team Support would allow you to disperse these tools to your teammates automatically and keep them in-sync.

And if you are an advanced user - make a recipe to get an SQL/JSON/etc. query and display results. If I build this feature, I am definitely going to provide something default for this.

Coming to think of it - if you have a dashboard in Looker, called "Today's Stats", for example, and lets say you are having a release today - a recipe (plugin) in Pagehop (calling the API of Looker) to show you this dashboard, would be the easiest way to see how you are doing, as often as you like.

Finally, as pretty much everything else, the pricing is also hugely different between these products and what I plan to offer. For a team of 10 you need to spend thousands of $, while you would pay ~ $1k for an annual deal for Pagehop with Team Support.
We have a curated list here, which has all you want to know and then some:

https://github.com/paragonie/awesome-appsec

Our blog also have a bunch of posts about building secure web applications in PHP:

https://paragonie.com/blog/category/security-engineering

I hope either one helps.
Separately, continuing after funding to use a domain hack side.cr is a non-starter. Worse yet SEO miss if you google "sidecar" they don't even come up. [1]

[1] Except on the right panel as "company" but not in the actual results unless you click that link.
https://github.com/victims/victims-cve-db

Maybe the Apache Foundation could have a project like that?

http://osvdb.org/
http://www.datalossdb.org/
This. For me, the "aha" moment of web security was when I completely understood HTTP. Once you understand the protocol itself, and start realizing things like "cookies are a hack, because they are just another header" and "why do we need SNI".

The second most common issue I see is XSS vectors, and for that, you just have to get down and learn about all the features (and edge cases) that javascript/HTML5 has. For instance, things like not storing sensitive data in localStorage.
Handset cost is subsidized for some PAYG upgrades in CPW. Lumia 435 (unlocked) for £15 as an example. At the time, they were significantly more expensive on Amazon.

The Lumia 435 is not a fantastic handset for techies, it's unsuitable for myself as anything other than an emergency backup or satnav. Largely because the far fewer apps it does have, are not as good as the Android or iOS equivalents.

It's a hell of a bargain for £15 though. It's frankly still reasonable at £35.

However for my mum, it's a perfect "my first smartphone". Not least because the hideous safety orange colour scheme makes it harder to lose.

I purchased my own handset from P4U, SIM free, and it's on a PAYG network. It was cheaper than buying it on Amazon, and I could pick it up instantly.

Amazon deliveries are really hit and miss here at the moment. Months of free Prime because they've repeatedly fucked up time-sensitive deliveries.
"There's very little fluff in these books"

Very little fluff in a book that claims to be able to provide "40 percent of a two-year MBA program in ten days", at a fraction of the price?

If you want no-fluff writing on technical subjects, look for a good textbook on the subject of interest. I think people are averse to it, probably an artifact of formal education. But if you can find a well-written, introductory text, on any subject, I think you'll be amazed at how much you can learn from them, while actually enjoying the experience.
Is 'looooooooooove' ironic?

I've used p4 for several years, and even though I now basically only use git, I still think it's one of the best thought-of and implemented SCM systems out there [disclaimer: never used bitkeeper].

It's simple, elegant, compact and well performing in any scenario. You don't need a "perforce from the group up" tutorial to understand how it works. p4v is awesome for history navigation: no git frontent comes even close.

Shallow repositories somehow mitigate git issues for large repositories, even though it isn't convenient. Over time I came to appreciate some advanced manipulation commands in git so I don't think I'll ever switch back, but I hope Perforce will continue to go strong, as it's a very solid product.
Inverted Triangle CSS
That's a different product.
That's an entertaining video that really demonstrates what it's like to drive a car from 1960.
That claim is overblown but it has a lot of useful content. You'll get what I'm talking about if you read it. Don't think of it as a substitute MBA. Think of it as a fun way to get a good overview of what it takes to run a business.

It's that sweet spot where it's not as dry as a textbook but not full of fluff like some pop psychology book.
> Intel did remove it in the modern CPUs after the author alerted them.

No, they just added security checks.
As the article points out, "Hasan Ali" is a stupendously common Muslim name.

Imagine blocking anyone called "John Williams" and then claiming you were blocking terrorists, not just people with English-sounding names.

It turns out that in practice (and law), companies are held responsible for grossly discriminatory effects of their actions, without a detailed process of examining motivations at the time.
Or that some applications write their own cookie handlers (which are injectable). Or that some frameworks don't handle the request header properly. Or that you'll sometimes see custom headers that you can donk with.

Being clever at XSS/CSRF is what forced me to learn javascript in the first place. Also worth writing your own instead of using existing stuff like jquery.
The genealogy and spreading of one of the most damaging species of ants
I can't wait for the Naked Security writeup on this cockup.
Apologies - I think we've been talking at cross purposes. I was referring to the code up-thread in https://news.ycombinator.com/item?id=10025412 , which (unlike the presentation) uses "elif".
Ask HN: Recommended journey on becoming a distributed systems practitioner?
I've been programming professionally for ~3 years now and I started out knowing absolutely nothing. It's been a fun journey, and I've learned a great deal about straight-forward application development (NodeJS/Spring). Lately though, I've been really fascinated by distributed systems architectures, why they're built in a particular way and what they're hoping to achieve. I find myself hopping hopelessly between blogposts by notable practitioners[1][2][3], early academic literature[4] and conference videos[5].

Let me be honest: I'm drowning in a deluge of information, but I'm convinced that these are the kinds of interesting problems I want to work on moving forward. I'm caught between trying too hard to focus on the theory/literature (which is a time-consuming endeavor) vs duct-taping systems that I may not fully understand the tradeoffs of (which feels haphazard). Is there a middle ground? Is there a sane way for an app-developer-by-day like myself to work out a solid understanding of these concepts so that I can build these systems with a degree of confidence? A colleague recently recommended that building out my own simple distributed key value store would force me to learn a lot of things in the process (consistent hashing, leader election, MQs, Merkel Trees, Vector clocks). Does HN have any such recommendations and motivating projects to kick things off? It could advice to build something particular or some repo that I should study intently to glean insights from.

[1] https://aphyr.com/posts/291-call-me-maybe-zookeeper
[2] https://engineering.linkedin.com/distributed-systems/log-what-every-software-engineer-should-know-about-real-time-datas-unifying
[3] http://book.mixu.net/distsys/single-page.html
[4] http://research.microsoft.com/en-us/um/people/lamport/pubs/pubs.html
[5] https://www.youtube.com/watch?v=BKqgGpAOv1w
I still check in my runtime dependencies (build time tools are fetched dynamically) and fight anyone who wants to do otherwise.

QA only tested with these specific versions. You're damned right we're only shipping with those exact versions.
I am talking about consumer debt.
It's more that it avoided the issue by deflecting to a different example, while assuming unproven and fallacious (to the original point) premises to construct an inductive argument, which the author later admits is not any kind of proof according to the original question.
You don't suppose they considered the hypothesis that in modern times someone who had access to those 4 pipes didn't say "Let's get high using Shakespeare's pipes!"
> Can you remember the Segway?

Yeah.

> And how we all thought of it as the new way of human transportation?

No, I don't remember that bit.
As one of the talent in the united States, which ironically I went to school at ubc, there is very little chance I'd move back. I heard a senior dev maxes out at $85,000 a year. And with housing prices equal to the bay area, that's just a bad deal.

But aside from money there is the respect factor. I'm not convinced that tech is respected in Vancouver.

So take a triple downgrade and work for business folks who hate you?
Hearing Loss after Concerts: music always too loud?
>Apologies - I think we've been talking at cross purposes.

Yeah, didn't pay close attention to it, thought it was the same as the one I saw in the presentation.
Then they'll be exposed to systemic risk and we won't.
Then how would you prove that such a proof cannot exist?
Search in the presence of uncertainty: Expectimax Search
What's moose?
How many lives has the medical industry destroyed by artificially limiting the supply of physicians?

http://pulitzercenter.org/reporting/north-america-united-sta...

How many lives has the pharmaceutical industry destroyed by selling harmful substances?

http://www.amazon.com/Bad-Pharma-Companies-Mislead-Patients/...
The first link in that reddit comment points to [1] which is a critique of another Diamond's book. But if you let me give two comments on it:

(1) In the first sentences, the author (a PhD student in history) cannot really hide his irritation that someone with a background in animal physiology has written a popular book about history. I have seen this ad hominem several times about Jared Diamond. Somehow those historians cannot stand that someone with no degree in history has written such a popular book.

(2) "Guns, Germs, and Steel attacked the notion that racial superiority explained Western global pre-eminence, a view taken seriously by almost no one who’s taken seriously"

Actually, what Guns, Germs, and Steel did, was to provide a first comprehensive theory (that I have heard of, anyway) that explains why Europe, and not someone else, rose to dominance. This is the merit. The main merit is not that it, as a side product, discredited the racially based theories.

Failing to understand this difference does not speak highly of the writer of the review.

[1] http://www.columbia.edu/~saw2156/HunterBlatherer.pdf
I wouldn't say it addresses the problem at length. At best it goes one level deeper than "you can't prove a negative" to say "you _can_ actually offer some evidence or probability for said negative" but even then it hands off the threshold of [what's been proven vs. not proven at that point] to epistemology.

After that, the author concludes that you should never dismiss an inductive argument just because you think any probability it provides is immaterial. After all, we rely on induction all the time in day-to-day life! Well, duh. So let's hear it for induction, everybody. At least it gives us some probability.

I dunno. It's just not as intriguing a line of thinking as I hoped it would be based on the title of the paper. Despite all the excitement about proving a negative, the author goes completely silent on the issue of how much probability proves what!
It really depends on the statistical model of the quantities you're working with. If somehow your model dictates that x and y must be discrete, you can get certainty of measurement (i.e. prove x=y) even with some noise.

In this case I think both sides are right, so the argument should be used in context. You can only prove things about the real world (and not an axiomatic system for example) assuming there are no unknowns. In some (perhaps most) cases those unknowns are not there, but in some important cases unexpected behavior may occur in spite of "overwhelming evidence", because the assumptions made by the conclusions failed. It would be a much simpler discussion to state "When you want to prove something, make your assumptions clear, and test them well. Everything that hopes for rigor is proved within a well defined set of assumptions, so it's not like nothing can be proved either.".
This is a slight tangent but....

It's unfortunate that we have such restrictive and inconsistent rules around the place concerning these light electric vehicles. I realize that electric bikes really push the motorbike-bike line, but this stuff is being invented and experimented on at a clip and it's hard to figure out the best form factors when the rules are all defined around what was available and popular at some point.

And, it's important to advance... All these little electric vehicles are potentially really helpful. No emissions, low energy, far less infrastructure than cars and trains. All the segway fantasies could actually come true, in some form as these things improve. They just need to keep improving the battery tech and let these guys experiment with form factor.

Here's my request for the V2: double the size and design it to be used sitting in the lotus position. It'd be a flying carpet... that flies really low.
BeerXML
I should have been more explicit.
A GitHub issue is for discussing a problem or idea for a particular repository. Hugs, virtual or otherwise seem to be completely tangential.

Also, a mailing list can be one of the most strictly moderated forms of communication.
Death is one of the worst things that can happen to you. That's a more general moral qualification, not a purely emotional one. There's a difference between how something feels and how good or bad it is for you.
Terrorists really should start using aliases like "John Williams", "George Bush", "Donald Trump" etc. to circumvent these name lists, as they already managed to max out the patdown ineffectiveness with the shoe bomber and the underwear bomber.
I think the article I saw said that they believed she'd lost consciousness (somehow due to the current) and been unable to remove the weights. Could that explain it?
Germany and Croatia take your fingerprints when obtaining your ID card. The US Army iirc maintains a fingerprint collection of enlisted personnel.
>It all comes back to this question: what proportion of lines in your code use more than 80 cols? If it is a small proportion, the geometry is simple: you waste more screen by having longer lines.

It's obviously always gonna be a small proportion. Nobody write > 80 lines all the time (or should).

But just because you accept > 80 lines doesn't mean you have to have the editor to > 80 width. You can just let it either wrap them or cut some lines off and scroll when you want to check them (what I do).

I don't buy that somehow this "80 characters per page" is some magic number that holds true from the teletype days to today, and it should be respected regardless of font size, monitor width, etc.
This is logical nitpicking and I don't even think you're right. It just implies that of all the games I've seen no great one failed. A game can be great by an arbitrary measure and still fail comercially.
I'd say that choosing a language/framework is never relevant 10 years from now.

Getting into a position where you only work with and learn the same language/framework is a problem, but 10 years is enough time to learn whatever new technology you'll need by that time.
Rather than something for me to ride, I'd rather have something that I can toss things onto, that would follow behind me (like Tensor's Floating Disc).
BEAM is a very nice VM (albeit rather slow compared to HotSpot or V8), but I don't understand why every mention of BEAM has to spread misconceptions about the JVM:

> In many systems, Java included, the Garbage Collector (GC) must examine the entire heap in order to collect all the garbage. There are optimizations to this, like using Generations in a Generational GC, but those optimizations are still just optimizations for walking the entire heap. BEAM takes a different approach, leveraging the actor model on which it is based: If a process hasn’t been run, it doesn’t need to be collected. If a process has run, but ended before the next GC run, it doesn’t need to be collected

Well, how does BEAM know which process ran (so that its garbage should be collected)? Bookkeeping, of course, and that is also "just an optimization". Similarly, if a JVM object hasn't been touched since the last collection -- it doesn't need to be examined.

> If, in the end, the process does need to be collected, only that single process needs to be stopped while collection occurs

And new HotSpot GCs rarely stops threads at all for more than a few milliseconds (well, depending on the generation; it's complicated), collecting garbage concurrently with the running application, and other JVMs have GCs that never ever stop any thread for more than 20us (that's microseconds or so).

While BEAM's design helps it achieve good(ish) results while staying simple, the fact is that the effort that's gone into HotSpot gets it better results for even more general programs (collecting concurrent, shared data structures -- like ETS -- too).

I've said it before and I'll say it again: Erlang is a brilliant, top notch language, which deserves a top-notch VM, and the resources Erlang/BEAM currently have behind them are far too few for such a great language. Erlang's place is on the JVM. JVMs are used for many, many more soft-realtime (and hard-realtime) systems than BEAM, and yield much better performance.

An implementation of Erlang on the JVM (Erjang) done mostly by one person, was able to beat Erlang on BEAM in quite a few benchmarks, and that was without the new GCs, the new (or much improved) work-stealing scheduler and the new groundbreaking JIT (which works extremely well for dynamically-typed languages[1]).

OpenJDK could free Erlang programs from having to write performance-sensitive code in C (so many Erlang projects are actually mixed Erlang-C projects). While Erlang can be very proud of how much it's been able to achieve with so little, instead of fighting the JVM (or, rather, JVMs), it should embrace it. Everyone would benefit.

[1]: https://twitter.com/chrisgseaton/status/586527623163023362 ,
https://twitter.com/chrisgseaton/status/619885182104043520
It's the definition of a true leadership imho.
Specially Designated Nationals. Wow. I wonder whether the people who come up with these terms have read 1984 and it's a form of in-joke, or if they're actually serious.
cool concept. Put handle on it like a scooter and my Mom got a new way to get around. Oh wait, clearly, I wasn't thinking big enough. Add self-steering with collision avoidance on this deck and now you can stare at your phone the entire way from the train to the office. Google, are you listening?
Godep: Dependency Management in Go
SV and SF have BART and Caltrain bringing in people from the East and South Bay, and NY has train lines to the outer boroughs, but I don't think of Vancouver as having really much of anything beyond traffic jams.
.edu?? is this a globe university thing? this is a complete joke
It's because at the micro level, investments can be sub-optimal when they could be replaced by better more productive investments.

At the aggregate level, the alternative to investment is just economic inactivity. At this level, turning investment into fiat means stopping economic value creation and preventing economy value retention.

Unless you really believe that the unemployed would be destroying more than 100% of the value of the investment they need to work, it's an incorrect assumption.

I think the erroneous assumption that Austrians make is that they think investments are not worth it in the private markets if they have negative returns.

That is incorrect, stores of value can be useful as long as they retain part of their value, that is unless their returns are above -100%. You don't throw out a bag of apple because one of them may rot early. Idle fiat has a return of -100% to the aggregate economy over the time that it is made idle. On the aggregate, it's just paper it doesn't actually carry value forward. It is a claim on value created by others who have not promised to create anything. If you had instead invested the money into stock or a bond, something that enables production, even if you would only have generated -50% returns, you would have added much more value to the aggregate than if the savings would have been kept as idle fiat reserves.

It is crucial that fiat does not price good short term investments out of the market every time the risk adjusted market rates go below -2%. -2% can be an artificially high rate that puts the private market in a gridlock.

Negative returns may well be the natural state for stores of value. Before financial systems existed, almost all investments, had negative returns if you didn’t put work and energy into them. The only way you had to store value was to accumulate stuff, buildings or land. All options either had high maintenance costs, were subject to risk of damage from natural causes and theft, were very volatile or required hard labor to get production out of.

Even in societies with good financial systems, getting risk free, hassle free, positive real returns has been difficult for most of history. This probably reflects the laws of thermodynamics that tell us that things tend to decay without work and energy put into them.

The 20th century was probably the most notable exception. Because of unprecedented demographic and technological growth, positive risk free returns were easy to find. This however, may not continue forever, particularly amidst a aging and retiring population.

Money should not be made an artificial government backstop for stores of value as this destroys the total amount of real wealth in the economy and replaces it with pieces of paper or numbers in accounts. The saving vehicle of last resort should be for people to stockpile stuff they will need in the future (which incidentally creates job because this stuff needs to be produced) not accumulation of fiat.
This was very interesting and a technique that I had never heard of but was implicitly using myself. I have a bad back and after a few hours of work at my desk I often have to lie down and rest my back and end up napping. I'd rest by reading on my laptop but would sometimes drift off to sleep with my laptop resting on my chest or stomach and eventually the laptop sliding off my body would awake me and I would have new ideas to pursue on problems that I was working on. I think I'll put a notepad nearby and try to capture more insights when I wake up.
The Luggage™