skysight-inc/HackerNews huggingface dataset:
rightfully open source enthusiasts made it clear that trusting select corporate bodies and vested interests to be the sole distributor of keying material for the OS was problematic.

And that was a good thing. It put pressure on getting the capability to add your own keys.

I realize there is far more nuance, but I trust centralized system verification like I do centralized SSL PKI: I have to, and no one is trusting my self-signed certs

Agreed. I guess it all depends on what you refer to as "security".

For me general internet security is about making it harder to get impacted by drive-by malware, portscans and similar.

I set as a general rule that I don't believe there exists practical security-measures which can counter-act malicious activity if anyone has local access to my hardware. I don't try to guard against that.

If your definition of "security" involves guarding against possible systematic attacks from US government agencies using pre-installed (Microsoft) keys, obviously secure boot is not going to provide that for you.

My point was that laughing at secure boot as a measure of increased security because "lulz Microsoft" is a knee jerk reaction which is factually wrong.

The majority of people, and I have a few budding Linux enthusiast friends, just turn off Secure Boot

And are you really going to tell me they are not more vulnerable than if they had been using secure boot?

Secure boot can be used to increase security and I don't think that is debatable. I think the reason you're getting downvoted is because you seemingly dismiss this point.

UEFI is also a mess

I think I'll have to agree with this one. With BIOS being clearly insufficient for modern hardware and software needs, UEFI was a pendulum move gone too far the other direction.

It's over-engineered, supports too many crazy things, and coupled with other "messy" features like Intel System Management mode (which also allows code outside the OS), the possible attack vectors (coupled with physical access) are getting increasingly crazy.
Some sites let the user provide a email address in order to allow password reset, but don't force it. I think this is a good practice.
Most people seem to think it will make them more productive without the distractions so for a lot of people it is. Pretty view won't improve your work/life balance either unfortunately.

I was less productive and equally happy. All existences become the norm quickly. Even living in a tropical paradise, or surrounded by snow capped mountain wilderness.
What the article proposes is an extreme position, and while I don't agree that the entire web can work this way, a lot of it can. Look at the page you're currently viewing (hacker news): It's by no means a terrible experience, and yet it manages to check all the boxes: it has no javascript necessary for viewing (there is one function for voting, but that is non-essential), no proprietary plugins, no ads, no visual clutter, doesn't download fonts, no tracking, and if I just want to read content, no account is required.

So we see that it's not impossible to make sites that follow the goals of this "manifesto", and I would say that all of these non-features speaks in favor of the quality of HN.

Clearly, there are sites that do not follow these guidelines, and their business model makes it impossible for them to do so (Facebook, anyone?). As a consumer, which one of those would I rather use?
Keep in mind: For entry-level / junior positions, they're hiring you for things other than 'what you know'. They're hiring for attitude, for your ability to learn, for culture-fit, for the positive energy you bring to the team, etc.

While building up your technical skill-set is admirable (and not a waste of your time at all), I would make sure you polish these other intangible qualities as well.

In other words: Learn how to make an awesome first impression, and you'll be able to land an entry-level job regardless of your skillset.
Also the users are a bit more, um accurate, in their answers; so if you run into problems, you may be in better hands if you reach out ( so long as people in help places aren't being hostile twats ).
He clearly makes a point of supporting user CSS, but also a point of being usable by default, so it clearly misses that...

Also, I doubt most regular users could be bothered to actually write custom CSS for the entire web. Most people have zero knowledge of how to do it, not to mention how to actually improve what they want to improve.

The only reasonable real world case I can see is accessibility, which is certainly a valid case, and should be considered by all web designers/developers.
The Church of HTML send thy 10 commandments.
Only the purest of websites will make it to our kingdom.

obey you heathens.
A/A Testing: How I increased conversions 300% by doing absolutely nothing
No, I am viewing it on a 24" screen. However I consider long lines of text as unreadable and my default size for a browser window is quite large. I really think most sites with simplistic CSS would include

body { max-width: 11in; }

or something similar in their stylesheet.

Note that my own personal website conforms very well to his expectations (except loading images from flickr (without javascript) which, as you pointed out, leaks private data).
I would add however that the most important thing is readability, responsiveness and speed.

A webpage without stylesheets is technically responsive, but in practice not very readable, due to pretty bad defaults in most browsers (i.e.: tiny fonts and cramped text)

Finally, the most important part of any article-based website (for me) is a full text RSS, which enables me to have actually good reading experience - outside of a web browser.
If you have any kind of non-tech savvy users, it's a terrible practice, as you would be flooded with support requests on how to get into their accounts with no way of verifiying the actual owner.
sad, it worked for me. sorry about that
> 6 No non-standard fonts

I really hate those. Especially sites like github who capture the Tibetan Unicode block for their font, as this is a character set that I need. http://kephra.de/src/WylieUTF8/

ok I'm likely one of the few who can read Tibetan, but this shows a typical US ignorance, and certainly gives github a bad karma, as they make it impossible to display any Tibetan text on github.

11: Sites that can be viewed better without CSS, if you are a NoScript user. e.g. main page of Medium shows a grayed out layout where its not possible to click on articles without JS. But the become readable again once you disable CSS also. eBay does similar.
Moot has a login here, doesn't he? Be good to hear his thoughts.
I guess it's because I am an European and the culture is really different in the US, but I find this article really... exotic.

Are the so-called "mixed-collar marriages" that uncommon in the US? Here it's a rather normal thing. It's true that many graduates end up with other graduates because they meet at university or at work, but I know a lot of those "mixed-collar marriages" and almost no one I know, except for one or two gold-diggers, thinks that people with more or less studies than them are outside their dating pool.

Also, the concept that women invariably want long-term relationships and marriages while men want to hook up is something that I associate with past generations. At least here, now it tends to be the opposite. In the vast majority of young couples I know, it's the man who wants to get serious and pushes for more commitment (living together, marriage and so on); while the woman wants to be free and keep things more informal...
Use TLS servers for trusted timestamping
Just found this: http://motherfuckingwebsite.com/
I think it passes on all points.
It's likely I'm just old-fashioned, where getting to know someone precedes having sex with them.
Anti-virus software is a scourge that I'd be happy to see disappear. For the most part, its business model is to prey on the ignorant - I can't even count how many times I've been asked why a computer is running slowly, only to discover that there are three or more competing anti-virus products running, every one of them hooked into every single file read or write. Just yesterday I had to turn off Windows Defender real-time scanning, because it had gone out to lunch and leaked memory to the tune of 2.1 GB. Hot garbage.

It seems like the popular thing lately is to bitch and moan and question the morality of using ad-blockers, but using an ad-blocker is the single most important thing you can do to improve security on your machine for the average user. Blocking Flash, or, should you happen to still encounter it, Java, from autoplaying comes in second. Blacklisting SourceForge in your hosts file might be up there, if they are still bundling crapware with the few legitimate downloads that haven't moved elsewhere.
RESTful APIs R.I.P.
Flash is essential for harmony of your twosome life if you share your computer with your girlfriend who plays facebook games.
You make a lot of claims. Mostly unsubstantiated. I do not see a point in engaging.

And by the time the Dutch flee the Netherlands, it's too late to talk I'm afraid.
Ouch. You can be sure, very much so :(
Its very doable, you got to glitch it (strangely, I got pretty good at glitching it through, and then I realized, my morning was gone, and I had to go work)
I don't think the OP meant believing in a set of made up "core values" or even in a marketing message but rather in the vision. It shouldn't be something that can be leveraged against anyone (i.e. Staying late) but it should be what drives you to push forward when there's no other tangible return in sight.
What is your opinion of flash video being abandoned ?
Much talk has been running around here of the future limitations of flash on Chrome.

I run a website that is highly reliant on streaming ( www.seedr.cc )
Flash is indispensible since browser manufacturers cannot get to decide on proper, always-working streaming.

Videos are auto-converted to multi-quality HLS + MP4 to support all devices and stream during conversion.
Thing is , it's looking like browsers are moving away from flash yet leave no proper way to stream video across devices without keeping 6 different copies of each video around ( + the conversion overhead of doing that )

What would you say is a solution for that ?
Or does google actually expect developers to use 4GB for every 1GB of files uploaded ?
GSLV Successfully Launches India’s Latest Communication Satellite GSAT-6
This service is neat: http://huffduff-video.snarfed.org/

It extracts the audio then "huff-duffs" it; i.e., puts it into an RSS feed you can consume with your podcatcher of choice. Check it out, it's great.
Saying "Is Uber morally bankrupt?" is just the same as saying "Is the Pope Catholic?" by now.
How we protected our SEO Rankings while using CloudFlare
Nobody cares about those trademarks, and just by "obeying" them by writing the marks how they want us to, we are making idiots out of ourselves.
PCI-DSS applies to Netflix very much, they probably still will have traditional AV in their CHD environment and any other system in scope of the certification (e.g. the desktops the sysadmins use to administer servers within the CHD environment).

Also the PCI council doesn't define which AV is compliant or not, only states that you need anti-virus protection on all systems commonly affected by malicious software.

It's up to the QSA and acquirer(if that one gets really bored) to accept the solution, neither of which care really. You can use Windows Defender, Clam or the most super duper expensive AV out there it's all the same for them.

The requirement is also worded very carefully "on all systems commonly affected by malicious software" so people could make a case against installing AV on things that AV solutions are not common for, such as Mac's, Linux box's, and even Mainframes (yes there are mainframes in certain PCI-DSS scope's because the QSA wasn't smart enough to find a loop hole to keep it out of scope or the costumer is dumb enough to actually process or store credit cards on it).
I'd like to point out, that subuser is not moving away from Docker. It seems pretty clear to me that we don't have any good other options. But the problems that I mentioned remain, and these problems really are causing subuser to break. I guess that's why the title of the bug report is "Docker isn't prefect" rather than "Docker svcks 1111" ;)
> All of which made his decision to leave 4chan seem so confounding. "I've come to represent an uncomfortably large single point of failure," he wrote in his farewell post. What he really meant and why he was quitting were a mystery.

Huge amount of pressure from outside to censor "the cesspool"? He, himself, has become a attack target. Something goes wrong -> "need" to censor 4chan arises -> people exert pressure on Moot. Repeat and repeat. And its not really about 4chan - it was mostly about Moot: just too much for singe person to handle.

Nude pictures of celebs were not leaked by 4chan - it was leaked by 4chan user. 4chan was just a medium. Pics could be leaked anywhere with similar results (e.g. more attention to celebs in question). Harassment of game developers goes day and night on Tumblr, and nobody is doing anything about that. All other stuff you've mentioned are just things that happen in real life. Real life once again leaks to the Internet - stop the presses!

As for harassment: its the REAL PROBLEM. But 4chan is guilty no more that Internet in general. Harassment campaigns are happening all the time and even lack of anonymity is not preventing such behaviour. Tim Hunt and Matt Taylor were ripped apart by crowds at Twitter, Tumblr, main stream media publications. People were driven to suicide by harassment on Facebook (and those cases landed in courts).

There are shitty people who love being offended, being angry about some very subjective injustice; dignified agitation gives those people reason to breathe and makes them feel good. Internet brings those people together and helps them validate their own agitation and actions. Next they gang up. Its simple as that. Its a question of lack of empathy and echo-chambers enabling morons.

Solution so far is only one - more privacy, less social networks. Avoiding the danger. Keeping political, professional and personal stuff separated.
Is it not better to specify max-width in ems?

body { max-width: 35em; }

That way, if the user makes the text very large, the entire width of the window will be used.
That's exactly my point. Most users do not care about javascript, css override and whatnot. Web designers build website with their specifics goals in minds (maximise revenue, maximise viewers etc...). And thats fine, that's what make the web viable. I am not saying it's impossible to build a website following that manifesto, as indeed HN is pretty close, but HN target a specific audience. Their designers didn't search to monetize but to maximise their presence on the web. In that case their interests do not conflict with yours (no advertisements, simple design etc..). They did not design HN with your specific preferences in mind but the majority of viewers.

"As a consumer, which one of those would I rather use?" Well you might prefer HN to Facebook design, but the majority of Facebook users would not.
Python ignores grapheme cluster, that point was about my original test case using grapheme clusters I later found out had precomposed equivalent, so a transfer chain performing NFC would leave the test case with no combining characters (or multi-codepoint grapheme clusters) left in it.
I really hate sites that send all content as html, but then hide it only to unhide it with JavaScript. It's getting quite common though. I wouldn't go as far as the OP and say no JS, but how about: don't use JS just because you can, use it to actually do something that makes the site more usable.
Actually, everyone knows what happened, he got tired years ago paying hosting bills and supporting board, abandoned site, then SJW attacked and he broke down. That's that.
yes.. even having an unconfirmed email address can get really messy when you need to get in touch with someone but just can't because the address is invalid
Great ! Another browser that cannot play HLS video !

We're left with converting each stream to 3 separate formats ( HLS,DASH264 and RTMP ) to stream on all browsers ..

What solution do they offer for that ?
How Amazon Web Services Uses Formal Methods
7 lessons I learned from buying nothing new for 200 days
> Many, many security patches are way late.

My main point was: a virus that uses a 0-day (or unpatched/unfixed 0-day) is likely going to cause problems for an AV:

> AVs, typically, would struggle to catch an e.g. malicious BIOS flash resulting from an escalation vulnerability.

Over-exaggerating to clarify: AVs are like bringing a knife to a gunfight. You might just be actually able to eliminate the weaker opponents (who also brought knives), but you're going nowhere against the veterans.
I've ssh'd into colleagues' machines to help them with system problems, and they've ssh'd into mine to retrieve their VPN keys. Not all of my colleagues have ssh access to a common server somewhere.

I've also remoted into my workstation from home to do emergency work.
Certainly std::sort and friends are recursive in all C++ implementations I've looked at.

In C++ it's hard to make the efficient and non-recursive. You can have a fixed-sized buffer (limits depth), or call malloc for a buffer (a single call to malloc can be more expensive than just doing the sort on the stack, and in general the C++ standard library tries hard to avoid mallocing).
> Recursion is prohibited in embedded contexts because it allows for, potentially, unbounded growth of the call stack.

Only if you're sloppy about the inputs given to the recursive code.

Recursion isn't magical. It's deterministic, and is a function of some aspect of the input values. (Corollary: If it isn't, what the fuck are you doing?)

So NASA decided to solve the stack growth problem by limiting recursion. (Zero is a limit.) It could have done the other thing and limited inputs to recursive code, which would have required more careful code analysis (static and dynamic) to figure out what the limits should be. It's an understandable decision, but don't forget it's a trade-off, and one that could have gone another way.
It's nice to note when you think about for loops, while, etc. versus map/each/reduce that the latter offer a convenience that is not discussed enough: the ability to reason about a single element of a collection without having ever to think about the collection itself (no thinking about bounds, indices or things like that).

This in turn, makes it easier to think in terms of :

I have a thing, I put it in the box and a new different thing comes out of that box.
That in turn can more easily lead to thinking about series of connected boxes.
New analysis shows over 99 percent of the women on Ashley Madison were fake
Don't get me wrong, I love Emacs and I love Vim and I strongly recommend learning them — the effort is worth it. However, I don't think it's the case that you can compare their difficulty curves with those of a "normal" editor. You do, however, make a good point that Emacs is more consistent.
Because we don't have enough new JavaScript front-end frameworks coming out every week.
Ask HN: Monitor for programming – modern LEDs are poor for text
When looking for a new monitor I found out that old LED screens were far better in displaying text, especially white/gray on black (a Linux terminal).

Particularly a modern Dell LED IPS screen is worse than Benq TN LCD model from 2009, and far worse than Eizo 2004 LCD MVA model (it was a budget model).

I checked other cheap modern LED monitors and they all seem to have the same problem with displaying text - it looks like "shining neons" whereas on old LEDs text is more "flat" and looks closer to real paper. Games and videos look brighter and shinier but text is inferior.

I'm using Ubuntu (I find it's text antialiasing to be generally superb), and I mainly work inside xterms for many hours a day. I know that my issue sounds petty, but I actually feel discomfort when working on modern LED screens and I'm looking for a replacement.

The questions is: has anybody felt the same issue and found a solution? Do more expensive monitors are better in this regard? Are cheap 4k monitors good for text?
>It could have done the other thing and limited inputs to recursive code, which would have required more careful code analysis (static and dynamic) to figure out what the limits should be. It's an understandable decision, but don't forget it's a trade-off, and one that could have gone another way.

I don't see the trade-off.

On one hand (if you allow recursion) you need "more careful code analysis".

On the other hand, if you don't allow it, you don't lose anything. You can write the algorithm in another way, and it would be just as fast and easier to reason about.

So what's the tradeoff? It's not like recursion brings some benefit that you lose if you disallow it.
I don't think one needs to have traveled through the region to consider unethical the attempts to stifle a nation's old tradition that isn't hurting anyone. It's throwing the baby out with the bathwater.
Not sure which part of Europe you are speaking of, but I have to pay around 15% of my income for the (mandatory) insurance, which then provides me with (almost) unlimited health care. If you are unemployed it is a lot harder to get health benefits, especially if you are a foreigner and haven't worked (==payed for the insurance) before. Just saying, that it's not like "come here, we have free health care and everything".

Anecdotally I can tell you that I also need regular medication (not in the same range as you, but still), and I was unemployed after college for some time. I got the meds, but only because my parents paid the minimum "social tariff" for health insurance, which is around 150€/month.
Are you using Windows 95?
SearchDit – Browse Reddit at work without getting caught
Guide: search '/r/[subreddit]' to visit subreddit

anything else will be treated as a normal search
Apologies for the typos; we'll take care of these shortly.

Regarding issues on the dashboard; we're not aware of any issues. Would you mind sending an email to support@chillyorange.com so we can figure out what the issue is and hopefully take care of them asap?

The only currency set through the config file is the default one; we placed this in the config file as, typically, you would set this once. Defaults per invoice and client can easily be set through the UI.
Do you have any details on the mass suicides? This is the first time I hear of that.
One is linear, the other recurses (things into things into things).

It's like comparing Star Wars to Inception.
In reality, you won't be able to focus on both. I know people say you can do it, and Elon Musk is a great example of a successful entrepreneur with two awesome companies, but one startup is hard enough on you and the people around you.

My take on this is that you're delaying a decision on what startup to focus on and relying on YC to make that decision for you. In reality, you should work on the startup that you WANT to work on, the one that solves a problem you care for.

This will also increase your chances to get into YC. Being committed is pretty much a requirement to get into YC (or have a successful company for that matter).

My advice is to choose between one of your projects, commit and do everything you can to make it awesome.
How happy are you? Rate this from 1-10.

Is there any way to quantify emotion? Emotion is subjective and you have to ask people to rate their emotion somehow.

A good study would ask people twenty years later what the most meaningful and memorable thing they did was, and how important it was to them.

People would then simply rationalise their investment in the children, right? I believe this would be the, "Sunk Cost fallacy". The parents invested so much time and effort into the child. Why would they suddenly denigrate their years of back breaking labour? They would definitely view it in a positive light down the road.