skysight-inc/HackerNews huggingface dataset:
Ask HN: What are your best productivity tips (shortcuts/keybings/workflowithetc)?
I am going back inside in 5 minutes and will include mine. I am having a bit of trouble adjusting from Yosemite and the GUI is slowing me down. I still mean this thread to be general tips and tricks for being efficient, but I personally am lacking in displaying programs in workspaces and efficient traversal of opened Windows/Desktops/programs on OS X.

tips about:

* keyboard shortcuts (program/global)
* general workflows.
* helpful programs & resources
* general productivity
* general productivity on OS X/UNIX (or Windows)

Would be awesome.

Tags might be helpful for position/environment etc.

Example

[OS X El Capitan / Web Dev / JS]

Or whatever you feel comfortable disclosing. Just think it could be helpful for others to parse.

Cheers.

Cheers
Thank you for making a logical statement around this. People love to trot out the bubble line, but I always wonder how much of the "tech industry" at this point is comprised of small startups with large amounts of funding vs. large established tech giants like Google, FB, Apple, Adobe, etc. with BILLIONS in revenue (if not profits).

I've heard people tell me "all these startups with funny money are driving the housing prices up." I can only sit there in response and hold back my snarky "yeah, and I'm sure the giants who have tens of thousands of engineers on staff with billions in profit aren't contributing at all."
I can't believe the number of times this bill has been voted down, only to come back up for a vote again under a different bill or different name.

It is like they keep submitting bills until it gets passed. This not only is a waste of time, it seems to be how the lobbyists get their bills passed. Eventually one will get passed and then our privacy will no longer exist. If you want our data, get a judge to order a search warrant. Otherwise it is Unconstitutional.
It only makes sense, if you'd put nations and nationalism above everything.

"We have heard the rationales offered by the nuclear superpowers. We know who speaks for the nations. But who speaks for the human species? Who speaks for Earth?" - Carl Sagan.
It is uncontroversial to state that corporations and special interest groups frequently lobby in public for a position and in private against a position. Frequently you know this only through un-attributable information passed to you.

Advocacy organizations are not journalists. They don't need to cite their sourcing before making claims they believe are true. The purpose of calling out Facebook is an attempt force them to align their public and private positions if they differ.

As usual, Marcy does excellent analysis about what information NSA will be able to collect, analyze and disseminate under CISA.[1]

[1] https://www.emptywheel.net/2015/10/26/two-intended-consequen...
Ask HN: Any examples of APIs in production using JWT?
The problem is that the HTML standard is being written for regular computer users instead of for seasoned developers.
I'm guessing it doesn't reflect as much heat.
Its not just paying commissions to the third party. If you are a good taxi driver, who keeps their car clean, provides bottled drinking water to customers, are punctual, polite, trustworthy etc you will get many people who would like to call you directly instead of going through a service like Uber. And along the way you would have met many customers who are exactly like you- polite, trustworthy and nice.

It becomes a natural fit.

Uber kind of services work because they are currently burning millions of investor money to subsidize your travel. Once they run out of money, you are back to the same thing again.

Which is why some times you must do extra work for free, because it keeps people around you happy and in return they are indebted to do something in return for you(Recommend you, tip you, hire you etc)
>under no circumstances is someone going to be added without a legitimate nexus to terrorism.

I'll put that up there with every other time a government has promised that they will not abuse their power.
Thats the problem they they may have tested Nathan but it scored low so they did not print it.
Well, except the results of Google got worse and worse over the past years (since around 2013 I could pinpoint the issue), to the point that by now often only one or two entries on the results page are relevant.

Even if I search for a very specific query, Google will just only give me results ignoring several parts of my query, and at best one or two about my actual query.

Even duckduckgo manages to give better results often at this point.

EDIT: Just found verbatim search, at least that gives almost equal results as duckduckgo. Still not as good, but it’s okay.
This is very cool. I have been/am toying with very same ideas, but using a Lava variant, all in the context of Reduceron. I'm also planning to redo my RISC-V implementation as a working example.

Silvia Muller in "Computer Architecture: Complexity and Correctness" describes work on auto-pipelining. Are you basing your work on this or something else?
I thought it was Jack D. "Purity of Essence" Ripper who was based on Power.
I found that ironic as well. Seems like every new customer acquired increases the risk of losing them more cleaners. A steep discounting through Groupon would just expedite that as it would reduce the risk/cost of trying a cleaner.
Walk on a lawn barefoot, then feel your feet burn walking on pavement. The radiant heat from stone will envelop your house.
Asking people to upvote posts is called a voting ring and is against the rules on HN. We penalize or ban accounts (and sites) that do this, so please don't.

https://news.ycombinator.com/newsfaq.html
There's historical precedent. The reason the American Revolution was in Massachusetts was that Boston was full of apprentices sent in from the countryside. Young men, barely paid, under pressure, and fully aware that of 7-8 apprentices in a house, only one can succeed the master. And at the age when men think with their dongs.
Decentralizing Authorities into Scalable Strongest-Link Cothorities
Love the disk doubler on the table. The disk double would double the capacity of 5 1/4 inch disks by snipping off a little square so you could use the other side of the disk.
I have one, but I can't share. It's for a client. Servicing major brands.
To be fair, Keen neglected to mention it in the entry as well. Interesting, as he frequently does.

And he did conspicuously mention Hayek.
I had some fun googles this summer: was working on building a boat using strip plank construction, informally known as "a stripper". So you end up searching for stuff like "how to vacuum bag a stripper"...
Do you happen to have any pointers to such research? If anything rigorous (comparable to GiveDirectly's randomized controlled trials) has been done in the US about the effect of just handing out cash, I would really be interested.
>They can't even watch the people that they are directly told about by mental health professionals.

And this is why there is a distrust of mental health professionals. Why would you seek help if it could result in being watched if not worse. Imagine if doctors reported drug users to the police; people would rather risk handling an overdose on their own than getting help and then being punished.
If the anchor has its handles visible, you can also alt+click+drag one handle to automatically convert it to a split anchor / cusp / whatever the cool kids are calling it.
The article uses this query as a motivating example:

"What’s the title of the consumer at the highest level of a food chain?"

But the results page (for me) does not contain the words 'apex predator'. The top result is the wikipedia page for "Consumer (food chain)", which does contain that term.

It would have been very cool if the AI could have identified the concept described by the query. But it didn't. It just found a very relevant page for three strings in the query.

The journalist doesn't report on the results of this example. Who came up with it and why?
I'm disappointed that the President of the United States--supposedly a pretty smart feller--doesn't just flip a coin for that. He could even keep four more colors in the closet if he would just roll a d6!~

I suspect that he makes a lot more fashion decisions than that implicitly, by delegating them to an employee. That's not exactly the same as having perfect indifference to all the various clothing options in your wardrobe.
This is a blog post that makes two very broad claims:

1. That Chrysler can exploit CISA to avoid liability for vulnerabilities in their cars simply by sharing the flaws with the USG as an "indicator".

2. That the USG can use CISA to collude with private companies to avoid warrant requirements and spy on their customers.

Both of these points are, I think, false. I've linked upthread to the text of the bill and provided a summary. In particular, I don't think the "Chrysler reading" of the bill finds any support at all in the text; Chrysler is immunized from suits stemming from their own sharing, and even in the sharing, they are explicitly on the hook for negligence and misconduct.

If it's helpful, here's the entire limitation of liability in CISA. Notice: companies are exempt from liability for monitoring, sharing, and receipt of indicators. They aren't exempt from liability for having vulnerabilities in the first place!

6.Protection from liability

(a) Monitoring of information systems

No cause of action shall lie or be maintained in any court against
any private entity, and such action shall be promptly dismissed,
for the monitoring of information systems and information under
section 4(a) that is conducted in accordance with this Act.

(b) Sharing or receipt of cyber threat
indicators

No cause of action shall lie or be maintained in any court against
any entity, and such action shall be promptly dismissed, for the
sharing or receipt of cyber threat indicators or defensive
measures under section 4(c) if—

(1) such sharing or receipt is conducted in accordance with this
Act; and

(2) in a case in which a cyber threat indicator or defensive
measure is shared with the Federal Government, the cyber threat
indicator or defensive measure is shared in a manner that is
consistent with section 5(c)(1)(B) and the sharing or receipt, as
the case may be, occurs after the earlier of—

(A) the date on which the interim policies and procedures are
submitted to Congress under section 5(a)(1); or

(B) the date that is 60 days after the date of the enactment of
this Act.

(c) Construction

Nothing in this section shall be
construed—

(1)to require dismissal of a cause of action against an entity
that has engaged in gross negligence or willful misconduct in the
course of conducting activities authorized by this Act; or

(2)to undermine or limit the availability of otherwise applicable
common law or statutory defenses.
Data-Driven Product Design
You can FOIA for records the government keeps in the management of indicators from different companies; the only thing excluded is the indicators themselves. Again: how could it be otherwise?
Protopiper: Physically Sketching Room-Sized Objects at Actual Scale [video]
Analyzing the first 10M digits of pi: Randomness within structure
Taxi services are different though - you might be nowhere near your valued customer when they call. And they might be more inclined to take an "OK" driver rather than wait 30 minutes for you to get to them.
I think military planners didn't fully understand what it really meant to use nuclear weapons until later. Things like tactical weapons (Davy Crockett, Genie missiles) and non-military (Operation Plowshares and the Soviet equivalent) were developed in the 50s and pretty much gone by the late 60s.

Dr. Strangelove (1964) is probably the best documentary you can watch about what "they" thought at the time.
> One issue I have with this is that I won’t be able to apply a userstyle to restyle a page anymore

With the caveat that I only sorta understand this stuff -- if it emerges this way after the politics & process, you should be able to use the 'deep combinator' >>> to apply styles even across shadow DOM boundaries.

https://drafts.csswg.org/css-scoping-1/#deep-combinator
If someone is involved in radical or extremist politics online and is an extremely skilled war/shooter game player how would that not have a bearing on whether that person is a potential threat or not? It seems to me that there is a higher possibility that the gamer will have impetus to act using his skillset than a counterpart armchair anarchist or fascist who is only surveying and studying the literature.
Seems like the tech for making gold necklaces hasn't changed too much in 35 centuries! http://static01.nyt.com/images/2015/10/27/science/27PYLOSJP1...
The whole idea of using (at least) three separate languages (HTML, JavaScript, CSS) would seem weird if it were proposed de novo.

Consider that LaTeX manages to carry out all of those functions (layout, styling, and computation) using only one language.
You'd be surprised at how the cost works out. Bundles exist so expensive content can be subsidized by cheaper content. ESPN costs the provider much more than most channels. In other words, getting ESPN a la carte is going to run you $20-30/month. The other channels in the bundle make it so non sports fans can subsidize your subscription.
Another awesome tool if you're using emacs is wgrep mode. You get the results of `grep` in a buffer, can edit it like any other text in emacs, and then save writes back to all the original files. Really cool.

Emacs macros are wonderful too.
That statement is conditional that you're paying the person less than $100.

What if the highly qualified employee from Homejoy was for $200-$250?
Reform tax credits with a Negative Income Tax, says new report
The kicker here was the volume of traffic. 2.3 million average simultaneous streams. The Super bowl last year had half that.
I'd love for this to be the case. The New York Times also does this (you must call to cancel), which is a fantastic pain.
The CEO has my respect. Amazing response and showing the customer they care.
I could be missing a further limitation, but doesn't Section 4(a) de facto amount to a repeal of all other laws that limit monitoring? Yes, the exception is limited to monitoring for a "security purpose", but a pretty broad range of things can be justified as a "security purpose". I'm also skeptical that courts will seriously second-guess companies' representations on that point.
Some studies:

http://econweb.tamu.edu/common/files/workshops/PERC%20Applie...

http://www.sciencedirect.com/science/article/pii/S0304387813...

http://reliefweb.int/sites/reliefweb.int/files/resources/cfg...

Articles related to the studies:

http://www.npr.org/sections/money/2013/10/25/240590433/what-...

http://www.economist.com/news/international/21588385-giving-... (direct cash vs CCTs)

http://www.fastcoexist.com/3049642/solving-inequality/how-to...

http://www.theatlantic.com/international/archive/2015/09/wel...
Not just junior (i.e., fresh grad), but ridiculously junior, at the level of a freshman in college, well below the par for an intern.

I don't dislike or like them: I know that they are incredibly junior. I would prefer to work with people more experienced, given the option. If the project allows for inexperience and has the ramp-up time needed, they can do it. The management must understand that the bootcamp graduates are going to take significant time and cost to come up to speed. The bootcamp grad must be willing to drink from a firehose, though... If all of that is satisfied, then sure, I'll work with them.

As part of the mentoring process, I will pass them CS books: algorithms, data structures, and other key fundamentals of the field, and expect them to come up to speed on the fundamentals. They need to know this stuff to do the job well; I will explicitly refer to their willingness to learn the fundamentals in my peer evaluations with our manager.
Thanks!

We have had very abstract conversations about adding alternative back ends, but presently we are not working on support for that feature because as you correctly noted, at least for Consul and ZooKeeper it is somewhat against the operating philosophy.

We're not opposed to it though and if you open a feature request we'll track interest which will help us decide direction. Baker Street is not a secondary component for some other system in our company. We consider Baker Street a core product even at this early stage in its development.
Most Company Culture Posts Are Fluffy Bullshit
I wish sites with reviews would do a better job of letting me skim for issues.

Often the first thing I do when looking at a product/service with reviews such as on Amazon or Yelp is to look at the distribution (which Yelp used to feature prominently but now buries under a tiny "Details" button next to the review count).

Then I drill in to specific 1-3 star reviews to look for recurring trends of problems people are having and also read through the questions for "gotchas."

I wish there was a service that pointed out summaries of the negative reviews to look for trends (as opposed to one-offs which might be fake reviews).

Positive reviews are helpful, but for some reason I look at the negatives first.
Is Tesla Doomed? (Bob Lutz's Commentary on Tesla)
> If not then there's no clear argument against government action to prevent or deal with bad local optima.

There may not be an economic argument, but there's a political one.

In theory, government can move you from a local maximum to a global one. In practice, though, government moves you to a maximum likelihood of [them] getting re-elected, not to a maximum of any economic utility function.

More bluntly: You worry that the free market is going to produce a sub-optimal solution? Okay; that's a valid concern. But you think Congress is going to make things better? Have you looked at Congress lately?

(And, yes, of course I know that the Ayn Rand unfettered free market is not the answer. We really do need regulation. I get that. But be wary of the assumption that government can do better than the market at optimizing aggregate results. Government is a very blunt hammer, not a fine adjustment.)
It specifically mentions "552(b)(3)(B) of title 5" which is the FOIA statute. No mention of the privacy act.
That is already a real problem among hard drug users. Some deaths occur because the overdose's company flee fearing prosecution for their own drug use.
There are two crimes. One is theft, the other negligence.
I know nothing about Adobe, so I think Inkscape have more problems than being "Unfamiliar."

It's OK, but I never seem to remember if I'll change a property for a tool or my previous operation.
For me, it's not a question of physical vs cyber, it's securing your own vs securing other's stuff.

If I paid for a car parking service that had the practice (not a one time incident) of leaving all their clients' cars unlocked, I'd definitively find them despicable.

While at the same time, if someone was hosting their own little personal server and forgot to apply a security patch and someone hacked it and used it for spam or as a botnet, I'd find the attacker despicable.
That's a good point. The thing is that I've used a ready-to-use GZIP library (miniz) for building my API on top of it. I agree some parts of miniz are not necessary. I will put a note in my repo to point out your links.
Yep, I called that section out for that reason. I'm not particularly worried about it (I think this part of CISA mostly just clarifies something that was already pretty much settled).

Companies aren't allowed to just make up "security purpose", though; under CISA, they have to be monitoring for threats as construed in CISA, which means, for instance, they can't find exemption for liability for monitoring for mere ToS violations.
Even simpler methods exist.

Realize that framing your daughters behavior by giving her babies, princesses, dolls, makeup, clothes and similar to play with, while your boy gets the newest action games, puzzles, balls, competitive and brain engaging fun, will definitely influence her future career choices.

When you take your daughter to look at some princess movies, or some toy story thingy, while you watch star wars and star trek with your son, long into the night, think of what kind of framing is done.

Of course, even if you try to keep all the options open. Someone from her school might make your daughter do "girls only" activities. Or maybe she'll be forbidden from accessing the Star Wars room at Legoland because she's a girl. Whole world is against your little girl becoming like a man. She needs babies so she knows she has to be a mother. She needs kitchen games so she knows she has to cook. She needs to play with dolls, to groom them, to dress them, so that she eventually does the same for herself. She needs to be pretty, and by pretty we mean makeup.

If someone is naive enough to believe that boys and girls have innately different interests, then so be it.

But girls ain't "gurls" because they don't like technology.
If it was my job to penetrate remote systems, you can bet that I wouldn't still be using the same stack and MO I was 30 years ago, in the just the same way that I'm not using an Amiga.

The OP is ridiculous that it cannot be imagined that someone needs to be a child to break into systems.

I'm at University and I run rings around my 20 something cohort.
It's safe enough, and influenza dangerous enough, that the extent of the match isn't that important.
Yeah, there's an edit button for a reason.
I recall seeing a post about a month ago directly to the GitHub repo for this tool. Since then, I have started working on a similar effort to address the issue of API credentials on developer machines. I looked into using STS too, but the issue I kept coming back to was that if a malicious third party (MTP) obtains the developer's machine and it is turned on and logged in (ie, ignore HDD encryption and assume they got the credential somehow), then the MTP can use the same workflow as the engineer to obtain access to the production system, right?

I suppose we need to clearly define the attack vector that we are trying to prevent. If we define the attack vector to be a MTP using developer credentials to obtain access to the production environment for any amount of time, then does aws-vault address that use-case?

If the long lived credentials on the developer box only have permission to request short lived creds from STS which have greater permissions, then I understand how that is certainly better than the MTP having long lived creds with greater permissions. But, how much better is it really? If the creds have IAM permissions, then the MTP could use the temporary creds to lock everyone else out except the root account.

I suppose the article is trying to make the point that the short lived credentials need to have appropriate permissions for the task which the developer needs to complete on a regular basis? Even so, someone somewhere needs to have creds which can modify IAM so that we can manage users, right?

I feel like I am talking myself into a rabbit hole here. Can anyone pull me out? I think/hope that I am missing something obvious and I'm hoping that the answer is "we're not solving everything, but we are reducing the attack surface".

Thoughts?
This is a terrific notice. Deep sea squids are really interesting creatures, and now that we are culling the fishes much more common that most people thing.

This is probably, also another symptom of the hidden war for the deep-sea fisheries.

The idea that people could be eating those babies by mistake is strange. I can brag that I touched a giant squid some years ago (yup, the damned thing, literally), and the ammonia smell was in my hands for a week. Nasty and persistent. I wonder how someone could eat one of these without to puke. Long and complex previous manipulation at least I suppose.

Another interesting question is why those youngs have not been found before (never, ever, as long as I remember) as prey of cetaceans or sharks.