skysight-inc/HackerNews huggingface dataset:
No, no, I read it. The question is, where did you get that data in the first place, and how can you trust that it hasn't been tampered with between the authoritative nameservers and your local cache?

That's where the benefit of DNSSEC is: it allows you to detect tampering, and you don't have to trust any intermediaries to do so.

With DNSSEC, you don't have to trust the registrar, you don't have to trust the registry, you don't have to trust the recursive caches. In fact, you barely have to trust the root nameservers. The only individual you have to trust is the domain's owner. If any party along the way tries to play silly buggers, then you get a red flag.

> This is a system for disseminating public data (i.e., it should be very boring), yet it has been turned into a "business".

It's been turned into a business because somebody needs to run those nameservers and, like it or not, that costs money.

> The sad truth, as revealed in com.zone and other large zone files, is that most of the domains registrars sell (rent) are garbage and only used for "domain parking" and serving ads.

If a registrar has parked a domain, it's because the owner has done nothing with them, or the owner themselves has parked them for revenue.

> Indeed, the people selling DNS hardware, not to mention consulting, are benefitting financially from pushing DNSSEC.

Not that much: one of the strengths of DNSSEC is offline signing. The only benefit is that DNSSEC requires more traffic, but not dramatically much once a zone is cached.

> To me, that "gold-plated pipe" that I have full control over is far more important than any third party purporting to "sell" me an entry in a public zone file or to "authenticate" some public data on my behalf.

A gold-plated pipe full of slurry isn't much good. Again, all the encryption in the world isn't much good if you can't trust the data itself.
Don't forget we kinda sorta have byte characters and strings a la `b'x'` and `b"foo"`, which are really just simpler ways of expressing byte slices. Unfortunately they lack string specific methods until we get specialization (fingers crossed).
I'm glad, I enjoyed having it. I would note that I was taking a very extreme position for hyperbole's sake, which Ptacek took quite literally, and I was in the mood to argue.

Scotch is a fine beverage, it's just not Bourbon.
Ideally, you'd provide interfaces for both interpretations.
Thanks for starting Tech In Asia. It's been a great source for me to keep track of all the innovation that's going on in the region. I'm very impressed by what's going on there. I was originally born in Malaysia but moved to Canada many years back. However, I've always had a soft spot and its sites like yours that help me stay connected. Thank you!
They've done a good job upping revenue over the last few years (somewhere north of a billion dollars/yr in 2014). And, IMHO, done so without the resulting ads being too obtrusive.

Their problem isn't that they can't make money. It's that their valuation means investors expect them to make a ridiculous amount of money. So all revenues are plowed back into R&D.
It would still involve an articulation and justification of the distinction between waivable and unwaivable rights, which you didn't previously provide.

Could you help improve my worldmodel to the point that it contains this distinction?
I have used marijuana for most of my life and I've stopped for periods of time, sometimes up to a year of no use, and I can vouch for the effects of addiction. For me the cold is colder, I sweat more (especially when I sleep) and I tend to be more grouchy. All of this for at least 2 weeks before everything is "normal" again. Even with these withdrawal symptoms I would still prefer marijuana to any opiates.
I've seen that before as well, but it is based on real old data. Many of the numbers are from over a decade ago.

My claim for this statement is a bit less formal; within Singapore, where I lived, it is common word-of-mouth that the teen suicide rate needs serious attention, and they often say there that it is much worse than in most other places. But I can't point you to a specific study.

Also, regarding formal stats: Singaporeans are (rightly so) quite skeptical of any official figures released by the government. Singapore's leaders tend to keep private any stats that are unfavorable (much of the recent haze-related details the last couple of years were promptly removed from public media if they were too critical; and if anyone there writes articles, even on a personal blog, that are critical of the culture, its policies, or raise serious questions, they often get severely fined or imprisoned).
That study selected subjects who had already experienced withdrawal from cannabis. Not sure how universal its conclusions are going to be.
I completely agree with this. I'm starting to look at other opportunities, and so renamed my tagline on LinkedIn to "actively looking for work". Since then, it's been a deluge of awful job offers or requests for a phone call. Most of them not even what I'm looking for.

I wish there was a way to force recruiters to read a small text before contacting me, that would state exactly what I'm looking for:

* A complete job offers with details about the company, technologies used, my future role AND SALARY.

* I know they'll never do that, but including the company's name would be great, so I can Google/Glassdoor them and find more about it.

* What's special about this position? Does the company offer any meaningful perks (counting among them work-life balance)?

* And finally something I'm interested in! Either Backend or Fullstack work!
Neverstop by Karma
At first I got dyslexic and was excited to try the Shaking My Head Language (SMHL).
Ah, interesting. I've been in several corporate environments where the retention policy is more like 5-7 years. I suppose Slack can be deployed in such a fashion, but if it's used as a disposable conduit then I think other questions may arise during the course of a legal test. I'm curious to see how things turn out in this regard.
>I would be willing to pay a subscription fee if that helps it sustain.

The really interesting part of this problem is the network value, not the individual value. The fact that "the network is valuable enough to you that you would be willing to pay" is precisely because of the value provided by the other nodes. Many of those nodes are present only because they do not have to pay. Demand curves are downward sloping but the value of the network is some function of the total nodes, probably the square of the nodes.
The TrustedBSD features are used by appliance vendors who base their product on FreeBSD. Applicances have very narrow profiles of acceptable use and thus it's actually sane to develop policies for them.
Obama Rejects the Keystone XL Pipeline – And Secures His Environmental Legacy
That laser is going to require accurate tracking to heat a target to the point of damage. Additionally, reflected laser light of that intensity is not usually safe to look at without protection.
Gang:

Here's a relevation that I only, just now, realized.

Python is named after the Monty Python gang. This I knew.

IDLE is a play off of Eric Idle.
How have I never realized this before?
Author here. Yes, this is indeed a terrible idea! Will definitely fix it.
generally i use whatever tools come with the standard ide for the platform. so yes, msbuild, if i need to do a build from a command line for protecting my main branch or something like CI. on mac its xcodebuild, on linux i tend to use make.

i've dabbled with cmake but it doesn't solve the problems i care about the most (needing to specify the files to build by hand is a headache - but it saves me having to do it 7 or 8 times at least), for which i write my own script...

i strongly disagree with the command line tools mentality. its not the 1970s any more. this is why i say "one click" build. not "one command" build. pressing any number of keys is too much work. XD
Tk is just too old and bad. It doesn't support Unicode rendering properly of a lot of characters and lacks a lot of features of any modern GUI toolkit like Qt or GTK.
> Regardless of what one wants, does Twitter enforce 140 code points, or 140 bytes?

Number of code points after normalisation: https://dev.twitter.com/overview/api/counting-characters
> What makes a bunch of VMs running on a hypervisor inherently more secure than a bunch of processes running on a conventional OS kernel?

There's nothing inherently safer about it. I wouldn't trust a VirtualBox setup any more than I would the host OS running it. But it can be done in a way that isolates interfaces that are hard to audit, and that's what the Qubes project is. See the Qubes Architecture document[0] for more information on the various ways this is achieved.

> Is the trusted computing base really any smaller in practice, particularly when the hypervisor in question is KVM on Linux, or even Xen with a Linux dom0?

Yes, it is significantly smaller. If you're interested, you should read the Qubes Architecture document[0]. Chapter 8.2 specifically explores the Xen attack surface.

KVM on linux is not used in Qubes, so it's irrelevant here.

Most of the attacks on Xen have been attacks on device emulation, which is minimised in Qubes and what little there is is moved into stub domains (not run in dom0). There was a really serious Xen bug recently that did not fit that model, and it caused some panic - but it's telling that it's really the only such bug to be uncovered since Qubes started.

[0] https://www.qubes-os.org/attachment/wiki/QubesArchitecture/a...
Or there is an account, perhaps apocryphal, of a royal's lisp resulting in the shift from /s/ to /þ/ "th" in parts of Spain. For example the surname Perez is still Peres in Portugal.
I'm right there with you. I find the psychological race-to-the-bottom fascinating: a book at $4 is not nearly worth it when it could cost $2.50.
> If the terminal were being introduced today, without that existing body of zealots to preach the value of getting over the initial learning curve,...

Honest question: doesn't it also have a lot to do with the technical sophistication of the typical user, not just lock-in?
I've been working on my business for 5 years part-time (on the side while holding down a full-time job) and full-time for the past half year. My first full-time employee started working with me on-site at my client this week after two months of study (at my expense) - I'm training him almost from scratch as a sysadmin. (He's had one year of QA experience with exposure to bash/perl scripting.) It's very gratifying to watch my creation (my company) come into existence, and I love training and mentoring, so yeah, I love my job.

It's not roses and rainbows every day but I'm moving in the right direction, I feel, and I'm happy about that. Makes it easier to bear the drudgy aspects of the job. =)

Good luck!

EDIT: While I was working full-time at my regular job, having a side project kept me inspired and energized.
Twitter actually counts codepoints, but after normalisation, so it doesn't matter which of the two ways you represent é: https://dev.twitter.com/overview/api/counting-characters
I am quite baffled by all this. I heard of Famo.us, but didn't give it more than 1 thought. I thought it was just another framework, I would have never thought that they had employees, let alone that many and raising that much money.

I watched the video in the article, and I can't believe that people are throwing money at someone with a pitch like that.

I feel like everything about Famo.us is all the wrong things that were described in the Reconsider article that was posted the other day https://medium.com/@dhh/reconsider-41adf356857f
Every taking on of an obligation is equivalently expressible as the waiver of a right.

As before, trading $1 for an apple can be expressed as "Alice waives the right to the apple and Bob te right to the $1."

It would make no sense to say "Alice's rights are being violated because she was denied use of her apple!"

What I think is happening is that you're only calling some rights waivers as rights waivers, which makes it hard to isolate which transactions you find unacceptable and why. Could you maybe flesh that out? I've tried to get satisfactory answers on this when it comes up, but to no avail.
My mom recently dug out my printed copy of that when I was learning Python during that time. For the past few months, I've been helping one of my friends in a Python based CS class (using 2.x, I think). I'm not sure how useful that hard copy would be.
This is unlikely to change - they don't have the staff to include more stuff.

If we can expect anything, based on recent history, it is that surveillance techniques that previously required onerous human labor, will soon easily be done in automated fashion.
Yup. Remember when that CEO that raised the price of some pill to $750? You can thank a government-granted intellectual property monopoly for that. Many people called for more regulation to prevent this kind of thing, without considering that if you allowed competition in the first place then someone would have undercut him then next day with a $0.50 pill.
That can be mostly avoided by naming things correctly.

uuid_generator would be far less likely to be misused than u.

For whatever reason, however, descriptive variables are not very popular in the Go community.
>But no transaction involves giving up the right to contest the nature of the transaction and its lawfulness.

Is that the right Uber drivers were force to give up? I can't tell what this is referring to.
"There are still many developers who would not touch javascript with a ten foot pole but I can see them using a saner language like Dart." haha sir you need some reality check.
Well that's a fair point, but the 'new and hard' component of one or more devices that exist in the physical realm is - by all accounts told to me - harder than deploying some kind of software. Many more challenges in development, cost analysis, manufacturing, and obtaining market share combine to inherently be more difficult than some SaaS product. Or, in other words, developing a concpet like Slack is a cake-walk of difficultly compared to making a wearable device or something like a Segway.

>The hard problems are in bringing technology products to market.

That's exactly my point - investors and the start-up community isn't interested in actual hard problems. It's more infatuated with SaaS or wearable devices, rather than actual products/inventions which have a traditional path of inception-growth-profit. Basically you've backed into making my point in a way.
Aside from the fact that they carried that style of naming over from Objective-C, the one benefit I see is that it makes it obvious that it returns the result in a new string rather than modifying the object itself. In C++ you would need to look at the signature to tell which way a method named replace worked, e.g.

void A::replace(const A& source, const A& dest);

vs

A A::replace(const A& source, const A& dest) const;

That said, I think you can get this same benefit without such a verbose name. Perhaps something like "withReplacement"?
re coherence there is missing context.

have you ever tried to build webrtc, for example? (its the worst case i've hit tbh, not all of google's stuff is /that/ bad)

its a nightmare. some of the dependencies are utterly horrible (systemd!!!!, old deprecated MS headers from VC6) it seems to be custom scripts called from one build system that trigger another... its below the par of what i would expect from an absolute novice.

i hear that internally its a lot easier, because there is infrastructure that downloads all these things and sorts it out for you... but from the outside world its rubbish. i'd rather have a hand crafted visual studio project, xcode project, makefile where i can do one thing and not have to understand the insides of a 'black box' library to use it for anything at all.
> What makes our product offering unique is that our apps can be built without coding

Oooh... that's going to be a tough argument to sell to people.
Dude! You have got to take a better profile picture. Really? Smug eastern block open collar look with an earbud in? No good. No good at all.
Why pick out that case?
Yeah, I feel like all of the NSString-based APIs should have been deprecated by now?
Why I’m Amassing an Army of Fake Social Media Followers
On no we broke something – Why Ello is the best social network
Re-Loader Activator 1.6 Beta Free Download
That is not a Swift method, it's an Objective-C method on NSString, which Swift String can be silently converted to.
most people try this tbh. its common sense. its why you do things like register your company, pay your taxes, get legal advice. its exceptionally normal behaviour until recently it seems...

we used to call people who didn't do this 'rogue traders' and the like. they were looked down on like scum instead of looked up to as role models.
Awesome angular progress buttons
There are some of us HNers that develop the Terminal software/infrastructure (or used to)... so if there's ever anything you were dying to ask, AMAA. :)
Observed cosmic rays may have come from two-million-year-old supernova
(Not sure if troll, but I'll bite.) Don't feel bad. It took me a few years to realize that. It stands in contrast to the official coding examples, all of which are way longer than 4 bytes.
The End of Suffering?
I've recently seen a lot of demand in Python corporate training.

High-quality corporate training hinges on maximizing student engagement. This typically means having students spend time in class writing programs. (In one four day class, I've had students write >20 programs.)

IDLE is a surprisingly good tool for this.

It's cross-platform and in the standard library. It postpones questions about which is the best editor/IDE. It avoids the tab/spaces problems. In fact, it's just about the simplest tool for teaching interactive development (i.e., coding with access to a REPL.) (I should note that this style of programming is distinct from how quants and data scientists work: they write more analyses than programs/scripts. When doing corporate training for quants and data scientists, Jupyter Notebook is the only way to go.)

By the end of the class, most students are pretty tired of using IDLE. It's not a very good editor; only barely better than Notepad. As the article's screenshots show, it just looks ugly. It's not even close in functionality to an IDE or a `vim`/`emacs`+plugins. The REPL is extremely clumsy to use in practice (especially compared to `bpython` or `ipython`.) In fact, I would be shocked if anyone actually uses IDLE as part of their regular job.

That said, it's a great teaching tool, and I'm glad to see someone putting effort into improving it.
The drug there was off-patent. The issue was there was so little money in selling it that it wasn't worth going through the bio-equivalence studies to sell the generic, which costs millions, as one would be immediately undercut by the incumbent.
Sendowl, Gumroad and bootstrapping
Why I Quit Ordering from Uber-For-Food Startups
POWER, OS/2, and The Thinkpad has convinced me that IBM just doesn't make the most of what they create.
A contract doesn't need to have any money change hands, as long as both sides get something out of the deal (have "consideration"). The GPL does have this as one side gets the right to use source code and the other side gets guarantees on how that source code will be used.

Also, being slapped on is not a problem for a contract. We interact with adhesion contracts every day that are slapped on to things. When you accept a valet ticket for parking it has a contract on the back that you are assenting to by using the service. No negotiation occurs and adhesion contracts are valid contracts.

Since "commercially negotiated" is not a term of art, why do we think the GPL is not one?
I read it a bit differently: these companies are doing so well, they're capturing a huge amount of their respective markets, to the point where they can easily afford to raise the salary on even their lowest paid employees. Likewise on the other end of the spectrum, companies on razor-thin margins are stuck pushing people towards minimum wage salaries.

You could pull a couple of conclusions from this article:

1. The patent system is a mess, and is helping drive huge profits for a small number of very large companies, as well as hindering others from competing or entering that market. They note the biggest examples are in tech and healthcare, which is not surprising.

2. The 'best' or 'smartest' workers congregating in a few very large companies that can afford to pay them very well is no surprise. Add in #1 and employees have less reason to leave and create competing services or businesses.

3. The ability of technology to be so easily replicated, plus #1 and #2, means we see few, if any, challengers to certain established markets.

All this is great...if you work at one of these companies.
Leveraging Digital for New Ventures
A solution to this would be to disallow mutable value types. Then, all methods would _have_ to return a new instance.

The compiler implementation could use mutability behind the scenes for efficiency, while the language exclusively allowed immutable values.
Similarly to using a hash function that is purposefully slow, wouldn't it be a good idea to introduce some artificial latency when responding to requests for urls like this?
Maybe it's just my first-world-privilege at work, but, honestly, why would I want to put up with a language that makes all of my day-to-day coding tasks so much more difficult than it is in other programming languages? It seems like I'm losing more than I'm gaining. 99% of what I do is in English. Everything that's not in English is going through an i18n library to convert labels and such. It doesn't seem like I'm gaining much of anything, but I sure am losing a lot. No default indexOf, length, and substring methods? Ouuuch.
What caused you to characterize anyone as opposing "fighting for one's interests"?

The issue here is that someone is claiming that it violates their rights but keep doing it. Is there a case of a corporation that thinks a certain deal is bad but keeps making it?

"Doctor, it hurts when I do this ..."
Back when this got released, I thought "there's no way this is going to work". It was just too slow while hardly doing anything impressive. And it was billed as if it is actually faster than doing things normal way.
That's part of my point. As long as the work is "someone else's problem," will it ever get done?

If other opportunities are there for someone with a security skillet, what makes a libfoo maintainer become skilled enough to make the most secure libfoo possible, but also stay on libfoo? Does saying "security is important" mean that security is important, or does it means "have my skillset, and also do the busywork someone with my skillset is able and happy to ignore?"
I think that your tone will turn a lot of people off, which is why you've been downvoted (by others), but I think that what you said needs to be heard, especially re: IoT. It's a nightmare waiting to happen.
Famo.us to me was always a platform/framework or even a language more than it was a product or service.

I have no idea how they could have raised $31M on that.

This could have been an amazing framework built by the open source community instead it's now just another growth before revenue scheme that went wrong.

Sad.
Based on Github searches I've done in the past a lot of code calling length on NSString was broken. Those people probably thought they were in the 99% who just needed the convenient 'normal' length. People not realising that length isn't giving them what they want is one of the things the Swift API aims to solve.

Giving the wrong choice for most situations (and number of UTF-16 code units isn't what people want most of the time) the easy convenient name is just a recipe for broken code. It's bad API design, or at least unfortunate historical accident, and it's good to improve things when there is an opportunity to do so.