skysight-inc/HackerNews huggingface dataset:
> Yes, but my question is: even if you use erasure, what are you going to do at the call site? Won't you need to state a concrete size there?

No, Idris doesn't actually care what "n" and "m" are (concretely)... it just knows that if you happen to have a (Vec n a) and (Vec m a) lying arond, then you'll get a (Vec (n+m) a) out.

> For usual generic types, erasure and code generation are equivalent in what they can do, because at some point you will specialize to concrete types.

I'm not sure I fully understand what you mean, but I think this is slightly wrong... You can think of the fully erased (Vec n a) representation as (n, void-star) in C-style or Array<Object> in JVM style. Note that "a" doesn't actually appear. So the type is actually never needed at runtime -- all functions which have (Vec n a) as a parameter will just assume that it has been (statically) proven[1] that the pointed-to-array has the correct size. Because of parametricity, functions will not be allowed to actually access any 'a' values directly. So it all works out.

Here's another comment of mine that goes a bit deeper into the interplay between static proof and runtime checks: https://news.ycombinator.com/item?id=10302863

Key being: You either need to prove statically or you need to prove statically that you've checked at runtime.

HTH.

[1] This is valid because call sites must provide such a proof (statically).
Very nice!

Also I just stumbled upon this article about Khipus that have been recently uncovered:

http://anthropology.net/2016/01/03/between-the-knots-untying...
Of course, not encrypting and authenticating between the devices lets any other compromised device on your network interpose itself in that pairing and do whatever it likes with your IoT devices.
You might be able to proxy the dictionaries from your own server? Unless something in the t&c's of the dictionary providers prohibits you from doing that of course.
I can confirm, worked on my projects after college, didn't work as expected, but with all the gained experience I found jobs as full stack consultant very easily, and for the last 3 years I saved some bucks. Now from this year I'm working back again on my projects. Carry on Steve, the reward can be big!

Just one concern: are you working with more people? That's the only thing I regret from my ventures back then, I was also solo-preneur, now starting to make teams and delegate more and more, and I think that's the way to go...
A funny find, but why were you looking at their source?
> Yes, because its a good idea to put them in a position of power right after they are out of jail. Did you not bother to read the link to the drunk girl who stupidly got into a car with one of these guys?

Wow.

Bro. A couple of things:

Humans who would launch unjustifiable assaults against other humans come in all shapes and sizes. Some of them are convicted felons. Most of them are not. A proper background check [0] discovers with a relatively high degree of certainty whether or not one is likely to assault another (among many other things).

It often takes a very, very long time before one can seal a felony conviction. "The guy who can't find solid work because he did a dramatically stupid thing a decade ago, despite the fact that he's a dramatically different and dramatically better guy now than he was then" is kinda archetypical.

A prior felony conviction, along with the degree of one's success at rehabilitation is just another datapoint to be considered in a proper background check.

> "Hey this one situation is risky, we shouldn't let them do X because there are clear instances of bad things happening because they pick up impaired passengers."

You say that like regular cabbies with clean records aren't not-infrequently accused of theft, assault, and swindling. :/

> Yes, your article agrees I'm correct despite you arguing with me for some bizarre reason(?)

Heh. You said:

> The difference [in regards to insurance coverage] with Uber is the driver gets fucked instead of the Taxi/Uber company. [1]

From what I can tell (and from what I've read in the Uber driver recruitment letters I've been getting in the mail), Uber et. al. are straightforward about the limits of their insurance.

You all-but-explicitly claimed that nontraditional cab companies were making it difficult to understand the limits of their insurance policies. Perhaps their policies in regards to disclosure of this information have changed recently, but everything I've read that was actually published by the companies in question was straightforward and clear.

[0] I know what such a thing is because I was subject to one in a former life.

[1] Amusingly, you said this right after you mentioned that Uber had done the legwork required to find an insurer that was willing to insure commercial drivers making use of their personal vehicle during the time that they're not driving for Uber.
If the evilness of Google consists of creating self-driving, low impact cars just so that people can read ads while driving, I'd say more of that evilness!

Also, for all of Google's evilness, it seems to me they never forced people to use their products. On Android, you are not typically forced to use Google search or anything.

I thought the concept of the Google car is brilliant and it is nor even competing with Ford or what not. I want a city with lightweight, self-driving cars, not autonomous steel monsters rushing about.

I think the self-driving thingies could be even smaller. For example in my city there are bicycle taxis. Those things could be autonomous. They might be much slower than cars, but since they could take more direct routes they could reach the other end of the city just as quickly as the cars on the highway.
The author takes examples of Google Yahoo and other companies about “5%” problem, but conveniently forgets about Microsoft.

Microsoft infact is a fine example of how to milk a complex & diverse product portfolio and how to adapt to market trends. Office itself (which is/was notorious for the “5%” complexity) is one of the healthiest business for Microsoft today.
A Magic Method for Distributed Agile Collaboration?
DNS TXT records I can also agree with, as its as secure as email in the respect that it uses the same potential vector for spoofing.

File verification (which I haven't seen as an option with the multiple CAs I have used) is an alternate vector. It may be in line with the CA/B Baseline Requirements, but by removing this they would likely eliminate this threat.

This is a serious problem

p.s. I note that this "content change" verification mechanism is mentioned as point 6 under 3.2.2.4 of the Baseline requirements. It is entirely feasible that when these documents were written this particular issue wasn't considered. How would one go about repealing this particular point, and thus forcing CAs to comply.
The optics involved mean you aren't focusing 2 inches from your face, with the DK2 you're focusing at 1.3m and the DK1 was at infinity (not sure about CV1). So you could argue its better for eye strain.
If I'm reading the article correctly, that's a 656KB "Hello World" binary. 671,644 bytes just to print a single string to standard output and exit? That is smaller than the whole .NET framework, but considering that a real native "Hello World" binary is <1KB, what's the other 655KB doing?
Because A records don't mean complete control over domains.

There is a difference between "I can serve content under this domain (currently)" and "I control this domain (and can decide where it points)".

DNS domain validation is the right way to do domain validation. But it's slightly harder for users, which is why HTTP(s)- or E-Mail-based validation is being done more often.
Interesting. However, when "recording," the `00` column is always significantly larger than all the others. Doesn't look normal... (Chrome 47, Win7 x64)
Those statistics don't tell you much beyond how popular the language is.
I don't understand. How is it being "abused"? If the attacker has actual DNS access to create ad.{legitimate domain}.com, then Let's Encrypt is working as intended. So what if they're hosting malware—that's {legitimate domain}.com's problem.

Let's Encrypt has absolutely nothing to do with content behavior safety, only domain validation and encryption to keep data away from prying eyes.

This title is no different from "Chairs Now Being Abused by Criminals". It's nonsensical and completely unrelated. Do you care that criminals have started using chairs to sit down (gasp)? I don't think this even belongs on Hacker News.
Good on you Steve!

Reading something like this is quite encouraging. I too left my day job and one of the things that I am focusing on is my own projects. I make apps and in the last few months I haven't made more than 20$.

Anyway, working on my apps gives me more time for contributing to open-source and writing blog posts explaining how I solve problems, which can be rewarding on it's own.

Cheers for sharing your story and good luck!
Bhuman
iPhone 7 Leak (full working)
I thought about that but don't like the idea:

1. As you say, could be against t&c.

2. Tons of requests for the dictionary page coming from my server's IP address may lead to being blocked.

3. The user can edit the URL template to fetch any site they like, and I don't like the idea of my server fetching content from any arbitrary website.

4. Would add extra bandwidth and load on my server.
> they really liked the product, but they didn't have the time to devote to their language studies right now.

It sounds like you've fallen into the trap of an aspirational product, like gym memberships. People want to need it, but often they don't.
This gets into psychology, eh?

I suggest reading through alljapaneseallthetime.com/blog/

He has excellent tips. For example, to paraphrase, "just open up a lesson, don't aim to finish one, because that'll feel like too much work, and you won't find the time".

I have a language learning site, and we changed our suggested method to its users because of that better approach.

That comes down to communicating how to use your product to your users. I have to do more of that too.
I've got a 980 GTX running on Ubuntu 14.04.3 and it's pretty good overall. I can play most games at a decent framerate in very high quality @ 2560x1440. It can run Portal at 4K, no problem. The rig I have is pretty new and cost just over £2000 though. I've had less impressive results with lower spec'd hardware. As with all things gaming/hardware related, YMMV.
Scaling Kanban Across an Organization Using Kanbanize
I guess they just want the benefits of people driving the car, while pushing all liability to car manufacturers. Somewhat like they do with Android: Google also makes no phones.
Only those with Windows 7/8 can get the free upgrade to 10 and W7/W8 themselves aren't free, which could be a factor to some.
Being a Pole, I wish more people understood that. :(

We're in the process of dismantling our democracy by removing all of the checks you mentioned, while supporters of the ruling party argue that democratically elected majority is within full rights to do it.
Legos better investment than gold
Fun fact: most MS kernels, including DOS, supported "/" as a path separator. They were just filtered out of the command lines by the argument passing code.

There was a system call which would tell the argument parser that you wanted a different switch character, and if you changed it to, say, "-", then "/" would work. Of course, not everything used the standard argument parser, so if you did change this you ended up in a world of pain because your tools would start behaving inconsistently, but it was theoretically possible.

I've seen references to this code existing as late as XP, but I don't do Windows any more, so can't comment on later versions.
Project Portfolio Management Strategy Guide for CIOs
That may be a cool thing, but the site is almost impossible to read. At least on my iPad. It might be complex to program that robot, but navigating their site shouldn't be.
I'm native Spanish speaker, the problem is at: "grande trabajo"... should be "un gran trabajo", then it would sound legit.
At some point I had to stop reading. This article is absolutely imbecile, and I don't say that word lightly or to troll.

Just one example b/C on mobile:

> For instance, those whose programs were not at the very top of the rankings frequently talked about not wanting to offer a spot to someone they believed would go to a higher-ranked program. They didn't want their department to be the graduate equivalent of what high school students applying to college term a safety school. In this sense many of these departments turned down superior candidates, some of whom might have enrolled. Many of the professors sound insecure about their programs even though they are among the very best

Grad school is not a job you can apply to through the year. All offers are made at the same time. If you make an offer to the best guys, what will happen is that when Harvard comes and scoops you , you will end up empty handed and had no students.

The reason is that most schools make an offer on e.g. say Feb and then there is an agreement to allow students to reply up to April 10th. So if your offers get turned down, you will have to scrap the bottom of the barrel.

Again, this article shows utter ignorance about grad school, stuff that just a call or email to any grad student could have answered. Also, sorry for sounding grumpy but I don't have a problem with people being wrong; I have a problem with being wrong and being an asshole about it
Zürich, Switzerland | REMOTE Full-stack Rails Developer | http://scm.st/kyr6dy

Shortcut is an emerging startup company based in Zurich, Switzerland. We offer an app marketing platform for app owners to get increase user engagement. We are exploring new solutions off the beaten track to growth-hack app marketing and for this we need your help.

We are seeking a talented full-stack rails developer with a passion for UI/UX and great HTML/CSS/Javascript knowledge. The ideal profile combines deep experience in full-stack web development with a strong computer science background. Experience with mobile (web) application development and/or modern deployment techniques like docker is a plus.

You will help building the web-part of our deep linking solutions. And you will be responsible of a determined set of existing and new features. We are a small team and there are many more fields a helping hand is needed. So if you have experience or are interested in other topics like deployment (AWS/docker), scalability, mobile development (our SDK) there is definitely the possibility to advance.

This is a full-time position. We are located in Zurich, Switzerland and Helsinki, Finland. Part of our team already works remotely, so we already have a remote-working culture in place.

Apply for this position: Send resume with references to careers at shortcutmedia dot com. If available also:

* Personal website, blog etc
* Projects you’ve worked on / code samples you are proud of
* github username
> Router's don't care much about the host stuff...

Sure. But, I was addressing mixmastamyk's assertion:

> I'm not a big fan of 128 bit addresses with ipv6, they are too long to read and write. Does anyone know why 64 bits was not good enough? [0]

If you're okay with writing and reading 64-bit hex strings, [1] the part that matters to most folks is the host identification part, which is 64 bits long. :)

[0] https://news.ycombinator.com/item?id=10837317

[1] I'm not... that's why I use DNS.
TrueVault (YC W14) Is Looking for Software Engineers
TrueVault’s mission is to make storing secure data as simple and as secure as possible. We envision a world where TrueVault is the default data store for all sensitive data, for any kind of application. We are looking for technologists who get excited about data security, system performance, and infrastructure scalability to join our tight-knit engineering team to work on challenging problems everyday.

Note: these positions are for our San Jose office location.

Open Positions:

Application Security Engineer - https://jobs.lever.co/truevault/29fb44df-ab4c-4445-bfb2-b1a5...

Senior Software Engineer - https://jobs.lever.co/truevault/b4f76aa2-2d7b-473a-b7db-41e5...

Sr. Site Reliability Engineer - https://jobs.lever.co/truevault/8da19c3c-2211-498f-afc3-c8ce...

=== See all ===

https://jobs.lever.co/truevault
As many people have said: Good stories are true, not factual.

True. Not factual.

A lot of us in the sciences forget that the distinction exist. Or worse, want to pretend it doesn't.
js;dr
Do you think the government buys and sells stick to manipulate prices? Perhaps the 90M traders lack sophistication so trade mostly on rumor.
Which country are you in? PayPal accepts Maestro in the UK, and lots of other places from what I can see.
https://www.paypal.com/us/cgi-bin/webscr?cmd=_display-countr...
> As a certificate authority ourselves

This pretty much invalidates the entire argument. TLS is not about making things look more legitimate. If anything, CLAs are to blame for marketing TLS as something it's not.

Let's Encrypt is doing the right thing here, Trendmicro is part of the problem.
Ehang 184 drone could carry you away one day
That's great. Could've used this in a project last year.
Sarcasm you chumps

Jesus the guy wrote Silmarillion in his seventies, a book that had no chance of being a bestseller and he barely lived to finish. Tolkien didn't write because he thought it was a "sweet gig", he wrote because he was a writer.

There is this mindset that refuses to believe that any motivation other than money is suspect, the nerd community used to be blessedly free from it.
Have you seen the size of go executables generally?
I remember many years ago attempting to find at my local library a copy of S. Morgenstern's classic "The Princess Bride", but being frustrated at only being able to find the abridged version by William Goldman.
You are right. It is not unusual to have 20 applicants with perfect GREs, so they act more like a minimum threshold
Great job, I admire you for sticking with for so long despite the (slower than expected?) growth. You must be really passionate about what you're building, which is what counts most. I'm an avid language learner myself.

Here are a few things I'm thinking. You probably have thought about these yourself, but anyway:

- Have you ever thought about increasing the price? I find $5/month to be at the very low-end for something that a language learner may be using regularly. If I find the product useful I'd be happy to pay $25/month or more for it. Increasing the price also has the side effect the you'll get "serious" language learners to sign up, which is probably what you want.

- Have you thought about recommending appropriate texts your users based on their difficulty? I don't know anything about Chrome plugins, but I assume that you can collect data about which pages and texts users are browsing, how often they're clicking on stuff, and so on. That sounds like very valuable data that you could use to add more value and data network effects to your product.

- Have you thought about selling to organizations (schools, classes, meetup groups) instead of individuals?
Paypal and Creditcards are banned in Iran, So how come Iranians are using them?
>full charge reportedly being sufficient to keep one passenger airborne for up to 23 minutes

>According to the Ehang rep we spoke to, the 184 is already fully functional, with a worldwide series of demo flights scheduled to begin soon. They claim that it should be commercially available later this year(!)

Seems kinda cool if dangerous
Human behaviour is hardly random.
Also requires JS.
Thanks for making Readlang. I love it - one day I thought, I'd really like a product that does x, y, and z, and Readlang does exactly it and more, so I'm happy.

I have a premium subscription, but the only reason I got it was that I wanted the product to not disappear :) The features you get with the premium subscription would not have been a reason to upgrade for me at all. I don't know if this is a problem (I used to feel that way about Evernote as well), but maybe something to consider.
he does not believe in the concept of free will

That really doesn't do anything to assuage my distaste for the point. It is in fact the very point that is the problem.
What you mention indeed is a problem for its core users who already use Evernote. However "too many features"--each of which is mediocre--is a much larger problem. I remember trying to use and like Evernote multiple times through its evolution and not really sticking because there wasn't a single feature that was uniquely superior. Why use Evernote for saving to read later when Instapaper or Pocket do much better job? Why use Evernote to keep todo lists when there are tons of other Todo specific apps that do much better job? etc.
It is been done for years by third party JVM vendors, but apparently many are too focused on the OpenJDK.

Also, since Java 8 you can package everything together with the reference JDK, no need for third party tools any longer. This will be improved with the Java 9 modularity and possible AOT compilation in Java 10.
On the "Ruby Kaigi" presentation (http://www.atdot.net/~ko1/activities/2015_RubyKaigi2015.pdf), Koichi Sasada states that Matz doesn't like the automatic compilation of source files a la Python, which automatically generates .pyc files.

Why is this? I understand the inconvenience of having lots of compiled files in your deployment structure but I guess having a static compile phase would be worse. Any opinions on this?
Or perhaps do it the other way around? Make a Let's Encrypt subdomain-blacklisting TXT record with which the parent domain could indicate that they don't want subdomain owners to be able to create their own SSL certificates. (Useful in the case of hosted web services, for example, where the parent already owns a wildcard certificate so there's no reason for the subdomain to create one)
It's not uncommon to use multiple providers, that way you don't need to rely on a single provider having multiple DC's in every location you want a presence.

Plus you know, less SPOF.
> Adams compares women to children and people with mental disabilities.

So, I googled the issue you apparently were talking about, and I have a general question.

http://comicsalliance.com/scott-adam-sexist-mens-rights/ (That's it, right?)

So, when americans say that someone "compared" A and B — do you guys, like normal people, mean that (1) said someone (in this example, Scott Adams) performed an operation of comparison, which may or may not have resulted in presenting some similarities between A and B?

Or do you mean that (2) said someone said that A and B are the same in some ways?

Because if you're using definition number 1, I don't see any problems with comparing anything to anything. But if you're using definition number 2 — well. To be frank, I can only call this definition stupid and idiotic, and if that's how you understand it, then yes, you do have really bad reading comprehension. And it's clear from quoted Adams text that he "compared" these groups of people as in 1. Not as in 2.
It's weird. He talks a load of nonsense, and makes basic logical errors all the time, going as far as to recommend nonsense pseudoscience. At times I wonder if maybe he isn't actually that smart, and just got lucky somehow.

But he makes accurate predictions. Consistently. You can't ignore that.
That would be correct. Unfortunately the author appears to believe otherwise. I quote: We had AIM, Yahoo, and MSM. We learned that is stupid as hell, and we should just use the same protocol. So then they all supported XMPP.

I think the context is pretty clear.