skysight-inc/HackerNews huggingface dataset:
Amen!

Ruby managed the transition to unicode much better as they delivered 2x performance increase at the same time AND labeled the new version 1.9 instead of two. Much the same problem.

Yes python 2 is OK but it's legacy mode and people will move on. I think one of the selling points of python vs ruby is that its so often OK to just use system python(2) versus ruby where you really need to use something like rbenv. Selling point for ruby is that the community is absolutely obsessed with making good tools to facilitate working with it.

I have already in my mind decided the future is in languages that are designed with parallelism in mind. Another breaking change for that?
Is gavanwoolery made of magic and unicorns? This is amazing and his progress is nothing short of astounding.

If he's reading this: how do you fund work like this? You said you're raising a kid, I've got two! Is this a couple-hours-a-night kind of thing?
Teen Hackathon (teenhackathon.com) February Training in SF
Knowing the Juniper Dual_EC_DRBG constants were fiddled with doesn't help you actually snoop, since working backwards to the generating constant is computationally unfeasible.

Similarly hardcoding someone's SSH public key isn't going to help anyone else gain access just by knowing it's there, is it?
6 things to look for in gig economy companies
Chromecast is more convenient in my opinion. However this would be good for watching amazon prime videos.
So is it possible for simple ACH->ACH deposits? I'm looking to take out of my bank account and put into another (royalty payments for the curious). Ideally without having to hold a Stripe balance, just simple xfer.
Hackers tribes
Another gotcha is that ELB appears to load balance based on the IP addresses of the requests... We had private VPC/IP workers talking hundreds of requests per second to a non-sticky-session, public ELB fronted service (... don't ask why ...) and experienced really strange performance problems. Latency. Errors. What? Deployed a second private ELB fronting the same service and pointed the workers at it. No more latency. No more errors.

The issue appeared to have been that the private IP workers all would transit the NAT box to get to the public service and the ELB seemed to act strangely when 99.99% of the traffic was coming from one IP address. The private ELB saw requests from each of the individual IP addresses of the workers and acted a lot better. Or something.
Right on. I'd add that the value of having such a large and diverse canon is that each person finds their own branch or branches that eventually ramify down to tiny twigs unknown elsewhere on the tree, but that have immense personal beauty and significance. The value of canonical taxonomies in lit isn't that all the books are good, but that there's something in them somewhere for anyone. But not necessarily all of it for everyone.
Good practices for code reviews
Looks like it's also available on steam and gog, so you don't need an iPad.

This looks like it could be my type of fun. SpaceChem was awesome because it made me feel like I was designing microcode in a way (in that you have to coordinate independent things to work together with some basic commands), and KOHCTPYKTOP was really fun for (simulated) designing of integrated circuits from transistors by hand.

Here's a reddit AMA from 6 months ago. I guess the game is actually not new after all.

https://www.reddit.com/r/IAmA/comments/3brxcs/i_am_zach_bart...
Voxels are discrete, so not absolutely tiny. Voxel = vox (volume) + el (element), similar to pixel = pix (picture) + el. Do you know Minecraft? All those cubes in its world are voxels.

The amazing thing here is how tiny this guy's voxels are while still keeping the game running at a decent framerate.

Compared to traditional polygon graphics: voxels are discrete elements in space (sort of like "giant atoms") while polygons are the surface of objects (cuts of planes in 3d space). Being merely polygons they have no depth (as GP said, they're paper-thin) while voxels are inherently volumes in your space. You could compare it to Lego vs. papercraft.
@pc - curious if you have plans to integrate ACH into your Checkout product. Seems like an incredibly difficult UX problem, but I'm sure your folks are up to the challenge :)
Cloud app security: How not to fail
I do, when it's the right tool for the job. When in Rome, do as the Romans. Everywhere else, use C or C++. Why? I'm more comfortable and productive with it. I'm sure the Esperanto advocates wonder why I still speak English, too.
This opens up so much
Glad to see Stripe release this, but the $5.00 fee cap doesn't seem competitive for frequent large transactions compared to other providers that have a flat fees from $0.25 like Dwolla, with more listed here
http://www.merchantmaverick.com/need-know-accepting-ach-paym.... Why the higher cost?
Agree, though pretty much every other player patches on par with, or worse than, Samsung.

Realistically the standard is "is it made by Google, Apple, or Microsoft", because pretty much everyone else is shite at it.
I'd focus on high school age range from 14 - 18. The specific topic I'd choose would be study skills. The ability to study on your own is absolutely vital no matter where you go in life, and I hadn't seen it as an actual class until community college after high school.
The U.S. has no explicit exception, but 49 of the states operate under Anglo-American common law (Louisiana being the exception).

By what I know of it, producing a patented invention for your own purposes, outside the stream of commerce, is neither crime nor tort at common law, as no one has been provably harmed by it. As a potential juror, I do not find the "lost sale" theory of harm to be credible from any vendor operating a monopoly, state-protected or otherwise.

One presumes that, according to microeconomic theory, the monopolist restricts its supply to increase sale prices, and that it is able to sell as much as it is willing to produce at that price. If it wished to sell one more, it would have produced one more, and also lowered the sale price by a marginal amount. Since it did not, it is clear that the monopolist was not harmed by being unable to sell to the infringer, because the monopolist never intended to sell that many goods in the first place.

Nevertheless, many judges in the U.S. are far more willing to nail you to the wall with statutory law on dubious grounds before allowing you to argue anything from common law.
It's cute, because the dedication to backwards compatibility is so uniquely Microsoftian: "We're going to create this API that idiots will inevitably abuse or misuse. Then, in the next version, after all the idiots have abused or misused the API, we're going to deliberately return wrong results from it so that the idiots' applications don't all break." It's really baked into their DNA, all the way back to the early days of Windows where they replicated all those DOS bugs so buggy games that took advantage of them would still function on Windows.
Ask HN: If you develop a codec in a cleanroom is it still encumbered by patents?
Hey all! Eating lunch something crossed my mind:

If you develop a new awesome video codec in a cleanroom (provable you didn't contact the outside world) and it overlapped with e.g. H.264 in some way would you still be in legal trouble using it due to their patents on it?
I would argue that you need monitoring significantly sooner than 500,000 users. I guess, until then, you just use Twitter noise for monitoring? Seems like pretty bad customer experience.

If I have something in an environment that I would start to consider "production" (i.e. someone relies on my product to do something regularly), then I'd have monitoring regardless of the number of users. Even something as simple as, "Am I returning valid data from GET /"?
The most interesting part is that Apple seems to be cool with this:

> Does Apple permit this?

> Yes! Section 3.3.2 of the iOS Developer Program allows it "provided that such scripts and code do not change the primary purpose of the Application by providing features or functionality that are inconsistent with the intended and advertised purpose of the Application."

I really, really hope this doesn't go away.
WW3+SECRETS+AND+OBAMA+BUYS+DUBAI+PALACE,?KING+OBI+ONE+-+YouTube
Link to the documentation? I thought this was changed over a year ago to not requiring pre warming?
By this time, the current relevance of those inputs they ignore is big enough that their predictions' time horizon is somewhere on the last decades of the last century.
There is some context in this Gizmodo article, "NASA's New Office Is Our Defense Against Death From the Skies" [1]. I thought HN would prefer the direct link to the new NASA site, however.

[1] http://gizmodo.com/nasas-new-office-is-our-defense-against-d...
Martha Stewart: Meet USA's New Entrepreneurs
I've found stumpwm to be a real joy to use on multiple monitors. It feels like the future of human-computer interaction, today.
The UI component presenting the login form for major banks is troubling. It seems like encouraging users to feel comfortable entering their online banking credentials into anything other than their bank's web site is a bad move.
> Is this a couple-hours-a-night kind of thing?

Phew, I don't even have kids, and I can't maintain a couple-hours-a-night hobby between maintaining relations, dinner, and a fairly late bedtime.
No immediate plans. ACH is mostly popular for B2B use-cases whereas Checkout is optimized for "lightweight" transactions. You can obviously imagine cases where an integration would be useful but we decided not to hold up the launch in order to build that. We'll calibrate based on feedback going forward.
> Native Aqua windows do not support any kind of window manager mechanism; Apple scattered the functionality around within Core Graphics, WindowServer, and the application frameworks and didn't make any part of it replaceable. Neither XMonad nor any other X11 window manager will ever be able to manage native windows.

Nuf said.
You could take a look at combining ACH and Stripe Connect.
Slack and Salesforce Integration
Well, not in absolute numbers, at least.

State	Fatalities
California	478
Texas	420
Florida	196
Pennsylvania	196
New York	191
Ohio	188
Illinois	162
Michigan	160
Georgia	142
...

http://icasualties.org/iraq/uscasualtiesbystate.aspx
You can use git or path deps if you want; or set up your own registry (there is code for it, but I don't think it's easy to set up yet. IIRC it's planned, thoughts welcome!)

> Project owners update projects and don't bump the version.

You cannot update code in a crates.io dep without bumping the version. And new versions only get pulled in when you do a `cargo update` or you update a package which bumps the version number of its dependency.
I wonder, do proofs of this kind, where some process is repeated forever to prove the thesis, have an infinite length? Could this be made into a finite number of steps in some formal system? Using a rule of induction maybe?
I tried but didn't work :/
2 New Year’s resolutions for developers of automated vehicles
The ones used here are activated remotely. If we assume the tracker to be similar to a cellphone and that it goes into standby mode after the car is of it will be drawing in about 2 - 4 ma, considering that a small car battery has a capacity of 45Ah the consumption would be negligible, it would deplete the battery in 625 days.
There is a crucial difference here. With FIDO U2F I am not limited to Yubico's offerings; there are other vendors. FIDO U2F devices can be manufactured by any company (and are).

I agree that the ideal situation would be a device that is completely under the control of the user, but compared to IOS or Android, a hardware token that only does what it is supposed to do (in the case of the U2F tokens; register and sign authentication requests), and cannot be modified by the manufacturer after sale is very much preferable.
Probably a case of lawyers saying jump and programmers saying "seems easier than arguing".
For those who find this interesting and want to spend a bit more time on figuring out the most impactful ways to help in the developing world, I highly recommend you check out Doing Good Better [1] by Will MacAskill.

He is part of the Effective Altruism movement and the book does a great job of breaking down the relative impact of different charities, whether to “earn to give” or participate directly through volunteerism, etc.

[1] http://www.amazon.com/Doing-Good-Better-Effective-Difference...
"You can get from fidi to downtown oakland in 12 minutes on a consistent schedule."

Yes, but that's all you can do. If you're in pac heights or the presidio or ... anywhere west ... you're going nowhere.
> It's possible to backwards-compatibly extend Python 2 to achieve feature-parity with Python 3 while preserving Python 2 syntax.

The syntax between 2 and 3 is essentially the same. A few minor tweaks here and there, but nothing major. Your point is a bit pointless because changes to the language that are not on the syntactical level (i.e unicode/bytes) cause the meaning of the code to change, despite the syntax being the same.
Go Schwa!
Not just NASA. ESA is also busy.

http://www.esa.int/Our_Activities/Space_Engineering_Technolo...
I know Whatsapp is the poster child for this sort of thinking, but how many other companies generate millions with just a couple of devs?
Wondering how you go about achieving dramatic bounce rate reductions?
How would that relate to research exemptions [1]? Couldn't someone who was interested in printing a single example of a patented item claim they were researching it?

[1] https://en.wikipedia.org/wiki/Research_exemption#Common_law_...
> You can call methods with explicit self too.

Point is "signatures are different". You can't use this function in place where you need signature without &self.

> You're not supposed to

It makes life of web-servers harder.

> Could you expand on this point?

To parse JSON with nested objects you need to declare a lot of structures. When APIs are difficult, people even use code generators.

> It's idiomatic

It's not an argument. What work should work. Idiomatic or not - another question.
Sadly, while question-asking is encouraged, question-answering is not. I can't count how many times I've asked something--to the group as a whole or to an individual--and it's just been ignored.

Do you find the "sink or swim" the best technique, or just the way it's done?
A Zen (but Still Frustrated) Description of Modern Web Development
Here is a list of NEO Earth Close Approaches:

http://neo.jpl.nasa.gov/ca/

1. Not a bad ROI to save a global economy with a GDP of $77.609 trillion and population of 7.095 billion.[1]

2. The side benefit is understanding how to mine NEOs worth billions.[2]

3. I would like to buy an insurance policy against an impact. I bet it would be super cheap as there is very low risk, but would get me to Mars or ISS.

[1] https://en.wikipedia.org/wiki/World_economy

[2] https://en.wikipedia.org/wiki/Asteroid_mining
The AppHub client is also open source [1] and can be configured to point to any backend [2]. We also support asset updates, and the client has been tested in many production apps.

With CodePush, AppHub, and this, it would be nice to have the community converge on a shared auto-updating client. Perhaps down the road we could see this functionality integrated into React Native itself.

[1] https://github.com/AppHubPlatform/apphub-ios

[2] http://docs.apphub.io/docs/self-hosting

Disclosure: I created AppHub
> Now the only thing voxels are used for is to determine the basic terrain addition and destruction.

Do you find that to be pretty efficient compared to other methods of terrain deformation (ROAM,etc)? Pretty curious, since I did my big undergrad research paper on deformable terrain in videogames before the huge voxel craze.
You are not the only one to notice:

https://www.google.com/search?q=german+intelligence+BND+saud...
Front End Newsletter: Issue #1
Python is Turing Complete, so everything you can do in Py3 you can do in Py2, but so you can also implement in Brainfuck.

The question is whether programming in one version vs the other is more enjoyable.
The isn't usually a good reason to start with a NoSQL solution, except for buzzwords on your CV.
The 'hidden airport' travel hack could save you as much as 80% on flights
Then there is the alternative system where you do not request UP or DOWN but you request the floor, otherwise known as destination dispatch https://en.wikipedia.org/wiki/Destination_dispatch

which introduces a whole new set of complexity.
We've asked you before to stop posting ideological rants to HN. Please do that. Political venting doesn't belong here.
Man, I am really happy that playbook parsing and error reporting has been improved.

Almost all the frustrations I have had with ansible haven't been from individual modules, but from the mini-language in playbooks defining what modules gets run when with what input variables. Almost pushed me to do away with playbooks entirely and just call ansible modules from a python script directly.
AGU 2015: Eric Rignot – Ice Sheet Systems and Sea Level Change
That implies an exclusively pessimistic model, however. My suggestion was to simply have a more pessimistic prior. As you say, insurance has to pay out _something_ _sometime_ by the data, and I've certainly seen some of those payouts myself (and sometimes even had them be advantageous in my favor), but if there's enough prior for adversarial interaction it seems a more more robust approach to plan for a worst case scenario even if it doesn't end up happening; or at least don't be exclusively optimistic, for this provides the same but inverted issues as exclusive pessimism.
Dwolla also charges monthly fees: https://www.dwolla.com/pricing. You need to pay $1,500 a month in order to charge more than 10 bank accounts.

In general, most providers have a lot of fine-print. We tried to come up the simplest and fairest pricing we could.
or just play this:
http://play.elevatorsaga.com/
Creating a shortcut for fast user switching in Mac OS X
> Almost no big company is using Win10.

Ok. I'm glad you have a survey of every business out there.

> Is exploit code out there?

You use any non-Win10 RDP client and enter the username with the blank password.

> Also further evidence that remote technologies like ssh, rdp, etc should always be wrapped in something else like VPN or at least strictly firewalled off to known good IPs

RDP seems like a shitty remote access protocol wrt security, but VPN products are certainly worse than OpenSSH.
I would focus on kids aged 2-10. Plenty to learn and we can use technology to create better experiences for them.
This post and thread are a trainwreck.
I have a feeling that ACH payments are mostly only going to be widely adapted in instances where the purchase price is very large (5 figure+ transactions) where you have a dedicated account rep. I think it'll be quite a while before users are comfortable entering in their bank account login info to buy a $30 product.
> thats stupid

Please don't. From the site guidelines: When disagreeing, please reply to the argument instead of calling names. E.g. "That is idiotic; 1 + 1 is 2, not 3" can be shortened to "1 + 1 is 2, not 3."

https://news.ycombinator.com/newsguidelines.html
Seems like a drinking game.

Games like CAH and Exploding Kittens are popular because people can and do play them with family. Half the fun of CAH in particular is getting your grandma to say something horribly offensive.

This game is more targeted at a group of similarly aged friends, and further still a group of friends who are into that kind of lifestyle (drunken shenanigans).

That being said, there is a market for drinking games, and $20 is very reasonable. Best of luck.
Are the game engine and game coupled together?

Meaning if I purchase the Alpha game key, will that give me access to the game engine during Alpha to start looking at that side of things?
does it? so you can say "yes, we do not allow these ports" or whatever... does that mean it is "secure"? this doesn't check iptables, only the rules that you write using iptables (as far as I can tell)

the point I am getting at is that in a firewall product, what you are checking is something like "only those users listed from this source may login" which is "easy" but other more complicated things like "this channel must be encrypted". what does "encrypted" mean? Is it just a word that you use in your specification language? if so, does it mean what you think it means? etc etc etc...

formally proving stuff about the behavior of a system, or a distributed system, is hard, but formally proving stuff about security, especially as it relates to information flows, side channels, etc is very hard...
Thats a Plaid thing, users could just enter their routing number and account number.
3. I would love to sell you that insurance policy.
I think the other might be that it doesn't have glaring, obvious holes like Trend Micro.
I hate to see this honestly. Stripe is already notoriously vulnerable to credit card fraud and this is likely not helping their cause.

I'd love to know how long you should expect for an ACH payment to clear and into your bank account. The two day period for credit cards is so small. Who checks their statements every single day? This is obviously the benefit of using Stripe if you're the merchant, but it leaves you vulnerable.

We can only pray that Stripe accepts some responsibility for verifying these ACH transfers.

Fraud on Stripe is a two-fold problem. They've got fraudsters signing up for Stripe accounts and running cards through them. They've also got fraudsters making purchases on Stripe-based sites. Obviously, Stripe prefers that the charges are made to legitimate users. That way they're not out all the money.

Edit: It appears it could take "up to 5 days" for the payments to be processed. This is entirely on the bank's side of the equation. I guess from there you'll only need to wait your 2 days (7 days for some users) to receive the ACH into your bank account. I see massive fraud coming in here.
I'm sure this is totally different for various different people and different blocks, but over the course of 10 years living in 4 neighborhoods in SF (Soma, Mission, Inner Sunset, Inner Richmond) I never knew more than one neighbor along each street. I moved to Oakland 3 months ago to a very communal street and already know every person along our approx 25 house block. The lack of neighbor contact always seemed pretty ingrained in SF culture for whatever reason.
When I last worked on a billing system about three years ago, we looked so hard to find an ACH provider. There was just nothing out there. This is an enormous advance.

The problem we had was that we issued moderately large invoices monthly - they could be from $1k to $50k. We wanted to be paid quickly, so we tried to convince our customers to pay by credit card (through Stripe) and enable automatic payments, but we had trouble when customers would bump up against credit card limits.

So, for our bigger clients, we were relegated to asking for checks to be sent by mail. This meant we couldn't automatically charge customers every month, and instead needed to badger them to send their check - all of a sudden, we needed an accounts receivable team. We couldn't just ignore the problem since these were our biggest accounts, too.

Stripe's pricing is almost comically friendly here - credit card transactions are usually in the ballpark of 2.7% + $0.30, so even when card limits weren't an issue, we'd be paying out the nose on the transaction - 2.7% of $10k is $270. The new ACH payments would cost just $5.

Anyways, this is a serious accomplishment. The underlying banking regulations and technologies around ACH are thorny. Good job, Stripe!