skysight-inc/HackerNews huggingface dataset:
Can you clarify? I just said that bad laws would go away with full enforcement, which is the core of why it is good for a society to enforce its laws evenly and thoroughly.

I don't think there's any false dichotomy produced by simultaneously noting that on a practical level you will never achieve literally 100% enforcement of laws without some serious damage to civil liberties which is why we err on the side of partial enforcement as the lesser of two evils.

Edit: Is the issue is the use of the phrase "accept the injustice of partial enforcement"? I was trying to communicate that there is some injustice in not fully applying the law (the fact that some murderers go untried is unjust for instance). However we're willing to accept that because getting literally 100% enforcement would require things we don't want. When I say full enforcement as something to aspire to I'm not suggesting literally 100%, I'm referring to the way we roughly fully enforce murder laws and do not fully enforce drug laws. One of those crimes (more or less) gets treated as a crime regardless of who commits it, the other does not. I don't think we'd tolerate drug laws as they are if they were enforced with the same degree of universality as murder laws.
I'm given to understand the way to have it is to get single-origin beans with the Clover. I haven't given it a try yet.
Well you got a remote job, so you did a little locational arbitrage. Most people leave the small towns because of lack of opportunity. The cost of living is low because incomes are low.

Can someone come up with a model that's sustainable and applicable to the majority of people?
> GNU/Linux as a PC operating system for non-programmers is a lost cause.

Engineering workstations. Lots of them.
There is no backdoor
Flask is just awesome, I've never messed with a framework that's made things so simple yet doesn't take away from functionality if you're looking to build more complex apps.

Anyone looking to get into webscripting/webapps should definitely take a look at flask, its python based, good for prototyping or production apps and has tons of useful documentation.
And what happens to the engineer tasked with writing this hack if he fails and ends up bricking the phone?
(1) We listened to most interviews on the platform to establish homogeneity. Interviews were across the board, language agnostic, and primarily algorithmic in nature.

(2) We actually looked into this and noticed that time didn't really affect performance. Usually, people did their interviews over a pretty short time span and then found a job. Or, people were already experienced interviewers and had kind of hit a plateau. You can see the raw data and how it oscillates wrt time in the footnotes.
I think the point of the story is that wearing a helmet makes you more likely to be not-dead when shot in the head (thus increasing the number of head wounds).
You are dead right about small cities. There are like 3 landlords aside of the (big) colleges where I live, and rent is a nightmare. It doesn't help that one very infamous landlord prefers to leave storefronts in vital communities vacant instead of lower the rates, just because he still makes money by leveraging his properties for his investments in China.
He will probably not win, but he is doing much better than anyone expected. Same with Trump (except he has an outside chance at winning this year).
> The slope is that if they can order Apple to engineer one thing, they can order them to engineer another.

How does that at all follow? Right now, a cop can lawfully order me to identify myself. Does that mean they can also lawfully order me to go to the nearest coffee shop dressed as Bozo the Clown and shout, "I am in love with the ghost of Princess Diana"?

I don't understand how complying with an order to use an existing security hole to break into in someone's device somehow sets a precedent that the FBI can in the future go to Apple and set the parameters for how their products are designed.
Did...you reaed what he wrote at all? Bernie sanders supports inflating assets with QE (and affectively robbing the middle class due to asset inflation).
At least flying domestic within the US, I've never seen in-flight wifi with data caps.

They do, of course, restrict video streaming services so as to not let one person consume the whole downlink, but that seems like a reasonable tradeoff given the bandwidth limitations on satellite internet. Many airlines now have onboard video-on-demand services anyways, which fills the streaming niche for most people.
And still invalid. Are you assuming that collisions against SHA256(bcrypt(p)) are harder than SHA256(p), right?
Any math to prove that?

Otherwise, you're relying on the user side to properly safeguard bcrypted password. That is often wrong. You cannot store any kind of transformed password anywhere, or it's no longer a password, but a token.

Yes, those "Remember me" things transform passwords into tokens. Tokens can be stolen.
Many Android apps include the Google Play Services framework in themselves, as they provide extra functionality that is not in the baseline Android API, e.g. a JSON parser.
>$PROJECT may benefit from your solutions and resources, if you're so good. $PROJECT isn't perfect.

May I suggest using "$PROJECT may benefit from your solutions and resources. $PROJECT isn't perfect." - "if you're so good" could be interpreted as "if you're good enough".
Seems pretty straight forward - pretend you signed up for a Google account and also had that account connect to your other email addresses (Like people have been doing for years, and arguably one of gmail's best features)

Now just rebrand it without the visible requirement of having a Google Account. I wouldn't be surprised if you're still getting a Google account in the process, it's just not advertised.
Serious question: What about using a Public/Private key encryption to store the password?

- Private key is stored in a secure place. Offline for all i care; printed on a piece of paper; memorized and swallowed.

- When user creates the account - password is padded with salt, then a public key is used to encrypt it. The resulting encrypted form is stored, along with the salt.

- When user attempts to authenticate - the password that is provided is padded with the stored salt, encrypted with the public key and compared to the stored password.

Private key is never used when comparing passwords. Never available to the system doing authentication, etc.

The only purpose of using a reversible encryption - is to be able to switch to a different authentication provider completely transparently to the user.

I've implemented this functionality considering that we may need to switch over to active directory (or some other directory) in place of storing passwords in the database - but never used it, fearful that i would be committing some cardinal crime against proper security practices

Thoughts?
That's a common misconception. In reality, banks don't need deposits in order to loan money. As long as they loan at an interest rate above that of the central bank (and they always do), they can borrow reserves from the central bank.

That being said, banks can currently offload loans as securities, which might be what you're referring to. This is a major problem, though, because it incentivizes banks to make bad loans, and then to try to hide the fact that they are bad loans.
But the deduction itself raises what people are willing to pay, bidding up the price, so homes are more expensive for the same reason.

If it weren't there when you were first looking, houses would be somewhat cheaper, perhaps enough to still seem like a good deal.

Agree on the point about embrittlement and being stuck -- I'm reading Taleb's Antifragile now, and that's exactly the kind of thing that makes your ability to plan for the future more fragile, especially because it comes with debt. However, it has the offsetting benefit of "locking in" (a bulk of) your costs of living, which has historically been a good deal.
I read that the Soviet Russians captured and used the Enigma machine, unaware it had been cracked - and remained unaware for 40 years, so the UK and USA could read Soviet encryption.

It was therefore of the highest strategic importance to keep the work at Bletchly secret - the unfortunate side effect was Turing's work was classified as well as other pioneers like Tommy Flower's who build the first electronic computer from valves.
And a body of water does not "want" to flow to a local minima, but personification is a damn useful rhetorical device anyway.
If it was many of the shootings perpetrated by non-muslims every day in the US, they wouldn't have cared. But because these Americans were muslims they need to scan their phones and make sure they weren't getting orders from some terrorist network.
> but you're not going to get the same caliber of work from someone who first saw python two weeks ago compared to someone whose been using the language for 5 years on real projects.

Careful. You probably need to define your terms more clearly.

A CS student who knows Java (4+ years of experience) is going to turn out very different programs from a 20 year veteran of Erlang who is just learning Java.

Even with bad Java idioms, the veteran is very likely to be turning out much better code because he is thinking about the underlying architectural issues (failure modes, recovery, concurrency) with far more experience.

Yeah, I watched this play out in real time when I paired them. It was actually really enlightening and entertaining.

I also found out I didn't know as much about either Java or Erlang as I thought I did.
> In broad strokes, this makes them good for the poor and bad for the rich

The stupidity in this comment hurts my soul.

Let me ask you this, out of the poor and the rich, which one is more heavily leveraged into assets (using debt).
GATTACA fears real: You can be denied life insurance based on a genetic test
The problem I have with this is, I don't want a template for the comment a contributor leaves on a PR; I want to display a message to them before they submit a PR. It's not a standard way to display messages, requiring users to read editable text (that has no clickable URLs) and then delete that text after they read it and submit.
No one is spending $3 on a cup of regular brewed coffee at Starbucks to my knowledge. Maybe there's a strong regional difference? I can't find anything online to support that, though.

McDonalds:{12oz:"$1.00" 16oz:"$1.50" 20oz:"$1.80"}

Starbucks:{12oz="$1.75" 16oz:"$1.95" 20oz:"$2.25"}

If I want to enjoy the drink on-location I'll pick Starbucks every time. The ambiance is generally pretty okay. If I just need a quick brew and can grab it in a drive-thru then McDonalds will do just fine.
Ask HN: What kind of per-machine firewalling if using VPC / security groups?
On AWS, there's no doubt that VPCs and security groups are a very powerful and flexible feature. I am kind of curious what administrators are doing with individual machine-level firewalls (iptables etc.) if making use of these networking features from Amazon. Deny all traffic from sources not in the VPC? etc.
I never actually did the math to look how much money i loose / how many percent actually use a adblock. But i've also seen people who use AdBlock but allow Analytics or have no AdBlock but something like Ghostery. So i am pretty sure the numbers are always wrong.

But next to Analytics i am a big fan of GoAccess (http://goaccess.io/) which also can do HTML exports if you prefer that over their very well done TUI.

The cool thing is there is basically no install because it just parses the access logs. It supports multiple formats and i even use it with a rails app (i probably simply changed the log format to something more standard tho). You just throw the binary on the server you just need it on and point to the log file.

Edit:// I just checked a old blog targeting people with security in mind. It suggests about 80% analytics blocking O_O

Also i we use Kibana (https://www.elastic.co/products/kibana) at work which coubled with Logstash and other software can be a very mightly log analyzer. But you have to do the configuration yourself.
Popehat Signal: Urologist Threatens Forum
My (slightly customized) Portuguese layout gives me both every accent you need in French and easily accessible braces. The French AZERTY with the inverted number row may be too screwed up for any hope of rescue, though ;)
Adoption is a process, not an event. These things take time. Sure, its inconvenient at the moment to do things on the bleeding edge, but things are rapidly improving.
According to my source at Apple HQ a TV van is on the way. We should see some news coverage soon.
My remote job pays the same I'd make locally in my tech niche. The benefit comes from no longer having to own a car for myself to commute, gas, insurance on that car, etc. It freed up the $20K in equity I had in the vehicle, and saves me $5-8K/year in commute costs.

If I lived in SF, I would pay at least $2-3K/month for rent alone (that's $24K-$36K/year after tax money you're just burning up). Yet, you can spend under $1K in almost any non-major metro in the US.

> Can someone come up with a model that's sustainable and applicable to the majority of people?

Make more than you spend and save combined, live frugally, spend judiciously. This is not rocket science.
Falcon (http://falconframework.org/ mentioned at the bottom of the article) does look interesting.

I've also had good experiences with bottle (http://bottlepy.org/docs/dev/index.html) for building internal apps for companies. The limited amount of users means I don't have to worry much about scaling and bottle with Paste server works pretty nicely. Jinja2 templates can also be used with bottle which is a plus. It's also pretty easy to compile this setup into an executable so it can run off someone's Windows machine and no need for a separate server. This setup makes a really convenient internal-use app which is easy to send to end users for deployment.
Ask HN: No one cares about NYTimes articles
I don't have a NYTimes account, and I'm sure the majority of everyone on hacker news is in the same boat, therefore all of your NYTimes posts on hacker news is a waste of my time. If I'm lucky, (on some days) I'll get to read one good NYTimes article for free, that is, if I didn't already click a bunch of links on hacker news that were also NYTimes articles, which in turn triggers NYTimes' annoying popup ploy to get me to sign up if I'd like to read their mostly non-informative articles (the headlines are just as informative because their writers don't really know how to get to the point anyway).
"Mr. Benjamin sent a legal threat to both thundersplace.org and, incredibly, Cloudflare."
According to my source at Apple HQ a TV van is on the way. We should see some news coverage soon with any luck.
The absolutely dreadful UI?
> It's still the same house, for more money.

It's a slightly worse house due to the wear and tear, scheduled obsolescence and rising maintenance costs.
As always, it depends. Speaking anecdotally, most of the millennials I know speak rather forcefully about their desire to not settle down, marry, or begin a family prior to 30. I can count the number (amongst my friends) on one hand who discuss factors like underemployment and debt as being significant in their decision to delay settling down. Most seem to enjoy the party/city lifestyle and spend their time focusing on their career/traveling instead.

Yes, it's possible all of those things are factors but I'm going to argue for most it's subconscious rather than explicit factors in a settle/not settle equation. I think a lot of millennials are buying into the "extended adolescence"/party phase/single life/no responsibility/free spirit/high mobility (pick your moniker) lifestyle choices and acting accordingly - based on my anecdotal experience.
That seems more like a technicality of the example I chose than some deep-seated principal of justice.

Besides, do most modern day drug dealers accurately report their earnings to the IRS? Would you actually support prosecutors who aimed to convict drug dealers on on tax fraud because they knew you were about to pardon all drug offenses?
I run mostly dev tools, text editor, etc. But I have a bad habit of having more than 50 Chrome tabs open, and Chrome is a notorious pig on just about every OS.

My Macbook Pro (2011, quad core i7) is famous for heating issues, but that aside, any app that forces use of the discrete GPU (at one point, even Coda did) would cause the fans to spin.

I don't want to sound like a snob, but the 13" MBPs aren't comparable with 15" MBPs, since many of them use lesser CPUs (i.e., not the MQ/HQ/QM series chips) that don't generate nearly as much heat.
I think the simplest thing is for the server to generate a salt for every user and add a step for the client to request the salt for a given user. If you want to protect against account enumeration then you need to be able to generate consistent salts for accounts that don't exist also.
Are you paying as well as these top tech companies? Do candidates know it?

Are you providing as many career opportunities and growth as Google/Facebook/etc? Do candidates know it?

These big companies get away with it because their hiring funnel is jam packed with top talent.

Rejecting a lot of top talent is no big deal for these companies. There is still tons of top talent who will jump through the hoops.

But a big hint: they won't jump through the hoops to work at your company!
I'd love to report more stuff in Wine but isn't there a requirement to be running the latest/dev branch? This is tricky to do in Debian (because I prefer to build debs of whatever and then install those).
Ask HN: Is React Native ready for building high quality mobile apps?
The showcase apps for React Native doesn't have very many rich & complex mobile apps (except for Facebook's own apps, but we don't really know how much of those apps are actually React Native based). NativeScript showcase page is even worse. So, I thought of asking HNers what their experience with RN (or NativeScript) has been. If you were starting a new mobile app startup, would you bet on React Native or NativeScript? If not, what are the main reasons against it?
@toomuchtodo

>>applicable to the majority of people?

>Have job that pays median US wage or above.

This requirement and solution are a mis-match.
Agreed, what you can do on first contact, is not always what you would like to do.

I didn't mean it's the only and single way to change something in Debian... the subtle of my message was, that complaining outside the project, does not help to anybody, and forms subjective opinions on persons that didn't have them.

Today, someone at $work that never did write perl, was complaining on perl and Larry Wall just for laughs, I told him: when Mr Google calls you to speak about _your_ language, when the world is full of mirrors of libraries written by all kind of persons and companies for _you_ language, please, come back, and we have some laughs.

It seems that some people needs to "attack third parties together" to feel "in society".
Right, you have a high paying job so it's easy for you to sit on a perch well above the median and tell people how simple it is.
Do you think it used to be different? You buy a starter home, and move your way up. Why do you expect young people to immediately be able to buy their perfect dream home?
New Materials for Manufacturing (2015)
Touch ID requires the passcode after reboot or timeout. They'd need to do it very quickly.
The TSA demanded that luggage manufacturers begin making luggage that can accept a special key that only the TSA is supposed to have. The luggage companies complied.

Within a week, a TSA officer took a close-up picture of all 7 key variants; from this image, 3D models of the keys were made, and now you can print all 7 keys and open anyone's TSA-approved luggage.

The FBI is slightly more competent than the TSA. Slightly. I doubt trusting them with any access to my device is a good idea.
Obama criticizing China's plans for new technology rules (back doors etc)
The original Google Pixel was so named for the following reasons:

1) It was developed in-house at Google

2) It reflected the hi-DPI of the screen.

Evidently they decided to turn "Pixel" into a brand, and I suppose they figured that the in-house tablet they developed warranted the title (if you look at the thing, its aluminum design does resemble the panel half of a Chromebook Pixel).

So I suppose they now use the Pixel brand to either represent that style or to indicate that it's in-house hardware.
Not to completely denigrate Apache but I have found contributing to Apache projects (not the license but real apache projects) to be somewhat of a hassle. They generally do not do PRs but rather patches via email or attached to bugs (perhaps some do but I have yet to see one that does), require signatures for contribution, and JIRA is really getting slow these days.

I'm somewhat ignorant as I don't run any Apache projects but I'm curious as to why people choose Apache to back their project these days. I guess why choose a committee instead of just leaving it on Github. I suppose its the whole voting and board stuff.
Did not know the web link trick.
We know big companies go through tons of people. Isn't stack ranking supposed to eliminate 10-20% a year.

All this noise about avoiding bad hires while ignoring the elephant in the room - companies claiming that bounce as many or more people as the companies that don't use these foolish interviewing practices.
It's the same way with README, CONTRIBUTING, LICENSE, Makefile, package.json, and anything else.
> The human foot is beautifully engineered to be used for long distance running, to help absorb the impact and transfer the force into our Achilles and larger glute muscles.

The foot is terribly engineered and suffers from injuries.

Human bones are frail; you have only 25% of the bone density of a gorilla or chimp. Hence the stress fractures.

The big, protruding heel of the human foot is completely counterproductive for running. It helps us stand on two legs and walk. Humans have to consciously learn a proper technique for running to avoid misusing the heel. Doing "what comes naturally" is just horrible.

By contrast, an animal doesn't have to study running technique. A cheetah doesn't have to think "Gee, I'm doing this wrong according to some pages I Googled; I should change my form so that my center of gravity is rather such and such, and my footstrike is altered in such and such a way."

We can't even stand up when we are born and have to learn how to walk, which usually takes place more than a whopping year after birth.

The sheer thickness of the meat and fat on the lower leg of a human tells you that we have evolved away from running.
Running requires a stick-like lower appendage, with all the muscle higher up.
Yep, I have gotten my last three jobs simply by strong recommendations.

A 4 hour test and 90% rejection rate? I better know you are paying at least double market rates before I start it!
Besides what joshmanders said, I would argue a change in license is usually caused by a change in code and would also mark historically when a project went from X to Y. A README will probably also need to change with new code changes. As for having contributions file. I'm not really for that, but not against it either.

The problem isn't that it's just one file (actually 2 if you're counting pr templates), the problem is we're just going to continually get this pollution of the project because it'll become "acceptable." Slippery slope and what not.

I mean at this point why is the wiki in it's own space and not git versioned? (Put it in github-wiki folder!) Why have separate gh-pages as well? (Just stick them in github-web folder!). Just shovel everything into one git repo. Don't forget the .githubconfig file in case you want to programmatically config a repository instead of going into it's options menu. And on, and on, and on.