skysight-inc/HackerNews huggingface dataset:
I imagine most libraries has some common functions that ones from public API rely on (and of course some exports can be used within module itself).

Let's say you never import `helperX` and `helperY` from a library, but you import `usefulFunction` which relies on `helperX`. How would webpack know to exclude `helperY` but not `helperX`?

Unless it does some kind of code analysis, or lib is split in "module per function" or similar manner, I can't really see a way to achieve it. And if library is common core plus a bunch of modules per function it exports, how is that different in CommonJS versus ES6 modules?

Am I missing something?
IoT – innovation creates value
I recommend this guide when making a choice how to set up HPKP.

- https://scotthelme.co.uk/guidance-on-setting-up-hpkp/
Actually, I prefer embedded development. I could do financial services, but I'm not sure I want to.
You should read my statement again. If the choice is whether to sell in a market or not, and you care about making a profit, the bottom line is whether at the end of the day you made more money than it cost to serve that market. Full stop. This is not about allowing or disallowing piracy in a market you are already serving.

In your analogy, it's like a shoe store opening a shop in China even though they strongly suspect if the shoes become popular knock-offs will pop up fairly quickly. The question of whether it's worth opening the store in China is answered by whether in the end they can make a profit.
So much life is about the intersection of preparation and timing. What Ali fails to mention is how his startup prepared him and supplied perspective for the lifestyle approach he is now taking. You rarely go from corporate job to traversing beaches with wi-fi access.
I remember watching him give a talk in a small auditorium at Intel in 1999. He was the American Dream.
I think it's more likely to be a mix. The FBI knew for a while, if not from the beginning, that getting into the phone without Apple's help was feasible. The NAND mirroring technique described here has been floating around for a while. But the FBI didn't want to, either because they have ulterior motives in forcing Apple's cooperation or because they just didn't want to take the risk of breaking anything. Now that they're having so much trouble securing Apple's cooperation, they either think the alternative is worth trying, or at least find it to be a good excuse for stopping.
You understand that a secure pen-drive (which is what I think you're talking about by 'pinlocked') has a HSM (Hardware Security Module) with hardware implementations of standardized encryption algorithms, right?

You literally just suggested using standardized encryption algorithms to protect your OTP key.

Or you could...you know...just use standardized crypto across the board.

OTP is by definition impractical. I'm sorry that you don't see that.
Andy Grove: the man, the myth, the legend, but the first? Companies were around before Intel, but Andy Grove was the one who revolutionized Silicon Valley. He was the Wayne Gretzky of hockey.
Well, I never claimed I properly learned Powershell :-).

Like everything on the Internet, lack of success with a technology should be taken to mean a failure of that technology as much as a failure of the programmer attempting to use it. It may well have been a problem above the application layer.
I can't edit my post above anymore, but I do stand corrected.
> don't see how it's possible

It could be computerized pretty easily, it's just not.
Myopic article and bad clickbait where the author doesn't attempt to think big at all. How do you know they're sleeping at the wheel? Because they haven't enabled OSX VR?

I don't believe that console/PC VR will be the VR that makes it in the end. Small tablet (mobile phone) VR is where it will land and reach massive success.

The industry needs to keep the phone upgrade cycle working, people already reduced their reliance on their PC and laptop with their phones.

Samsung is nailing it with GearVR. High res, high powered phones are going to iterate until people simply put their phone in a $100 headset and experience VR that way. It'll be cheap to become a social experience, watching sports in 3D and as much gaming as people will want in that mode.
Ok, that is scary enough. If Windows and Samba are both affected, it might be something to do with the SMB protocol itself. But is it also a critical issue if SMB is not accessible from the outside world (i.e. LAN only)?
Simple Parse Server Dashboard Demo
>spending our grandkids earnings on shit today.

I'm not sure that's true. College kids aren't producing anything today. What we're trying to do is to force them to fund our long (and I do mean long) cushy retirements with what they will produce later.

The whole system seems to be set up right now to extract a great deal of what they will produce in the future and pull it back to the older generations. It's a promise to make them pay in the future. Well, promises can be broken, and in this case I'm almost certain will. They can say no.
Don't you think not having news from someone you love for prolonged time can actually hype the hysteria?

I'd say I'm usually a rational person when those events happen. Yet, every hour that goes by without news from my cousin who works there makes me a little bit more concerned even though I know he and his family are very probably safe.
They got off easy. At least the top entry wasn't SS Hitler Did Nothing Wrong.
The F-35-B has essentially two different types of engine (the main engines and the lift fan) to make that work.
ESB in the era of iPaaS: almost dead or very much alive?
You know, about 90% of software development is CRUD. You can make a lot of money in CRUD. It may be true that it's not the cutting edge, but it is the thing that most people actually interact with when using a program, so it's pretty important.

I think some of the issue with CRUD development is that it feels like you're at the highest level and everybody at lower levels is making cool stuff that you only get to use. The fact is, at every level of programming, you're just a user to someone else. A CRUD programmer is just a user to a backend programmer, who is just a user to a server programmer, who is just a user to language dev, who is just a user to a compiler dev, who is just a user to a os dev, who is just a user to a hardware dev. Turtles, all the way down. I suspect, without knowing, that they are all a little bored and a little envious of each other.

Let's look on the bright side - even with CRUD, there are plenty of technological rabbit holes to dive down and do something useful. For the boilerplate - you could write a code generator. You could write something to handle automated testing - that's often pretty hard for CRUD apps (at least in the desktop world, IMHO). You could try out new design patterns, maybe state machine backed CRUD? IDK, but as a fellow dev who does a lot of CRUD, it's not all bad. It can even pay ok, if you can find a CRUD app to work on that makes money (patio11's cost-center vs revenue generator frame)
That's partially because Elon was already massively rich and was able to attract even more money because he was investing so much of his own.
L’infobésité, Ennemi Numéro Un D’aspirants Entrepreneurs
Love the OST. can you send the tittle :D..
United updates password requirements, breaks WiFi login for secure passwords
How would you prefer that I make my opinion known of Rayiner and the narrative that person has maintained over the years we have both been on HN? I've literally been in discussions with Rayiner for years and at odds with their position, why am I not free to disagree with the message she puts forth?
Check out Carmine Gallo, Talk Like TED
> https://www.youtube.com/watch?v=AFTPyvO6kcY

*Ironically, not the best audio track. But the idea still comes through.
Can anyone explain to me the need to release the exploit information the same day as the patches?
I think that's part of the problem he's talking about. Why do new modules have to be made for a new framework? The framework should play nicely with standard modules written vanilla for that specific language. This way we're not staying over whenever a new framework is made.
100 falsehoods programmers believe about terrorist attacks.
Why Are We Dumbing Down the SAT?
The rationale talks about easy portability to Windows, but I'm skeptical - the underlying API and filesystem is different enough that this is likely to cause problems. '\' vs '/' to start with.
Similar to the famous Glasgow statue with the now traditional traffic cone:
http://www.bbc.co.uk/news/uk-scotland-glasgow-west-24907190
Join the Community on Slack http://bit.ly/1SxTVIi :)
New Clojurians: Ask Anything[Q&A]
Symbian app installation files have ".sis" extension. Why can't we have ".bro" for parity?
The main reason not to use HPKP is it only protects people who have already connected. There are a hundred ways to force a new user agent or device to connect, and then poof, compromised.

Pinning is a great way for companies like Google to use Chrome to detect when someone has deployed an illegally issued certificate on their behalf. But for a company that hasn't bundled its keys with browsers, the user will just spin up a different browser and go to the compromised site, since HPKP is browser/session specific.

HPKP is a toothless mitigation. We need better measures.
We using Machine learning to provide insights for Saas companies, take a look http://microchurn.jssolutionsdev.com/?ref=hackernews
How to build a Telegram BOT to suggest you pizza
Don't worry buddy,

Follow this instructions -->http://michaelhyatt.com/how-to-be-better-prepared-for-your-n...

I hope it will be helpful
Ahh interesting, I didn't realize that TouchID would also require a password periodically, I don't have much faith in fingerprint ID, but the required password helps.

I like your idea of the duress fingerprint since the police can demand that you supply a fingerprint to unlock a device (but can't demand a passphrase). If you use the wrong one then "Oops, I was so stressed out I forgot which fingerprint to use".

I really think it's unlikely that law enforcement will ever take an interest in my phone, yet I still like knowing that my data is my data.
Sorry, but Taleb just seems to have turned into a bitter old man. Yes, that's personal, but that's my point. A lot of his arguments really boil down to criticizing people's personal characteristics rather than challenging their arguments.

Earlier Taleb wasn't like this (although the seeds of bitterness were there). The works he is known for are pretty solid, interesting and thoughtful.

This is one of several blogs posts/comments/articles he's written lately where it really just serves as platform for criticizing all those people "who don't take risks", or "bureaucrats."

Bottom line: he's just not that interesting any more.
I was very interested in contributing to this project, but the code quality of some of the commands seems prohibitively low.
More validation of the Atwood principle.
http://blog.codinghorror.com/the-principle-of-least-power/
Show HN: How to Launch Your Next Tech Product for Free (Almost)
{ echo '[env]'; env } > file.ini
Classic twitter - the ads just aren't effective. As a marketer I want to spend on new channels but there needs to be an ROI.
build on http://openfoodfacts.org?
That's not overkill. That's doing it properly.
See also today's discussion of `cash` ("CoreUtils implemented in pure JavaScript"): https://news.ycombinator.com/item?id=11334597
It's almost a convention in Haskell. The idea is, since currying functions is easy and common, you stick the argument that you'd want the least in a curried version last. So if you wanted to find out if x was in ten lists, you'd just:

map (elem x) [list1, list2, ..., list10]

or, for folds, the function is the one least likely to change, so you put it first, and the list is most likely to change, so you put it last:

foldl (+) 0 [1,2,3]
map (foldl (-) 100) [[1,2],[2,3],[4,19]]

Of course, it's always debatable if you can find some situation where you wanted to curry in a different order, but generally you pick in order to reduce forced named lambda parameters. As far as I can tell, that's how it's done.

Edit: if you saw the sneaky edit, you'll know that this particular convention isn't easy to follow!
Guys, it is cool thing
Kraft renamed themselves Mondelez after spinning off grocery brands who now use the Kraft name - Philadelphia cheese etc.

Mondelez are well on the way to destroying the Cadbury brand here.

One of the things Kraft made a big deal of during the takeover was promising to keep a particular UK plant open. 7 days after finalisation they announced the plant's closure.

Creme Eggs are now revolting, It's not even Cadbury choclate any more, but some sugary cheap fake chocolate. Being egg shaped, they were commonly sold in packs of 6, now sold in 5s - same price. They're also markedly smaller.

They've fiddled with most products, generally made them noticeably worse, and shrunk the sizes of nearly everything.

I buy other makes these days.
I have had to switch from taking a train to driving to work. I use to be able to work on my food project, but now that is not possible. Podcasts have become my go to for the dead time.
No, but the formula needs to be adjusted for different sweeteners in order to keep the same final flavor.
I highly doubt anyone in any HN-related community is living their life hoping to get a black bar for a day.
The blog post you posted by Scott Helme is much better than the one I've seen posted in previous threads[0]. The information about not necessarily pinning to a leaf is critical.

Please Please Please read this.

>For me personally, on my blog and on other websites that I run, I've pinned at the leaf certificate level. It does come with the problem that you're responsible for the backups...

HPKP is a giant foot gun and even Ryan Sleevi expresses how he is somewhat unsatisfied with how HPKP turned out[1] and that you should be pinning to intermediates or roots.[2] (His name is on the RFC if you don't know who he is).

In my opinion. If you plan to roll out HPKP you need to read the RFC. Don't follow online guides for your production environment. Figure out what is best for you.

There is a really high operational cost to this in organizations bigger than a couple people. If you aren't prepared for that, then you're going to brick your site for a lot of users.

Security headers are hard to get right and even some really big orgs make mistakes[3]

0 - https://scotthelme.co.uk/hpkp-http-public-key-pinning/

1 - https://twitter.com/sleevi_/status/696171562383224832

2 - https://twitter.com/sleevi_/status/696379082599059457

3 - https://chromium.googlesource.com/chromium/src.git/+/3865c64...
Well the funny thing is that the US Government Missle Program is really what built Silicon Valley (Intel) - if it weren't for that defense contract, for weapons of the Cold War, we really wouldn't be where we are today.
great advice. I could never have thought of this. Me, a silly and complete financially illiterate fool, must work hard now to become financially literate. Thank you again. Can't upvote enough :(
So you're a hot shit engineer and you come into work for the Monday meeting where the PM goes, "we've got 2 projects coming up: one is a supersonic jet, the other is an extra wide passenger jet that kinda resembles a whale." Somehow I don't see the best engineers, overwhelmingly, volunteering for the later.
We have no posters, but if we did I would prefer something comical
> It isn't profitable already.

No? I'm glad you caught that. Illegal immigration IS profitable, that's why it continues to happen. The advocates seem to cross political lines too, everyone must be profiting from cheap labor.

I love unsustainable pants-on-fire arguments like this. Any country or state that is being overrun in a truly unsustainable way either ejects the invaders (or does worse to them) or ends up conquered.

> Federal universal basic income

It's fun to imagine how one would tinker with the system, but you're just rearranging the deck chairs on the titanic.
Rust is a great choice for systems programming it'd seem. Esp considering that a well-tested, battle-hardened code-base like SQLite faces problems [1] solely due to the nature of the language its written in.

[1] https://news.ycombinator.com/item?id=11312918
But they can be inconvenient. I have a cover on my air 2 to protect the glass but not on the back. It slides more easily into and out of my bag this way.
In this case, they were second-sourcing meaning that they were manufacturing Intel's CPU designs.
> Can you imagine a world where Amazon had to completely re-build its order taking

Generally they would do multiple tests to avoid such cases.
Russ Roberts and the Quest to Make Economics Interesting
It's OSS so there's not much to hide.

I'm sure that someone who has capability to not only tap into but also modify traffic on the fly, won't have problem obtaining valid certificate from one of the hundreds CAs that everyone has in their web browsers.

If anything I feel https actually hurts, because it gives you false sense of security and you're more likely not to validate files with GPG, which you should do whether it is https or not.
Rich parents? Hilarious. You way overestimate where the line is drawn. When I went to UCD, my parents' income was ~$70k (in California) and I got some subsidized loans, then mostly unsubsidized loans, then they made my parents take out PLUS loans in their own names (more accurately, they capped the amount of loans I could take personally and the only way to make up the delta is either family cash contribution, or parent PLUS loans). Except for a small amount of interest subsidy, I got $0 financial assistance.

Now, my own personal situation is a deal of my own making -- I decided to sign on the dotted line. But in the aggregate, considering all the other students like me --- I'm actually shocked at the push back in this thread. The same group of people that bemoans the death of the middle class can't see how this is a part of the problem?

I feel lucky. I was in one of the last generations to get halfway-decent interest rates. My younger brother is paying through the nose (what is it now, 6-7%?).
It's much less "is it offensive", and more "can people find a reason for it to be offensive" these days.
But those intakes don't work for free. You will encounter huge losses and drag penalties. And military jets aren't designed to fly 3500 miles supersonically the entire way. The vast majority of miltiary jets have a maximum supersonic time that can be measured in minutes.
Lots of vitriol because it's yet another "I took something that works and rewrote it to be slower, less functional, and JavaScript"

Making computing worse, one fork at a time.
Is it hard to breathe when it rains?
On his list of what's needed: "Convexity". Um, what? What does that mean, in a startup context?
I agree with all that; I just didn't notice the black bar. I surf almost exclusively on mobile though, and therefore have extremely low expectations.
It's ok if I pirate music as long as I only listen to it once... to "demo" it.
Since when has being designed and optimized for a specific use case ever been "cheating" in software development?
I just bought many cases of the new Diet Pepsi with sucralose after learning of this change. I found the protests regarding the change from aspartame to sucralose to be hilarious: in my opinion Diet Pepsi used to be the worst tasting Pepsi and the move to sucralose seems to have improved the flavor considerably AFAICT.
I'll check it out for sure
Because then I'd have to be running Windows, which is a deal-breaker.
People would be able to reverse engineer the patches anyway.
They only come out in sunny days, driving around the few simple and nice roads in the Mountain View area.

They have to start somewhere, I am sure they will expand the scope of testing once they are satisfied with progress (regulation permitting).

Google is going to be liable for every accident that is caused by its self-driving cars

That might be true now but it doesn't mean it will always be true. The self-driving cars will still need to have insurance, which would presumably be paid for by the owner of the car. I would also expect customers to sign some sort of EULA which would limit Google's liability. Ultimately I would expect Google's liability to limited to something akin to gross negligence.
Rambling ahead: the spot occupied by \ is the ¥ mark on Japanese keyboards. I mention it because a Windows 98 toaster I used for Myspace and transferring songs to my iPod displayed paths like this: C:¥foo¥bar¥. Which reminds me of another adventure:

The Japanese keyboard I use requires pressing shift to get a tilde (the tilde spot is occupied by a key to switch input methods on some keyboards and nothing on others).

Tilde opens the console in Doom 3, and it didn't like having it on a shifted character, and there was no way of rebinding the key. Long story short, I had to change the key in the source and recompile it to something else. Thanks id for open sourcing your games :-)
You probably know this already, but treating these addicts would be vastly cheaper than imprisoning them. $31,286 per inmate [1] on average, much higher in some areas (NYC, LA).

[1]: http://www.nytimes.com/2013/08/24/nyregion/citys-annual-cost...
Looks really cool! Do you have a roadmap for fully functional parse hosting? Any plans for analytics and migration tools?
This is especially troubling in situations where you're not using your trusted browser, but instead some embedded one. Twitter's in-app web view is the best example of this.
Windows supports forward-slash fine. Has for at least 25 years. No need to change / to \ or visa versa.

Now obviously any Windows port would have to call Win32 APIs instead of POSIX APIs (unless you're writing for a Cygwin-like layer).
I wonder if all the upvotes are due the content, or my accidental use of italic formatting...

In case of the former, would anyone care to elaborate? Do you solely agree with the message, or do you find yourself in a similar situation as described?
Rob Ford, Former Toronto Mayor, Has Died from Cancer
>"Of course, implementing such policies takes time and it's much more popular to present the 'easy solutions' (more surveillance, closing borders, etc.)."

Meanwhile, people are dying. That is exactly how some people see it, and exactly how I see it. I'm not emotional, I'm logical, and I expect government to protect us from evil individuals/groups. Arguably, it's not there to foster some sort of "long-term" sustainable co-existence between different cultures.

First, you establish security and root out potential problem groups. And once that's happened, and you have almost non-existent danger to the local populace, then you can start worrying about integration and grey-goals such as "peaceful coexistence" and "de-radicalization". And I don't say that as a means to single-out immigrants, or foreign groups. This reasoning should apply just as much to dangerous elements that are within, and part of society currently.
The one that is the most tight lipped is, of course, the one people are paying the most attention to. I’m not at liberty to specify who

Is this some bastardized take-off of responsible disclosure? Why the hesitation in naming the suspected firm?
"Cheating" might be a little strong, but "not actually comparable to general purpose tools like Gzip" seems justifiable.
I am a principal technical consultant. I don't know where I'm flying until the last minute. I can change projects every week, and fly trans-atlantic regularly.

It does happen, and it isn't House of Lies.
This appears to still just be a Managed VM, not really App Engine. What is new? This has been around for a while...

Is there any plan to implement Node fully on GAE?