skysight-inc/HackerNews huggingface dataset:
For example if you have version branches like v1.3 and v1.4 etc, you'd want to have docs built for each branch and publish them like myproject.gitlab.com/v1.3/... etc
This is providing that information in the GitHub web UI, which previously did not mention that if particular commit was signed. It has always been available via well-established key servers using the git/gpg command line tools.
You noticed that he's a white man right?
This probably isn't worth managing the PKI for a workplace, but this should be good for open source contributions
> I'm pretty aware of how bad my working conditions are relative to, say, some of my friends who work at Apple or Facebook.

May I ask why you stay in your current working conditions then?

Are you doing work you consider to be really important? Challenging? Lucrative?

Do you see the light at the end of the tunnel? Are you able to make suggestions to improve the conditions for yourself and others? Are you locked in because of external concerns (location, family needs, etc)?

No job is perfect (they call it "work" for a reason) but I am curious why you'd stay at a job that is so tough.
Isn't a full TLS handshake 6 messages (thus 3 round trips)? Also with false start and resumption, TLS can also typically achieve 1 roundtrip, right? (I'm also confused by 30s latency for 6 RTT, but maybe I"m too focused on US market, where EDGE latency would be more like 500ms each way.)

Maybe not all of WhatsApp's platforms support the latest TLS improvements though, thus it's easier to roll their own?
If they actually do what they say the do, then yes. Thier is no evidence that they are lying, so for now its probebly save to assume that they can not read your messages.
IBM Kick-Starts Eclipse OMR, a Toolkit for Creating Language Runtimes
>I didn't realize how much cars suck, even luxury cars, till I spent a day driving an S up and down the PCH.

No comment on how much other roads suck, after a day driving up and down the PCH? More seriously, do you think spending the day on the PCH colored your perception of the Tesla?
Grav – modern open source flat-file CMS
It's easy to shoot yourself in the foot with TLS (see: OpenSSL). Also, TLS has roots in a time where we knew much less in terms of crypto; as time went on and flaws were discovered, SSL/TLS was patched all around, meaning it has become much harder to implement correctly.

Noise starts from a clean state with modern knowledge of cryptography and modern cryptography. Much easier to understand and replicate, much harder to shoot yourself in the foot with.

TLS brings modularity and evolutivity, much needed in a protocol the scale of HTTP. In Whatsapp's case, Whatsapp controls both the server and the client; it is much easier to transition between versions because all bricks are under control. When you don't need what TLS brings anymore it makes sense to discard it.

As another example: Tarsnap (https://www.tarsnap.com/) uses spiped (https://www.tarsnap.com/spiped.html), a very simple yet powerful mechanism to build an encrypted channel. Its protocol and proof fit in ~100 lines (https://github.com/Tarsnap/spiped/blob/master/README). When you don't need all the jazz provided by TLS (and when you're lucky enough to be able to pre-share keys, which helps a lot) then a simple protocol is good.
end-to-end encryption protocol haa?
Racism and discrimination are not exclusively about 'who has power', unless you abandon the existing and widely accepted usages of those words in favor of an agenda driven re-definition of the terms.

> Caucasians in America have all the power

This does not excuse anti-white racism, and is often mostly irrelevant to situations involving individuals.

Many people, sadly, will use this observation to justify their personal bigotry against white people.
The grey plastic(?) parts when put together are about as thin as a AAA battery. The bottom black parts aren't, but if you're in a dark room or something then you won't notice. You might even think your laptop is hovering! Just imagine how you could entertain guests!
On the contrary, the goal was to give enthusiasts a taste of what programming a games console might look like, not offer devkits for free.

In any case, it seems my memory was playing tricks on me.

The higher level APIs I am talking about was SPS2 and then there was Libps2dev as well.

The VU were actually available, I completely forgot about it.

You can delve into the old site, some guys did manage to mirror it, before Sony pulled the plug.

http://ps2linux.no-ip.info/playstation2-linux.com/coding-on-...

Personally I think the main reason for Sony's delusion with the community was that instead of trying to make games, many were using their PS2Linux kits to turn the PS2 into routers, cheap GPUs or cheap PCs.

The community was never as vibrant as the XNA one in terms of game coding.
Gerrit is the wrong solution for truly agile software development. I had a client ask my team to use it, and it was a real PITA.

The fact that one commit = one merge is ridiculous. It encourages monolithic commits for no reason other than that the tool demands it. It's unrealistic to ask someone to code review multiple commits per feature, and if you tie in your CI it doesn't make any sense to run your build over and over again for a single feature either.

The patchsets DO allow you to see the history of a code review if you have to make changes, but I'd much rather see that live in my git history rather than in Gerrit's history. It's a dirty solution to have to amend your commits to make changes.

Nowhere does the author mention how painful it is if you finish a feature, are waiting for a code review, but have to start the next feature using the code you just wrote. Maybe I'm missing some magical feature in Gerrit that makes this easy, but if you push multiple dependent commits to Gerrit, and one of the early ones gets merged, all of the later ones now have to be rebased because Gerrit created a merge commit in the middle.
How does the HTTP/2 implementation work?

Does it open a single TCP connection, then fire all load testing requests over that connection, or does it open multiple TCP connections and spread the load testing requests over multiple connections?
Oh cool, so soon that nuisance will pop up in Chrome on every second website that wants to spam me. Just like Safari.
ICYI, you can run Jekyll + plugins on Bitbucket / Aerobatic:

https://www.aerobatic.com/blog/automated-continuous-deployme...

You can also provision a free wildcard SSL cert.

Disclaimer: co-founder of Aerobatic.
> If it were me employing say 10 people on identical salary I'd want as diverse a mix of age, gender, race, background and interests as I could manage.

Dead on, especially if you are relying on creative solutions to anything at all.

> The CEO perhaps prefers young people because they're still wet behind the ears and believe "Just another push this weekend" (the 10th this year) "and we'll see you right come end of year/IPO/share options".

Nailed it. Another factor is the behaviour of homogeneous groups, often you want groupthink to occur if you need work pushed along a fairly static assembly line. And homogenous groups get along and cooperate with much less work, it's a quick way to get to a local maxima.

The bias against people who are different from you is, unfortunately, present in everyone to some degree. Left unevaluated that means a lot of well meaning people can be very racist/sexist/ageist/etc and feel like all they are doing is building an agreeable, likeable, cooperating team.
I've heard Richmond, VA is a new hip city, but I'm unaware of tech being there.
>I don't necessarily need or desire a complete detailed history of every ride I've ever taken. There are huge potential privacy concerns.

I agree, I've wished Uber/Lyft would implement a feature where you can buy a ride for someone but guarantee that you wouldn't learn the endpoint (within e.g. some radius). Say, you justmet someone who did a favor for you and you want to return it, but in a way that doesn't reveal more information about them than they're comfortable giving.
Coupons are more personal for you than troubleshooting?
Just use Phabricator! It's the best code review system I've used so far. Many large open source projects and companies have adopted it.

Someone neatly wrote up the main advantages:

http://cramer.io/2014/05/03/on-pull-requests

Phabricator's issue tracker is also an excellent choice over GitHub's simplistic issue tracker.

Also, Gerrit isn't that hard and I've seen small teams get productive with it within a 1-2 weeks.

No need to reinvent the wheel!

By the way: I live in Europe and I haven't worked for one single company which would allow their developers to host proprietary source code with a third party SaaS provider.
> I am patiently waiting with a bucket of popcorn.

Why would that be of worthy entertainment value? Shouldn't you be hoping the exact opposite, that very few or no Americans are involved (and insert any replacement country, as the same should go for all nations)?
That makes sense, but I don't understand how renaming the branches made that problem go away.

Also, if you had different variations of builds etc (I assume for different target hardware) could it have been better organised by putting all the common code in a different project, then creating separate projects for each of the variations with that common code as a dependency? Then you could probably manage each of the variation projects with gitflow as usual.
Title: Being a ‘Dumb’ Girl in Computer Science

Contents: What you said

Title should be: Being ‘Dumb’ in Computer Science
George Boole says nay.
Thanks! Glad to know if I write something about myself it will have a minimum of two buyers (my mom is very supportive too).

I like to write about business stuff most. Any merge requests on our handbook https://about.gitlab.com/handbook and strategy https://about.gitlab.com/strategy are appreciated.
Twitter owns Vine and Periscope.
Unfortunately then something like this might happen to you https://www.twitter.com/bradheath/status/717402601956839424
As I understand it, it's only especially wrong in Iceland, where the ruling party is (a) running on a platform of hostility towards large banks; (b) currently negotiating with those banks to decide how much public money they should get; and (c) we now find that the primary negotiator is invested in the banks he's negotiating against (through bonds held offshore), which he is supposed to be philosophically opposed to the success of on some basic level.

Or something like that.
Is the connection between your servers and the GitHub Pages servers unencrypted?
Interesting. Some states in the U.S just raised the wage to $14 dollars but nationally it's pretty low
A simple situational cost/benefit analysis can answer that.

If combating CC fraud is leading to negative profits in those countries then cut them. If not, continue the war.
A Practical Guide to Building Data Driven Products Beyond Analysts' Laptops
> The league made the point of saying the games will be free and that viewers do not have to be registered Twitter users.

http://espn.go.com/nfl/story/_/id/15138355/twitter-wins-digi...
Advice for Advisors
I'd purchase new devices and/or components, and do a full rotation of all my credentials.

In fact, I should probably build a "invalidate every credential I have on all my computers and accounts" checklist. That and a tested backup strategy.
Trolling encoded into usernames isn't any different from trolling in comment text, except it gets repeated everywhere.

https://news.ycombinator.com/item?id=10837069

https://news.ycombinator.com/item?id=11003123
I currently use Maxmind's midfraud service. It is useful for identifying KNOWN fraudulent email addresses and proxy servers but not much else. It is just one of the signals that I currently use as a part of a fairly manual fraud review process.

I have evaluated a number of different options and I am about to start using Sift Science[1]. In addition to using standard ip address/email based information they also use social data and machine learning to identify fraud.

Their API/data model is the most well thought out and comprehensive one that I have come across and they allow you to back-fill up to 12 months of historical data for free to help improve your detection rates. They also have a console to assist with optional manual review workflows and store integration apis to allow full automation.

On top of all that they offer scalable pricing that works for both large and small business at 6c per transaction.

Obviously I can't vouch for their results yet, but what I have seen so far looks pretty good. If you have a fraud issue you should at least check them out.

[1]https://siftscience.com/
No, it's a CLK430 convertible from ~2003. It's got plenty of power, it just feels like it purposefully retards the throttle when starting from stop for a short while to keep it from jerking off the line. In my trying to compensate for that, I give it more throttle, which seems to trigger it to stop the retarding action, and the it accelerates faster than expected. It feels like if I just let it do its thing it would be fine, but it feels slow to me when starting, which causes the whole problem. This isn't a developed problem, it was like this from the beginning, so I assume it's on purpose.
I would like to see a real flexible job market. (hire and fire misses the point). Companies want employees they don't have to train. I can't blame them for that but right now you have to decide your career path very early on and it's very difficult to switch. At the current pace of the economy it's not reasonable to expect from someone to work at the same job or industry their entire life.
Because Nissan cannot make a car as great as a Tesla. It's that simple. They are the wrong company. It's not different from Windows Phone trying to play catchup with iOS. It was never going to happen, and everyone knew it.

Tesla has already checked their box. The car is $35k. The price isn't going to magically change. Musk isn't going to be like, "Sorry guys, turns out it's $50k."

Nissan has not checked their box and there is zero reason to think they ever will.
The previous speaker, who is definitely involved in an agenda driven redefinition of a word, probably has no conscious desire to engage in discriminatory behavior while avoiding accountability. S/he is almost certainly a well intentioned enabler of those who do wish to engage in discriminatory behavior while avoiding accountability
One of the teachers of that class (Andrej Karpathy) has a blog with the best introduction to neural nets I've seen yet:

http://karpathy.github.io/neuralnets/
Evasion is illegal. You don't need to be a lawyer for that: you must be transparent to the tax authorities, completely, on which basis they can tax you. Panama is interesting because it allows you to hold wealth in a country that discloses very little to any tax authorities, thereby illegally evading taxes.

Tax avoidance is different, and it's legal.

Finally, I'm not intimately aware of his tax mistakes. Primarily I keep seeing reporting on how his wife has bonds from an Icelandic bank and he, as PM, sought to have this bank pay its debtholders (including his wife) during the financial crisis (which was a financial meltdown in Iceland), an obvious conflict of interest. That's what I hear was mainly the issue.
The biggest problem with this title is not that it's inaccurate, it's that it's also misleading. I clicked on this article expecting to read about animals whose venom is so toxic that they would actually injure themselves if they tried to use it ("...so lethal they cannot use them").
"Public key from server" is an ambiguous phrase. I took "from" to denote possession, not source.

After reading the other sources of information, it's clear it is a secure protocol. More so when designed by the Snowden-approved Open Whisper Systems team.
Our current approach is to get the AWG module working, then add a module which boils urine and feeds the vapor into the AWG module for distillation and filtration.

Ideally, we'd like to use a gasifier for carbon negative power generation, as local biomass can be utilized.

Does this make sense, or do you have a more effective approach?
Actually of the old-school most credit card processors will sell you fraud detection. It's just very expensive, to expensive for small businesses. Normally they're just resell something like ReD Shield, or MaxMind though.

The best option is to get a PSP that will let you do selective fraud detection. Then you funnel large order and first time orders through the fraud detection, and skip it on repeat customers. Otherwise it can become an expensive service.
Thanks! People also seem to like our new todo's https://about.gitlab.com/2016/03/02/gitlab-todos-feature-hig... that allow you to respond to what's important even if your mailbox is a mess.
I was expecting a left-padding robot as a demo.
That's a glib response, but I do want to bring attention to how often this discussion generates such glib responses. If it's not, "so, projects, then" it's "so, you want San Francisco to look like Manhattan, then?" or some equivalent.

Notice how these responses do absolutely nothing to address the issue. They exist only to express dissatisfaction with realistic options.

Again, you can either build to meet demand or expect higher prices. Those are the options.
Yes the PCH could bias, obvi. I also sat in traffic too though. I had to get there from SF first. Everything about the car was just right. I was impressed at every turn (pun unintended).
I am a native-born American citizen living in Russia.

The amount of grief that your solution causes me is significant. I'm a legitimate customer who does nothing fraudulent. However, whole swaths of the internet treat me as if I have leprosy just because my IP address is in Russia.
Notifications aren't new, this only changes how notifications work.

If you're not currently using Chrome notifications, nothing changes for you.
Juno to soft-launch this month as the anti-Uber service
Only if you've been living there over a year. I made the mistake of moving abroad in January and had to pay all of the foreign taxes and all of the US taxes for basically an entire year.
>where was this line?

There are some pictures of the lines here:

http://mashable.com/2015/08/24/windows-95-launch/
Please keep buzz lists out of HN.
Best programme of the last ten years, I reckon. About the most honest, too.
I like the idea of npm run for scripts. I just added something to automatically run tests for specific products at work.
wow. thanks for that. I must have blocked it out of my memory. and the comments on that photo are hilarious
>Why would somebody, a lot of people, an awful lot, say X is happening if it wasn't?

To push an agenda. Take as an example people that claim that video games are responsible, either partially or wholly, for an increase in violence. There is no definitive link between violent video games and violence, especially as the violent crime rate in the US has been falling for decades now. The people leading this crusade generally do not like games and feel that their disapproval and dislike means that other people shouldn't get to experience them.
We've been developing a bot with their platform for the last few weeks and it's a well designed API with features that can help sculpt a great bot experience e.g. allowing for controlling the amount of time the bot appears to be typing. Definitely worth a look if you're into bots (and as a team that recently developed an iOS app, boy is it great to be out of under the thumb of Apple's review process and developing on a platform where the UX is the copy).
> This is a huge deal for folks outside the US.

What makes you think you'll be able to stream this from an IP address outside of the US?
you already made up your mind that [white males] got
to where they are unfairly

Given the disproportionate amount of power that white males have in America, there are two possibilities.

One possibility is that white males really are that superior. We (white males) have the power because we're the best. Conversely, this would also of course imply that other groups like women and minorities are intrinsically inferior.

The other possibility is that the system really is tilted in the favor of certain groups, and that has affected the distribution of power and wealth that you see in America today.

I believe strongly in the second possibility and reject the first.

why would Caucasians desire equality if they benefit
from inequality

We (again, speaking as a white male here) might benefit in the short term from inequality, but I believe that in the long term we benefit a lot more from equality. I love my country and my country is much stronger if we have an equal playing field.

I respect the fact that many people feel that actions like minority hiring initiatives are in fact the opposite of a level playing field. In the most myopic possible sense, that is correct. In a broader sense, I do not agree.
One of the nice things about Phabricator is its performance. It originated at Facebook, and they are using massive, monolithic monorepos.
Penny Auctions – How to sell a $180 tablet for $7,264
Hook, line and sinker. HN never misses an opportunity over analyze rhetorical device.
As long as the clients are open-source and the encryption is end to end, can't it really be verified?

Whatever the server, if the client encryption is reliable, data can't be read on the server side.
The unfortunate reality too is that average users will never go to the extra trouble of authenticating keys themselves. I'm also more likely to trust a company like Apple or Google with key management than a "trusted third party" (simply because they're bigger companies, with more valuable brands to protect, and resources to throw at the problem).

So, it feels like for the average consumer, a product like iMessage ticks all the necessary boxes. While WhatsApp adding features like the ability to compare your keys via a QR code looks cool, I have to wonder how many users will actually take advantage (and how would they even know if that number or QR code really represents what they think it does?)
Cool! Though am I the only one wondering how this fits into FB's plans? I suppose they still get all contacts and know how frequently I contact them, which builds very valuable info. (Something MSN Messenger never leveraged, sigh.) I'm still very hesitant about ever trusting anything to FB.

Apparently by default there's no notification of changed keys: "WhatsApp users can opt in to a preference which notifies them every time the security code for a contact changes". I guess the question is, does this preference get sent to the server or exposed any other way? If it doesn't then it might be too risky to use this as an attack channel.
Does this include file transfers, if so, how?

Curious because when sending a .webm video from an Android device to a iOS device, the video file was transcoded on WhatsApp servers and then delivered to the iOS device as H264/mp4 (since iOS can not play .webm files)

This should no longer be working.
> Now you're beginning to sound like the generation that talks about paying for college with their summer job, which has rapidly become close to impossible over the last few decades. Sure, if you have scholarships and such.

Not in the least. In fact, the wife and I are still paying off the $90,000 in loans she racked up during college, 20 years ago. However, a part time job a few days a week, to pay for things the loans didn't, was beneficial. Going out with friends, a few amenities, etc.