skysight-inc/HackerNews huggingface dataset:
That's not really equivalent to what Rebol does or what my stuff does. What do you do when you want to unbind msg? Or when you want to carry around your bindings with you and change them through function calls?
They don't want you any more.

When you're ready to spend big bucks on Azure, please let them know.
It is a good idea to enable class action lawsuits against large entities. This court ruling the rule is trying to fix is a loophole that should be closed.

However, what troubles me is that a sweeping policy change such as this, going against a Supreme Court precedent, should passed as a law by elected lawmakers, not a rule dictated by unelected bureaucrats. Even worse, this so-called "Consumer Financial Protection Bureau" is an independent agency of government with no effective oversight or subject to the usual checks and balances of a government agency. This Bureau has already been sued for abusive practices.
1. No? NetBSD is a classic UNIX system. With rumpkernel though. http://rumpkernel.org I guess you could build a system like that with rumprun maybe…

2. Yes. But running those languages was possible even before that, thanks to Mono. CoreCLR is just the new, shiny, lightweight and MS official thing.

3. Hahahahaha nope. WPF and UWP are proprietary. I don't think there are any alternative implementations of them. Mono has an implementation of good old WinForms though :D
None of those libraries are proprietary, so they don't pose any threat. The issue here is no different than with non-browser javascript, or even non-browser anything.
Recently a colleague and I took a PHP+MySQL page that was taking 1-2 minutes to load and were able to drop it down to 30 seconds after our first round of revisions. After a second round of revisions, we got it under 15 seconds, then after another round we got it to the 1-5 second range. Most of the optimizations were in the PHP not in the SQL.
I had an incredibly similar experience. My employer's third party background check company was able to confirm my degree, but claimed I'd gotten it in a year, and so my entire school section was listed on the report as (large, red): "UNCONFIRMED" (they never contacted me). I was somewhat worried, since there's some strong language about how if this background check doesn't go well the offer is voided or something, but my recruiter just laughed and said it happens all the time.
I'm sorry, I must have let the fact that the document I chose as a basis for comparison (and which I don't believe) influences the lives of 2.2 billion people every day and has for hundreds of years cloud me into thinking that it is more "profound" - as a basis of comparison - than if a pack of peanuts says "may contain peanuts" on it. /s

In other words I don't think profound statements have to be true, and the article says people were judging profundity, not truth. (although this is irrelevant, I don't think the verses I quoted are true.)
amd64, not arm64. Do get excited about running a .NET rump kernel on your Xen host!
Looking forward to watching the Streisand Effect play out.
C is merely flexible, not in some position of authority where it dictates what platforms must do. C would be ABI-compatible on a platform that wasn't designed for it, too (which, historically, was the case on many platforms it was ported to).
In some sense it is nice to see a push for progress on IPv6. And yet, it is also painfully clear that these networks are not ready, even for the big sites like Google.

For instance, there are Google machines that are apparently IPv6 only. Over the last several months I have had major issues reaching Google domains like Google.com, YouTube, etc. from my home Internet. It will either work seamlessly, or hang seemingly forever when trying to look up one of the URLs (which is oh so fun when I am trying to search Google frequently). It only hangs for Google domains.

I dug up a forum post that was over a YEAR old where people finally figured out that all of this crap was due to IPv6! They were literally turning off IPv6 entirely on their Macs in order to make Google searches work again. The symptom is a trace-route stumbling on the way to 1e100.net (one of Google’s backbone domains). Sadly, I can imagine people screaming at their ISPs over stuff like this.

I haven’t gone as far as to kill all of my IPv6 connections but I do have to turn off WiFi and turn it back on to force some kind of a network reset whenever this shit starts happening on my MacBook. Even then, the problem will eventually return, and is pretty much guaranteed to return by closing the lid and coming back later (how foolish of me to expect the Internet to be useful when I open the lid?). Networking on the Mac is a mess, to say the least. Even if this isn’t entirely Apple’s fault, it is entirely their problem for having poor fault-tolerance. For instance, if I were them the first thing I’d do is write a script to turn off the WiFi and turn it back on in case of a problem, since that seems to solve 90% of issues all by itself.
And also that you're fine with creating a package for any dependency that doesn't have one.
Think game engines or legacy C++ projects there were ported to the platform and already have their own network implementation.
I appreciate that predictability is a big priority with Cargo.

I feel like Rust and Cargo are in a great position to deterministically (per compiler version, per set of build flags) build libraries. That would be an amazing step forward in security if it could be enforced. Does anyone know if this is planned?

https://reproducible-builds.org
Social Security moves to block the mentally ill from purchasing guns
WPF/UWP instead of WinForms and I agree. I don't even get why so many people like writing web apps, I feel a hell of a lot more comfortable working with a proper widget toolkit (my preference being GTK or WPF) without the constraints enforced on me by a browser and JavaScript.
I didn't see anything about renegotiation. If clients present their certificates during first handshake, it will lead to security concerns. Attackers could observe client's certificates (extract meta-data, de-ano clients ...). If renegotiation is used it will drastically reduce "Bonus DDOS mitigation"
Women with group B strep, chlamydia, or other bacterial infections get antibiotics to avoid transmission during birth because the complications in newborns can be severe and life threatening. Healthy women should not routinely be given antibiotics during labor. I submit again that you are rather uninformed about the subject.

As hard as it might seem to you, going to medical school doesn't make you dumber or less likely to value evidence.

The second Amazon review of the book mentions that it includes too much mysticism, magical thinking, and spiritualism and characterizes it as bizarre and fringe.

I think a good rule of thumb is that in a perfect situation it is more or less safe to give birth at home. However, in the event that anything goes wrong, which frankly is not a rare occurrence, really horrible consequences can be pretty easily avoided by being in a medical setting.

Also, none of the previous paragraph applies to situations of high-risk pregnancies, which are also really not that rare [1] and should be managed in a hospital.

1. https://www.nichd.nih.gov/health/topics/high-risk/conditioni...
Someone in texas would definitely lose out because their salary will be much much lower than the bay area.

This doesn't factor in cost of living.
For one thing, you can safely go a lot faster on asphalt than on dirt while still being able to round corners and come to a stop.
I haven't even heard of half the apps on this list. Am I outdated or are they well known only in the US? E.g. Turo, GetAround, VRBO.
I'm sure there are some road users this wouldn't work for, but check out permeable interlocking pavers. I encountered some country roads in Germany that were paved with these for many kilometers. It was a beautiful and pleasant place to ride.
Right, so what stops an attacker from getting a client certificate signed by Teller?

I guess I missed something about how the client certificate is being provisioned. I see the video showing a client certificate being downloaded onto a desktop, but that's obviously not the intended UX for actual end-users...?
The Nostalgic Moment in Dark Souls 3 That Made Me Go 'Oh, Shit'
From that link: "Major network service providers, including major cellular carriers in the the United States, are actively promoting and deploying IPv6."
So you're looking for the collection of clients to be able to make secure backups of their data, but be able to store those backups in a central location with de-duplication and without having to trust the central location with keys? That's certainly feasible, though it seems this particular software won't achieve it.

Off the top of my head, the scheme is simple. Break data down into chunks as usual. To encrypt a chunk: chunk_encryption_key = KDF (HMAC (shared_secret1, plaintext)). Encrypt. chunk_id = SHA256 (ciphertext). Upload ciphertext to central repo. Central repo can store and index using SHA256 (ciphertext). When you've got all chunks encrypted and uploaded, build the backup archive by listing all files, their properties, paths, etc. plus their respective chunks. Chunks are stored in the archive using (chunk_id,encryption_key) pairs. Encrypt the archive using a per-client asymmetric key with authentication. Upload encrypted archive to the central repo. Store by name or however you want to handle that.

When it comes time to decrypt, the client can pull the archive from the repo, authenticate, decrypt, and then begin extracting files. When it needs a chunk, it just asks the repo using the chunk_id. It can verify integrity and authenticity using the chunk_id (the chunk_id itself is already authenticated because we authenticated the archive it came from). Decrypt, and you're done.

The central repo doesn't need any of the keys. The clients all share shared_secret1, and then each have their own asymmetric keys. Clients can't upload corrupted data to mess with each other. They also can't pull random chunks and decrypt them, because decryption requires the "chunk_encryption_key" which can't be derived from chunk_id. They can only decrypt chunks that they've used in a backup.

Garbage collection can be handled by tagging archives on the central repo with a list of used chunk_ids. That's still secure.

The only caveat: You'll need to trust at least that clients won't attempt to exploit the flaws in convergent encryption (you can brute-force fields in common documents). Though there are ways to mitigate that in certain scenarios.

My WIP secure backup tool, written in Rust, does most of this: https://github.com/fpgaminer/preserve The only difference is that I decoupled the chunk_id from the ciphertext's hash, as part of an effort to reduce archive size (archive's only need to store 32 bytes per chunk, rather than 64 bytes). That means that it doesn't handle the case of malicious clients uploading corrupt chunks. That can be mitigated though.
I appreciate your thoughtful response here and I think there is much merit to it. Basically you are saying we can't have our cake and eat it too.
Twilight of the crypto-geeks (2000)
The author excluded roads financed by gasoline tax from the analysis. I don't remember reading about sales and income taxes in the article, but perhaps those are in the same category.
Why the downvote? Everything I stated is factually accurate.
Hah! Abuse of the H-1B program is endemic across the United States--not just in the Bay Area. No large city is excluded.
NY regulator approves Winklevoss bid to trade digital currency ether
Has there ever been an application of dividing by zero?
Pretty meh. I'm sure there are some excellent uses of it that I encounter and enjoy without realizing it, but few of the advanced demos work for me (Chrome on Linux w/Intel gfx) or bring my computer to its knees rendering at very low FPS.

It feels like something that was more interested in competing with native than offering a constrained and portable approach.
A simple starter project to build cool React applications with Babel and Rollup
Should Prostitution Be a Crime?
If you are creating a library? You shouldn't log at all. Return errors or throw them - do not log.

If you are creating a console application? Stderr is the standard way to log errors. Let the user decide if where it points to.

If you are creating a daemon, set the log destiny at the launch script. The application can either log to stderr anyway and let the script handle everything, or offer a parameter for setting the log channel.

The Java community fixation on logging is really not deserved. It's more caused by bad error handling by their main web servers than by any fundamental problem.
> You need to go through bizspark

Shouldn't Microsoft make that clear then? If I wanted Windows 10 Enterprise for a business, I'd search for "windows 10 enterprise", follow the link to "Windows 10 Enterprise for your enterprise business - Microsoft"[1], and go to the "Buy>How to buy"[2] page. There is zero mention of BizSpark in that process as far as I can see.

It's also non-obvious from your link that BizSpark includes Windows 10 Enterprise. I had to download the "Products by benefits level" Excel sheet to be sure, and it appears to be limited to five people regardless.

I understand that Microsoft's enterprise licensing typically involves going through a reseller, but Microsoft certainly could be doing a better job pointing people (esp. small businesses) in the right direction. Even if I go through to "Contact a Windows Solution Provider"[3], it defaults to searching for UK and an 8km radius (accurate enough), sort by "Most relevant". Top 5 results:

* German-language result

* Scandinavian/Nordic-language result (doesn't look like Swedish, Danish, or Norwegian to me. Possibly Finnish?)

* English-language result, but located in the Netherlands

* French-language result

* Italian-language result

Maybe these companies can help me, or maybe they are the "wrong people" to whom you refer. Following what I would see as the obvious path to try and purchase Windows 10 Enterprise, I'd have no idea how to tell the difference.

[1] https://www.microsoft.com/en-gb/WindowsForBusiness/windows-f...
[2] https://www.microsoft.com/en-gb/WindowsForBusiness/buy
[3] https://pinpoint.microsoft.com/en-GB/search?type=companies&k...
That's correct; it doesn't come for free.
"I've always wondered why we pave our streets to begin with."

Dramatic reduction in particulate air pollution.

There have been programs to reduce air pollution in towns along the US - Mexico border. Folks on the US side paid to have roads paved in Mexico so it would reduce pollution--it was cheaper than taking incremental steps on the US side.
In general, we are very interested in reproducible builds, and have fixed bugs where accidental non-determinism has crept in. However, it can be easy to reintroduce with build.rs, which allows for executing arbitrary Rust code before a build. Syntax extensions are another problem here. But the scope is much reduced, it's true.
Yes, absolutely the price and price/performance from AMD is good (I would compare it against the 2600k (4 core/8 threads) though, which was 300 but still faster, or even the 2500k (4 cores/4 threads) which was ~230 but still faster).

Unfortunately as merb already mentioned the performance to power ratio is not really good for AMD, which I guess contributes quite a bit to AMDs lost marketshare in the server segment (plus it doesn't look good in reviews which is bad for AMDs mindshare, which already is far behind Intel and Nvidia). And until Mantle/Vulkan/DX12 the performance in quite a few games was noticable behind Intel because AMDs single core performance was not on par which was bad because DX11 is basically single threaded. [1]

Overall I guess AMDs biggest problem is the mindshare. Wheras Intel or Nvidia can allow themselves one or two not so great generations, AMD tanks as soon as they have problems. AMDs HD 5000 generation was out sooner than Nvidia, faster and more energy efficient, but it only helped them gain 5% marketshare (around 45% at the time). AMDs 7000 generation could compete with Nvidia, but used more energy and bang, Nvidia regained more than the 5% percent that they lost, and that continued with Maxwell (they now have ~75% marketshare even though AMDs cards can compete on performance). [2] The same with Intel, when AMD could compete, and even beat Intel in performance and efficency over many years, they gained not that much marketshare (in part because of Intels shady manipulation, but in part probably also because of mindshare). Intels Conroe could regain some of the marketshare Intel lost thanks to its Pentium 4 (which reduced AMDS ~48% to 35%). Then came Bulldozer, which was underwhelming outside of multithreaded tasks and late in part thanks to GloFos 32nm problems and now AMD has aroun 20% marketshare). In the server space it's even worse for AMD with less than 1% marketshare compared to 25% around 2006-2007.

[1] http://www.littletinyfrogs.com/article/460524/DirectX_11_vs_...

[2] http://cdn.wccftech.com/wp-content/uploads/2015/04/Nvidia-AM...
What about other forms? Radiation is not radiation. There's gamma, X-ray, alpha, beta, neutron, microwave, infrared, etc. and they all have different biophysical effects.
Since this is an Electron-based app, I figure this is as good a place as any to ask something that I don't understand about Electron...

How well can an Electron-based app fit in with the underlying operating system?

If running on a Mac, can an Electron-based app expose itself via AppleScript so that other applications can interact with them? If running on Windows, can it expose itself via COM? On Linux can it register itself with DBus (I'm not sure if this even makes sense - what's the Linux equivalent of COM/AppleScript)?

On the Mac, does the stuff in the Services menu work? Do text fields get automatic spell-check? Can I double-tap 'fn' to start dictation? Can it expose itself to the Accessibility stuff in a meaningful manner?

These things don't make sense for all applications. I can't think of why I'd want to interact with an HN application via AppleScript (or COM), for example, but there are other types of applications where being able to do this would be great (Excel and Word base their entire macro facility on COM, for example).

I can see wanting to use Dictation in an HN app as it might make commenting easier for some people. Same goes for the text field spell-checking.

I guess the big question is, where can an Electron app fit in the spectrum between 'web site rendered in a dedicated application' and 'full-blown Windows/Mac/Linux desktop application'?
I believe that David Kleiman was the one with the Satoshi keys, they were kept on an encrypted USB. He died unexpectedly in 2013, and his brother took the USB. Nobody knows how to unlock it.
Gah, this. Also noobs who want to "replace their 2,000 device-per-year microcontroller application with an FPGA so that it can someday be put onto a ASIC." They're basically vinyl hipsters who fancy themselves "EE/chip designerz" and want to immortalize themselves.
Really? I haven't seen this happening yet. I still self-host copies of my publications. I'm not sure how I (or others in the same position) would respond to a request to remove them from IEEE.
> You'd never build a "modern city" like Philadelphia, with its narrow one-way streets, lack of parking, and commercial and retail mish-mashed together.

And yet, that’s what’s being built in most of europe.

Make streets smaller, remove parking, build mixed use buildings.

[1] http://www.kn-online.de/var/storage/images/kn/news/nachricht...

[2] http://abload.de/img/img_1863whsfj.jpg

[3] http://www.schlossquartier-kiel.de/fileadmin/images/01.jpg

Be it one-lane roads, be it building mixed use buildings, etc – these projects are all either built this year, or still under construction.

It’s not a global issue, definitely more of a US issue.
The Social Security Administration (SSA) is proposing to report people who receive disability benefits and have a mental health condition to the FBI's background check system.

A few thoughts:

1) Wow: All mental health conditions (among Social Security disability recipients) are suspect and will be reported to the police.

2) How does the Social Security Administration even know who has a "mental health condition"? What about theh privacy of medical records?

3) Note how vulnerable this group is; if you are relying on Social Security disability payments, you probably can't afford to forgo them in order to protect your privacy. Civil rights are only for tose who can afford them.

4) Finally, what would a President with fascist-like tendancies do with the massive government and commercial surveillance infrastructure, with so few privacy protections?
I haven't looked at tigr yet (it seems interesting!) but could you just use '#ifdef __OBJC__'?
Ask HN: Which Developer Boot Camps Are Most Respected?
I am considering applying to a developer boot camp in the SF Bay Area. They all tout that an impressive percentage of their alumni are hired within a few months. But I want to hear from hiring managers directly: Are there boot camps that you take more seriously than others? Have you hired anyone out of these camps and if so, how did they do?
ME precedes XP, both architecturally and by release date. Can you clarify?
It's evidence that it is popularly interpreted as something that has value and can be traded. So is money. I really can't care any less than I already don't if Bitcoin is or isn't a legal currency.

The point is it isn't commonly purported to be a 'settlement layer' but something else entirely.
Does this in any way handle the 16KB limit on user-data on AWS? (i assume not)

Great job in any case!
I rebuttal to the idea that Apple is "stealing" music was posted: "No, Apple Music is not deleting your music – unless you tell it to"

[1]: https://news.ycombinator.com/item?id=11638308
That's why some Data Stuctures courses use tilde notation instead (same as big O, but the constant is preserved).
Strawman.

For tasks that are primarily IO bound, async architectures can scale more than synchronous languages. Period.

It would take intentionally (or newb/cluelessly) bad design to end up with a Node server that DOSed at 12 connections per second.

In PHP, if you run 4 threads, it just takes a backend with a 333ms latency (on all queries performed serially) to limit you to 12 connections per second. If you only run one thread, you just need a backend with a cumulative 83ms latency to get DOSed at 12 connections per second. In a more realistic scenario, a typical crappy framework will result in dozens of queries for a single page, but it comes down to the same thing.

In Node, you can run one thread with a cumulative 333ms backend latency and still handle thousands of connections per second. They'll each just end up waiting a bit more than 333ms for their results, assuming the database itself isn't DOSed (which takes a surprisingly high load -- way above the levels we're talking). Actually, depending on how interconnected the backend queries are, Node may actually result in less than a total 333ms latency, because many of those queries may also be parallelized by the browser, and will then be handled in parallel by the server (and much of the latency may actually be in http negotiations and/or establishing a database connection, honestly).
Tor for remote access? There are much faster ways to create seamless networks of machines.
British tea consumption has been going down
> web pages able to eat all my cores

We're already there:

var code = "while(true){}";
var Blob = window.Blob;
var URL = window.webkitURL || window.URL;
var bb = new Blob([code], {type : 'text/javascript'});
code = URL.createObjectURL(bb);
for (var i = 0; i < 8; i += 1) new Worker(code);
> Remember: The answer to life, the universe and how many backups you should keep of your stuff is 42.

EDIT: (incomplete submission)

Oh, of course, great idea! I thought 4 was enough!