skysight-inc/HackerNews huggingface dataset:
> I imagine the NSA has a bag full of OpenBSD exploits [...]. But OpenBSD has gifted to the world a fighting chance--

Doesn't the former sentence negate the latter?

At this point, it seems just about all systems are hackable, given enough resources.
It isn't "incoherent and hypocritical" but gets portrayed that way. Some of that is messaging as the GOP is not very media savvy, but by and large, its people who have no desire to understand before reporting.

[edit after the edit - please don't edit after someone has already replied - it makes the replier look bad]

From the outside, Democrats can be viewed as a bunch of special interests under one tent. I find much of these "group slicing" to be problematic when talking about the GOP as I don't think its really those groups or the ultimate belief is what is reported. Viewing a group through another group's lens is fraught with peril.
Not at the moment, but our interrupt overhead and number of background tasks is so low it's something we're thinking about. Is there a specific scenario you're trying to enable?
> Displaying information readably has been solved by HTML for twenty years. It may not be pretty, but it will be readable.

I would add to this that you can make it pretty with less than 1k of css. You can make it REALLY pretty, and mobile ready as well. The fact that so few people in my profession know how to do so saddens me deeply.
binaryninja: https://binary.ninja/
It looks like they are not too much similarities, except that they are both took some structure from the Bitcoin. Hackchain is less about signatures, public keys, mining the blocks; and is more about the output/input scripts in the transactions.
There are several reasons.

1. The general pattern of an aggregation service only covering the lowest common denominator features among what it aggregates.

2. I'm not sure of Kayak's terms specifically but accessing via third party aggregator API vs. direct API can affect who gets credit for the referral (i.e., $$$).

3. At the aggregator level, _someone_ has to write the glue code for all of the services. See IFTTT for an example of this. This is a good foreshadow of the problems here by analogy to IFTTT [1].

4. "Just slap together an SPA that calls the same aggregation service, and prefill it with the recognized query." Who's going to build the SPA? For each service vertical? For each company?

[1]: https://blog.pinboard.in/2016/03/my_heroic_and_lazy_stand_ag...
Yes, they can still decrypt old versions.

Storing secret keys, API keys, etc. in your git repo is a terrible idea and an antipattern any way you slice it. Keep your secrets out of version control.

The quoted advice is extremely bad. If someone who has access to a secret of any importance leaves your team, the only acceptable response is to rotate the secret.
I never said they should. But languages like the historic BASIC created a set of habits and ideas that had to be unlearned to build reliable, scalable software. Your example of JavaScript as a modern BASIC is a different language. It provides all the structured programming ideas that Dijkstra wanted. Where it fails (failed?) is in its concurrency mechanism favoring a version of callback hell and its weak type system. Those are much easier to overcome than first learning to code by interleaving code blocks and using gotos rather than subroutines, while loops and the like.
> So there's a big concern that LC may not be very scrupulous about the borrowers it accepts.

I haven't read this anywhere else other than your comment. Do you have any other evidence for this claim?
I'd be interested to see a full post-mortem on this. What would they change about their process to avoid this failure-mode in the future?
> “We're considering banning domains that require users to disable ad blockers” (reddit.com)

It should be obvious before I click the front-page link on HN that it's about /r/technology only, not reddit as a whole. That means there's still room for admin improvement here on HN.

You made me say it!
Rewrite the same program at least five times, trying each time to improve it. You can use different languages.
I'm also T1 and I think that sugar definitely plays a role in both T1 and T2. Sugar directly interacts with pancreas, consumption of sugar has skyrocketed, diabetes rates have skyrocketed. The official word on T1D is that we don't know what exactly causes it, it's not "sugar definitely doesn't cause it."
an argument for why a content provider who is making something available to others for free and without obligation has any obligation in return, either legally or ethically, beyond the same basic decency that we all owe to each other.

A grocery store handing out free samples still has an obligation to make sure it's not contaminated, and I really don't buy idea that "don't send people malware" is significantly less a part of a common decency than "don't feed people tainted food" is.
I don't live in the USA, could someone briefly explain why an evangelical Christian would fit in less well at a university than a religious person of other faiths?

Is it related to their religion, their conservatism, or something else?
That's really awesome
My belief is that iTunes is purposefully broken and will likely be broken up into separate apps.

On the music side it forces people to use streaming services instead which the music industry prefers to digital ownership, and Apple's own service is doing well. They've (Apple) always played ball with the music industry as everyone must, they've just managed to get better deals than most when working with them.

Where it really hurts is in podcasting. I think podcasts & audiobooks would be much bigger if syncing worked worth a damn on iTunes.

On the i-device side, syncing should be be removed wholesale from the media player. Honestly, it should be relegated to a little task icon like Caffeine. The only reason this isn't the case is because the storage capacity of these devices is so (needlessly) tiny, again perhaps purposefully in order to prevent day to day users from keeping a lot of downloaded music/videos locally.
No the first prototype mouse was this one I think: http://www.computerhope.com/issues/ch001083.htm Made in the 60s and patented in 1970.

The Cursor III is this: http://www.vintagemacworld.com/add2/add8.jpg
+1 for beets. works like a charm, integrates quite well with mpd, does exactly what it's supposed to.

oh and it's written in python, which means it's quite easy to hack upon it.
Indeed. And the question of whether we consider software consuming data from a physical device that doesn't correctly account for the possibility of that device feeding it garbage to itself be crappy is a largely academic question.

The whole system has to be considered for success.
If i say "find me a good ticket for Chicago tonight". How
will it know that i'm talking about the rock band that's
playing tonight in Paris, France, since there's absolutely
not a chance that a human being asks for a plane ticket for
such a big trip just a few hours in advance ?

I don't even need an assistant system to figure out based on context which I'm talking about: All I want is one that can simply ask clarifying questions. "Did you mean Chicago the city, or Chicago the band?"

I had an amusing Siri interaction a few months ago where I asked "what language is spoken in Shanghai?" (I can never remember if it's Mandarin or Cantonese). Siri came back with a very well-reasoned, completely out-of-place answer of "Hindi": https://twitter.com/claymill/status/690386752683577344
Interesting. I don't know your exact timeframe, but that still beat the public stock market.
Async functions in v8 – design doc
Whatever the default search target for travel stay is, if there is one, will probably determine a large percent of what users will simply stick to using without bothering to change it to another preference, since they may not know better. This default does leave an opportunity for some companies to have an edge over others, and potentially pay to make it so.
As an ex-hardware engineer, reliability and thorough testing has been drilled into the heads of every single hardware team. Not because we care more about quality, but because of simple economics: finding a single major bug after tape-out is going to be extremely expensive to fix, and will push out your product launch by months. Finding a single major bug after release just might doom your entire company. Hence why reliability and testing is treated like a life-or-death priority.

In software on the other hand, we're spoilt by how easy to is to fix bugs (compiling your code to generate a binary takes minutes/hours, not months, and it doesn't cost you millions of dollars), and also how easy it is to deploy fixes to customers (just release a patch and when someone complains, tell them to download it). Hence why if you're working at Google/Amazon/Apple/99%-of-software-teams, the rational thing to do is to treat reliability/testing as a 2nd class priority, not a 1st class priority.

Except that there's a small number of software applications where this doesn't hold. Where testing really does need to be treated as a 1st class priority. Problem is, the engineers and managers working in these teams belong to an industry that has a completely different mindset. A mindset that translates itself into all parts of the software stack, which these engineers are then forced to rely on. A mindset that will creep into everyone's minds, by osmosis, no matter how much they try to fight it. A mindset that works fine 99% of the time, but every now and then, leads to events exactly like this.
SSH keys aren't really used for encryption. Typical ssh uses some kind of DH construct, with the ssh keypairs just used for authentication.

However, stackexchange is the right place to go if you want to use asymmetric secret storage in git.

https://github.com/stackexchange/blackbox
Having built an entire app stack atop it, what's your opinion of ECS? Specifically on the scale of easy/works to painful/bend-to-will?
Here is a relevant section of the gnupg manual:

https://www.gnupg.org/gph/en/manual.html#AEN385

I think the concept was developed by Hal Finney; IIRC there is somewhere an email in which he describes it.
They also have a problem that their password hashing method is still md5[0].

[0] - https://developer.piwik.org/api-reference/Piwik/Auth
FYI you most definitely can beat LLVM in terms of quality. Its diassembler was designed originally only to support the instructions that the compiler could generate. While they've since filled out most of the instruction set, there are still a whole set of subtleties it can't deal with well, simply because the compiler part of it was never designed to output them. (e.g. see segment prefixes)
Tags are unordered sets that can be viewed in a DAG format if desired. Tag's themselves do not specify a DAG though.
Yeah, if I start a new project, I default to Postgres: https://journal.dedasys.com/2015/02/21/i-default-to-postgres...

I'd consider something else if I'm really, really sure that it's better suited to whatever niche problem than Postgres, but it'd take a lot of thinking and convincing myself.
They replaced the old lighting with white LEDs on my block a couple months ago.

First off, it actually makes it MORE difficult to see (now that the trees have leaves) than the orange light did. The LEDs are so much brighter that the contrast makes the shadows even deeper than they used to be, and your eyes can't see anything that's in shadow.

Secondly, it makes it much more difficult to sleep. My windows are ABOVE the lights (which face downwards), and it's like trying to sleep in daylight. I can't imagine what it's like on the floors below. My sleep has definitely suffered.
It's to make code more concise. There are many idiomatic one liners to compare arrays for example or to find the first element which satisfies the condition etc.

I don't mind removing them but their usecase is obvious: make the code more concise and more readable (and yes, if you program in C on daily basis you don't require a double take or thinking about what ++ does).
I have no doubt that there's a strong desire to reduce or eliminate in-person visitations and the goal of adding video visitations is one of the ways they're trying to do that.

I disagree with this for the most part -- elimination, anyway -- I would have less of a problem with reducing visitation frequency provided video visitation was affordable/effective and frequent and the end-result didn't cause prisoners to be more miserable[1]. And I could see elimination of in-person visitation for the most dangerous/high security prisons/prisoners (though I'm fairly certain that's eliminated already, so this might serve as an opportunity to allow a form of visitation where visitation wouldn't exist).

A video call is a much more intimate experience than a phone call[2] and while it doesn't replace an in-person visit, there's probably a balance there that fits well and meets both goals. Whether or not the prison system will put the needs of the prisoners into the equation, here, leaves me pretty skeptical. But I'm rather cynical about the prison system and tend to fall on the side of "rehabilitation" being a more appropriate goal for handling criminal behavior -- something that is virtually absent from the US Criminal Justice philosophy.

[1] The problem being: how do you measure that?

[2] My only experience is as a lone developer working on a team that's in another country and five time-zones away. Video calls are a night-and-day improvement HD Audio calls (we're a Skype for Business shop). Seeing facial expressions, being able to look at and feel out "the room", is hugely important to me. It's been effective enough for me to give presentations to User Groups in other cities.
I wonder if there is a "consultant" out there advising people in tough financial straits to use this strategy.
Haha no, I was just poking fun at high profile bug bounty programs like Facebook/Google's which routinely offer pennies for very very serious vulnerabilities.

I'm not in a position to discuss bug bounty ethics or judge what the right thing to do is given the market circumstances, I'm only in a position to make an opportune joke.

But you gotta admit...it is amusing seeing very critical vulnerabilities like ubiquitous user login being reported by researchers whom get 5k or 10k for doing the right thing. These holes could instantly cripple the trust of a company's userbase and yet the people reporting them get pennies.
Derivatives generally introduce leverage on a tracked asset. Leverage isn't a feature of securitized loans.
SleepBus – nightly non-stop trips between LA and SF
> Do you have a scat fetish? What is it with you and turds?

Right about now is when you should go ahead and read his username, ideally out loud in your best Sean Connery voice.
I get the sense that the difference often stems from the nature of software as "words you can run" vs. hardware as "physical manifestation of words."

For quite a bit of software these days, the correct program and the description of the correct program are pretty similar artifacts.
Man, how I wish WordPress had originally chosen to use PostgreSQL instead of MySQL back in the day.
This dates from 2011 so by tradition should have a [2011].

Second, https://en.wikipedia.org/wiki/Luc_Montagnier#Research_on_ele... :

> The paper has been met with harsh criticism for not being peer-reviewed, and its claims unsubstantiated by modern mainstream conventions of physics and chemistry. No third party has been able to replicate the findings as of March 2015. In response to Montagnier's statement that the generally unfavorable response is due to the "non-understanding or misunderstanding of the breakthrough findings", columnist Andy Lewis has written that he has found it difficult to assert what the paper "actually claims" and that "The paper [...] lacks any rigour. [...]", as "important experimental steps are described dismissively in a sentence and little attempt is made to describe the detail of the work".[23]
With hardware if you are not careful you can get parts that meet spec, but are useless because you forgot to specify something correctly (eg: referenced the wrong dimension, error stacking, etc). Generally the only reason why hardware would be easier to spec is that the output can be simpler (eg: a plate out of this material with holes in these locations).

Then you get the stuff that lurks in the middle that could be a software, electrical or mechanical problem (or all 3), and that is where the bugs like this occur. I think its more a result of splitting up work into domain silos, so they do not think about problems that arise in the other domains that can be fixed easily in another. This can lead to one or more domains getting no time at all to implement their part of the system as they spent most of the time budget waiting on another domain to finish. Watchdogs and other "things are going crazy" sort of belt&braces protection are the first parts of a design to get dropped when in a time crunch.
3D view of periodic table and atoms
Well, your math points out that doing it once is pretty big odds. Obviously not as big as doing it twice, but if it was easy them lots of people would have won the Superfecta. Only people I've heard of winning are UNU and those people who bet UNU's picks.
As someone else pointed out, the swarm intelligence approach doesn't have to hit every time to be impressive. Just better than an average bettor. Look at their site. They've been successful with the Oscars, Super Bowl and College football.
Sad to say, but that can be the case. Corporations and Industry groups lobby for exemptions and loopholes all the time, which is how we get to where we are today.
Just because a law is, doesn't mean that law is just.
There are times when complying with the law negatively impacts a community, re: judges complying with mandatory sentencing.
For some definition of ‘good coverage’ and ‘most’: yes.

I do not think 100% coverage on the code you write alone is enough to get to ‘all', though. For example, if your test declares a vector and calls a function that does

v.erase( i, v.end());

with i == v.end(), you get 100% coverage, but in production, that part of the code might be called with i == v.begin(), and that invalidates all iterators on the vector.
Sure, but my exasperation about "middle-class software developers" moral posturing isn't really about refuting the argument on whether or not its immoral - since morality in this situation is purely subjective, I can't say whether or not their argument is wrong. It's more about the point that how the audience feels about the situation isn't really material to a sensible solution to the situation, especially if you can't quantify your feelings that it's immoral.

You're right though in that I could have made the same argument without singling out the users of this particular website.
I don't think it's that highly a subjective viewpoint, if you don't ignore the social aspects of their business altogether. I do agree that the level of service of Uber (and probably AirBnB) is superior; I may also agree that a lot of regulations they're working around should be revisited.

But the idea that when you don't like a law, you're free to ignore it is not something acceptable in a civilized society. There are ways and means to affect the legal situation (and numerous companies in Europe managed to use them successfully when it comes to taxis - so much that on the old continent, Uber is not really an innovative service), but you have to play by the rules. Breaking them should - and usually does - result in you getting fined or imprisoned.

Uber is exploiting the high inertia of local government bodies; their strategy is to gain enough popularity fast enough that they can play the local population against lawmakers - not unlike a fast-spreading virus that overwhelms the host before their immune system can mount a defense.

What I don't want is to see this blatant, unilateral defiance against the law to spread. Today it's a taxi company with a silly app and a big marketing budget; tomorrow it will be the next hot e-commerce site that plays fast and loose with customer protection laws; the next week it will be a biotech startup that thinks biosafety regulations are optional and otherwise a nuisance.
America the Incarcerated: The Increasing Concern of Citizens for Profit
If LendingClub were to go bankrupt, what would realistically happen to all of the outstanding loans?
Thanks for taking the time to comment. That makes more sense. From the article, it seemed that it took a while for Patrik to notice that Jari had a problem and that this caused Jari to panic with the consequences of him dying.

That's also a good point regarding the point of no return and preparation, the comments from the English divers did hint that preparation had been lacking but the article didn't really explain what could have been done better.

I've always been fascinated by cave diving but I've got asthma and I doubt I could ever do it due to that.
> The hedge funds have backed out

What's your source for this claim?
Nodal. Next Generation Node.js Server and Framework. Release v0.10.0
Hey there, thanks for putting this out as open source.

Curious: what's your business model? I am starting to write a book about open source business models and I would be interested in hearing your thoughts. Thanks!
Joetta Shumba: Driver jailed for 160mph death crash on M62
I did just come across this though: C-h t
That'll bring up a tutorial file that's like vimtutor. Not quite vim-adventures but it's pretty helpful
Your stomach is tempting you to defect. Your heart is telling you not to.

And then, thankfully, your brain chimes in, and reminds you that while short-term PD-like scenarios seem to reward defection, in iterative scenarios -- more comparable to PD-like situations we encounter in real life -- it is cooperation (or at least, not fucking your neighbor over for the sake of short-term gain) that is very strongly incentivized.
Question for someone who knows more about satellites than me:

> In satellites, the STT typically gets a good fix and sends the data to the IRU. The IRU uses the data to set its current reading and to measure how far it drifted since the last update. After calculating the drift it uses drift adjustments to compensate for the future drift. Clearly if the compensation calculation is wrong the future readings are going to be wrong. This appears to have played a role since the ACS attempted to correct a rotation that didn’t exist. The erroneous configuration information led the ACS to aggravate, not correct, the rotation.

Does this mean that error will compound if either the attitude or compensation are calculated or performed incorrectly? If so, is there a way to reduce that compounding, perhaps by making them more independent systems? Or am I reading too much into a summary? (And, you know, space is hard.)
Gogen-Avro: Generate Go Structs and Serializers for Apache Avro Schemas
https://en.wikipedia.org/wiki/Asset-backed_security
Came to ask a similar question, or rather, how plug and play are the different services? I'm often thinking of the use case of a hobby app where I might want to run a local database, and for example, using KMS might be overkill. Is that a use case you guys think about or not as much?