skysight-inc/HackerNews huggingface dataset:
Woah - I know many don't have fibre/cable, but I thought at least ~20Mbit speeds were the majority.
Where are you may I ask? Is that common where you live? Is it costly?
Amor de manos- mana a cantar, bbe a rir e a fazer cocó
Looks really good, it's Yet Another Fantastic Shell!

I'd love to use it, really. But as long as it's not shipped by default with a popular Linux releases, I will not.
My customers, Telcos, don't approve any "non standard" software in their server rooms.
Online Cakes, Flowers and Gifts from Zoganto
There is a point when convenience for lazy developers becomes bloat. Emacs is probably at that point - a runtime feature-full enough that you can get both a web browser, mail/news reader, presumably an irc client as well as a half-decent editor in a few tens of megabytes. Significantly more than a small talk runtime, that fits it's own blitter, dcvs and full IDE in under 10 MB.

What does the order of magnitude really gain the end user? A slower, less powerful GUI system?
Suggestion: make the opcodes clickable, leading the user to the documentation of the opcode.
Which is very different from a website.
I don't think people believed I wasn't trolling. Sorry.
The domain at the end of the video (http://xonsh.org) doesn't seem to point to your site (http://xon.sh) (and doesn't work, either…). Just FYI, that if you share the video, you might want to share the link, too.

(or, for xon.sh, it may be time to update the video. I presumed you moved to the fancier domain at some point.)
As much as I would love to switch to GitHub for our private repos, it still is way more expensive than BitBucket.
That is probably the key issue. Even with prices at current ad-auction level, perhaps on the order of $0.001-$0.01 per page view, people who live on $1 per day would be SOL. Maybe they could earn access solving CAPTCHAs, or whatever. Or maybe access could just be free. After all, forcing ads on people with ~no money arguably does ~no good.
Atom and VSCode despite all the hype are subpar editors. Slow and resource hungry. Maybe suitable for script kiddies of today ... Slack is by no means a good sample of solid engineering. Spotify last I checked was native app written in c++. What's App is just wrapped website.
I thought that would do it but when you understand how you (I, at least) browse the web this feature became annoying, fast.

Working on Nitrous IDE, take a break to read an article (on a page never before visited so not whitelisted). Check the Disqus comments, the article mentions a book on Amazon, check that out....oh no, my IDE page has just gone to sleep, now I have to reconfigure it again. Ah the article page went to sleep too, now I need to find where I am in the comments.

Throw in the time for the pages to reload as well, and you can see how this could get frustrating.
200MB takes around 1hour to download where I'm living.
"hyperlinks still work"

Not on Facebook, which is the whole point. You can paste URLs into Facebook, but they aren't hypertext.
Our guts also pass through our brain... our gut brain, [1].

[1] https://en.wikipedia.org/wiki/Enteric_nervous_system
Well they are taking survey input about it, you can provide that as feedback.
These are some good points but when you say "He only wants distribution through channels that provide the same security assurances and deployment features that Google does through the Play Store." it must be noted that this isn't a guarantee of security.

A quick search of 'Google Play malware' returns many results from 2016 and going back to when it was still called Android Market. This isn't hand-waving, there are many concrete and specific examples of security lapses in the Google Play store and this is a persistent problem. Plenty of bright people over there who care and are working on it I'm sure, but not solved yet.

Bottom line is it's his decision to make, but the only certainty that using Google's store brings is that you must have a first-party relationship with Google to use his app. It's better than downloading APKs from some warez site but not a guarantee of security. Framing it this way misses the bigger picture.
BitBucket has branch level permission, but in Github its cryptic.
Why is the app closing completely if I press 'x'? wouldn't be much better to stay in background mode like Slack does (well and many other chat clients)? It's annoying...

I'll keep using my custom wrapper with NW.js (apparently this uses electron) until this behaviour is implemented...
Nope, they went out of their way to create something less functional than their UWP app (which is blocked from installing on a tablet or desktop, just like their android app).
Quite. Char as in 'nice cup of'.[0] Possibly delivered by a char lady. (Note, not a char woman, which is one's housekeeper).

[0] https://m.youtube.com/watch?v=eELH0ivexKA
A root backdoor for debugging ARM-powered Android gadgets managed to end up in shipped firmware – and we're surprised this sort of colossal blunder doesn't happen more often.
The howler is the work of Chinese ARM SoC-maker Allwinner, which wrote its own kernel code underneath a custom Android build for its devices.
Its Linux 3.4-based kernel code, on Github here, contains what looks to The Register like a debug mode the authors forgot to kill. Although it doesn't appear to have made it into the mainstream kernel source, it was picked up by firmware builders for various gadgets using Allwinner's chips.
It's triggered by writing rootmydevice to the special file /proc/sunxi_debug/sunxi_debug. That gives the current running process root privileges. If that file is present on your device or single-board computer, then you need to get rid of it. This is the code that checks for the magic write:
if(!strncmp("rootmydevice",(char)buf,12)){
cred = (struct cred )__task_cred(current);
cred->uid = 0;
cred->gid = 0;
cred->suid = 0;
cred->euid = 0;
cred->euid = 0;
cred->egid = 0;
cred->fsuid = 0;
cred->fsgid = 0;
printk("now you are root\n");
}
Tkaiser, a moderator over at the forums of the Armbian operating system (a Linux distro for ARM-based development boards) notes there's a number of vulnerable systems in the field.
As tkaiser writes, echo "rootmydevice" > /proc/sunxi_debug/sunxi_debug" "from any process with any UID will get root, and it's probably remotely exploitable if combined with networked services that might allow access to /proc."
He adds: “This security flaw is currently present in every OS image for H3, A83T or H8 devices that rely on kernel 3.4.”
As well as all Orange Pi images except for Armbian's freshly patched 5.10, these vulnerable gadgets include ARM dev boards from FriendlyARM, SinoVoip (its M2+ and M3 Banana Pi boards), Cubietruck, and LinkSprite's pcDuino8 Uno.
There are probably other products out there using the Allwinner SoC and the dodgy code. Tkaiser pointed out that FriendlyARM was also quick to issue a patch.
So basically it goes back to string from array by simply unconditionally joining it on a ':'? I guess that makes some sense... But isn't this convention (delimited by ':') only for PATH?
On the other hand - it's a fast homepage intro. A rapid showcase to get you interested and make you want to investigate further.

I also used the pause in a couple of places (which is OK, that's what it's there for), and I almost certainly wouldn't have bothered watching it if it had been any longer.

I personally think this is an excellent example of a landing page. It contains a brief text summary of what the thing is and why you'd want to use it, a quick demo of what it does, and then links to further information.
Your examples kind of prove the opposite point, these are not ALL popular apps, they are just popular "toy" apps. You weren't able to give a single example of a popular major application.
Distorted button effects (CSS3)
> Examine this truism — that you would never pay a nickel for a New York Times article that you enjoyed. What? Ten minutes of your time isn’t worth five cents?

Some questions:

- Do I have to pay in advance, before knowing that I enjoyed an article?

- How would I feel skimming in 30 seconds through an article that I had to pay for and move on to the next one? This is something I do routinely. Would I keep paying for that or would I totally skip paid-for articles?

- Why should I pay for that NYT article and not for a free one from Reuters with about the same content? Should we differentiate between plain news, opinions, investigative journalism?

I understand that somebody writing a blog gets paid by something else and the journalist gets paid by that very article, but the journalist is competing for reader time (time, not news) with so many other things, from instant messaging to casual browsing.

To answer the question... 100k readers * 5 cents = 5k. Too much or too little? Did the article took a hour, a day, a month, a year to write? If it's a hour, no way, even 1 cent would be too much. If it's a month it's spot on, maybe even cheap. But competition from free news, even the ones reporting on that article, is hard to beat.
Is there no distinction for "read-only collaborators"? We build software for many clients, they often request some (say 2 to 10) of their own users be added to the repository but only for viewing our work, not committing new code. If they are charged at the same rate as our own users the effective cost per repo for this model becomes $10-$50 per month!
> Although it doesn't appear to have made it into the mainstream kernel source

Now, who wants to blame upstream kernel maintainers for not merging in all the dirt around and requiring high quality of code submissions?
Personally I think frameworks like Electron lead to huge bloat in terms of download size, disk space, and system ram. However there is no doubt that it increases the accessibility of developing applications for multiple platforms.

I think the following is a great narrative on why it can matter though: http://blog.chriszacharias.com/page-weight-matters
Congratulations on reaching 1.0. Electron is really interesting, but until memory usage can be curbed, it's going to be a limiting factor.

I have been going back and forth with Slack over their desktop client; on Windows when signed into 5 groups it uses 1GB RAM. For a rich-chat client.

And if you're thinking "But RAM is cheap these days" -- well yes it is, but by the time you've got 15 Chrome tabs open, a Jetbrains IDE and 3 VMs, plus assorted other software running, 16GB disappears very fast...
They distributed source and the patch is not at all obfuscated.

Which is exactly my point.

Say you are a government organization that requires a backdoor. You can make a very sophisticated backdoor. When it's found it is clear that it is probably an intentional backdoor (e.g. Dual_EC_DRBG). Or you can make a very obvious backdoor that is disguised as a debugging option that you forgot to disable, an obvious logic error, etc. For such backdoors, it's easy to argue that it was just sloppy programming (in contrast to an intentional government-requested backdoor), so people will assume the simpler explanation (as in Hanlan's razor).

We have learned from the Debian OpenSSL saga [1] that trivial programming errors in critical software can go unnoticed for years. I don't think the Debian OpenSSL bug was government-mandated, but it's easy to see that this is a very attractive route: the bug caused only 32,768 unique private keys to be generated (great for spying), most people will believe it's a true programming error, you pay the person/company that introduces the bug royally for taking the blame.

[1] https://en.wikipedia.org/wiki/OpenSSL#Predictable_private_ke...
EE UNVEILS NEW 4G ‘JAY’ TABLET
> hardly used nowadays

https://github.com/torvalds/linux/search?utf8=%E2%9C%93&q=IN...

That's unbearable. They should just redo this in JavaScript. That's what everyone uses nowadays. Or so they say on here, if I understand correctly.
An outbreak of yellow fever in Angola could go global
Well, the very first thing in the readme for that project says:

"A Mac app wrapper around WhatsApp's web client, WhatsApp Web. https://web.whatsapp.com/"
I think that "Bullying" is unique to English, at least there is not equivalent to it in Portuguese and we usually just borrow it from English
Not really, I personnaly see no point of moving our (dozens of) repos to github at the moment. It would cost us a lot more than $0, for no advantage that justifies paying a premium. I am not sure what you mean by ecosystem, but we don't really miss anything from github. Yes the UI is more polished but who cares when 99% of the interactions with the repos are done with git clients (in various flavors).
That's orthogonal.

What you're saying is that the diffs are hard to work with in general. What I'm saying is that in a diff (be it large or small, a single commit or many), the code they wrote is the most visible and understandable way to do what they did.
Yes, that I get. I was asking how is the translation from shell to inside of a program happen. On linux, I presume it's done via getenv(3), which means that it can only support strings. The post below says that it simply joins on a ':'. Is that safe for all or even most cases (except obviously PATH, which is delimited by ':')?
The State of the Art of Programming Languages
Something like hashcash?
The convention holds for other lists too (usually lists of directories). The important thing is that there is a similar but different convention on Windows (';' is used), and xonsh abstracts that away in the same way Python does.
Dunno, we've had downtime every month for months.

Its slow as heck.

The UI is clunky.

The 'projects' made it hard to find anything and broke bookmarks.

... but the downtime is the killer. Last week was the last one.
I live in zone 2 in London, and the fastest broadband I can get is ~2Mbit. Even in major cities, good - or I would argue, even acceptable - broadband is not ubiquitous.
Do you have any practical tips for doing this on a daily basis? I read your comment and completely agreed with the sentiment, but then found myself thinking "what can I do differently?"

I'm a lot older than the OP, and fear I have spent a lot of my life living without passion.
Free Software Talks Usually Priced at $300
WordPress 4.5.1 XSS
While I consider web-tech in native a cancer I can't help, but agree. There is no good cross platform native UI library today. Few that are are stuck in 90s metaphor or poorly designed. Which I think is partly the reason why html-css-js is spreading everywhere.
How does this compare to cmder on Windows?
So do I (in fact, on the cusp of zone 3) - so I'm really curious why that's the fastest you can get?
I know git is distributed, that's not the point. Github as a platform is convenient and understood even by non technical people. They can browse files, even edit on the web.
The "C Programming Cleverness and Ego Issues" is a good bit of advice:

> Build programs that do something cool rather than
programs which flex the language's syntax. Syntax -- who cares?

Otherwise, I'd never heard of/seen the `#pragma once` preprocessor directive. (Not that I do that much C programming!) How common is it to use this over include guards?
Dunno, I'd kinda assume people are being reasonable by default. That's how societies are built by the majority so that a minority of cynics can find the luxury to make sexist remarks within that established framework.
What better way to disguise a backdoor than an apparently deliberate "debug" utility? I mean, if they have to distribute source code sooner or later (which they do since Linux is GPL), this looks much more innocent than any super obfuscated "hidden" source code that would be discovered eventually anyway.

Not saying this was the actual intention here, but it'd be a plausible way to go about it. It certainly appears the backdoor is running on lots of devices in the wild before it got noticed (even when it's this obvious in the diff(!)), so "mission accomplished"? :)
local network is faster than disk.

The internet is rarely faster than disk unless you're in a major data centre.

And then... this is assuming you're referring to spinning rust. local disks in the form of SSDs will be faster again.
As has Bitbucket. Unlimited users too if you have a .edu or equivalent email.
Well, it's tricky drawing that line isn't it?

19th century science proved that native americans, the irish, ... well basically everyone but the scientists themselves were inferior beings. The people who held those views didn't secretly believe that everyone was equal and they were making up lies for political advantage. They geniunely thought they were documenting objective facts about the inferior races according to science even though we can see from our perspective that it was all self-justifying nonsense.

But if you'd asked them they'd say, yes, fine don't be mean, but this is valid criticism based on observable phenomenon.
Probably nobody.

As things stand, there is a race to commercialise IoT, e.g. Nest, DropCam, WiMo, Swann, etc.

The wet dream that these companies have is to accumulate BigData which they will monetise. Their plans are intrinsically insecure. Too much data going out over the internet. Real IoT (and M2M) does not require every sensor to be on the internet. But that is contrary to capturing all the DATA.
"looks constantly good" is debatable. I find that it looks generic and web like. It has none or very little native look & feel to it. Coupled with being slow, resource hungry long loading times ...
Brilliant, thanks for these links!
Yeah, this makes internally hosted GitLab VERY attractive for us now. Even the Enterprise edition is going to be significantly cheaper than GitHub.
Human Error: Survivor Guilt in the Anthropocene
The Great Suspender has been around for a long time; I posted it to Product Hunt ~2 years ago: https://www.producthunt.com/tech/the-great-suspender

it's pretty good. I don't really use the auto mode much, but I use it to manually kill tabs (can be faster than killing via the task manager)
Interesting idea to use a unit that is universal to our galaxy.
However, using deci-arcseconds (1/360/360/1000) seems arbitrary - it depends on the 360 degrees of a full circle and the decimal system.

Perhaps dividing the time period of 225million years by a power of two would be more universal.

For our life span, 2^27 looks good:

225.000.000 years / 2^27 = 1.67638 years, 611 days

Or perhaps 2^28? That'd be 305.94 days
Experience GAME of THRONES Characters as Your UX Clients
"How does a company, founded by someone with no realistic credentials or experience, raise so much money on what may never be delivered? Who decides it gets so much press coverage? Surely the VC's are performing their due-diligence and there are adults minding the store?"

I think there's so much money being thrown around by the rich boys, they start to look at it like gambling.

Instead of "How it works?". It's more about preceived value? All to wow a very gullible public? It's that perceived value that brings up stock price? It's those carefully carfted speeches. It's having the right look--the right back story. How many great ideas were lost because the founder didn't have the right look/dubious credentials(affilited at one time with an Ivy League School), wealthy friends, and a air of brilliance--usually just a turtleneck, or a very meticulous appearance. (It's funny how this industry has changed. You used to need to be overweight/underweight, and dress terribly in order to gain investment attention.)

Of course, the junk bond boys have their hidden stash, and the right LLC. When it all crashes, they will still have the best of everything. They will wait a few years, and set up shop. It's the retail investors that will be left holding the bag.

And, if you are pimping a complex scientific product, all the better, especially if you have a fall person? See a product that's kinda hard to understand, but has the o.k. of the paid pseudo science boys; that's gold! Create a product that people can't prove doesn't work--brilliant. Can't divulge trade secrets--great. Can't give up patents--great. I still wouldn't want to be on that Theranos BOD.

And to the dude who emailed me at home--don't!
The world development community is a weee bit larger than five. Neither is text editor and wrapper for a website "many jobs" ;)

I've seen many complaints about Spotify on e.g. Reddit - specifically about the fact that it's no longer native.
Seen also many complaints about bloat and slowness in Atom & VScode.

I understand why this toolkit is chosen, but companies can only push so much before the customers also push back against the decrease in qulity.
In Ubuntu, apt-get dist-upgrade does not upgrade to new release. It has just "smart" dependency resolution. I'm using it to upgrade kernels from command line, because normal apt-get upgrade won't upgrade them. If you want to upgrade entire distribution from a command line to a new one, you have to run 'do-release-upgrade'.

I was asking what you clicked, because at least in the main/normal/unity version, the upgrade isn't offered to the user. I was wondering why and after a bit of googling, I've found that statement about waiting for 16.04.1 before flipping the switch.

About alternatives: if your grandma can live without bleeding edge packages and third-party ppas, I think that Centos is a good alternative. Once installed, it will run for years. There's also Fedora, which looks nicer and more polished, but you have to go through pain of upgrading at least once per year (basically just like non-LTS Ubuntu).

GRUB: nomodeset disables KMS, that's why it is not default. Do you have an Nvidia card?
The definition is very arbitrary: a centi-arcsecond. Why not celebrate a galactic quarter second every 704 days? Just as arbitrary, but much more relatable. As starting point, just take the year 0, so we're living at 4 galactic minutes and 21.25 seconds now.
Guilty too
The Mossad Challenge
The last few places that I worked at only had one big repository hosting all of the projects. They weren't using Git though, SVN and Perforce.

In some ways I can see the ability to have fewer users and more repositories suited towards consultancies (specifically web development). Where there are a lot of projects and customers.
How are you connecting to the site? Genuinely curious as it definitely does not support HTTPS which the sibling comments confirm. Are you on a work computer with proxied MITM certificates, maybe some badly-configured security software (like Superfish), or something else? It would be good to know why this is happening.
Respectfully disagree. I find the commit pages and issues pages to be much more clean and informative on bitbucket, in particular the commit pages with the "subway graphs". The closest thing I've found on github is the "Network graph", which is really hard to use (you have to mouse-over each commit dot to see the commit message, etc)
Grafana 3.0 Stable Released
10 Organizing Tips for Web Developers
I use DirectLinks by Canisbos (http://canisbos.com/directlinks). It strips the JS from Google and Facebook links and takes me directly to the page. Added bonus: you can copy a link on a Google search result and it will actually copy the link.
I had a Japanese ID card, when I lived in Japan. So the notion must exist.
> How common is it to use this over include guards?

Not very. It works in Microsoft's C compiler but can't be relied on elsewhere.
Is that a Wartburg 353 in this photo: https://cdn-images-1.medium.com/max/2000/0*L7BcV-FTlF0fu5xL.... ? It looks like one to me, and I had no idea that they imported Wartburgs into Iceland.
Your OS already has a 'file buffer cache' that keeps pages of read files in RAM and discards them only if the RAM is needed for something else.

I made a neat little application-accessible key-value cache that used these pages. It means you can write keys that end up in your OS's file buffer cache, and if the OS doesn't need that RAM for anything else, you can read them back later.

http://williamedwardscoder.tumblr.com/post/13363076806/buffc...

Sadly not a mainstream thing :( ;)