skysight-inc/HackerNews huggingface dataset:
Especially after seeing that "rootmydevice" string in the code, I think there's much to be said for this in relation to today's world of locked-down devices which resist control from even their owners. Given that their SoCs are meant for such devices, maybe it's AllWinner (or someone at the company)'s way of rebellion against that. If so, I'm glad that there are still people out there who do not believe in the user-oppressing culture of "security" that seems to have become the norm and are actually trying to do something about it. Maybe it really was just a debugging oversight, but either way, I'm not outraged by it --- contrary to what the media seems to say. This is a local privilege escalation for software intended to run on a device that you --- and only you --- are supposed to own anyway.

Relatedly, here is a post 6 years ago by someone putting in a root backdoor in a device he designed --- and explaining how to use it:
http://www.bunniestudios.com/blog/?p=1140
If that was today, someone would discover it, scream "backdoor! security vulnerability!", and it would be all over the news like this one. And that makes me very sad.
One concern is, what if the person doesn't really want to die but the "care"givers want their ordeal to be over, or want to collect an inheritance, or collect an inheritance before it's all gobbled up by end-of-life care?

In genuine cases of wanting out, I support it, but I'm not sure how to design the right controls around it to be fully comfortable with it.
Just a few years ago nobody would have even thought about that those unicode symbols might have some kind of gender.
UberPOP scrapped in Sweden
It seems nobody really understands how to handle non-ascii URLs. To get it right for Scrapy (i.e. do same as browsers) we checked how several browsers behave; the results was consistent but surprising, if not crazy. Before sending an URL to a server (e.g. when user clicks a link) browser does the following:

1. Url is parsed into components.

2. Domain name is encoded using punycode.

3. URL path is encoded to UTF-8 and then percent-escaped.

4. Query string and fragment are encoded using page encoding and then percent-escaped. For URLs entered to address bar it seems that UTF-8 is used, not page encoding.

5. The result is joined back to a single byte string and sent to a server.

So this means parts of a single URL are encoded using 3 different encodings, and one needs to know the encoding of a page URL was extracted from to send it correctly (i.e. to send it the way browsers do). I haven't seen this algorithm stated explicitly anywhere, but this is how all browsers work. It doesn't make any sense.
Visualization: Water Stress on River Basins
Any company that has a sysadmin should simply host their own GitLab.
I was writing in a general sense. You don't see many fat models, do you?
Wealth: The Toxic Byproduct
While I personally, regardless my health would never end my life...

...anyone that believes they would be able to deal level of suffering, mindlessness, toll on friends & family, etc. - should try experiencing it for themselves to see if they would be able to deal with it and provide aid to those they've forced to live on.

Everyone should have the right to die, to believe otherwise is inhuman.
While in this case the backdoor may have been deliberate or accidental, more generally, Hanlon's razor is a heuristic for harmonious social relations -- not truth-seeking.
How a Russian revolutionary foresaw the rise of Japan
There's a great deal of fear that linking academic success with genetics will embolden discrimination in society.

It's much easier to 'cut your losses' and overtly under-educate a certain group of people if you can legitimize that 'they won't excel anyway'.
I have this for starters: https://gist.github.com/BYK/66dfd985491b483bd140
I think it's related to christian morality.
They belive something along the lines of "God gave you your life and only Him can decide when it should end"
The open nature of the science of classification guarantees fights
A slight problem with that is that the definitive documentation for the opcodes are gigantic PDF manuals that may be hard to obtain for some architectures (e.g. ARM-ARM).

There are some assembly opcode reference manuals on the internet but they're of varying quality and typically cover only one instruction set per site.
That depends on the data. I believe Atom uses the analytics privacy feature that deletes the last digits of the IP. That way it doesn't fall under the privacy directive.
Another free CAD program for pcb making is designspark pcb (http://www.rs-online.com/designspark/electronics/eng/page/de...). It's not opensource like Kicad and gEDA, and it's only available on Windows. But it's easy to learn, very polished for free software, and quite capable. Lots of tutorials as well. There is a lot of free software available for hobbyists/makers today and they're pretty impressive compared to commercial software.
That's some pretty useful documentation there. I hope that it at least forms part of a submission to the WHATWG folks.
FTA:

> The term URL was later changed to become URI, Uniform Resource Identifiers

rfc3986:

> A URI can be further classified as a locator, a name, or both. The
term "Uniform Resource Locator" (URL) refers to the subset of URIs
that, in addition to identifying a resource, provide a means of
locating the resource by describing its primary access mechanism

Personally, I don't treat errors like that as massively damaging to the credibility of the rest of the article, but it is rather jarring, and I know that people do post "Stopped reading at..." comment about this sort of thing.
Very much so. My pet theory is that most business management practices evolved from manufacturing production line environments, and the application of these management practices to, say, running a university or research facility is cargo cult in the extreme.
If you already invest into this monthly, why don't you just have GitLab on premise?
Carl Icahn is Betting on a Stock Market Crash
I didn't say you did. Well, I don't think I did. Either way, we agree it wasn't disingenuous. I'd also agree this change won't be beneficial to all.

And GitHub is also allowing everyone to make a choice. "...you'll have at least 12 months notice before any mandated change to your plan."
I think he's worried that someone will break into their website and steal all the bitcoin. There could be no way to track down the offender, and no way to reverse the transfer.

You might say that security is the probability of a successful attack times the penalty. Maybe it's harder(less probability) to steal Bitcoin than to get your routing and checking account number and drain the account, but in the second case you call up the bank and get the money back(less penalty).

I don't know that 'Bitcoin is not a secure currency', but storing large quantities of Bitcoin is a security hazard the same way storing large quantities of gasoline, crude oil, and fireworks in your garage is. It makes sense to classify that as a security issue, since "The bad guys light a match in our garage" is an attack vector that needs consideration in the security policy.

If you keep the Bitcoin on an airgapped computer, require two technical personal for every interaction and document every step, install cameras on the premises to watch for intruders, ensure that any received "hot" Bitcoin is backed up to a separate secure "cold" facility using regular secure transfers, ensure that the Bitcoin is transferred daily to the machine and that the machine itself transfers it to a new address that nobody knows until its needed, and use one of those fancy 3-party transactions requiring the mayor to sign off on any withdrawal; then maybe it would all be secure.

Similarly, oil refineries do manage to process crude oil without burning down. I bet you the people who secure it are paid a lot.
Could you tell what you find better about the pull-style operation mode? My experience with pull-based monitoring tools comes from Zabbix/Nagios and it wasn't very pleasant (still had to configure clients extensively while keeping everything organized in a central database -- which is hard if your servers are coming and going all the time).

We're currently using collectd+influxdb+grafana but it looks like Prometheus might be a better option in the future, since we plan to use Kubernetes more and more.
But does bitbucket/etc have emoticons in commit messages?
> There's not enough demand to make them competitive in price-performance.

There does not need to be demand: Steve Jobs (in)famously said that where there was no market, "create one".

I for one would absolutely love to be able to buy an illumos-powered A4-sized tablet which ran a SPARC V9 instruction set, plugged into a docking station, and worked with a wireless keyboard and mouse to be used as a workstation when I'm not walking around with my UNIX server in hand. Very much akin to Apple Computer's iPad Pro (or whatever they call it, I don't remember, nor is that really relevant).

But the most important point was, and still is, and always will be: it has to cost as much as the competition, or less. Sun Microsystems would just not accept that, no matter how much I tried to explain and reason with people there: "talk to the pricing committee". What does that even mean?!? Was the pricing committee composed of mute, deaf and blind people who were not capable of seeing that PC-buckets were eating Sun's lunch, or what?
I was a member of the ICE-SAR for some years (left due to my inability to be active and stay up on things during my university years).
Everyone, excluding a very small group of administrative and specially trained personal, take part in ICE-SAR as volunteers. There is no pay, but you do get access to some fantastic company of people, specialized equipment and training. So it is completely worth it if you enjoy any kind of out door activity, and don't mind lending a hand when people need help (most see this as normal community service).
And most, if not all, members in ICE-SAR would agree that the service should be free for whom ever needs the help (for obvious reasons).

However, the issue is that up until a few years back Iceland didn't have such insane influx of tourists every year (estimates for 2015 are ~1.2 million foreign nationals. That's more than 4x the total population of the country!) and the amount of calls ICE-SAR got due to tourists where manageable (there is equipment costs, fuel and then being able to leave the office to go glacial trekking for lost souls).

But now the amount of calls seem (from what I hear from friends still active) to have completely caught everyone off guard. And since we don't have an army and the police force is small and mostly tied to each town/city, there are no other alternatives than ICE-SAR.
And having such a strong tradition of the government/police being able to rely on the volunteer network, it is difficult to suggest a change where someone starts paying for the work. And what most people suggest is that the government starts paying more for the use of the ICE-SAR service (or support it with more funds), since all emergency calls are directed to the state run 911-esque help line that then decides if a search & rescue operation should be initiated. But you can imagine how difficult it is to start charging for something that up to this point has been free.

Just as an extra note:
Currently ICE-SAR gets most of it's funds through the sales of fireworks and xmas trees (fireworks are illegal to shoot up in Iceland except during xmas holidays, ~15 Dec-10 Jan) and sales of a small key chain mascot.
39 studies about human perception in 30 minutes
As pointed out by numerous other comments, this pricing model makes no sense for a lot of use-cases: external collabs, inactive collabs, wide org structure etc.
Many companies would expect to now pay a magnitude or multiple more than before, this is hardly "lunch money".
Looks like a nice release! One thing I really miss in grafana and seems like it's not included is alerts.

It would be so damn convenient to have data visualization and alerts on the same system because usually they are strongly related from the user point of view. And, well, one thing less to setup and maintain.

However, I am aware of the debate whether alerts do actually belong to grafana, or should it be responsible for visualization only and seems like they have settled with the later. Which definitely makes sense because once you start to expand to alerting it's a whole new world and I respect the choice. So yeah, I am a bit sad as a user, however I totally get the authors.

Maybe it will be available as a plugin?

That being said... What tools HNers are using for placing alerts on data stored in graphite?
It certainly is not normal, i never worked for a company bigger than like 40 people, so there might be the difference. But this sounds like a harmful environment for a coder.
Hackers Attempt to Hold Capitol Hill Data for Ransom
You (and the other contributors) are a machine. Congratulations on the release!
This is what it is shown:

"This server could not prove that it is www.popsci.com; its security certificate expired 153 days ago. This may be caused by a misconfiguration or an attacker intercepting your connection. Your computer's clock is currently set to Wednesday, May 11, 2016. Does that look right? If not, you should correct your system's clock and then refresh this page."
Walmart sues Visa over chip transactions with debit cards
Haskell in Industry, Startups and Business: 2016 Report
This always drives me mad. It's particularly bad if I'm trying to read content sites on a train or somewhere with patchy reception - open half a dozen tabs to give me something to read while I'm disconnected, and then switch to them only to see the content disappear before my eyes. I'd nominate it as literally the worst thing about mobile browsing
I don't think there is a question in that post. Also there's "non-profit" (business) and "non-profit" (hobby).
Storing strings as a linked list of characters in Haskell was a design mistakes imho, which lead to the proliferation of various efficient string types implemented in libraries.
> you die at every femtosecond of living

This is an interesting theory that has its roots in solipsism: the belief the world vanishes the moment you close your eyes. The fact of the matter is that it (and solipsism) just don't seem to be true, not even to solipsists. If you truly believed you were dying at every second, you'd act in all sorts of ways against your long term survival, but here you are posting on the internet.

Even if we take the position as true, it seems entirely reasonable to perceive the end of the "chain" of "yous" to be a tragic event.

> But who says that those living beings aren't just one big living being? Our brains tell us so.

Well, our brains, as well as the general evidence we see in the world around us. If we were one giant interconnected entity, dying would probably be very different. However, there's very little reason to assume that as a given - I can't talk to my dead relatives through any of my living ones.

I think this argument is perhaps more simply stated as "you were never a large part of the human race, so your death will not matter in a large way either" which is quite true, in fact. My counterpoint would be that the death of the individual rightly remains terrifying to that individual. If I were the human race, I would correctly not concern myself with the death of a few of my brain cells (and I do not, regarding my own real brain cells), but I would regard the death of the human race (myself) as truly important.

If anyone's interested, I've written about some of these kinds of arguments I've heard before: http://vincentwoo.com/2011/04/30/arguing-for-immortality/
thank you for your advice. being part of developer communities really helps.I have gained a significant amount of knowledge in these online meetups, forums.
Integrating Varnish – how to have Varnish ask for advice
Travis CI is pretty minor player (google search 10M > hits), and I would say 3rd party service integration is exactly vendor lockin.

Imho this makes sense, because users who cared about pricing already moved on to cheaper alternatives and/or not used github to begin with. I agree, mass migration or phasing out github is unlikely because of the associated costs, however with all the other great services around new users might think twice where to sign up.
> For URLs entered to address bar it seems that UTF-8 is used, not page encoding.

Maybe I'm misunderstanding, but how could a browser use page-encoding before the page has been fetched?
It certainly could be, in principle. I don't think I've ever heard anyone seriously claim that they actually do, though.

I'm not sure why the scare-quotes around "cost"; there obviously is a cost, typically "2 and 20". So the effect of the hedge fund is: it plays the zero-sum game and thereby redirects money (say an amount x) from a bunch of other market participants; the investors pay their 2-and-20 fees (call the amount c); the hedge fund is doing well and x>c so the investors are happy. Those other market participants are losing an amount x (relative to what they'd have had without the hedge fund) because the game is zero-sum; of course they are not happy, but who cares about them?

(Actually, they might be happy -- the effect the hedge fund has on them is probably small, and if the market is generally doing well they'll doubtless feel fine. But they'll be worse off than they would have been without the hedge fund in the market.)

It's worth being a bit careful about who loses out and how. It typically isn't the other parties the hedge fund trades with. (Consider a case where the hedge fund predicts that an asset will increase in price, buys it from someone else, and sells it later at a handsome profit. Have they harmed the person they bought it from? No; they would have sold it anyway, and they'd have got a lower price for it.) The losers are all the other people who are making trades similar to the hedge fund's, and have to accept very slightly less favourable prices because the hedge fund is making the same trades as they are. So, e.g., if you expect that Apple stock is going to go up and buy some, and if some hedge fund with cleverer people and faster computers and (don't say this too loudly) more inside information has made the same prediction before you did, then you will be paying a higher price because of the hedge fund's activity.
I'd love to hear how others manage it too. I have a bunch of little python scripts in cron jobs that pull / compare numbers from graphite and then post to slack. Adhoc but at least there was nothing much to set up / maintain and it's totally flexible.

As things expand though I'd definitely like to move to something to look after it for me.
Qt Creator 4.0.0 released
200MB is how much space eclipse takes up
bitbucket used to offer 5 private repos for free
I find somewhat hilarious that the supposed harbingers of this "collapse" are staunch members of said "oligarchy" (an elitist billionaire and a career politician).

Revolutions are not as they once were...
You would need a lot of margin to not base the price on the production costs.
If 200 users cost double as much as 100 users, it's hard to not base the price on number of users.
I've always found VSTS to be at the same time expensive, bloated and missing essential functionality. I think the mentality of .NET / Microsoft developers is strange. By following Microsoft's lead, wherever that may take you, you're missing out and you don't even know what :-P
Pro-life.
Thanks, there are ways to deal with this, providing all the texts to translate to the translator team without the code of the app. Anyway thanks again.
You could try Seyren https://github.com/scobal/seyren
You again! (:-) You know that the VHDL code for UltraSPARC T1 and T2 has been open sourced? If I had enough knowledge about synthesizing code inside of an FPGA, I would be building my own SPARC-based servers like there is no tomorrow!

As long as the code for those processors remains free, and a license to implement a SPARC ISA compliant processor only costs $50, the SPARC will never really, truly be gone, especially not for those people capable of synthesizing their own FPGA's, or even building their own hardware.

Some people did exactly that, a while back. Too bad they didn't turn their designs into ready-to-buy servers.
Take luck out of the picture. Learn how to meditate. I find that when the suckiness of mortality intrudes upon my thoughts, twenty minutes of meditation clears my mind and prepares it for handling more immediate concerns.

Being trapped in negative patterns of thought can be unhealthy. It's best to break those patterns. Exercise is also very helpful.
This is getting downvoted, but at least in Belgium it is mainly Christian organisations that opposed, and continue to oppose, the euthanasia laws.
Patience+Is+So+Much+More
Low Priority Bootstrap Bug Report for the ASP.NET Website Team
> There's not enough demand to make them competitive in price-performance

High-end chips only need to compete with other high-end chips. And low-end SPARC will not take off now that x86 has taken over.
beautifully written.. I cried a little bit.
I found this (http://www.restapitutorial.com/lessons/whatisrest.html#) to be a better explanation.
There is only one rational reason and that is to discourage the impulsive. Suicide is not something to be entered into lightly.
Of course they're coming from within the oligarchy. How is an "outsider" going to succeed, when you need massive campaign funding to even make an impression in the primaries?

We might see a more diverse background in revolution leaders if people take it one step further and ignore the democratic process.