skysight-inc/HackerNews huggingface dataset:
People do use the reference to const as a way to imply something similar to value semantics... but it's a huge mistake to say that implies that a copy of the value is implied. Ever since rvalue references were introduced, the rationale for having a const ref interface to avoid an unnecessary copy kind of became an anachronism.
Don't things like that usually have signs?
Here's one. Title: How to safely store your users' passwords in 2016.

https://paragonie.com/blog/2016/02/how-safely-store-password...
It's fixed.
I may own property on your street but that doesn't mean I can build a garbage incinerator on it. It's a zoning issue, and indeed there are already provisions that e.g. large trucks may not use some residential streets.

Pouring more concrete is not the solution, it's a policy problem, particularly when rat runs are used to circumvent congestion charges.

(That's not to say we shouldn't build more traffic calming for residential streets; we should do that merely because many traffic planners are stuck in a 1950s mentality and design residential streets that feel like a highway, hostile to anyone not speeding through them at excessive speeds.)
It is most assuredly not. Even its status as an 'anime' is rather tenuous.
Aren't there tax implications for forgiving the debt?
You can hash something like password+email+salt. If they don't know the email or salt it makes it hard to crack and even if they do it slows things down as they have to crack each password individually rather than making a rainbow table. Also using a slower hash like bcrypt rather than sha1 helps slow things down.
Local people may know that children live and play there, and drive more cautiously.

(I didn't downvote you.)
You think you test everything and then this happens :S I fixed it now, there was a log-in requirement to see the page
But your billing address will still be the same
Bret Victor – The Future of Programming (2013)
Isn't this by the same folks who brought us Telegram?
The way they want to do it may very well be the first true way to do organic farming, if by organic you mean "farming that delivers products with less mutagenic and cancerogenic content".

Contemporary organic farming replaces applying pesticides with pest-resistant breeds of plants, which simply make their own pesticides. This does not result, as commonly understood, in a reduction in exposure to pesticides, only to applied pesticides.

You can read more in this excellent post by Richard Muller on Quora: https://www.quora.com/What-are-some-mind-blowing-facts-about...
> For car width, I think that that's also a pretty reasonable width, since it's the perfect width to fit two people side-by-side comfortably, with a bit of room in the middle.

How do you know the width of a standard human isn't determined by 2000 years of people choosing partners that would fit beside them on a cart comfortably.
New DevOps Trends: 2016 State of the Cloud Survey
Agreed, 80-chars may be an accident of history, but it's an accident which happens to line up quite well with the human eyes ability to track horizontal lines of text.

It gets tiring listening to devs rage about the 80-char limit, then go on to produce code that's basically unreadable because it scrolls way off the screen.
Not lock-free data structures. That's usually a fool's errand. You need lock-free hacks.

Exhibit #1: the lock to protect lazy initialization. That just needs a CAS on the slow path and a load-load fence on the fast path. Delete the object you created if you lose the race and try again.

Exhibit #2: you can probably do dirty things to make loading from dicts/lists not require locks even though storing to them does.
Traffic calming measures (speed humps) in the area where I grew up seem to have cut down on people taking local roads to get around highway traffic.
A configurable/extendable bash terminal React component
It seems like it's easy to find collisions from the hash.

https://www.schneier.com/blog/archives/2005/02/sha1_broken.h...
If you go performance fee only, you show complete faith in your product, and it's a no-brainer for your potential customers.

If you want, go one time setup fee to reduce spammers/time-wasters who may use your system.
Ah yes, Facebook video is still in the pre-Content ID honeymoon period that youtube enjoyed before Viacom (IIRC) threatened to destroy it's business altogether.
There's no way that the trickle of revenue is greater than the cost of enforcement. Officer salary and benefits, equipment maintenance, and all the costs associated with the court system...
Oh god. I'm so sorry. :(
Bubblegum Crisis Tokyo 2040 - I distinctly remember almost giving up on that series because I couldn't see a compelling plot forming, but then around episode 12 shit hit the fan, hard. Seriously wild ride all the way to the end, highly recommend.
I would think the problem is the volume of traffic faced by pedestrians and neighbors, not specifically who drives.

Many roads are simply suitable for moderate traffic.

"Solving the problem" in this case often involves a roadblock in the middle so that you cannot drive through.

Compared to changing Waze, this is "fair". But are you really happier then?
> Just because data supports global warming doesn't mean everyone agrees how to solve it

But that's just it--large swaths of people think it's some higher order conspiracy. That it is all just made up.

> or likes being berated and shamed because don't drive an electric car or ride a bike to work. Not everyone agrees we should shut off the US economy to slow down global warming. This is where partisan politics gets messy and people start merging their facts and their opinions.

No serious group is doing that. But people are trying to ring the alarm bells that we will either have serious economic problems now, or severe ones later. There is no "keep doing nothing" and we'll be fine option.
AFAK if a conflict occure, it will create a "conflicted copy" of the kdbx file. You still have to merge files manually but no data will be lost in the process.
I've seen code where 20-odd characters were taken up by whitespace. Of course, at that point, you really want to split it out into different, named functions... code like that is unreadable for entirely different reasons than line lenth. Similar things the case for almost every single case where a line might become "too long" - I don't think the length is actually the issue so much as the complexity.
Maybe...and maybe not. Hopefully they won't decide to play WoW in the background and not get any work done.

I've had this experience with remote teams and sadly had to let many 'gamers' go.
Welcome to rush hour in every major city.
> We've all got widescreen monitors now, right?

Sure we do, but some/many of those widescreen monitors are only eleven or thirteen inches diagonally, and can't reasonably fit two buffers of text 120-chars wide without shrinking the font to eye-straining sizes (yes, even on retina screens).

Plus, this only gets worse as you get older and your eyesight starts to diminish.
Interesting, but does that not highlight even more so the backwardness of the FDA? If they are willing to take some anecdotal case where someone died who happened to be taking a drug--blaming it on the drug company, despite the clinical research which had been done, further delaying their going to market--that doesn't sound like a compelling argument for the efficacy of the FDA in these cases.
It's very likely that JS will adopt some things tried initially in TS. Both TS and Babel have implemented extensions to the class syntax, for example, which are being considered for JS-future.
I'm not sure this is a fair criticism. The nice thing about this tiny chunk of code is that there is only one aspect of this example program that needs to manipulate the already instantiated DOM, and that tiny chunk is explicitly brought up to the top level and separated and connected back to the program via the port mechanism. It would certainly be worse if this magic happen behind the scenes.

Of course it could be better, and that's probably what you are getting at. Ideally the machinery provided for building web applications would be more aware of the nature of web applications and have something in the box (still explicit and obvious, but in the box) to do something like setting focus.
Oops. Well, looks like they have something new: https://debtcollective.org/

EDIT: I'm not sure what their tactics are or whether I'd support them. I did like the jubilee approach.
His interpretation of the Venezuelan crisis. He pointed to the price of oil driving the issue. Nowhere did he mention the crazy socialist/populist programs that Chavez and his successor Maduro.

The main problem in Venezuela is the erosion of property rights. Nowhere in the report was this mentioned.
> However, it was still a problem: there were frequently people way over the speed limit when we'd hardly expect it...

Sounds like recourse should be attainable via law enforcement.
Trump in possession of launch codes is not more dangerous than Obama in possession of launch codes.

Thats not how the US system works.

And I am not saying that everything he says is always like that. It's just too much for my taste.
The City of Berkeley, CA, fixed this problem a long time ago, before Waze or even widespread GPS. Every few blocks they block side streets to all vehicles except bicycles. The effect is to be forced to take right or left turns that guide you back to the main through street.

Streets parallel to the through streets that are now impassible to cars are marked as "bicycle boulevards" and provide safer routes for cyclists. Residents still have easy access to the main roads.

It sounds like the residents of this Maryland neighborhood could adopt this practice and solve their traffic issue.
How do you store salt?
You are right about consensus. But I invite you to investigate how big the cancer industry is in worth/year and historically how it all has been created, and who owns it. Also to study the history of the American food industrialisation. Also to investigate who owns and influences the top media sources in the world. To be clear the point I was trying to make wasn't "GMO is the only cause of cancer" or "Genetical modifications on foods produce cancer". My point is "Current GMO products consumption is one of the contributors to cancer" - I'm not stating how, I'm stating that it has an effect. I know far more about the effects of meat and dairy than I do about GMO. But somewhere to get started would be here:
http://nutritionfacts.org/video/are-gmos-safe-the-case-of-ro...
(The page has links to all the scientific sources cited)
Jesus.

The guy creates and hosts a weekly political comedy show, researches topics, has a network spending hundreds of thousands of dollars on those topics, and you think it's a fair comparison to someone whose activism extends to "clicking the Like button on facebook".

And you're the one calling his attitude "holier than thou".
How do you know there's no way?

At the very least, it might be paying for itself....
3 Ways to Lose Potential Customers
There secured with tls, albeit with self signed certificates. But you can configure it to use a properly signed certificate.
IntelliJ now, at least in my opinion, is unmatched. Intellij feels more like a lightweight text editor now like a Sublime, but all the power of an IDE, whereas Visual Studio very much feels like a kitchen sink IDE. Intellij sometimes gets bogged down when it reindexes your files (which you can optimize by excluding certain folder), but Visual Studio sometimes brings my entire system to a screeching halt while I wait for it to do whatever it is it is doing.

Also, I know this is nitpicky, but having to press CTRL+K, CTRL+C, then CTRL+K,CTRL+U to comment/uncomment just feels obscene to me. I understand you can modify the shortcuts, and I am being petty, but CTRL or CMD+/ toggle comments off/on just feels much better, and that's probably one of the most used ones for me which is why I am probably nitpicking about it.
You don't have to be non-preachy to be genuinely funny, though, despite your arbitrary % guideline. Check out Bill Hicks. Nobody has ever accused him of being either too funny or not preachy enough.
New Features in Qt 5.7
Yup super frustrating, I'm in Oz and face this too.

Here's a link that should work on main part of the show:
https://youtu.be/Ii6TEJuvrM0
But it had to have affected your credit to some degree in the past though, right?
I should have been clearer that the other Pythons don't use reference counting. Preserving the C API can be done, see Ironclad[1] which allows using C extensions in IronPython.

But assuming threadsafe collections is still a problem - that will never match single-threaded GIL Python running in multiple processes unless some efficient way can be found to optimistically make the collections not threadsafe and only pay the synchronization costs when they're really shared between threads. I think that's a solvable problem, but not with the STM approach PyPy took. Still performance will likely lag the mutli-process solution which doesn't have that cost.

I would rather see a Python that introduces a way to allocate PyObjects in shared memory and with no thread safety. Since it's a new system, that can be done without breaking compatibility. Then sharing between processes could be as easy as sharing between threads and just as efficient. The GIL could stay in that case and the C API could be left unchanged.

[1] https://github.com/IronLanguages/ironclad
I was a little disappointed in how this story developed; it started with a family being destroyed by medical debt, and I thought it was going to develop into a discussion of medical debt, which accounts for 60% of bankruptcies in the U.S.[1]. Instead, it just talked about the buying and selling of debt, which is a legitimate business (often unregulated and operated by scum.) I'm not sure what he was calling for, here. That companies be required to hold on to their own debt?

I'm happy about the debt he forgave, though. An organization called Rolling Jubilee[2] does it without a tv show - you can buy someone's debt, too. I didn't notice a shout out; did I just miss it?

edit: learned from the comment above me that they've stopped doing it, and are now The Debt Collective[3], an advocacy organization.

[1] https://www.nerdwallet.com/blog/health/managing-medical-bill...

[2] http://rollingjubilee.org/

[3] http://blog.debtcollective.org/
But in case of passwords, the input masking (limited character set, length etc) makes most of found collisions nonviable? Because can't just freely enter colliding bits for the algorithm.
Mailtrain (the open source Mailchimp clone) is getting automation support
From casual observation of life, I've noticed an economic recession happens about once every 10-ish years, so the next one should come by 2020. I've been saving quite a bit, so I can buy everything when everyone else is panicking, if my job is reasonably secure.
Nice, nice! Good call. I am surprised that I've never heard of Dennou Coil before now. Looks extremely interesting, as does Time of Eve. Thanks.
And it's funny how you'd rather downvote me reflexively instead of finding a way to engage in an useful exchange of ideas. Please, do not downvote because of disagreement. I am voting you up as a sign of confidence that you can do better.

Let's try again, then: please tell me what is inherently bad at having options for "better earning individuals"? And what guarantees can be given by you that your proposal for a "fully-public" healthcare system would be more effective than the existing ones?

It is very easy to say "If Canada/Denmark/Sweden can do it, the US can do it as well", but for every well-reputed public system in the world, there is a bigger number of total disgraceful care systems around the world.

> That's a concept which those evil downvoters here on HN want to prevent.

The evil part is not in the downvoting. The evil part is in joining the mob rule, acting without any critical thought just because and just side along with your group identity, and in the end still consider yourself "being part of the good ones".

What is that you want to prevent?

Me, a supposedly middle-class citizen, of being able to make a choice?

For whose benefit? Will the poor and less fortunate be in a better situation if we force everyone else to be stripped of their choices?

At what cost? Are the countries with actual "universal, single-payer healthcare" being the most effective when managing the resources from their citizens?
Salting has zero effect on the targeted cracking of a single password. Salting protects against rainbow tables - sets of pre-calculated hashes plain-text to passwords. These are dangerous because an attacker has a large amount of time to pre-calculate hashes, but (hopefully) only a small amount of time to calculate after a dump before the password is changed. However, if you are starting from scratch and have a single password to crack, there's no difference between a salted and unsalted password.

Modern state of the art for targeted attacks is to use slow hash algorithms, such as bcrypt. They have little effect on normal operations, as most users will get the right password within a few tries, so you're adding a negligible amount of time per user. But the extra time has a huge effect when an attacker is trying to calculate millions of hashes for a single user.
I'm more surprised that linkedin stores passwords so unsafe considering the type of people that use their services
> Could you expand a bit on why it is insecure

Sure thing. I'm referring to https://blog.mozilla.org/warner/2014/05/23/the-new-sync-prot... for details of the new protocol.

Your synced data is encrypted with a 256-bit key kB. So far, so good. The problem is that kB is encrypted using a function of your Firefox Account password: if someone can guess or intercept your password, then he can decrypt kB and then decrypt any synced data.

So, how hard is it to guess or intercept your password? Well, if you can remember your Firefox Account password, it's almost certainly guessable given enough machines. Human-memorable passwords almost never have high enough entropy to survive sustained attack.

But maybe you store a truly high-entropy password (e.g. i2FH9E0G6PoCZm41C0pIJdLg1uOcGaA0GfhxKUtSQ) elsewhere, and enter it into the Firefox Account sign-in screen. Now no-one can guess your password, and that means that you're secure, right?

Wrong: the Firefox Account sign-in screen (https://accounts.firefox.com/signin) is served from Mozilla's servers, which means that any time you visit it they may choose to serve JavaScript which transmits your password to them (normally they would perform all operations on your password locally).

'But I trust Mozilla to write Firefox!' you might argue. Sure, but it's (theoretically) possible to verify the Firefox source and binaries once; it's (theoretically) possible to verify that the source or binary they serve you is the same as that they serve to the rest of the world. With code delivered online, an attack can be targeted just once, at a single person: if you're not logging each and every login form's source code then you're exposed. A malicious (or compelled) Mozilla employee (or employees) could target a user; moreover, any government Mozilla is subject to could compel it to target a user.

Their old system performed all operations locally, always; it never downloaded and then executed source. It was secure. Their new system is not much better than, 'trust us.'
The nature of university research is to publish. If there is no publication, the tree didn't fall in the forest. Now here is what I feel is a crucial point: The act of publishing permits the professor to create perpetual private property. Without any investment, (technically, there is opportunity cost) the professor is able to generate property that can only become more valuable with citations and subsequent work. Professors having many cited publications have many benefits: greater ability to raise grant money, ratchet-up salary increases, greater consulting and visiting opportunities, lure of better grad students, post docs, and visitors.

This economic system is not intrinsically bad. But I believe, in the end, simple private property creation is a substantial part of the foundation of academia.
>That doesn't stop it communicating with the mobile network. At least in the UK, you can still call emergency numbers (999, Childline, Samaritans(?)) without a SIM.

You haven't been able to do this since 2009. It was changed due to the high volume of hoax calls.
I think "gradual typing" like Flow might be a nice middle-ground.

You're still free to quickly sketch out ideas without worrying about type checking, but you can solidify things by just adding /* @flow */ to the top of a file and fixing the errors.

I haven't actually tried Elm though, so maybe a "middle-ground" isn't necessary.
Cryptocurrency presales and the law of diminishing returns
How do you know it's your browser doing the redirect rather than the server? The distinction is important because if it's the latter, you're vulnerable to sslstrip
Umm isn't that sort of the whole point.
That question should never even need to be asked. The library you're using should take care of that for you.

In PHP:

$storeMe = password_hash($plaintext, PASSWORD_DEFAULT);
if (password_verify($plaintext, $storeMe)) {
// Logged in
}

The detail is totally abstracted away. All sane password hashing libraries offer this API.

See: https://paragonie.com/blog/2016/02/how-safely-store-password...

EDIT - CANNOT REPLY:

> One major failure of this article:
>
> You should generate a random salt for each user and store it alongside the user
> record in the DB.

No, you shouldn't. Your library should do that for you, and store it as a single string that's opaque to the developer.

> I completely disagree. This implies that my DB ORM handles password stuff,
> which doesn't make sense.

See the passlib section: https://paragonie.com/blog/2016/02/how-safely-store-password...
FunctionalPlus, a C++ library now has a search website for 300+ free functions
The C methods do unfortunately matter to all implementations. They gave thread safety and almost all Python code in the wild relies on that property, so it's become an undocumented property of the Python language specification and an intrinsic flaw of the language itself.
As another commenter noted, it's not (just) about screen width. It's about having a text width that allows your eyes to track both column boundaries as achoring points. If a text is too wide, your eyes will have trouble finding the start of the next line.

For the same reason, newspapers use multiple columns, even though the paper itself would allow for 200-character lines.
'Ask for Directions' Form with Google Maps Using HTML
This is the perfect example of the content-free HN posts that are topping the charts lately. It contains not a single example of a "helpful error message." Nor a single line of code from the language in question. Just a 173 word free-verse poem with some feel-good handwaving.

If this were a post about soap (the salt, not the protocol) we'd downvote the post as obvious content-free shilling. But because it's some obscure language that doesn't even make the top 100 TIOBE language list, here we are, upvoting someone we've never heard of, celebrating his opinion of awesome compiler error messages that none of us has ever seen, for a language that nobody uses.

http://www.tiobe.com/tiobe_index
Haskell does the same thing.

EDIT: I didn't mean to say that Haskell is as easy, or that the error messages are as good. I just mean that the error messages can give you a nice reminder of what you were working on, which I believe was the point of this post.
There's this good link from Thomas Ptacek: https://gist.github.com/tqbf/be58d2d39690c3b366ad
The marginal cost of those items, for the police anyway, might be close to 0.
80col is narrow for Java because Java has very long method names, explicit tyle declarations, and class names on static methods.