skysight-inc/HackerNews huggingface dataset:
Ah, but there's the rub. If you have nukes and your opponent has nukes, and your opponent tells you they will use their nukes if you use yours, when do you use your nukes?

Probably to prevent core territorial incursion to the extent it would dissolve you as a viable entity. But to protect / secure the South China Sea? To win a proxy war in the Middle East? Where's the line?

Because it's certainly not "as soon as hostilities break out."
You'd have to be satisfied by your lifelong pension.
I absolutely adore this blog. Each entry is incredibly detailed and well written. My favorite is the one on Nintendo's influence on the PC industry:

http://www.filfre.net/2016/04/generation-nintendo/
I've noticed that some projects don't link statically anymore with Qt 5.6 but others do. I believe the CMake scripts are insufficient while qmake projects works most of the time but also not always. I haven't figured it out. If you have links with more info, I'd be curious. Also, I take it it's not possible to configure a Qt5 build to produce .so and .a files, or am I wrong?
> depend on the latest glibc point release that happens to be installed on your system.

glibc doesn't break API dramatically with each new version ... Gtk does and that's an insane burden put on developers using that thing. You can't develop stable tools with an ecosystem that keeps on breaking. Why should I bother with Gtk when I can learn a more stable GUI framework ? that's right, and I don't. Then the Gnome Foundation complains people aren't using Gtk ... I see a lot of Gnome projects started then abandoned, only to see a new project doing exactly the same thing being built from scratch afterwards. For instance, they are working on a new IDE Gnome builder, who the hell needs this when multiple projects like Gedit get very little contribution today ? To me the Gnome foundation is wasting money with all that stuff, while investing very little in the documentation for instance. Their website is a mess.
One that it doesn't meet. Try to read and understand the UDF spec sometime.
I discovered "Tinfoil for Facebook" some time ago. It's a good replacement for the official facebook app on Android. It's a wrapper for the facebook mobile website. It doesn't eat the battery, requires minimal permissions. It hasn't been updated in a while and that's a good thing :)

https://play.google.com/store/apps/details?id=com.danvelazco...
Easy sorting in Go
If the signal handler breaks the lock, I suspect it's more by accident than design. This is not a reasonable thing to depend on.

> presents a semi-coherent as-is structure entering and exiting the handler's lock

I don't understand the word "semi-coherent" in this sentence. Effectively, a signal handler interrupts some thread and doesn't allow it to proceed until the signal handler is finished.

In general, you could say there are three aspects to why locking is needed:

* hardware memory barriers. Here I think you're fine; really the signal handler runs on the thread in question so anything the interrupted thread did the signal handler sees on entry and likewise anything the signal handler did the interrupted thread sees on exit.

* simplifying your code (or the library code you're calling). Even ignoring CPU/compiler re-ordering, it's much saner to just write your program such that you guarantee certain invariants are held when the locks are not held and make no such guarantees while the locks are held. If you have to look at all possible interactions line-by-line or instruction-by-instruction, there are so many more combinations to test. It's not as hopeless for thread-vs-signal as with thread-vs-thread (O(instructions in critical section) vs O(2^instructions) orderings, as the signal handler always runs to completion instead of interleaving with its thread arbitrarily) but it's still plenty bad enough.

* compiler memory barriers. You're basically screwed here IIUC. Compilers can and do bizarre things such as reusing your variable to store something completely different. https://software.intel.com/en-us/blogs/2013/01/06/benign-dat...

Except as a last-ditch attempt at gathering debugging information on crash (where not perfectly reliable is likely acceptable), I'd say it's totally unreasonable to ever access mutex-protected state from a signal handler that can run while the thread it interrupts might hold the lock. Note this includes malloc and free. Don't call those from a signal handler. (I suppose you might get away with it if the interrupted thread never calls them or only does so with the signal handler blocked, but that'd be very unusual, and it's still not guaranteed to be safe according to the POSIX standard. I'm not sure off-hand what the kernel/libc might do that would mess this up but I wouldn't bet on it.)

As I mentioned in another comment, I think of signals as two separate things. Process-directed signals can be handled relatively simple without even requiring signal handlers. Thread-directed signals are tricky and you're doing them wrong.
But those things do go wrong all the time. Luckily they don't dictate who controls the entire country.
>It's just standard programmer NIH hubris; we think we can do it better, therefore we should.

It's not NIH at all. Electronic voting has not been implemented sufficiently. It could be done. It's not about doing it better, it's about doing it at all. It's not-invented-anywhere hubris, and that's plenty of reason to do something.

People aren't much harder to manipulate than machines, and they're also just as transparent. There is no fundamental reason to believe computers can't be more secure than humans when it comes to collecting data and tallying it.
It seems to me that the more you have a propensity to think (or over-think), the more likely it is that you may be able to construct rationalizations (excuses) before/during the moment as to why you might not be able to do something. More insidiously, you can construct these excuses after the moment passes, like an endless negative Nancy TiVo gone berzerk in your mind.

There is no one-size-fits all solution to self-doubt, lack of confidence, etc. Really, the only solution for nagging self-doubt is to generate contradictory evidence to self-doubt. That is, do something.

Motivation is not ideal either because usually it makes you think you can do something.

The more I work on meditation and visualization and other techniques - the more aware I am in the actual moment of when I am resisting doing something out of my comfort/risk zone. There is a lot to be said for Zen and Stoicism, as well. And in the end, only you (or your closest friends or partner) know when you are not pushing yourself.
Regarding entitlement, it's not just an advertising company the 'product' is tied to. Google is of course one of the most aggressive global profit-shifters for tax 'minimisation'. I would prefer to call it avoidance, as I can't see any other reason for it, but I don't have pockets deep enough for the legal defense to use a word like that (or evasion).
A Regular Old Plumbus in Php
You were downvoted (I downvoted you) not for being critical of any company, but by aggressively making profoundly sweeping statements in a way that seemed designed to troll people. What's more, what you said is incorrect. You don't need to attend (and indeed when I worked on OS X applications I never did)--you wait less than 24 hours for the videos to be posted, or you read the documentation that describes in detail any new features of the operating system.
Presumably you would know before applying (or at this level, more likely the headhunter should know before approaching). In any case, it's something that would probably be phased in. If you take a position, are reelected, or continue in a position 3 years after the law takes affect, then the the law affects you. It would be interesting to see who jumped to the private sector before it affected them.
Why buy? Why didn't MS invest?
I suppose it goes from one to the other around the time that the minority has actually successfully dominated the discussion well out of proportion to their numbers. I think the far-right in America has been successful at this via movement conservatism for the past few decades, and definitely falls in scope.

Again, when is enough, enough? Is there any point at which you are comfortable - again at a societal level not as an act of Congress or something - with informing these people that their positions are unpopular and hated, and they need to, and if they refuse will be made to (e.g. r/news reaction here), quit hogging the public discourse in favor of some other people with fresher ideas?

I mean, it's not like "gays shouldn't be married, Muslims should be banned, taxation is theft, Obama isn't eligible for office, Hillary left people to die in Benghazi for no reason at all, black people are fools for the Democratic party, Mexicans are both lazy moochers and taking all our jobs, and on and on and on and on and on" hasn't gotten a fair hearing. Not according to my Facebook feed, anyway.

So, again, at what point is it okay to tell these overbearing loudmouths to shut the fuck up and give the 80 other people in the room a chance to speak? Is it ever okay? Should we doom ourselves to rule by the loud and obstinate?
> no need to be a crypto expert to sign cookies

You literally just said the equivalent of "no need to be a crypto expert to implement cryptographic signatures."

Please don't do that without a crypto expert on staff. They'll be able to avoid side channels that non-experts will never even imagine. To wit: http://blog.ircmaxell.com/2014/11/its-all-about-time.html

It's just a bad idea all around.
Pointless. Just add docker or vagrant or even chroot as a build step and be done with it.
It's not very clear though, the investor could've just as well overheard a conversation. If they didn't commit a crime, why should they be scared of the SEC?
I think that JWTs are not what you're looking for.

JWT's are meant to be stateless. Encrypt some claims, sign them, but no storage is necessary. A truly stateless system and the concept of revocation are mutually exclusive.

When you begin keeping track of nonces, jti's, or whatever, you've lost this "stateless" property.

In my opinion you should be using short lived JWTs and then don't worry about revocation.

About your specific questions. There are many pitfalls and operational issues associated with your solution.

- Changing a per user key is complicated. If it's a shared secret you have to securely redistribute it. If it's asymmetric key you need to republish the public keys, and have consumers poll to get the new key. Both of these kind of suck.

- The JTI thing is fine if you follow the spec and have a strongly random JTI.

Either way, you're trying to solve a problem that JWT is not meant to solve. Signing a new JWT and regenerating new JWTs is a cheap operation. Keep them short-lived, keep it simple.
If we were going to completely rely on flatpak to solve our problems, we would be able to break ABI every 6 months w/ each GTK release. But that is not a tennable solution today (or likely ever). Distributions ship desktops which will have applications that naturally live outside the flatpak runtimes.
I use a window manager (or Wayland compositor) with select GUI apps and no desktop environment, so I'm not the customer of the GNOME or KDE projects. I don't have a 4k screen, so the, from my perspective, wasted vertical screen estate in Gtk3's supported and promoted style is a usability disaster for me. As I wrote in a sibling comment, I've been using the same Gtk2 theme I wrote more than 12 years ago and never had the urge to change it because the behavior and color scheme of that Gtk2 Raleigh mod suit me well. With Gtk3 I had managed to kinda imitate that despite the limited emulation in CSS of Raleigh, but in 3.20 it all blew up for me (even vanilla Raleigh).
Consider this code highly experimental and yourself highly mental if you try and use it in a production environment

http://www.kegel.com/c10k.html#examples.nb.sigio
Finding respondents to user surveys
What (free) tools do you use to find a customer panel/group that can take your survey and provide representative data.
I think AT&T is the second one to admit that they do that and then charge you money to get out of it. The first was a small local ISP that didn't offer any way out and quickly backed down after pushback from their customers.

Chances are the other American ISPs do it, they just burry it in the terms of service. So AT&T figured out they could make some extra cash off of their privacy conscience customers who don't know how to use VPN.

And chances are they still collect and aggregate the data, they just don't retarget you specifically.
GNOME's runtime will certainly ship an up to date GTK.

However, there is nothing stopping someone from creating another runtime (or even doing a gtk.org runtime) that is more conservative in nature.

And if you use a compiler toolchain that does reproducible builds, you'll still get all the deduplication magic from OSTree.
Ironclad, steam-powered ships?

Another good counter argument is that there were lots of wars between the US Civil War and World War II between first-class opponents of relatively similar capabilities, including both of those conflicts, World War I, the Franco-Prussian and Russo-Japanese wars. Since World War II, only arguably has the Korean War pitted two relatively equal foes against each other, and even then China had a huge advantage in manpower while the UN forces had a huge technological advantage.

If the NBA was dissolved and Golden State periodically faced college teams, 75 years from now they would probably still have a small-ball 3-point-shooting lineup. That's the state of military doctrine today. Outright defeating a nearly-equal opponent is impossible in the nuclear age, so the only remaining problem is how to curb-stomp much weaker opponents as humanely as possible.
LASSO THE MANY DEVICES TRYING TO ACCESS Your NETWORK
So the main thing I've observed is rsync'ing web files from a linux server to an osx laptop, and back to the linux server, ends up with a bunch of duplicate decomposed utf8 filenames on the linux server. It can be avoided with careful use of rysnc's "--iconv=utf-8-mac,utf-8" etcetera, but it feels super-unnecessary. Fix it already :D

More details here http://serverfault.com/a/427200

PS: I've been using LC_CTYPE="whatever.ISO8859-1" and an ISO-8859-1 Terminal.app locale forever since I seem to keep dragging a bunch of legacy filenames around (having started on MS-DOS and FreeBSD 2.2) and ISO-8859-1 still seems to be the only locale that lets me "see the bytes" matrix-style instead of a random amount of "?" chars. Curiously, Finder.app seems to keep up very very well despite the odd encoding. Crossing my fingers the new APFS will act more like Linux.

PPS: Java is especially hilarious when launched with -Dfile.encoding=utf-8 as it is literally impossible to access some files from there.

And don't get me started on .DS_Store :P
It's already revolutionizing in India http://www.ujala.gov.in/
To revoke with a revocation list, you need to know the ID of the token being revoked. That only works if (a) the token is present at the event that triggered the revocation, or (b) you are tracking all tokens, in which case there's probably not much point to using JWTs at all.

Another approach is what I call the "subject epoch" pattern. The subject of a token (the "sub" JWT claim) is often something like a user ID. When an event occurs that requires all tokens for a given subject to be revoked, save that time stamp as the subject's "epoch". When processing JWTs, those issued before the subject's epoch must be considered invalid.
Even with color, it just won't be anywhere as good as the screens we're used to now.

There are two things holding E-Ink back:
1) Battery life alone is not worth the tradeoff for the consumer market. 2) The flexibility of the form factor could've taken E-Ink places that others couldn't go, but:
a. The company makes it very difficult for startups to work with them on non-stock sizes/shapes.
b. The manufacturing process hasn't improved enough to bring the promised cost within reach.

All the R&D money in the display industry is being invested elsewhere, and people will get affordable, flexible, and high-contrast OLED screens sooner than E-Ink can check off two of those boxes.
Sure, Craigslist is how I first broke into the industry.

I learned how to code through codeacademy and just tinkering on some projects, then started to go to Craigslist looking for random tech/programming jobs to see how viable it was. And there were in fact many programming jobs ranging from beginner computer jobs for random people needing help to companies needing short-term or irregular contract work. There are also many normal job postings looking for beginner/intermediate/experienced programmers located in the city too.

The best part about craigslist though is the informalness of the dialogue. I would just send each poster a few sentences saying basically I'm a programmer in the local area who knows html, css javascript php, etc. And here are a few of the projects I have worked on (list my own sites). Some postings require a bit more elaboration but usually not by much. This means it's easy to apply to several very quickly. It's a numbers game at the end of the day.

Also, it's possible to apply to jobs from all the local cities or really wherever. Some will require you be local, but most can be done remotely (phone calls, skype etc.).

After a while you begin building up a list and portfolio of clientele and basically keep taking progressively higher paying gigs while substituting out the lower paying ones.
I open sourced all of my (two) side projects.
Has anyone turned their open source project into something profitable?
The 'optimal' store really depends on the type of data and queries you're targeting. [0] is probably a good place to start for comparisons. I'd also recommend the other reading in my previous post, but that is much longer.

Sequential scans form the core of most column store queries, why would iteration be an issue? Do you mean iterations considering multiple fields of a structure or similar? In that case, you should be able to break that into a series of efficient, per-column queries which can be lazily materialized.

[0] http://db.csail.mit.edu/projects/cstore/abadi-sigmod08.pdf
Yes, exactly.

These are the core elements of my system, so to speak – core foundation; in the sense of [1] Munger's latticework of models.

It's my system for achieving [2] eudaimonia, or most specifically – [3] sophrosyne.

For myself, the root was the solid sleep – from there on, the other pieces started fitting together in an organic way.

Shortly – quality sleep over consistent period of time gives you the ability to make good decisions.

Cheers!

--

[1] https://www.farnamstreetblog.com/mental-models/

[2] https://en.wikipedia.org/wiki/Eudaimonia

[3] https://en.wikipedia.org/wiki/Sophrosyne
How to Install and Configure PhpMyAdmin on Ubuntu 14.04
>Looking at their buy-sell margins, Twilio has successfully changed the telecom paradigm, or at the least the vanguard of it. That is Big. APIs instead of circuits. Microservices instead of canned products.

I think that's a bit of a stretch. Twilio isn't doing anything new here.

Their tremendous growth is impressive, but the product isn't.
I suspect that color isn't the main limiter, money is. Once (if) it gets down to $1 per A5-size-screen, they'll be plastered everywhere.
I used this as part of an Analytics BI project years ago. The biggest problem for me was dealing with the optimistic concurrency model.

We ran into enough issues with partial writes during rollbacks due to failed transactions that we eventually had to abandon it in favor of Infobright. Having said that queries were ridiculously fast for OLAP workflows involving millions of records.
Online Voting cannot prevent https://en.wikipedia.org/wiki/Vote_selling
Submission title has now been changed from the article's original: "How Facebook is eating the internet with good UX" to "Facebook Instant Articles create a better reading experience for users".
> I get that, but why does the jobs program need to be specifically aircraft carriers? Why can't the jobs programs be drones or cruise missiles...

Different colors of money, for starters[1]: DoD cannot procure drones or cruise missiles with funds congressionally appropriated for Navy shipbuilding and conversion. Doing so would be a violation of the federal Misappropriation Act[2]. Furthermore, shipbuilding has a 5-year obligation window vs. 3 years for every other procurement activity[3].

> ...or stealth submarines or missile ships?

From a defense strategic perspective, levels of consideration are far more complicated than you might imagine[4]. The concept of a defense ACAT <any_level> program explicitly publicized as a "jobs program" is mindblowingly corrupt. I didn't interpret the article referenced by the parent as being about building more tanks without an inherent need for them. I read it as acknowledging that the cost associated with sustaining a niche industrial infrastructure with a steep learning curve to ensure military readiness--as seemingly high as it may be--is still far less than the alternative of closing the doors of "the only tank manufacturer in the U.S." to save for the now at the risk of not being able to ramp up domestic production if the strategic need ever arose in the future--the consequences of the latter being irrepairable. On a related note, it may surprise some to learn that there are literally hundreds of reserve cargo ships loaded with things like HMMWVs and spit-shine-new M1 tanks strategically scattered across the world, sitting idle and ready...and yes, they're regularly serviced.

[1] https://dap.dau.mil/acquipedia/Pages/ArticleDetails.aspx?aid...
[2] https://dap.dau.mil/acquipedia/Pages/ArticleDetails.aspx?aid...
[3] https://dap.dau.mil/acquipedia/Pages/ArticleDetails.aspx?aid...
[4] https://en.wikipedia.org/wiki/Joint_Capabilities_Integration...
[5] http://www.marad.dot.gov/ships-and-shipping/strategic-sealif...
In democracy it's your vote in elections that counts; In FEUDALISM it's your count that votes;

http://m.timesofindia.com/india/China-mocks-Indias-democrati...
I recently did this (with a very large emergency fund) and every interviewer I've met with thus far has been very confused by why anyone would just quit. I was working at a very stressful company undergoing multiple rounds of layoffs and I was tired of dreading going to work every morning. That has not been a satisfactory answer.

I wouldn't recommend it, especially if you don't have 6 months of reserves in cash.
But then in CA we wouldn't have a way to pay for education... because by the same reasoning the state planners shouldn't be allowed to play the lottery either.
In which case it's just one step removed. All products I have ever come across fix a pain point in one or more of the areas mentioned.
GTK development is done by the people that show up to do the work and contribute patches. That happens to be, by and large, GNOME developers.

The best way to affect GTK development is to either 1) show up for hackfests (like this week in Toronto), 2) join in on IRC where we plan things, 3) work on bugs, submit patches, etc

I've been working on GTK for the better part of two decades, and employed by Red Hat for about 9 months. They have in no way ever influenced my contributions (I've barely ever been to an office). My contributions were just as many before my employment as they are now.

My suggestion would be to join in on #gtk+ and make your voice heard this week while we plan out the next year of work (unless you are Toronto based, and then just join in person).
Really a very compelling telling of the story behind SimCity and its effect on the world.
UI and UX Designer

Fixa: The baby of Uber and Angieslist

Dressed: On demand dress rental for girls in NYC(Currently Manhattan Only).

Symple: Airbnb for entertainment and services(DJs, bands, bartenders, photographers)

Qalendar: Saas startup focused on automating your life