skysight-inc/HackerNews huggingface dataset:
I've cleared from the entrance through security to my (domestic) gate at SFO twice in ~15 minutes. It really blows my mind how they pull that off.
Ask HN: My code was executed during Sunday's murders and I feel uncomfortable
I am certain that library/runtime code that I wrote was, in some manner, executed at the massacre in the nightclub last Sunday. It is a strange feeling. It wasn't anything life critical and I don't feel guilty... just connected.

Does anyone else have similar experiences?

Edit: I guess I have also found some solace in the fact that the code did not fail.
Hey, Emilio!

Sure, I'll send you an email, however, I'd like to keep the answer to your question on the public side, if you don't mind.

It has been quite a ride to get traction, mostly the first clients signed up after talking to them about their issues with their invoices and expenses--once they're interested, we begin the education process.
The other sources are a mix of everything. One of our services is a platform in which our client's vendors can upload invoices so they can manage them. We get some information on several businesses, both small and big so we can begin to offer our solution. This particular product might be the best source for viral growth, as one client can introduce 10 or 20 new users on our platform.

We also have a relatively successful side project on a related field [1], which has several hundred hits daily. There's an ad there, there might be some optimization on both the ad and the landing, but we're still trying to figure that out.
Finally, our focus has been towards explaining the product, as there's nothing like it on the market (actually there are, but they're small and having the same difficulties we have). Once they sign up, our onboarding process is focused on one point: send your first invoice. As we saw many of the new signups not completing this step (or the previous 2), we set up an email communication strategy for each one of the steps, with our contact information in each email. I've blogged a bit [2] about it.

Now that we're sure our product is helpful for the businesses, we just started promoting heavily with a sales force.

I hope that answered your question!

1: http://isrmatic.com/

2: http://www.therror.com/weblog/2016/mar/como_el_email_marketi...
Oops… dyslexia kicks in late at night :) Thank you.
Considering this was half a day at our first hackfest of the season, I'm not surprised it doesn't sound fully fleshed out. Nor should it be this early. I'm mostly just surprised how much steam it's picked up on the commentary sites.

But that said, it's not that we don't have a plan. We have a very concrete plan in moving to a GL renderer, render trees, shader-based CSS drawing, and more. However, that necessarily means breaking the imperative drawing model that has us stuck in 1998.

So what are we to do?

Version numbers are just a thing. I think semantic versioning makes people put a little bit more confidence in what they are than its worth, but we did discuss this quite a bit.

We have a few options, some of which might be a "gtk-4-unstable.pc" pkg-config, or bumping soname more (but if we do that, why not bump the major number too), etc etc. We are all long term Free Software veterans maintaining long running ABI software projects. We are certainly thinking about the consequences of our choices from a developer, user, and distributor viewpoint.
I'm not a huge fan of advertising on the web, I think it's doomed to failure. But I disagree that it's desirable to be rid of advertising.

And I only say that because I believe freedom of expression - and that includes commercial expression - is sacrosanct. In my opinion, a truly "people centric" platform allows my right to serve whatever I want (within the bounds of the law) to supercede anyone else's personal ethics.
Stuffs like these are going to be great boost for MS and its cloud initiative. Zenefit-esque product is next on the horizon.
Apple launches iMessage Apps so third-party devs can join your convos
One could argue that it is a bigger need. A web app can work fine most of the time, even if it’s not offline-ready, but if payments aren’t seamless, you have a big problem.
"Gtk4 API will not be stable at Gtk4.0" or the original title would be better. 'Discouraging portable Gtk apps' isn't mentioned in the original article or LWN.
It was obvious this is where they were headed when they changed the Stories to auto-advance.

The separate creative partners bodes well, though. They understand that good sponsored content requires more than just slapping pre-made ads into a frame. They might be going somewhere with this.
> Underground farming

Building underground is crazy expensive (albeit very cool sci-fi), why not (cheap) above ground.

I think arid regions are kinda cheap for land so why not just a glasshouse? Put solar panels beside it, should they work.

Even if the land is very expensive (And localize food production makes sense), floor one is plants, flood 2+ is for businesses.

Building multifloors underground is the same structurally as above ground.

Exceptions might be places like London where regulations stop you building up.
A fantastic tool built around a great idea. When people ask me the timeless question of "why Slack", I actually point to Standup Jack as an example of how a simple and useful integration can save time and increase transparency through Slack's API. I actually had no idea it was a one-man show until just now. Seriously awesome execution!
>> Every considerable advancement we’ve seen in computing in the past year (and change) has passed Apple’s flagship laptops by.

Oh no, not an entire year. Someone who starts flailing their arms around due to no hardware updates after 390 days... what an impatient scrub.

Personally I'm hoping there is no hardware announcement for this fall's release of the next operating system either. If we're all lucky, Apple is busy working on a major overhaul of the hardware, with immense R&D to bring many new upgrades all at once. The typical upgrade brings one or two little new features at a time. We're due for one of the major overhauls that entices everyone with a 2013/2014 or older machine to upgrade.

My early 2013 rMBP has 16 GB of memory, and the CPU is more than powerful enough for my use. I have no reason to need to upgrade. I am however, waiting to see specs and new features that make me want to upgrade. Force touch and butterfly keyboard are nice... but not worth dropping a 3-year old machine. I suspect I will buy the next major overhaul that introduces plenty of modern stuff. Unless they're dumb enough to release the rMBP with only 1 USB-C port, in which case they won't see an upgrade from me until this machine dies.
How do you tell that situation apart from one where the 20 are a legitimately oppressed minority?
If you want to pursue the marketing support angle, drop me a note. I have something that might help. :)
I had no idea. That's horrifying.
Plenty of big city international airports have long waits too. CDG in Paris has a recommended wait time of 3 hours.
Start with chartered flights?
This is the first time I wished a company had a giant "jumbotron" video on their marketing page. You sell robots, add a video!
I was just as surprised as you are. :)
How long does it usually take for a small business to turn a profit?
In a perfectly competitive economy or business, there are very few opportunities to maximize profits by increasing revenue. Trying to ask a higher price is going to make your client go to the guy next door, and as for increasing sales, there is only so much you can do when the market is saturated with competition.

That leaves only one option for increasing profits and survive - control/curb your COSTS. Evaluate each and every aspect of your business: How much do you spend on stationary, salaries and wages, outsourcing, software, etc. You can use all your creativity here to make a difference.

For example, are you using open source software like linux and LibreOffice instead of incurring the cost of Microsoft licenses? I know you'll say its a very small amount, but when you start scaling your business, every dollar saved is every dollar earned.

Besides, there are other areas of budgeting too: Are you using a subscription-based service on the cloud like SalesForce/Quickbooks for accounting and CRM? Again, using in-house FOSS technologies like Magento/SugarCRM/Drupal/etc. can buy your business a life!﻿
Funny how they define it as a hardcore device for professional/serious use, and then define 'typical usage' as 30 minutes per day for purposes of being able to claim a seemingly absurdly long battery life.

But I guess "about 15 hours" sounds a lot less impressive than "3-4 weeks".
Not just this; HDD technology has been stagnating, while SSD technology still has yet to reach its full potential. In the last five years, HDDs haven't really gotten cheaper (other than market returning to pre-flooding equilibrium). On the other hand, SSDs have gotten easily 4x cheaper in that same period of time.

Plus, since SSDs aren't using the latest process technology (as far as I'm aware), they still have a few more years of Moore's law ahead of them. Shrinking transistor size means increased density (and at lower cost, once you recoup the cost of the mask).
You're demonstrating my point itself, by switching to a completely different talking point rather than fleshing out methods to earnestly compensate those affected.
The problem is that if you don't guarantee the freedom of Taiwan and, more importantly, Japan, those countries may decide that the safer thing to do is to switch sides rather than fight alone. Then you are not facing a peer threat, you are facing a coalition that can plausibly threaten to cut off your naval access in the Western Pacific.
https://www.amazon.com/Samsung-RM48D-48-Inch-1080p-Signage/d...

https://www.amazon.com/s/ref=nb_sb_noss_2/177-4673061-841302...

Seems to be about $200 USD difference - and funnily enough the commercial version probably doesn't have HDMI-CEC.
5 years of bootstrapping a nutrition & fitness tracking web/mobile app for me.

After the first few months it was only making enough income to cover basic hosting costs and not much else, so I ended up getting a job (well, co-founded a different startup with good funding). In the next two years, I was just doing the bare minimum to keep it running, and it grew 80% each year. Start of year 3, other startup failed and I had spare time to invest in the site and it was making maybe 8000/month in revenues, and the decent yearly growth has continued so that now in year 5 I can comfortably live on the business, and have a few employees / contractors to help with support and development.
JWT is good for much more than an ID+name; it's sensible to allow your partially-trusted token issuers to vouch for a _limited_ set of user roles and the like. Just the same way you probably wouldn't allow the @acme.com security authority to vouch for @example.com principals in a multi-tenant system... in ye olde SAML lingo this is called "claim filtering / transform / passthrough."

Practically speaking, we use a bit of metadata (jsonb documents in pgsql, mostly) for each JWT-issuing party, which describes how to validate principals, how to map incoming claims to "our" claims (e.g., "by what name does sts.acme.com call a 'role'? is sts.acme.com allowed to vouch for the 'admin' role?) in addition to the more central things like shared secrets, certificates, etc. This kind of partial trust is how claims auth is supposed to work, and avoids any unnecessary provisioning/syncing of user details.
You made a 3 order of magnitude jump. Is that a typo?
Well that's just plain broken.
For an example of a bug in aeson [1] and how it was isolated & fixed, refer to http://www.serpentine.com/blog/2015/05/13/sometimes-the-old-...

[1] https://github.com/bos/aeson/
A Happy Life May Not Be a Meaningful Life
You could have a system that has broken software instead?

But seriously, giving multiple years between the major versions is a lot of time in between for applications to port forward (or they can choose the version they want to stay on) and enough time to stabilize features that take more than 6 months to write. Turns out writing whole new rendering engines takes some time and testing and can't be flipped on as fast as javascript frameworks materialize.

If applications want to stay on a stable version for 5 years or more, that all of a sudden becomes tenable which wasn't the case before unless you wanted to stick to gtk2, which is right out of 1998 "how to write a toolkit".

This isn't very different from other systems that bump the soname and have multiple versions based on what ABI, as required by the applications. I'm sure you have multiple of these on your system already. The reason soname isn't enough for GTK has to do with parallel installability of headers, bindings, etc etc
No that is completely wrong and it is a common mistake made by people at all levels. The available pathways inside a computer, whether at the CPU level or in memory, or the system bus do not change no matter which program you run (barring exceptional cases of malware which destroy the computer).

What changes when you run a computer program is which pathways turn on and off, and these change based on reading the instruction set, which causes one operational circuit in the CPU to turn on and the results of that operation are stored for the next operation. RAM is simply a series of switches that can be "read" from the bus and passed to parts of the processor.

The only thing that may, arguably, work like that is writing to a storage medium like a hard disk or tape, and even then the circuitry around the medium does not change, just the magnetic or other impression stored on the disk itself.

Neurons are completely different in that they are made up of different connections to other neurons and it is these connections that make up both the storage medium, and the processing medium is what occurs when different neurons fire together.

[edit] The bottom line is that the brain can create new "instructions" on its own by physically rearranging the groupings of neurons. For a computer to do the same requires a new CPU with a different instruction circuit baked into the chip.
Safari 10.0 new APIs and features
I bought gionee marathon m4 because it has the best battery. so some people do buy phones with better battery.
This was long before Gawker became the subject of
national fascination as a principal player in a drama
that resembles something that Trey Parker and Matt Stone
might imagine if they were commissioned to write a
musical about the First Amendment. After Gawker posted a
sex tape featuring Hulk Hogan, the wrestler sued Gawker
and won a hundred-and-forty-million-dollar judgment. It
was then revealed that the suit was financed by the
billionaire tech titan Peter Thiel, in retaliation for
Gawker’s coverage of Thiel and his Silicon Valley
colleagues.

And what sort of "coverage" was this, exactly?

... The indirect cause of its (Gawker's) downfall was
targeting powerful figures in Silicon Valley, which
largely views unions as outdated impediments to
technological disruption.

I don't think it had a whole lot to do with Thiel's position on organized labor, did it, Adrian?
First mammal species wiped out by human-induced climate change
For the few days I had a Kindle before immediately losing it, I was using p2k.co to read blogposts/articles on it. Save to pocket, then use p2k to send them to the Kindle. Definitely a bit cumbersome but it worked.
Yeah, the website needs some love. I didn't even have a separate website for the project until this year.
I will definitely be doing this, especially Stanford algorithms which is great
Just because freedom allows you to say most anything doesn't mean all those things are consistent with freedom. One can protect the KKK's right to free speech while simultaneously saying that their speech is undesirable and inconsistent with freedom.

The same principle applies to "people centric".

I think you keep inserting "ban" into what you're responding to when no one is saying that. Try rereading the article and the parent comments without that bias.
i like it ok. it directly led to my current job, and couple other good offers. for $0 i can't complain.
Well, the horse's kinda already bolted out of the barn when they allow external scripts to be executed in game level updates or whatever. And any damage would be contained to the app in question... unless the iOS sandbox is a sieve... they do seem to have tightened it up fairly well recently though.

You're right about power usage though. Even if they did allow third party engines, they wouldn't allow third party JIT compilers (much bigger attack surface, W|X memory protection is gated behind an apple-only entitlement) so those browsers would be second class citizens battery- and performance-wise for sure.
Version numbers are just a thing

Yes, and they should mean something. Not having a fixed API/ABI for an entire major version goes against what everyone else thinks that version numbers mean. You can talk yourself into thinking that the numbers don't matter - that only the semantic versioning (whatever that is) matters. But that doesn't mean that everyone else will agree, let alone understand what the hell you're talking about.
Funny, I just realised where I had seen the icon before while reading your first sentence. Then later it was confirmed in the same paragraph.

Thinking back, I can only remember once instance of the sign and it happens to be just around the corner from where I grew up.

And just for kicks, if someone wants to see it in action: https://www.google.co.th/maps/place/Guml%C3%B6sa+Kyrka,+288+...
Can you provide some details about what's wrong with it? (Not a security person, no idea how to evaluate such a claim)
Next we need to do it in reverse - given a sound, generate a video to match. I wonder how well that would work?
I had a sour taste in my mouth when I read this, but I can sort of see it. It reminds me of Ubuntu's release pattern - 3 unstable releases then 1 stable release alternating. The only difference is that the major number changes for the first unstable release. (Makes sense. The point-oh release is unstable, the stable release has a big number on the end.)

I think the controversy is that, when I read this, I get the impression that GNOME devs either don't believe that backwards compatibility is possible in the long run, or that it's at least unpractical. I don't really get that impression given QT's backwards compatibility, MFC, etc, but if they really believe it, then faking it is unproductive, and just making a more distro-like release plan is reasonable.

I really can't get the distro comparison out of my head - it's like they tried a single release that lasted forever, and that didn't work, so they tried a rolling release, and that didn't work, so now they're going with unstable releases with LTS releases every 2 years.
> Plenty parts of GTK 2 were unstable during it's lifetime.

I've written a Raleigh theme more than 12 years ago, and that one still works as it did back then.

I believe you when you say not all parts of Gtk2 were stable and some stuff was surely evolving, but the overall I've seen no regression in Gtk2 as I did in Gtk3.

That said, if Gtk3 has only been considered stable since 3.20, then more appropriate versioning/communication might have been useful, but I doubt that's what you're saying.

Also, I know I have too little domain knowledge to judge what it takes to support HiDPI and Wayland, but what I do object is focusing on too many things for a major release. What works better are time based releases where, if one feature branch misses the release, it'll arrive in a later version. Full rewrite efforts seldom work out.

You said Raleigh should work in 3.20, I just tried to use it as the 3.20 theme again and it's still borked compared to 3.18, but it's unsurprising if it's not the default and probably untested.

But what's more important is that Gtk2's Raleigh looks really nice, whereas 3.20's Raleigh looks like it's deliberately made to look worse, which is hard to understand, given that the drawing code is supposed to be 99% unchanged, if I look at Gtk2 to Gtk3 porting guides.
Streetlights – a feature film in 3 minutes
Mouth sounds.
They ship dtrace.
That link is worthy of a HN post in itself! :D

Wow, what about ad networks abusing this for cross-domain cross-tab communications?!?
To put these latency numbers in perspective 1ns is about 11 inches at the speed of light.
The extra salt is probably unnecessary if you require (and validate) not-before and not-after dates on each token. I couldn't say more without knowing the details of your implementation, but "secret salt" strategies often are a band-aid over some more fundamental problem.

Whether it is good to bind the JWT to some combination of user-agent, device cookie, IP address (not recommended) or whatever, is a separate topic...
3 Months.

I made https://www.myothernumber.com (online temporary sms/mms/voice numbers) about a 1.5 years ago, was making ramen money within 3 months.

Now tracking in the 5-figure/year range.

It's a very, very crowded market so primary cost is user acquisition, but then again that's exactly why I built it, to better learn (consumer facing UA) and have a platform to experiment with.

About to officially launch http://artistic.af (neural artistic transfer meets instagram + canvas printing). I expect this one to take a bit longer to scale, but it was just an excuse to learn DNNs.
The point is that both the United States and the United Kingdom are using their borders as processing centers. They are using their travel hubs as surveillance machines. That's what makes travelling through them suck. My personal theory is that the belt and shoes come off not because it actually stops people from bringing bombs onto airplanes, but because it gives the security apparatus extra processing time while the targets are still on-site.
How low antivaccine “warriors” will go: Facebook reporting algorithm abuse
Personally, probably not. I live really close to UCB, so I'd just go there if I were interested in silence. I do, however, see some merit in the idea.
Question about best practices to revoking a JWT
From what I have read I see two approaches. You can use a per-user secret to sign a token. When the user wants to invalidate, change the per-user secret. Of course this will invalidate all issued tokens so no fine grain control.

Another approach is to use the jti field. Store all the jti's issued per user in a database. When a user wants to invalidate remove that jti. When receiving a token check if the jti is in the database for that user. Of course this is done after validating the integrity of the token and the database is kept up to date automatically removing jti’s that have expired. This offers fine grain control.

Do other approaches exist?
Can either of these be considered best practice?
I'm pretty sure they had threads and queues in the 70s. Or they wouldn't have bothered inventing primitives like semaphores in the 60s.
Just think, you could buy LinkedIn, or three new Ford class aircraft carriers. I'm not sure which is the better value.
The situation with 4.0 not being 4.x is most certainly the most contentious part of the discussion so far. It is also subject to change (it's only been a few hours so far of us discussing this).

That said, if we can't guarantee the minor versions as we drain the swamp to rebuild this toolkit into something modern, we either need to not release anything (which makes it very hard to build if you can't get users to test things) or we need to come up with alternate versioning schemes.
Oakland Needs to Start Building More and Build Tall to Ensure Its Future
That's how __vsyscall works now.
Because there is no need. GTK3 is basically a fork of GTK at this point. Just grab GTK2 and go.

The basic problem is that most of GTK development is happening "thanks" to Gnome and Red Hat, and they are gung ho about GTK3.

In essence, how the fuck do you keep going when the 800lb gorilla wants to go in a different direction?