skysight-inc/HackerNews huggingface dataset:
That's essentially an argument for a professional licensure system for software development.

Setting aside that professional licensure requirements are anathema to the spirit of the hacker movement, they would likely have prevented the creation of a massive pool of technology companies, including Apple, Microsoft, and Facebook. Even that proposal would stifle innovation.

However, what's being suggested by the OP is not even a professional licensure system.

It's mob justice.

The difference is that professional licensure organizations follow fixed sets of rules, procedures, and principles. These rules are established, agreed upon, and promulgated in advance of enforcement. Most importantly, the procedures generally allow for the basics of due process.

Mob justice has no set of fixed procedure, and no assurance of due process. Its enforcement is governed by caprice, and subject to a set of arbitrary, inconsistent, and constantly shifting "rules."

The OP is proposing an arbitrarily enforced "refusal to hire" policy people from an ill-defined set of "undesirable" companies.

First, there are no rules for establishing which companies are undesirable.

What fields of technology exactly are undesirable? And exactly how closely did an engineer have to be involved with such technology?

Second, many companies develop "dual use" technology, which has both civilian and military uses. This includes manufacturers of everything from CPUs to jet engines. Is the designer of a gyroscope used on spacecraft and on missiles banished from our ranks?

Third, many of these companies are also huge conglomerates. GE makes jet engines, as well as washers and dryers.

Where do we draw the line?

Should a GE employee be blacklisted under this "system"? One from Intel? How about Facebook for taking money from the CIA? Google for Boston Dynamics?

Most importantly, who decides, and how?

If it's determined by whim and popularity, as proposed by the OP, then I want absolutely no part of it.
> If I had an American company and I was getting legal threats from an organization in another country that was citing their country's laws, you can bet I'd do everything I could to avoid having to comply... regardless of whether or not I was actually breaking any laws at all.

Maybe this is true as a statement about what you would do in this situation. But it does not much resemble the behavior of most actual organizations engaged in a legitimate line of business. (To be sure, some may try to avoid the U.S. market entirely. But TPB has not done that. They're content to serve U.S. users, just not to obey U.S. laws.)
Can you link to this post? This is a topic that interests me and I'm on mobile :(
Because of the whole "innocent until proven guilty" thing?
> Property doesn't have due process rights,

Apparently, property doesn't really belong to us.
That's a bad argument. Arbitrary energy transportation is not a solved problem. Power grids are designed to deliver from power plants to the consumers.
Oh, I definitely don't want to switch to Go :-) I did take a look at it once and decided that it is not for me.

That being said, I still wonder what types of applications are so suitable for Go that people decide to use it instead of other languages?
Show HN: XOU.fm – listen to podcasts in your browser
thanks added to my list.
It's also comparing basically an assembled automobile with a pile of parts. I suspect there will be a well vetted router-centric distribution that leverages DPDK soon, but I don't think that exists yet.
That's very curious. So by adding cloud capabilities, you are effectively getting a discount.
Instead of blacklisting, why not respond with a "You requested package ABD, but we think you might mean package ABC. Enter 'yes' to continue or anything else to start over."

That way authors can continue to use any name they want, and the emphasis is on letting installers know that they might be installing the wrong package.
'This is why you can't have a CNAME on a root domain like petekeen.net, because you generally have to have other records for that domain like MX'

While in theory that's common, the primary reason is because of the SOA record that must exist.
Meet the Maserati-Driving Deadhead Lawyer Who Stands Between Hackers and Prison
It's not exactly how I would do it (of course!), but close enough for me to try it on my next project! I love the choice of modules on the server side. Seems like a lot of thinking went into this boilerplate. I'm curious how it will work out for me in practice.
And then insurance companies will become the toll collecting gate-keepers of yet another domain. This time the entire judicial system.
"Email is so important to the functioning of the Internet that it gets its own record type."

Well that is one way of looking at it. Probably the appropriate way if you're teaching, but if you want to be critical then it reeks of poor design for a particular service to get special treatment by a fundamental part of the internet. It isn't that MX records aren't needed. They just shouldn't only be useful for email.
China Is Planning a Massive Sea Lab 10,000 Feet Underwater
The objects are property, and people have property rights.
It's a video game for Apple II which is named after the illness.

https://en.wikipedia.org/wiki/Montezuma's_Revenge_%28video_g...
A special case where UUID keys are extremely helpful is when you have to convert your data from one system to another - customer "105" can be different in different databases, but customer "7C823BE3-CB5B-4E34-BE8D-4B5A71945D3F" is truly unique. This takes dealing with foreign keys from "nightmare" to "non-issue".
No theoretical simulations (that's what this paper is) can confirm anything. The paper itself explicitly says that:
Taken together, all these findings suggest the intriguing possibility that nucleosome positions are the product of a mechanical evolution of DNA molecules.
The Founding Father of Bling
Reading the comments on that post make me weep for the future of mankind. It's like Youtube but worse - because at least on Youtube everybody knows they're being idiots.
Indeed. I recently built a todo app inspired by a particular paper-based methodology (FVP) to scratch a personal itch, and it was a web app that uses localStorage. It was much easier to use UUID keys for the todos than to store/retrieve the max ID every time the app was opened.

That's basically the 'hello world' of web apps example where UUID's make sense already.
Works for me on Windows 7 with Chrome 51.0.2704.84 m.
Those are some good points, and I guess in my head I'm thinking of how Github does repos on their site as my "example".

Github allows transferring of repos to another "namespace" (username), and will even forward requests from the old one to the new one for a while (how long i'm not sure...)

Thinking about it a bit more that kind of "mutability" might not be the best idea in a package manager...

Still, i think the namespaces can help more than they hurt if the platform is designed with them in mind, as even "namespace-less" systems still suffer from some of those issues like wanting to rename a package or split it up into multiple smaller packages.
Euphemistically called a house; except without foundation, electricity, plumbing or any infrastructure whatsoever?
Finding the Right Local Kubernetes Development Environment
I really wanted to like annuities. It's a great concept, but when I looked into annuities, they were all pretty bad deals as compared to just investing in the market yourself. It is true that you offload some risk, but the price you pay for lowering your risk is just too high.
You are right. Having money equips someone to at least be able to put up a fight to reach a conclusion but that is not the heart of the issue.

Whether you have money or not the real problem is the threat of loss due to the /process/ as opposed the merits and likely result of the case. That is the problem that needs to be solved.

I'm not saying I know how to remove the expense of the process out of the equation but that is what needs to be done.

Your suggestion is a good one. If the result itself is clearer earlier it would take some of the power out of the threat of expensive process.
There is also JUCE, but it's more focused on audio application development. https://www.juce.com/
I wonder if this helps or hurts the folks at Flixel. These look a lot like cinemagraphs, and they're free/easy to make.
What's the current state of assassination markets these days?
> "We're gonna look for different factors in the way that you're acting. We're gonna look for if there's a difference in your story. If there's someway that we can prove that you're falsifying information to us about your business."

If you seem suspicious, or if they claim so, then your money suddenly is not yours any more, until you prove their source. If you can't prove the legitimity of your money, they become fair game to be confiscated. In this whole process you personally are not charged with anything, but the confiscation is triggered by their being suspicious about you.
An attacker would only need to register the equivalent of the package under attack. Other packages would continue to error out harmlessly as they did before.

The maintainer-level confirmation could be of slight assistance to advanced users, but it's no panacea.
I really have to take issue with the normalization point. Modern databases have optimizers that operate under the assumption that your schema is normalized. When you try to get clever and do optimizations yourself, you can very easily trick the optimizer into doing the wrong thing, and actually make things worse. I would argue that de-normalizing is much more of a beginner mistake that over-normalizing.
>This thing drove into a bus

As have thousands of actual human drivers -- and worse.

The human driver also said that he thought the bus would do the same thing the car "brain" thought it would.

>You are being a credulous fanatic, and I am done.

Oh, the irony.
Here's a vid from the same guy last year: https://www.youtube.com/watch?v=NbyW_QS8Ef8

He had just won a three year litigation with the same group, after which they pointed out that even though he had won a battle, they had enough BS patents to keep him in court for several lifetimes. He is currently in year 4 out of a projected 450.
Your point was that discussion was suppressed. The links show clearly that it was not, and when the CVE was published (and therefore public), there was open discussion and a suggested work-around. You may not agree w/ the method used to "fix" the CVE or the speed in which 4.2.1 was released (for myself, I don't either), but your claims of suppression and stuff being "deliberately" hidden is obvious FUD.
I went through building a home network recently. I went into the project planning to build my own pfsense box, but after researching it I decided that I couldn't piece together a custom solution that would both fit my needs and beat an off the shelf ubiquiti edge router in more than one of: price, performance, reliability, power usage, and form factor.

As to the "reliability" point: I love messing with my own networking stuff, but I've learnt the hard way that if I build my infrastructure from scratch, I'll inevitably play around with it too much and it'll break as soon as I desperately need it to just work.
Cisco Spark: Messaging Security That’s “Just Right”
This is theft.

When someone tries to rob you, I see no ethical problem with using deadly force to defend yourself and your property.

It follows that I see no ethical problem with using deadly force against a police officer who attempts to use civil-asset forfeiture to rob you.

Obviously the law doesn't agree with me, but I care a lot more about ethics than the law. There are other considerations besides ethics here, like shooting a police officer will likely end up with you in jail. I would never shoot a cop myself. But as laws like this turn our law enforcement into thugs, I find more and more sympathy for communities that use violence against cops.
It will have to: Car makers will have to compete with the same amounts of production. Owning a petrol car at the time of global warming doesn't make you the boss anymore.
Probably doesn't make any difference now but there was a time when some of the operating systems didn't have PPPoE support in the kernel.
If you have a lot of data to synchronize, you probably still want some kind of 'version vector' thing, which in the simple case with a centralized server, is an integer 'change counter' (I forget the exact term for it) that will let you fetch only the updated/new items. You'd still use a UUID for your ID though.
I only took a year of physics, but in my experience a Faraday cage that blocks electromagnetic signals in one direction also blocks them in the other direction. GPS functions by receiving signals from several satellites at once.
Isn't D used by rather big companies today?
Granted re: UUIDs. There are definitely tradeoffs here (time precision / inserts per second [in practice you'll just end up throttling or massaging the timestamp if you do have insufficient granularity] vs. number of supported partitions vs. ability to efficiently route a path to the key vs. fast reservation ability vs. key size, etc., etc.). I was referring to the notion of a global 128-bit pseudorandom number as the final solution to everything... things are rarely that straightforward.
On top, arrays in PG don't support foreign key constraints and in this way make your model weaker. We do use them too, but in well defined, pretty rare circumstances.
Yet if it's not a person, it can't be convicted of a crime either. Has a dog ever been charged for biting, instead of its owner?
Yes, but my thought was it gives a bit more "data" to work with on the package manager's side.

They can see someone registering popular package names under something with a similar namespace and can flag them for manual review (which can be done for namespace-less packages, but there will be much more noise), they can apply things like "This is the first time you are installing a package from 'smoeuser' would you like to continue?", or even require adding a specific namespace "out of band" depending on how paranoid it wants to be.
Hist Triggers in Linux 4.7
Maybe this is overly naive, but when I make a typo in the Google search bar, it doesn't even search for my typo-ed term (even if it would have gotten some hits), it searches for what I actually meant to type. Can't package managers have a similar feature?
https://news.ycombinator.com/item?id=11854576
> They ask for a small sum of money to just go away.

Outrageous.

Surprised there isn't a more meaningful response from Google.
My Single Founder Y Combinator Experience – Bookmark
But if ABD and ABC are both package names in the system, then in order to present that warning we have to do some sort of resolution process to determine whether one is typosquatting.

Now that there's a strategy for finding fakers:
1) You have an attacker-defender arms race. The attacker will always be one step ahead of the defender.
2) You have the extra burden of keeping up in this race, otherwise your security feature is a facade. At best, this is useless. At worst, it lulls your users into a false sense of security.
If you want to raise backyard chicks, double check your local chicken ordinances! Unfortunately, even when they are allowed, it can be the source of tension between neighbors:

http://articles.latimes.com/2012/nov/27/nation/la-na-nn-back...
Awesome post, thanks for writing it up!

I haven't been very involved in using random forest at work (yet, I hope to), but I've done various mathematical programming work in the past to generate business insights (mainly through regressions and linear programming/optimization).

One thing that you make very clear through this blog post is how much value comes from the "non-technical" aspects of mathematical decision analysis. You have to see the application, find the data, clean the data, figure out what to actually put into the model, and get results in a way that can lead to an actual outcome with value.

Here's the thing, the reason I put "non-technical" in quotations is that it's actually a mix of technical and non-technical. You need to be aware of how these algorithms work and how they are implemented in order to have that insight. There's the old statement that everything looks like a nail to someone with a hammer, but knowing what tools are and what they can do can help frame issues in a way that you can approach them from new angles. This is why I do think it's worth learning various ML and other algorithms (like LP, NLP, etc) through contrived examples - once you understand them, you'll start to see the opportunity to apply them.

One last thing - kaggle. Kaggle is super fun, and I highly recommend it for people looking for an opportunity to try this out and learn it. However, good real world data science probably has less to do with making exceptional refinements to models. You know that data set you get when you are doing a kaggle competition? That's a huge amount of the actual work, right there.

You can do so much with basic RF and KNN (and with LP for that matter). This post is a pretty good illustration of this.

Anyway, pretty cool, thanks for sharing.
> And the scanner maker gets a 7% cut.

And if the courts decided that the asset forfeiture was incorrect and reimburse the person it was stolen from—does the scanner maker still keep their cut? Or are they still due their cut?
> The police can get away with this because they have a weapon

I disagree. Police can do it because they have the power of the state behind them; the state can try you, imprison you, ruin your life, seize your other assets, etc. That policeman's gun is a minor detail and is rarely used.

Most importantly, they have the power of the state because voters permit it. Do you know if this is allowed in your state? Who are your state legislators? Are you going to contact them?
Practical Reverse Engineering Part 4 - Dumping the Flash
As always, there are trade-offs between the two approaches. Libraries may be a great approach, but they lock you into the implementation they chose, and the individual components they chose.

With many boilerplate/scaffolding solutions (yeoman, for example), you're given some quick templated code and left to implement logic yourself. You're free to swap out implementations anytime you want, without having to fork the library, or force library developers to maintain overbearingly abstract interfaces so that dependents are free to swap in some other component.

Neither is a perfect approach. The best solution will vary with the flexibility you need for a given system. Anecdotally, the best projects I've worked on were built using a combination of libraries, frameworks, and scaffolding tools. I attribute this to the fact that the tools we used were (at least among) the best at doing one specific thing (render the app, scaffold, build, serve, etc.) and worked well together by not trying to do all things equally well.
You can call it "refactor-ready." ;)
I heard some criticisms of big charity in regards to uncertainty for local businesses. When Tom can show up at any time and dump hundreds of thousands of shoes in your market, it kind of hurts all the long term planning and investment you made into your shoe business.
> Neither is a coroutine in Java using the Coroutines library (Javaflow used thread-locals, but Coroutines doesn't), or a Lua-based coroutine...I'm not sure what you're driving at here?

I'm not familiar with Coroutines or Lua-based coroutines; coroutines are almost always bound to the thread on which they're created, I was pointing out that this is a primary difference between goroutines and coroutines--goroutines are M:N threads.

> BlockingQueues in Java give you that; Go channels don't.

Go channels aren't meant for this purpose; they're synchronization primitives, not dynamic data structures. You can easily build a BlockingQueue in Go.
You also need to make it so the user can replace the Qt binaries with a later / modified version which may not be possible on an embedded device.
Ask HN: What is so fascinating or interesting about the app Sketch?
So far there have been ten submissions of the announcement of the "Versioning, Licensing, and Sketch 4.0". Why is this getting so much attention? How many HNers use it? Is it important?

https://news.ycombinator.com/item?id=11861188
https://news.ycombinator.com/item?id=11861255
https://news.ycombinator.com/item?id=11861273
https://news.ycombinator.com/item?id=11861329
https://news.ycombinator.com/item?id=11861473
https://news.ycombinator.com/item?id=11861553
https://news.ycombinator.com/item?id=11861656
https://news.ycombinator.com/item?id=11862255
https://news.ycombinator.com/item?id=11862687
https://news.ycombinator.com/item?id=11863487
You do understand that's how the original internet was invented and built right? With government grants and public/military research.
Wait, what? MySQL reuses them? Can you elaborate on that?
On the other hand, when I'm pulled over, I definitely want my phone to be recording audio.
Coming changes to Apple's App Store
Thank you hugo team!
How did MySQL help here? It uses the filesystem too...

I can imagine that you want to hold these images in RAM to bypass the filesystem. Maybe MySQl did that for you, but that sounds like a heavy middleman.
Well if property is people, then of course not silly!

Corporations are also people, so you can't really have one of those either.
Requests for Research
Yes. Any time you let a non-associated record be displayed by a user session that is not linked to that record and should not have access to it, that's not a problem of easily guessable keys, that's a problem of not securing data by checking access rights.
Advanced WebPack Part 3 – Creating a custom notifier plugin
A bane of our existence, when working with dbs, is that we always conflate storage with query optimization. When we talk about databases, we unconsciously think of both concerns. This is traditionally instilled in us as that makes the most sense starting out, but almost always what ends up happening is your dataset needs to be shared among multiple applications, each with its own optimization requirements. And that's when things start to go haywire. At some definition of scale, a better design is to have a storage layer that is not really concerned with query optimization, and allow different applications to design their own query systems. Said another way, even when you are working in RDBMS's, it's good to acknowledge storage and query as two separate concerns.
The doc (http://incolumitas.com/data/thesis.pdf) does have a short section on ethics, but IMHO it completely misses the point of the ethical concerns in running unauthorized, non-sandboxed code on devices you don't own. Instead it justifies the research by saying the threat cannot be shown unless the vulnerability is exploited, which is true, but that fact does not justify the research.

The acknowledgements mention 2 of the university advisers and a PyPi admin consented to the "notification program".

Still, people with good intentions have been prosecuted and convicted for less. I would be very concerned for this student.
All the best advice we could find on how to get a job
wouldn't filtering by date field be good enough, generally?

Either way, once I realized that I use my own little todo-app constantly, a server-based implementation became necessary. I'm working on a Horizon/RethinkDB version right now which uses UUID's by default. But if that were not the case I would've probably gone for simple incrementing ID's.
No I did. In theory the government is made up of its own people, so my first sentence meant I deem it acceptable to blacklist private companies that provide these products and services to the government.

But also in the same breathe, people in government are also extremely self serving, and it does them no good to provide more transparency when their current paychecks benefit from a lack of transparency.

I can see how that appears to be contradictory but I did not mean for it to be taken in that manner, hope this clears up my statement.