skysight-inc/HackerNews huggingface dataset:
You make a good point, which is that I really should get around to learning lisp, as the only functional language I am fluent in is Ocaml. Anyway what stands out about Clojure to you?
Integer IDs are definitely easier, but I've seen it cause so many security issues -- "hmm, I wonder what happens if I manually type in /user/239?"

IME It's easier to teach junior devs not to use integers than it is to get them to think holistically about security.

This relates to the "sometimes security by obscurity is okay" post from yesterday.
If it's a wire transfer then there's not much your bank can do. The money is gone by the time you have them on the phone just as much as if you had sent it to a Nigerian Prince.
I wonder how the local guy or girl selling chickens will take to this idea. This way of 'helping' Africa is so outdated.
Sorry, I don't follow. Does "donors" have some technical meaning here?
Sketch is probably the most bug-ridden piece of software I've ever used that still continues to grow and thrive. The first time I've tried it you couldn't set the size of shapes explicitly, and last time I tried it the undo-redo functionality was broken. I wonder if it's gotten better by now.

I blame the blindingly beautiful UX and website.
Decentralized Web Summit – Live from the Internet Archive
Problem is actually any ORDER BY operation on a big table, but often it can be fixed with a bit of index magic... on small enough DB (and that's like 99% of web projects) you don't really need to care about this, ever...
Barack Obama’s Last Stand
Previous discussion: https://news.ycombinator.com/item?id=10908237
React Waypoint: A react library inspired by the waypoints library
source ?
"few days of work" for "tens of thousands of dollars" seems a bit absurd. Are you assuming they are making 10K per day? Seems a bit high. I would assume 200-300/hour tops.
> I'm also curious why numerous developers have not demanded an Insurance Protection Product / Plan that would take a premium in return for subrogation (defense) if a frivolous Patent Suit is filed. I'm rather certain the market exists and while it may be for larger businesses or players, developers forming a Mutual Company and writing on some big name AM Best A paper (or even going to Lloyds) could be helpful.

I suspect part of the problem is that the monetary and time costs of litigation could not be easily measured. Every case would be, effectively, unique. Not insurmountable, but I have to imagine that the premiums would need to be very high.
You can also use ZooKeeper to increment the id for distributed systems. If we're talking about a lot of inserts per second, you can increment by a thousand.

For example system-A gets id range for 1-1000, system-B gets id range for 1001-2000 and so on.
If you're interested in giving our Company Search API (by name) a go, email me michael[at]fullcontact.com and I'll hook you up.

We're constantly trying to improve our company data, social especially, stay tuned for that. That said, I'd love to hear any feedback you have at the same address.
To grow the economy, grow small businesses: Bloomberg and Buffett
Vehemently disagree. What you are proposing is everything wrong with security-by-obscurity.

In this case the security hole of /user/123 just needs to be properly locked down. That is all.
Super confused.

Mon·te·zu·ma's re·venge (noun, informal)

Diarrhea suffered by travelers, especially visitors to Mexico.
Well, computer users aren't the problem its all the UX "experts" that have never read a HID document for any major platform (especially desktop ones).

I don't care if grandma once a week has to reach for the mouse to fill in an select box. What I care about are the applications/sites that break any number of imput devices (particularly keyboard, but frequently desktop touch, or pen based) because they think they know better and decide to invent some new paradigm without understanding the existing ones. This is part of my gripe with much of the last 10 years of windows, which broke a lot functional paradigms without replacing them with an alternative. Or they 1/2 broke something.

Take the right click on the task bar to open an applications system menu which worked from windows 95->vista. That operation now gives one the nearly useless option to pin the application. Now when a window is offscreen and I need to move it onscreen, and the app developer broke the alt-space keyboard combination you have to know that MS changed (and didn't really document it anywhere) the behavior too the very mac like, shift click. Pretty much the only place in windows that the mouse buttons have keyboard modifiers. Its like the guy who wrote it couldn't figure out how to add a "pin to taskbar" option to the system menu.
How to Unit Test an Ionic 2 Application
These sound like McSweeneys article titles
Perhaps the guaranteed payments of an annuity exceed the guaranteed returns of an investment portfolio. The companies managing the annuities have the capital to invest in businesses and ventures that a typical person can't. Such as financing, large real estate developments, or investments in startups, small businesses, or private equity.

With a stock portfolio, the only guarantee cash-flow is dividends since capital appreciation varies a lot year-to-year. Dividends are usually in the 2-3% range. A large, diversified real-estate portfolio might see 8-15% yearly returns in cash, which can be distributed, saved, or reinvested as needed.
You mean like punishment without due process? (aka a blacklist)
So I'm curious, say you do want to store images in your own database, what is the best way to implement that?
The binary protocol is a good part? :)
>"If you can prove can prove that you have a legitimate reason to have that money it will be given back to you."

The so called presumption of guilt. I am sure everyone has the proofs and doesn't need the money while they are held by the police.
Interviewing Phineas Fisher about Hacking and Anarchism
Grain in bulk is still cheaper than poultry.

However, you have a point. If poor urban families do not have access to fairly priced chicken feed, they will face the choice of feeding them pet food (at a net economic loss) or cutting their losses and eating all the chickens right away.
Judges in the US run for office like politicians and thus have donors to their campaigns. Sorry for the confusion.
100% agree with this method. Math calculations are never really used with IDs in my experience.
I mostly use integers (but see my comment elsewhere). There is most definitely a german tank problem involved in them, though:

https://en.wikipedia.org/wiki/German_tank_problem

For most things I do, it's not a concern, but it is something to keep in mind.
How to get from idea to prototype in 5 steps
Thank you for this
with npm there should be at least an option which prompts for Y/N/A when package has preinstall hook.

but even this just tries to put the problem under carpet. you could still for example have requests package which just installs request package, works as expected, just sends request/response to your own server from time to time. ie. when there's http basic auth used only.
So, which are the good parts?
How to nurture your creativity
> The whole point is to be roughly human-readable and using non-printing characters defeats that.

You're assuming that separator characters are not human-readable. If ASCII had been used as originally intended, they'd be just as readable as line breaks. Err, carriage returns.

Computing depresses me some days …
I think it very much depends on specifics. Years and years ago I stored emails as BLOBs in an Informix database for a large webmail system. That turned out to be a bad idea and we ended up migrating (very painfully) millions of emails to a file server.

However I don't think it's universally true this would always be bad. It depends on the speed at which you can insert and fetch blobs from your database, the speed of your NFS server, whether your database or file server can be replicated, and the problems with data integrity you're definitely going to have when not everything is known by the database.

No substitute for careful analysis of individual cases.
A couple of misconceptions in this video. Patent infringement is not a crime. A son lawyer appearing in front of his judge father would not be allowed for conflict of interest in most circumstances.

That being said, patent trolling is obviously a problem, and legislation to fix the problem is making its way through Congress.
I'd say the number one mistake newbies make is not setting proper indices... much bigger deal then any of these...
Qt 5.6.1 Released
To be clear, the ALv2 is characterized as a "BSD variant"... It is also extremely popular and well known and understood.
Craig Kerstiens's advice/writings is usually pretty sound, but I think he makes a fairly significant mistake in providing the advice he does here: over generalization. I appreciate he's talking about advice to beginners, but even so I think he needs to set context in his examples. Missing the context of possible solutions is probably the biggest mistake that anyone makes when making their choices in this (and many other) regard(s).

None of the things mentioned are necessarily bad depending on context. For example, if I have a billion people per second visiting my website, yeah, storing the site images in PostgreSQL alongside the rest of the data probably isn't a great idea. But, if I am building an ERP system for the SMB market, it may be a fine idea given the degrees of concurrency I can expect, the cost of server equipment, and the advantages of keeping related data (binary or otherwise) together. The trade-offs are different. Simply put, it depends.

I think this post could be improved with some clarification and I do think a tip sheet for beginner's is a good idea coming from someone that does have good advice for PostgreSQL... it just needs to be less generally prescriptive and more instructive about how to think about the given advice.
The government is made up of it's constituents [..] You'll never get more transparency from the government, it's not in their best interest

I don't think you meant what you wrote there. You're saying government transparency is not in the best interest of its citizens?
Chickens can eat bugs, plants and food waste that people wouldn't touch. This would work fine assuming at least a temperate climate (ideally tropical) and small villages with a fairly low density.
“The data indicates functional languages are better than procedural languages; it suggests that strong typing is better than weak typing; that static typing is better than dynamic; and that managed memory usage is better than unmanaged.”

Now that’s more like it! Except:

“While these relationships are statistically significant, the effects are quite small.” [Emphasis added.]

In fact, I’m not aware of any empirical evidence that static types have a strong impact on bug density.

Absence of proof is not proof of absence. There are multiple confounding factors when comparing languages in this fashion. (To name at least one, consider the big difference in use cases and applications with javascript vs. C). Even with confounding factors, static typing still has an edge in the analysis.

It's disappointing to see folks fall into traps of confirmation bias. Nobody is saying that dynamic languages don't have their place. It's fine if dynamic languages and their domains are all that someone cares about. However, don't assume for a second that learning a statically typed language is a waste of time. In fact, I would argue that it lets the individual tackle much more complex projects. One side effect of this possibility is that the individual will cause more complex bugs that can't be detected through static type analysis. This isn't a negative though, it's just the new reality.
> For me Porn is easy too. If it only involves consenting adults, it's fine. If it doesn't then other crimes have been committed and distributing it is de facto complicity by association in those crimes.

You only have to deal with what "consenting adults" means(currently a hotbed of political discussion and activity), and what "distribution" means(a fundamental question behind the drug war, copyright infringement, and so on).

> I'd add incitement to commit crimes as an issue. But that falls under complicity or conspiracy to commit a crime. If the speech in question doesn't cross that line, then it should be free.

And where this line lies is not a topic of contention.

> That only leaves slander and libel. These are civil, not criminal matters and should be prosecuted as private matters based on the harm done to the individuals so slandered or libeled

That doesn't really explain how to define slander or libel, whether there should be exceptions to them ("fair commentary" based on presented facts, statements about public figures, minor errors..), whether there's a mens rea requirement to defamation, etc.

Most of these things are examples of contentions with not just a moral idea of freedom of speech but with the narrower First Amendment in the US. Legislating speech is complicated precisely because it has so much power and value. If it weren't both wonderful and dangerous, we wouldn't bother...talking...so much about it.
No, it would not.

Blacklisting someone without due process is not the same thing as refusing to produce a drug to kill someone.
Yes! Please do that.

Use something like git-vendor: https://github.com/brettlangdon/git-vendor
I have faced this issue in my web application. My solution is to use a UUID wherever the ID will be exposed to the user (only one place in my application) and use an integer ID everywhere else. Although this does mean 2 IDs need to be generated and stored. The other solution is to never allow access to users without a log in.
> I don't think anyone considers Python or Java modern.

This is why I put "modern" in quotes; these languages are "modern" relative to the 1960s-era languages.

> Nevertheless, this isn't about where adoption comes from, it's about how the language design was influenced by the advancements in language design in the last 40 years.

Precisely. The OP implied that Go programmers are "bad programmers" because they can't adapt to post-1960s languages. I countered his hypothesis by pointing out that the lion's share of Go developers were previously competent Python, Ruby, JavaScript, or Java developers. If his hypothesis were correct, one would expect the Go community to be primarily C expats.

For whatever reason, a large swath of developers find the features Go adds to be more useful than the "advancements" Go omits (or perhaps they just find value in the omission of those "advancements" altogether). At any rate, Go's popularity can't be reasonably attributed to graybeard developers who can't grok Java.
> Where is the burden of proof that must be reached before taking my assets

But... that would make police less productive.
I agree with your "better advice"... Even if it's a public facing app, having them stored in the DB makes it much easier to restore, replicate, etc... Not to mention allowing fine grained authorization rules. Any time I have worked on a system (web app, fat-client, etc) where images, which are really data, are separate from the image metadata, overtime, a colossal mess occurs. Orphaned files without metadata, metadata without files.

Even in your public web app, you also might have other back-end systems that cannot access S3, but can access your application services or DB (yikes). There are definitely many cases where external providers like S3 is the better approach, but not all. Also, you don't have a performance problem until you have a performance problem.
The "Over normalization" point is basically saying that SQL is bad at handling relational data.

Kind of ironic when you see how much bad press NoSQL databases got for missing join functionalities.
Most jurisdictions would consider that to be aggravated assault.
I don't understand why you'd want this averaging behavior at all.

When trying to get the plane onto the center of the runway, both pilots' actions are probably pretty correlated, and averaging could remove any noise (e.g., twitches).

But in many other circumstances, it seems like it would be downright dangerous. Something's in front of the plane. One pilot goes to the left, the other pulls to the right, and the system averages the commands and smashes straight into it.

The benefits of a marginally straighter landing don't seem like they would outweigh the potential of a massive catastrophe.
CC 061: Sales Funnel and Email Marketing Automation with Greg Hickman
Yes, and the way you solve it is by having an API that holds your business logic. That's how you avoid duplicating business logic in all those applications. Is your database just chock full of insane triggers and functions?

Business logic doesn't belong in a database. data does.
Source-only with it and toolchain here:

http://genode.org/download/release-archive

I don't speak for them but I think it's to self-select for preferred users at moment. Those are technical people willing to try various configurations and do bug reports. Also, I believe they plan to do OEM-style where third parties can create, package, and distribute a specific configuration. Thats one sore spot in the project where someone needs to get it up to parity with something like Qubes. They need at least one, general configuration for laypeople running Linux VM or apps.
when you are pulled over you turn the phone OFF.

Its simple and its fast.
Asset seizure, under the same conditions, happens in many states.

https://news.ycombinator.com/item?id=10591250

And many more stories ...

https://duckduckgo.com/?q=asset+seizure+site%3Aycombinator.c...
> If you composed a portfolio of high dividend, stable, stocks... Could you theoretically have a "guaranteed" monthly income AND the ability to liquidate, in the event of an emergency?

No. You can buy an annuity, or US Treasury bonds, but guaranteed high returns don't exist, and adding in a liquidity requirement doesn't help.

Note that GM declared bankruptcy in 2009. Even if it is still "too big to fail," that doesn't mean investors can't lose all their money.
I get the impression that's for a fully grown chicken sold for meat. I have no idea how big those chickens are. In North America live chickens sell for between 30 and 50 cents a pound. The chickens in the video look like small roasters, definitely under 10 pounds.
Oh absolutely. The judge is entertaining all those patent cases simply because it's good for his son's law practice. Unacceptable.
Wow, would hate for one of those supply lines to fail :|
I don't know how much checking for how much the package has change would help. You wouldn't need to change much to exploit - one line that downloads and executes code from somewhere would do it.
I'm going to make a bold claim: no datatype has a quality natural unique key.

I am struggling to think of a counterexample. Maybe chemical elements? Where the natural key is of course the atomic number, not the chemical symbol...

Before you suggest 'zipcodes' or 'states', consider that zipcodes are not in any sense natural, and anyway, like state codes, are so US-centric that they don't belong as top level elements in most real database schemas.
Just from travelling to europe and dubai, the tech scene in dubai is incredibly small. There are some cowork spaces and 'accelerators', but the ecosystem needs time and effort to grow.
Depending on your configuration and needs, using a method to generate primary keys in a way unique to each system might still yield better performance. For example, in MySQL you can use auto_increment_increment and auto_increment_offset to force one server use insert using even integers and one odd, or any combination you need. It does eat bits from the key size though. Changing it later can be a pain, but it possible if you think it through. I don't doubt something like this is possible in Postgres as well.
I submit to useless comments too, but not when there's already 7 times the same snub one in a row already.
maybe I don't understand the namespaces...

but if you are targeting a package `someuser/popularpackage` can you not just register your own malicious `popularpackage` under a typo namespace like `smoeuser`?
It doesn't really matter that much the problem with most homebrew routers will be the hardware you need a pretty decent desktop and some good network cards to match the performance of mid range home routers.

I had a router like that for a couple of years running pfsense which is based on BSD but since London got a 1gbit ISP I had to switch to a normal router unless I wanted to invest like a 1000$ in hardware.
Connecting Spark to the Graph: Neo4j Spark Connector for RDD, DataFrame, GraphX
Storing images / blobs in a database is fine! https://sqlite.org/intern-v-extern-blob.html

I just recently built a e-commerce site that stores the images in the database. But be careful, some ORM's will automatically fetch that blob together with the rest of your object.
practical and fun; based on rock solid jvm; has access to Java ecosystem so you don't need to rewrite the whole "standard library"
Stratospheric Life: The science of bacteria in the atmosphere
> Under no circumstance should i have to PROVE where my money came from

That's language is too vague to mean much: Are you saying this is illegal, or are you saying it is unconstitutional, or are you saying it is immoral?
The advantage of Bluetooth is that it runs on every smartphone out there. There is quite some incentive to have the basics right. This can not be said about chips that are not present on smartphones. I'm not saying that Bluetooth cannot be hacked, before 4.2 they didn't use proper key exchange, so e.g. you could use Ubertooth (https://www.sparkfun.com/products/10573) to capture the exchange. However, with Elliptic curve Diffie–Hellman it became pretty standard. The requirements from Apple for HomeKit are even so ridiculously high that your gadgets might be safer than your bank account.

My bet is that indoor positioning is gonna be the game changer in the coming years (not robotics, not AI, not voice recognition, not yet, at least). So, I'm particularly looking forwards to see what's in store on the Bluetooth roadmap in that respect. The only thing I wish is that they would be faster in rolling out mesh functionality...