skysight-inc/HackerNews huggingface dataset:
I really like it, had some issues getting it up and running on Windows but I should have read the Requirements section above it. Oops.

Your RapidMVP site is down by the way.
I use to get these fantastic blank journals that were hard cover bound back in the day from Borders Books before they went out of business. I still have a few from the late 90s. I would love to see something like that with a grid.
U.S. Appeals Court Holds Up Net Neutrality Rules in Full
1 year.

Built up a hobby site slowly over the past two years, at the end of the first year it was making £7,700 a month..

It is still active and earning around £2-3k per month with only about 1 hours work a week.

Currently looking to sell it on as I have just started on a new project.
Yeah, I realized later it was possible to interpret that sentence another way. I think my downvoter thought I was making a dumb throwaway snark, but I was actually just confused.
Thanks, I'll check it out.

Another great book from that era, outdated & pertinent @ same time, is Boorstin's 'The Image: A Guide To Psuedo-Events In America'.
Comments moved to https://news.ycombinator.com/item?id=11899925.
Dammit, time zones.
I am convinced you don't need stuff like that. Only if you want to run a business that makes so much money that you'll start thinking about flying cars, balloons, satellites, robots, contact lenses, glasses and hundreds of other things, not related to your core mission.

A competitor can make do with much lower margins.
Which is still coercing your vote. Not to mention normal postal voting is also susceptible to the same problem, and I bet we'd all agree that's much less secure, yet we still use it.
> > A lack of filtering on user CSV output that could allow an attacker to run arbitrary code on an administrator's computer.

Iff the user has Excel, and explicitly allows it to run macros in a CSV file. It's already a stretch to call this a phpMyAdmin vulnerability, much less a "medium severity" one.

> > Improper cookie invalidation that could allow an attacker to unset internal global variables.

From the PDF report:

> Note: Because of the large amount of global variables, and the relatively short nature of this assessment, NCC Group was unable to fully determine the impact of this vulnerability.

It might be serious, but they didn't have enough budget to make a proper analysis.
Why shouldn't "Machines" be able to to that? What limit to technology exactly is it you believe there is that this can't be done by machines?

Humans are wrong about a million different things, they make mistakes all the time, we are limited to how much we can take in and so on.

Humans have all sorts of limitations yet somehow we manage to do ok.
Funnily enough, MailOnline had the same problem and also implemented VPAID for VideoJS

https://github.com/MailOnline/videojs-vast-vpaid

I really hoped that the Guardian and others were going to create their own safer (no pron/malware) and faster (less RTB) network and cut out much of the cruft when I read about Pangaea last year. Looks like it's more about sharing data though :(

http://pangaeaalliance.com/
I have been working on a side project about food dishes, but it does not even have a revenue stream. It is more a labor of love. I have been at it for over a year now.
Uhhh moving from set to subset is what requires alterations, set to superset does not, by definition.

The problem here is compiler support and performance.
Probably because the power hungry processor is less power hungry then the amount of power that would be required by the wireless chipset if it needed to offload everything to the phone.
I have never asked a question on SO for this very reason. I will do hours of extra research and testing and searching because I do not want to be on the receiving end of some of the comments I've seen like "you should really get some training in that".

And yes, the extra work in forming a quality question does indeed often help me answer my own question.

However, I have often benefited from someone else's stupid question; so, I'm glad they asked even though I wouldn't have. I also benefit from the opinion questions even though they are always shut down as "not relevant" or "off topic".

It's getting to the point where it is difficult to even read some of the answers because you have to sift through all the hateful snarky comments. I have actually started deliberately avoiding SO and trying out the 2nd or 3rd search result sites.

It's easy to say RTFM but sometimes what people need is context. Unless you've programmed in C and used printf and scanf then format strings in whatever language are pretty opaque.
The Steering Wheel Is the New Floppy Disk
Thank you for the explainer.
Apple lead with Graphical User Interfaces for the better part of 30 years. First with the original Mac bringing Xerox technology to the masses. Then with the NeXTStep revived iMac, the clever iPod, and the smart phone.
Now they struggle in the post GUI era of Voice and A.I.
If you are using MySQL, and need to manually fuck around with tables for whatever reason, it's really useful and beats most other options.

For us it sees plenty of use with poorly developed legacy software (e.g. Wordpress).
I like to use a notebook for random thoughts, todo lists, and diagrams. Taking notes on paper in meetings helps me commit important details to memory and having them all in a book keeps me more organized.

I used to always buy Moleskine notebooks but have switched to Forestry Suppliers #49352 field book. It is a combo of ruled and graph paper and intended for surveyors, but it is a nice mix for developing software as well.
Most people who aren't going to pay for text editor are not going to pay for Sublime whether or not its free. These people would choose something else if Sublime was "paid only."

On the other hand, people and their circumstances change. A person who is using the free version of Sublime is a strong sales lead for the paid version. If the free version produces more sales of Sublime than it cannibalizes, then it's a profitable strategy.

The free version works because the nominal cost of producing and maintaining it is approximately zero.

Good luck.
>Sure, $6 billion looks like a lot of money. But it's a drop in the bucket compared to the rest of the Carrier Battle Group. You need a lot of ships to properly protect a carrier.

How is that an argument in favor of a carrier not being expensive? If anything, it implies the actual total cost of a carrier is even more than its own cost.
Does Apple really think that people use Siri? Yes, limited voice control is useful in the car when you need to call someone. Other than that, I've never seen someone using Siri for anything other than screwing around. I think Amazon has forced Apple's hand with Alexa. The problem is, Alexa is more useful, more open, and overall far ahead of Apple's technology. I don't think that Apple understands that the main reason Alexa is great is that Amazon put it in a tube and made it able to control the lights in my house, the music, and lots of other stuff. It's not just for changing your name to something stupid and asking it to Google things for you like Siri is.
Or just download them and serve them from your own domain. If you enable HTTP/2 there is little to no advantage of using a third party for hosting fonts.
It's easy to create online voting systems that guarantee a correct result. You just didn't think about it hard enough.
Project home page: https://fffs.codeplex.com/
>Initiating a nuclear war after a nation state starts taking out your aircraft carriers is not entirely unexpected.

Really? Should the US expect it too when it regularly does the same to third countries?
It was a tongue in cheek remark obviously but nonetheless bringing awareness is only the first step - then you're stuck being aware of your own limits - overcoming those are the real effort and it requires quite a bit of it to become habitually impartial to your own thoughts - the process, the making of that habit of detachment - that's where real progress is.
Show HN: Made a cheap tiny, heart-rate, galvanic-skin response and motion sensor
> Bounds checking interfaces in C99

... are an optional part of C standard library. C11 Annex K.

http://www.open-std.org/jtc1/sc22/wg14/www/docs/n1967.htm

So just use a library for those and you get support in every compiler!

> MSVC: Nope, why? Performance concerns

MSVC runtime library does support an early version of that. Has supported for over 10 years. They contributed it to the standard, I think.

Example, sprintf_s, present in MSVC2005: https://msdn.microsoft.com/en-us/library/ce3zzk1k(v=vs.80).a...

Anything else?
> Also, LAX to London or Paris is about 10.5 hours. I'd think a market that cuts that to under 5 hours would exist.

And very crudely, I think about 20% of the great circle route is over the US and hence in the FAA's jurisdiction. They're already allowed to fly supersonic over much of Northern Canada, and the great circle comes over Hudson Bay and to North Dakota (passing near Winnipeg)—that's the only section outwith the FAA's jurisdiction where they are not already allowed to fly supersonic I believe.
Somewhere there must be a forum where people can help you with that. Or at least some Wisdom of the Ancients

https://xkcd.com/979/
Hi there.
I'm the Co-founder of SessionStack - https://www.sessionstack.com/ .
Seems like you're developing quite the same tool (we're not open source, but have an on-premises version).

It's quite an interesting space so I wish you good luck in your endeavor.
Day in the Life: Android Developer
Interestingly, Google specifically excludes CSV vulnerabilities like that from their bug bounty program.

> CSV files are just text files (the format is defined in RFC 4180) and evaluating formulas is a behavior of only a subset of the applications opening them - it's rather a side effect of the CSV format and not a vulnerability in our products which can export user-created CSVs. This issue should mitigated by the application which would be importing/interpreting data from an external source, as Microsoft Excel does (for example) by showing a warning. In other words, the proper fix should be applied when opening the CSV files, rather then when creating them.

https://sites.google.com/site/bughunteruniversity/nonvuln/cs...
Comments based on the most trivial skimming of the docs, so I'm probably wrong about everything.

> Incredibly ambitious.

It is, but ambition is necessary if you want to build distributed production systems. BOSH[0] does something similar in providing an all-or-nothing approach to configuring distributed systems built out of heterogenous software components spread across multiple machines.

Note here that the key is the heterogenous part -- if you have an undifferentiated flock of software, you can rely on a different abstraction to deploy them (anything from PaaS to a hand-rolled thing, though I don't recommend hand-rolling this stuff). But very few distributed systems are designed to rely on emergent behaviour. In fact that's usually what we're trying to avoid.

Where they appear to differ is that BOSH is quite strict about lifecycle -- you can't "truly" update configurations on-the-fly. You update the relevant YAML and then ask BOSH to update the world for you. It seems like a hassle, but if you couple it with git and Concourse pipelines, you get a complete, externalised history of every system configuration change you've ever made.

We already know that this top-down model of heterogenous distributed systems configuration management works better than trying to extend it from the machine up (as Cfengine and its various successors tried to do). BOSH has been deploying large systems for years and years. It was originally designed to deploy and upgrade Cloud Foundry without downtime, something it does with aplomb.

What I really like about Habitat over BOSH is the way it exposes the available knobs and dials. That kind of interactive discoverability is super helpful sometimes.

I was, however, struck by this claim:

> This architecture allows us to avoid the production cliff problem: the closer you get to production, the more difficult it is.

This is literally the problem that PaaSes solve for you. I've seen companies without PaaSes, with home-rolled PaaSes and with Cloud Foundry. In the latter case, the biggest obstacle is usually getting VPN access. And there are other PaaSes apart from CF. Habitat seems to be doing a kinda-sorta PaaS here (note the "Supervisor"), but without most of the feature plumbing that makes PaaSes operationally useful: routing, logging, service injection and the like.

Disclaimer: I work for Pivotal, we do the majority of the engineering on both BOSH and Cloud Foundry.

[0] https://bosh.io/
Can passengers access safety critical systems in the cockpit over IFE?
> ads can be requested server side by sending the URL where the ad will be displayed through an API

THIS THIS THIS THIS THIS is my condition for viewing ads. Request and render the ads server-side, and I'll happily view them.
If your complaint is that the UNIX layer of Mac OS X isn't ~exactly~ like Linux, then the only way you're going to solve that problem is by running Linux instead.

It's easy to get more up-to-date software with package managers.
I love the Chef ppl, but...

Is it just me or are there a ton of other folks doing this? The idea of introducing yet another layer of stuff is scary, and there's lots of work left to do on Chef. In a lot of ways, they feel just like Nomad (coincidentally also on the front page)... I wish they would spend some time on their core products versus expanding into an overfilled market.
It's usually a legitimately harmful ad. Malware, adware or other bad stuff. But these slip through quality control of ad networks, even when they don't want them.
Why CUDA not OpenCL I wonder?
Mostly testimonials, but interesting examples for me to see considering I've just got 6 months of full-time Node.js under my belt after many years in Java and Ruby. There's a link from this blog post to the Node Hero Tutorial and I don't remember coming across this recommendation to organize file structure around features rather than roles:

https://blog.risingstack.com/node-hero-node-js-project-struc...

It looks like a good option to me. I just finished a standalone notification system in one of our Node.js apps and all the files are organized more like this than the typical Rails file structure.
You might like this: https://www.dbninja.com/
WWDC 2016 Platforms State of the Union
> we see the use of actual force happen more and more. Why?

False premise; this is the opposite of what we see. https://www.amazon.com/Better-Angels-Our-Nature-Violence/dp/...

You can only make people stop fighting by (a) killing them; or (b) convincing them that fighting you is a mistake. There are no other ways.
I can't think of much reason to use it over Workbench or Sequel Pro.
"Dislike" often means "contains malware" or similar. Few ad networks are both sizable and very aggressive about policing.
The crimean war was indeed quite an industrialized war, used rail, and was a siege war; but personally I don't see it of the same magnitude as the us civil war (but there's no need to have a long argument about in in the HN comments!). I'll just say that the magnitude was _significantly_ lower than USCW and WWI; certainly it was not total war economy-vs-economy -- if best it was one of the first modern technology-vs-technology wars (I assume that was also a factor in the iron/bronze age, and in the colonial wars too).

But to paraphrase Stalin, magnitude has a quality all its own. Which is why I don't consider the brief Austro-Prussian and Franco-Prussian wars, while of incredible political significance, to be of great significance in the discussion I raised. Neither mobilized an entire economy much less both sides'.

(Big exception to what I just wrote: they did prove the value of the Prussian General Staff model).

Disclaimer: I do have a degree in European military history, but my scholarship, for what little it might be worth, is over 30 years out of date.
New Yorker domain is hacked – redirects to craigslist
This is an excellent point - kind of goes against my earlier comment. Maybe they have to move this way because that's their only choice - if they don't move into automating this, containers will disrupt them (or already has)
OS X DNS cache reset script
I don't think it's that big of a deal. You can still right-click to open the unsigned app and let it run, which to me is a better option than setting the option to Anywhere as I still want to see the prompt for unsigned apps.

In addition, the release notes mentioned there is a bug related to this suggesting they do not intend to disable this function.
>They're just not nearly as widespread as some health food fans would have you believe,

Among adult white middle-upperclass coasties of mostly to entirely central european descent.

But America isn't just white people anymore. The doctors say lactose intolerance is around 90% for asians and 80% for american black people.

Its worth considering that American was like 90% lactose tolerant white people before the 60s immigration reforms, but now is only like 60% lactose tolerant white people, and dropping. The majority of children today are lactose intolerant to some level or another.

Like the wikipedia says "most lactose-intolerant people can tolerate a certain level of lactose in their diets without ill effects" But its very much like the Olestra debacle. You probably won't get sick from eating small amounts of undigestible oils, but you absolutely won't get sick if you don't eat them at all, and america being what it is, we have people who insist on binge eating and the digestive consequences of that can be quite gross. Better off just staying away and not eating it at all.

Conceptually, drinking the breast milk of another species on a regular basis is just weird, anyway.
Сool article
If you're not in Safari or don't have the App, you can get the video in HD here:
http://devstreaming.apple.com/videos/wwdc/2016/102w0bsn0ge83...
and SD here:
http://devstreaming.apple.com/videos/wwdc/2016/102w0bsn0ge83...
Break on Attribute Change: Neat Debugging Tool
Very good idea.
One more startup in this area is http://www.getpangea.com/
> We're still talking internally about what we're going to do with the social stuff -- we're leaning towards kicking it out

You don't have to get rid of social buttons; for some sites, they produce significant results. Just turn them into links and locally hosted static logos rather than scripts.
Give me a way to permit paper voting but also be sure that the person who is voting was not coerced.

Really. I'll wait.
Some people, like my elderly father, live in an area where it's dial-up or Verizon LTE MiFi with severe data caps (~14 GB for $100 per month). He's an old-school newspaper & magazine reader, so advertisements don't offend him. He actually looks at them from time to time as he reads ESPN and on-line newspapers.

However, page loads that approach 100 MB are leaving him with less money in his pocket to purchase the products and services being advertised. Something needs to give.
Marvelous, even less incentive to join it then, my "personal ID" gets tracked over the web enough already.
If you need to make a manual database change then Adminer is often a better option[1].

It's doesn't have the featureset as PHPMyAdmin but it has a huge advantage in that it's a single PHP file you can upload, make the necessary changes, and then delete. If you're interested in maintaining a secure server but you don't have any better options than using a script, then it's better to upload something when you need it than trying to secure an online admin tool.

[1] https://www.adminer.org/
nowadays I just use 'https://...' instead of '//...' because

* security
* I will immediately know if a server doesn't support https, because the image won't load
Sounds like it might take a little while so maybe in the meantime you could just add a "coming soon" type label to the link on the home page.

And don't forget that painful (exciting) upgrades is exactly what some beta users are signing up for in the first place!
Protector de pantalla móvil, sin láminas de plástico, ni burbujas
It depends on the plant, obvious from the different color.
> Ferenc Hámori
> PR & Marketing @RisingStack.

Confirmed: NodeJS is pure hype.
Can someone explain what this means? The term "net neutrality" has been muddled so much that I can't tell if it means what it actually says, or if it's distorted doublespeak that actually means the opposite.

Is this decision good or bad for us?
I've actually emailed the Guardian before to say I would gladly pay at least whatever they earn from my ad impressions to have an ad-free site. They just pointed me to the mobile apps where this is already an option.

I wish more sites offered an alternative to the dilemma of UX-breaking ads vs ad blocker guilt.
Use Typescript 2.0 already today with Sikky workflow
>Sure, $6 billion looks like a lot of money. But it's a drop in the bucket compared to the rest of the Carrier Battle Group. You need a lot of ships to properly protect a carrier.

You also need a lot of ships to protect all the countries that cry about their neighbors invading them, human rights atrocities and other "emergencies" that take our military all over the world to protect other countries that are fully capable of doing it themselves, but prefer to put our military in harm's way instead.
Updated App Store Review Guidelines
​The Good and Bad of Apple MacOS Sierra
nix seems really interesting & the 'right way' to do things. but strangely, i don't really* have problems with homebrew -- maybe because it has the luxury of being built on top of a stable, known system.

*i have had problems with python. i always have problems with python.
That's not quite the thought process. You look at the pay you earn now, in a non-government job. Then you go to look at the government pay scales. You determine that in order to maintain a similar standard of living as you currently enjoy, you would have to be ranked on the government pay scales equivalently to a general in the armed forces, or a consul in the diplomatic corps, or any of a number of other positions that literally require a lifetime of dedication to advancing a bureaucratic career, and a great deal of specialized experience or political capital.

The "thinking about it" generally lasts about 30 minutes.

The highest-likelihood logical conclusion is that all high-ranking government officials are being richly remunerated through channels that do not pass through the US Treasury or GAO oversight, such that the total value of their office is comparable with a similar position in the private sector. Those that do not can instantly find higher-paying jobs that can effectively monetize their former connections for their new employers.

This is the primary reason why the bureaucracy cannot keep up with technology. By law, they cannot make a competitive employment offer. They are forced to hire through contractors. And contractors, through mutual self-interest, exploit that weakness without mercy.

I was once asked by an Army captain to consider working directly for the government, and it took quite a lot of restraint to bottle up my guffaw and laugh it out later, outside her hearing range. The Feds simply cannot hire me to its own payroll with that hulking slab of a padlock on its wallet. So instead, it pays 4 times the rate I would ordinarily accept instantly to a contractor employer, who offers 0.10 to 0.35 of that to hire people ranging in quality from chairwarming jobsworths to eccentric geniuses.
I've been a Node.js developer for a couple years now and one thing I've noticed is I've never come across a company that actually uses it for their core api. There always seems to be a Java based (or another statically typed typically 'monolith' language) backend api server that smaller node.js microservices/apps communicate with.
That's basically Notepad++, which us Windows folks tend to use pretty heavily. Notepad++ does pretty much everything on this list, even the questionable choice of using non-monospace fonts, although that is kind of a PITA to change from the defaults.