skysight-inc/HackerNews huggingface dataset:
Do you not see how ridiculous that request is? Seriously? You're like a security anti-vaxxer. "Security patches are not needed because I don't think I've ever been hacked and I know nothing about security" or something to that extent. I'm not going to put my job on the line or waste any more of my time, so I'll try summarize why your position is stupid the best I can in the paragraph below. I do hope you'll read it and understand.

Here is a fact: If you have a system with an unpatched security issues then that system is vulnerable to those security issues, no matter how hard you argue on the internet that it is not. Yes, if you selectively patch any that are remotely exploitable over the internet (of which there are a few, if you read the links I posted above) then I can't sit here and hack you from afar. But that doesn't mean your secure, you might need to simply visit a web page or open a document that triggers any number of local security vulnerabilities you have not patched.

All in all I still don't understand why the fuck you wouldn't just patch any security issues regardless whether there are public working exploits (and oh boy there are many).

I do work for a security company and I have done for years, and I don't care if you don't believe that. But hey, you seem pretty adamant about your position and I'm not likely to change your mind. If you're so sure about the evils of having a secure system and want an authority figure to validate that then email/tweet tptacek[1] with "hey I've got a Windows 7 box here with some security vulnerabilities I have not patched, I'm fine right?". Seriously, do it. Confirm your belief by asking a verified security professional, you've got nothing to worry about because he will email back "yes that's fine even though there are like a thousand unpatched exploits in your system it's all cool because reasons". Or maybe he just won't email back, because you know, he's not stupid like me and wastes time replying to crazy people on the internet.

1. https://news.ycombinator.com/user?id=tptacek
The geek in me immediately went to look at the github repo from the github link at the bottom of the page, but I got a 404.
Hard to say in particular. There are hundreds tiny bits that affect productivity. i don't have thunar or dolphin under hand to verify, but just look at lister (TC's internal viewer). It's uber-fast (startup time, file opening time, closing time on ESC), i also can open multi-gigabyte files in an blink of an eye and also _scroll_ though them without even slowing down. same for switching encodings, searching for a text (again, good shortcuts, speed etc)

Can any of the file managers (or anything) do something similar in handy manner?
The only thing I've seen these days is Cloudflare lifting your service to "Under Attack mode" accompanied with an email saying that they will suspend your account if you toggle it off during the attack.
I'd love to see what ways of programming tend to be most effective with production teams.

My gut thinks the solutions will be a little more boring than our inner magpies will want to admit.
> S3 is one of the absolute best choices because it's cheap and requires you to manage no infrastructure at all

... and there is no possibility of ever having proper TLS, with or without CloudFlare. That alone disqualifies it as "best". It simply doesn't meet minimum requirements.

> Again this has the prerequisite of maintaining infrastructure which needs to be kept up to date and secure. It's also massively more expensive than S3 for my use case.

What are you paying for S3, currently?
It is relative to cpu performance.

https://en.wikipedia.org/wiki/Bcrypt
I see your point, though I don't find your examples particularly compelling.

Stephen Jay Gould, Isaac Asimov, Sir Patrick Moore, or Vaclav Smil strike me as better examples, drawing from personal experience.

I'm actually having a fair bit of trouble coming up with a good example of a contemporary scientific author I'd recommend unhestitatingly. Hrm.
The thing is that the tone of the article seems to suggest taking such an extreme: I mean, an "anti-if" campaign? There's like, only one sentence of concession near the end towards those unconvinced by the argument.
Criticism assumes a different point of view.

It doesn't, really. Criticizing poor choice of terminology is still criticism.
If you don't live in a city how likely is it that you care about those people in the city you wouldn't care about if you did live there?
Looks like it wasn't until 2013 that Cloudflare became serious about origin protection and a more universal anti-DDoS service: https://blog.cloudflare.com/ddos-prevention-protecting-the-o... https://blog.cloudflare.com/the-ddos-that-almost-broke-the-i...

I'd like to know if people are still getting that email.
Freckle beacons want you to get your ESPN on
In our hands is placed a power greater than their hoarded gold
Greater than the might of armies magnified a thousandfold
We can bring to birth a new world from the ashes of the old
For the Union makes us strong
What you are saying is of course true. However, I believe we also are getting the worst of both worlds right now. The state of the EU is a good example of this. On one hand more and more things are regulated on an international level. In the case of the EU these decisions are being made by representatives who were in many cases indirectly elected. If we had something like a European president people would have a much better, direct way choosing what and whom they want. It also would give a platform for previous representatives to point out what good they actually accomplished. During the Brexit I heard that large parts of the nature conservation program Natural England is funded by the EU. Yet no one knows, because it's in nobody's interest to point these things out. Local politicians will either not talk about it or pretend they did it. EU politicians have almost no media platform. A direct election would change that. We might benefit from similar institutions on a UN level or similar as well as more and more decisions are being made at those levels.
If you judge Trump by what he says, you're in for a big surprise.

It is true he claim to be non-interventionist, but on the other hand he nurtures antagonization, so what good does it do if he ends up forcing interventions through provocations?

He has also openly proposed creating systems/actions on trade that correspond to (2) (e.g. comments on Ford).
ISIL is generally known to accept responsibility only if they see the person has declared their pledge.

You may also wish to see this video [1].

[1] https://www.youtube.com/watch?v=2YCWf0tHy7M
I started using a similar idiom in Java 8 recently, inspired by Optional class and some new functions in Map interface. It took me an hour or three, but at some point I noticed that in few places I was writing like this just because it's "cool", even though it was less readable (and actually made it harder to use one code-navigation IDE extension I liked).

A lesson this strengthens in me again is that sometimes a cool-looking idea turns out to be pretty bad in practice, but you only figure it out after you go ahead with it. It isn't bad to try out things (that's how we learn), but you need to be extra honest with yourself about how the thing really feels when you're first using it, and never ignore that sense this new idea actually doesn't fit well and should be rejected.
What do you want me to elaborate? Do you think military coups in Turkey are special for some reason?
You can google about them yourself.
https://github.com/openstreetmap/openstreetmap-website/ a rails app basically and a way to import the planet back into the database (not sure how to do this but I think its possible).

You wont have any of the history, and no users info etc, but you can edit and if you have tile server set up can serve tiles from it as well.

Far better though is to import the data into PostGIS (the rendering database) and edit and add that way with a desktop gis.
> no evidence that the human brain contains any hardware for pitch ratio detection. Consonance of simple ratios is a result of a simpler underlying rule,

My reading of your link is that it doesnt argue against pitch ratios being fundamental - what it does do is say that ratios are not only happening in chords but also in the sound of a single note, in different ways for different instruments.

This is very interesting work though and to me at least much more interesting than the headline post here which just points out the blindingly obvious (people raised in different musical cultures hear things differently)
Private organizations cooperating across borders is what's driving this.
That was called "Bonded Spammer", from Ironport. They were trying to get ISPs to accept their whitelist.[1] (Ironport tried to call it "Bonded Sender", but nobody in anti-spam took that seriously.)

Ironport was selling mail filtering appliances. They also sold dedicated spamming engines that were whitelisted by the mail filtering appliances. This playing both sides of the street made them something of a joke, and they had to drop the spam engine business. They were eventually acquired by Cisco after that.

[1] https://groups.google.com/forum/#!topic/news.admin.net-abuse...
There are different flavours.

There's the League of Nations / United Nations model, which tends to be fairly constructive.

There's the "citizen of the world" / cosmopolitan model, which has tended to have egalitarian and idealistic overtones.

There's the Mont Pelerin Society / Atlas Network "Free Trade / Invisible Hand" globalisation model, which seeks benefits for transnational corporations and the plutocracy, without any safety nets or provisions for the mass of the world's population. This viewpoint is strongly adopted among many who align as "right", contrasted with left. Generally, neoliberalism. See Noam Chomsky, Naomi Klein, George Monbiot, Naomi Oreskes, or Bill McKibben as among its critics.

The populist conservative mode of xenophobic / nonalignment / isolationist tendencies is another element, and among the few which are specifically opposed to international engagement. It's hardly specific to any one nation -- you'll find it expressed among the populist conservative factions of the UK, France, Germany, much of the Islam world, Japan, Russia, and the United States, just off the top of my head.
Apple has been Rickrolling us all with its Watch
> Try it before you knock it.

That's what I recommend too[0] - with the added caveat that you shouldn't be afraid to "knock it" if it turns out to be honestly bad.

Sometimes the idea turns out bad, sometimes it turns out great - but you'll never know it if you don't try; just be honest with yourself during that trial.

[0] - https://news.ycombinator.com/item?id=12108138
The usability, robustness and the ease of composition of simple text interfaces is not accidental. Pipes survived for many years for a reason (though they are broken on Windows -- it is hard to pipe data as is without corrupting it).

SOAP, WSDL have taught us already that more "structure" does not mean better. Binary interfaces such as provided by systemd or http/2 may teach us again the importance of simplicity, human-readability and avoiding too frigid constraints failing in the face of natural evolution between different software versions.
I kinda abuse reddit as a vetted public bookmark service.
How R is used at Microsoft
The article isn't balanced. It's suggesting that the direction of the refactoring is an unalloyed good, as I read it. I disagree.

I've seen junior devs take this kind of stuff literally and over-apply it, like it's a religious ritual that they get a pious buzz from adhering to. I'd prefer people to think first before regurgitating what they most recently learned.
I think this confirms that Apple Watch has been a joke.
Vuedo: An open source project built with Laravel and Vue.js
The definition of Standard ML is perhaps where the OP might like to look, for a somewhat more advanced example.
This is, as many commenters have noted, just another overzealous programming doctrine. Just like 'GOTO considered harmful.'

Here's the deal: if is a flow control primitive. Just like goto and while. If (heh) that primitive isn't high-level enough to handle the problem you are facing, it is incumbent upon you as a programmer to use another, higher level construct. That construct may be pattern matching, it may be polymorphism (or any other form of type-based dynamic dispatch). It may be a function that wraps a complex chain of repeated logic, and is handed lambdas to execute based upon the result. It may, as in the article given here, be a funtion that is handed lambdas which apply or do not apply the transformation described.

The point is, there are many branch constructs, or features that can be used as branch constructs, in most modern programming languages. Use the one that fits your situation. And if that situation isn't a that complex, that construct may be if.

Fizzbuzz using guards is the most clean and modifiable fizzbuzz that I've seen in Haskell.

Although now that I think about it, if you provide a function with a list of numbers...
This is not supported by the data. All it says is that the very best practices more than the extremely good. There is no evidence that prolonged practice leads to exceptional performance.
Your license to use React.js can be revoked if you compete with Facebook
> Why does this seem like they're trying to 'legitimize' something that's probably been done in secret for years?

Because that is exactly what they are doing based on what Snowden said?
You can basically `go get` this and use it as it is though. I'm not entirely sure why they spin it as copy-pasta crypto.
Absolutely, but I'd also add that what works in one language/environment may not work in another. I wouldn't be surprised if writing Haskell-style code in Python didn't work out that well, for example!
Multiple return values are a great idea IMO, and I learned to really appreciate them in Common Lisp. They're best used as additional bits of information that the programmer may or may not find useful. Like that string comparison example of yours. Or #'gethash[0], that will return the value from hash table you're looking for or a default value (which is optional and by default NIL) if there is no entry with a given key, but it'll also return a second, boolean value that tells you whether your return value was actually found or not - which cleanly solves the problem of storing NILs in hash tables, in the places you care about it.

Multiple return values feel elegant also because the compiler can optimize them away when you're not using them, which is the most common case.

[0] - http://clhs.lisp.se/Body/f_gethas.htm
Snapchat's massive potential
In the encrypt examples I always wonder why they assume that you have a fixed 32 bit key (password). Shouldn't they include a padding function?

Is use this one:

edit: deleted in case some is so crazy to use it :)
Best stack, Sensei! Zennn
Why don't we just treat this like writing?

Good writing has one clear imperative: communicate meaningfully the intent of the author to the reader. Good code is no different; it is merely expressive writing in a different language, with, perhaps, greater constraint on its intent.

Some people make up rules like "don't use adverbs", or "don't split infinitives", in an effort to write better. But this doesn't necessarily produce good writing; sometimes an adverb is just what you need.

The same is true of code. These are useful things to think about, but "destroy all ifs" is akin to "never use a conjunction".
> >Factorization for example, that's why public key encryption works (we can't brute force it), but a quantum computer could.

> Most (all?) modern public key algorithms are not based on the integer factorization problem.

There are analogues for Shor's algorithm for the discrete logarithm and other similar problems.
How We Started Releasing Features Twice as Fast (Case Study)
i agree, you are doing the impossible.

thank you for the feed back, its how i learn.

yes, 2/3 of that post is for the "average" diabetic that maybe be reading this thread, you are are already an advanced diabetic. just keeping the child alive means you are very vigilant.
i have not treated a diabetic under 5 years old.
i could learn more from you than you can learn from me.

so only advice i have that may be helpful for you is trust and expand on your expertise. learn the glycemic index.
others md and me will be wrong in dosing "your" child.
i accept that the patient or parent knows their body and listen accordingly.
many medical people will not! when you know your right trust your expertise.
and finally, yes the 2 issues you brought up are difficult and unexplained.
fever or illness can cause glucose to be erratic.
and the low bedtime could be from residual insulin in the tissue. this still wouldnt explain all of it but some of the drop could be from insulin in the tissue, can take 1-3 hours to clear.
from the numbers you gave your child has some what erratic glucose numbers.
the meal issue is very difficult, maybe you can use the pump just for basil and dose the the child after they eat with humalog. dosing a child before meals is impossible and humalog only takes about 15min.

my post is mainly about how the new technology has limits and using individual dose at or after meals for some diabetics will help.

in a more extreme environment ie if glucose and eating are extremely variable you could wait 30-60 min after meal and dose according to glucose reading this is usually easier than dosing ahead counting carbs etc.
this is not a desirable long term dosing method. i would only use this when "forced" to by very erratic eating and glucose readings.
Music isn't a single skill, it's a big collection of skills, many of which build on others. 10,000 hours may get you to a point where you can play the instrument you've been practising but you might still be a total beginner at music theory, composition, conducting, recording, etc.

When we describe someone as a master or a professional, it's assumed that they've mastered more than just the mechanics of playing an instrument, since all of the most well known names in music have multiple skills developed at a high level.
It $20 per year for an individual 401(k) account (commonly used by owners of small businesses).[1] One could assume the rates for regular employer 401(k)s are similar.

That's slightly less than Guideline's 0.03% fee, for accounts with large balances. A $100k account would pay Guideline $30/year, and a $1mil account would pay $300/year. Although most Americans probably don't have that much in their 401(k)s.

Considering a lot of people will have low balances, Vanguard and Guideline cost almost the same.

I think the decision for a small business now comes down to just three factors:

1. Does Guidelines have a better website/app user interface, and better customer service?

2. Vanguard is a well-established company. Guideline is small and new.

3. From the business side of things, is Guidelines easier to work with compared to Vanguard? I.e. with things setting things up, adding new employee accounts, etc.

I'd go with Vanguard just based on factor 2: because they're well-established and fairly trustworthy, and being investor-owned, they're not trying to profit off of their investors.

[1] See: https://investor.vanguard.com/what-we-offer/small-business/i...
The author seems to ignore the fact that passing lambdas like this merely changes where the IF or SWITCH statement is made. I can agree that passing functions instead of booleans is better and more general. But pretending that IF/SWITCH are thus avoided, is delusional.

For instance, at some point there will be a decision made whether the string matching must be case sensitive or not. If the program can do both at runtime, the IF will be, perhaps, in the main (or equiv.).
I agree with your your feelings about the article.

I am a musician and I have been interested in music theory since I was a teenager, so I have almost always read writing about this topic. In my experience, it seems like, generally, the people who write about and study musicology are very reluctant to take the position that the music of some cultures can be more primitive than others, but to me it seems to explain a lot of the apparently paradoxical aspects of what we regard as consonance and dissonance.
You just run it like any other interaction. In emacs if I want to compile a file I type M-x compile, and it asks me how. That creates a new buffer in which errors are linked to the original buffer. M-x gdb works the same way.
I agree. I used to earn my bread in PHP and now I do it in Java, while after hours I mostly code in Common Lisp. I have some experience trying to port idioms from the latter one to the former two. Sometimes it turns into a good idea (God, how much my life in one PHP project was simplified by porting over #'mapcan), sometimes you quickly realize it's stupid and makes zero sense. But I think that's again a case of taste acquired by experimentation :). A big enemy here is simply sunk costs fallacy - no matter how emotionally invested you're in some idiom, sometimes it really doesn't fit the other language.
S2 is identical to (0 + S1). Are you suggesting that (0 + S1) != S1 ?
Sure, but they're limited by not being experts in the subject matter they are reporting while at the same time attempting to distill it down into accessible language for the lay reader.
The most fundamental aspect of dissonance is the empirically measured Plomp and Levelt curve. This is approximated as:
d(x)=e^(-3.5x)-e^(-5.75x), where x is the difference in frequency between two pure sine tones.
(see http://sethares.engr.wisc.edu/paperspdf/consonance.pdf)

If we decompose sounds into sine waves, and sum the values on the Plomp and Levelt curve for all the pairs of sines, weighted by amplitude, then for the specific case of timbres based around the harmonic series, the minima for the dissonance curve happen to fall at simple ratios. This does not mean the brain is actually counting cycles! It's only a coincidence, and for other timbres the minima fall at different places.
It seems to be trivially easy to find.

I was thinking it would be some politician, not some '60s musician. Who cares? Besides, Wikipedia has a long section on his sex life. This sounds more like a PR stunt by a has-been.
Usually in teams of younger engineers on the first project they have control over themselves.
Me too. Particularly because every programmer has their own idea of what a "right"/ideal style of programming is. Here, apparently, we must not use conditionals.

The more I write code the more I realize that the entire purpose of the code is to have some effect on reality, and the more reliably it can do this, the better the code. I find I code a lot better without design principles, because trying to remember which patterns are "good" and "bad" just obscures the attention I would have used to look at the code and sense whether something would work in this particular situation.
A858 rather
There's something to be said for that. If you sign your email with your domain cert, the reputation of the domain can be used.
That's an unfalsifiable claim. The corollary is "well you didn't make it on the world stage, that proves you aren't a born musical genius".
CASH CAPITAL SYSTEM Report the TRUTH
>It looks a bit like Steve Gibson's SQRL (which uses QR code rather than bluetooth)

or you could combine them: when Bluetooth isn't available then use a QR code
I'm not sure what you looked at, but the first example I found used a 32 byte key (256 bits = 8 * 32). From the readme :

> 5. Key generation functions will panic if they can't read enough random bytes
to generate the key. Key generation is critical, and if crypto/rand fails at
that stage then you should stop doing cryptography on that machine immediately.

Having less than a full encryption key is a fatal error! Not something to be padded around.

Apologies if there are some examples for key derivation from a password that somehow doesn't use only part of an array initialized to zero (which would be bad, adding random unitialized data to the kdf - good luck decrypting!).