skysight-inc/HackerNews huggingface dataset:
This would be more feasible, but we'd still need Go in the src tree so users can reproduce them.
Here Are the 13 Books I Recommend to Everyone on My Team
This exactly. I moved from Fastmail back to Google Apps (I have an account grandfathered into the free version) because of all the integrations from third party services such as Polymail, Evernote, etc.
WINGS Specification Series #1: DAO Security and the Ethereum Virtual Machine
Good question. So first I noticed in metrics dashboard (so it is important to have metrics) the receiver never seemed to have gotten the expected number of messages.

Then noticed the count of messages was being reset. Suspected something restarted the node. Browsed through metrics, noticed both memory usage was spiking too high and node was indeed restarting (uptime kept going up and down).

Focused on memory usage. We have a small function which returns top N memory hungry processes. Notice a particular one. Noticed its mailbox was tens of gigabytes.

Then used recon_trace to trace that process to see what it was doing. recon_trace is written by author of Erlang In Anger. So did something like:

recon_trace:calls[{my_module, '_', '_'}, 100, [{scope, local}].

dbg module is built-in and can use that, but it doesn't have rate limiting so it can kill a busy node if you trace the wrong thing (it floods you with messages).

So noticed what it was doing and noticed that a particular operation was taking way too long. It was because it was doing an O(n) operation instead of O(1) on each message. On a smaller scale it wasn't noticeable but when got to 1M plus instances it was bringing everything down.

After solving the problem to test it, I compiled a .beam file locally, scp-ed to test machine, hot-patched it (code:load_abs("/tmp/my_module")) and noticed that everything was working fine.

On whether to pick a message queue vs regular processes. It depends. They are very different. Regular processes are easier, simpler and cheap. But they are not persistent. So perhaps if your messages are like "add $1M to my account" and sender wants to just send the messages and not worry about acknowledging it. Then you'd want something with very good persistence guarantees.
Trap shooting.

(I know, it's probably bad for the environment...)
top of the front page already... https://news.ycombinator.com/item?id=12247306
Wow, thats pretty staggering. I'm sure I read an article (maybe just a tweet) by Andreas Antonopoulos stating that by complying to KYC/AML that they left themselves more vulnerable to this hack.
I guess the flip side of this is that we can have access to so many things, so affordably. I don't need an industrial-grade waffle iron, but it's kind of fun to have for the occasional weekend if I've got space.

Having said that, I tend to avoid that side. If I have to buy something, I tend to do a buy-it-for-life type of purchase. This drives my fiancee crazy, as I spend 50% more money and 500% more time making my purchase. Most of the time it's not even about the money; I just get upset when I have tons of trash, so I try to avoid buying things that make or become trash.
That plus the whole Android and ChromeOS thing. If you have Google Drive on a Chromebook, you have Google Drive on Linux.
they won't make jet.com people stock the shelves at walmart for minimu... i mean $3 billion :)
Hey all,

I wrote this post last night after being asked by a few startup friends about the topic.

Any great books you think I should add to the list?

David
To be fair, with Trump, the right is self-destructing a lot faster. If that weren't the case, I'd be worried. That's not to say there aren't valid criticisms here.
Practical Design: Messaging
> Microsoft's strategy is to be cross-platform

Now, when Windows Mobile turned out to be a failure. But not couple years ago and definitely not when they were buying Nokia.
The traditional means of patching is recompiling from source. That is the ONLY officially supported method.

This is just another convenient option. I fail to see the problem here.

If you want supported first-party binary security patches you should be using a project that provides that, such as FreeBSD, or just about any Linux distro that is not Gentoo.
Scalable Video Transcoding with App Engine Flexible
>The benefit of Bitcoin is decentralization, and businesses that don't understand this are always going to come across as naive

Businesses understand this really well and they are using this to their advantage, there's not much regulation around crypto-curruncies as of now, so these companies can operate in a legally gray area. It is the customers of these businesses who has no idea what is going on.

Many are happy to buy and sell the whole utopian view of how the block chain is going to liberate them all, how its going to end poverty and and kill all the evil bankers, but everyone saw what happened then the DAO got hacked, that whole utopian view of the irreversible something something was somehow now the responsibility of a central group.

If anyone wants to see examples of how most of these users have no idea of how to handle money, look at all the ponzi schemes that are build around crypto currencies. Its insane thinking how easily people give away their money for a piece of the moon.
The thing with thermostats is that, on the one hand, I see pretty minimal benefits compared to a simple programmable Honeywell. On the other hand, as someone who lives in snow country, even a tiny, tiny decrease in reliability in the heating system just isn't worth it--and everything I've seen indicates that these fancy connected thermostats do indeed have lower reliability than simpler models.
I figured out what is going on here. Walmart thinks to themselves "we want to be like amazon, we want to be huge online" and then jet comes along and is something of an almost competitor to amazon, so corporate thinks "oh we should snap this up" but...my gut reaction here is this is going to be a terrible deal for walmart, what are they going to do, keep dumping $500M/yr for it at a loss or what? Pretty desperate, but whatever.. :)
Where I live, the majority of electricity sources are renewable (or nuclear). Powering a home without fossil fuels is a semi-solved problem.

Powering a car without fossil fuels, by contrast, is not on the table for most people. Quality, budget electric cars stand to 'shift' the resource problem over to one we've already dealt with, which sounds like a huge win to me.
And the phenomenon is even worse now. If you sold a property in 2005 in Vancouver, I bet you wish you'd held on to it.

As someone else said, it's only a bubble when it pops. Good luck timing that.
GC Pauses and Safe Points
Here you go

http://jthatch.com/Terrain2STL/
Mea culpa! I was 100% wrong on this call. Made sense at the time though.
This tax won't do much to impact the market directly as foreign capital makes up about 4-8% of the purchase activity, which is elevated but not outrageous. Foreign funds also buy at the same average price as local funds so it's not about rich buying mansions.

The larger impact will be on locals thinking "this is the end of chinese money, so the market will tank!", which will scare them away from the market.
Honestly I don't know. All I know is she basically refuses to use it because it's too much work.

It sounds like the FM mobile site meets your requirements, especially with respect to inbox zero housekeeping (that I don't practice). I think that's a long way from claiming that the gmail mobile site doesn't work, as the other poster stated.

I think it's nice that there is more than one email service. I don't think they have to be totally ordered by some objective criterion.
Already has! I made Terrain2STL [0] a couple years ago to do just that. It converts STRM topo data to the STL format.

[0] - http://jthatch.com/Terrain2STL/
Pretty solid and provable statements in the video.

For those too lazy or unable to watch the video now, a basic summary of what they did:

* Searched for "hilary clinton cri" and "hilary clinton ind" ("cri" for "crime" and "ind" for "indictment"). Autocomplete did not show "crime" and "indictment" in the autocomplete, but Bing and Yahoo did.

* Compared the search results for "crime" and "indictment" with the autocomplete results they got using Google's graph tool, which proved that "crime" and "indictment" are by an order of magnitude more searched than what autocomplete returned.

* Tried searching for "bernie sanders soc" and "donald trump rac" ("soc" for "socialist", and "rac" for "racist"). Google, Bing and Yahoo all showed "socialist" and "racist" in the autocomplete function.

* Made some pretty well known connections between Eric Schmidt and Hilary's campaign to prove their point.

* Talked about Dr. Robert Epstein's experiments on the impact of search results to the election.

EDIT: Google basically admitted that they do not show offensive queries in the autocomplete by sending an email to the Washington Post, in which they stated:

"Google Autocomplete does not favor any candidate or cause. Claims to the contrary simply misunderstand how Autocomplete works. Our Autocomplete algorithm will not show a predicted query that is offensive or disparaging when displayed in conjunction with a person’s name. More generally, our autocomplete predictions are produced based on a number of factors including the popularity of search terms."

So, it is possible that "crime" and "indictment" are considered as "offensive" words according to Google, but "racist" and "socialist" are not.
Aaaaaaaand I was 100% wrong!
Didn't expect to see Dantès appear in this thread, but I love it too and am, coincidentally, rereading it right now, in the Buss. So fun, so satisfying.
I am. However, it depends on if you're a current Prime user or not.

If you don't have Amazon's Prime, you'll see why Jet.com is worth it.

Amazon's free shipping for non-prime users are now 50$, takes 2-3 weeks to get anything, and they're limited the good deals to Prime users.

I've bought more from Jet.com than Amazon lately because the above issues.

If I was willing to pay 100$ for Prime, Jet.com isn't worth it.
Do Google users outside of SEO understand what AMP means?
Emails discussing FOIA Request
No, it's always true. If you don't have infinite capacity, then you will have mortality, but that's a separate issue.
> In fairness, Canada's female PM wasn't democratically elected

Like US Presidents, Canadian PMs are elected by others who are directly elected; unlike US Presidents and many Canadian PMs, Kim Campbell was not chosen immediately after the election of the body by whom she was chosen. Characterizing this as not being "democratically elected" but the usual election of US Presidents being one that is "democratically elected", however, requires a non-obvious interpretation of what "democratic" means when applied to an election.
8,249 Article Templates for Scholarly Publishing Now on Authorea
ProjectSauron: top level cyber-espionage platform
The Rational Optimist.

It helped me realize (along with other things), that no, the world isn't getting worse. Things are much better than they've ever been for most people, and they're only getting better, faster.
You will need two things:

One, a human facing unique id (or 'nickname') -- such as palakz -- which you can use in your HI and whatnot. This one could even change over time.

Two, a computer facing unique id (or 'subject') which uniquely identifies the person in your application, usually a guid, long integer or whatnot. This one never changes.

Then combine the two and put them either in a secure (encrypted) cookie (for your web app) or token (for your mobile app) and you are basically done.

This for example is how authentication on Twitter works. Every person on Twitter has a unique id (probably designated through Snowflake mentioned below) and a self chosen name (which you can also change if I remember correctly). The former is stored in a secure cookie (in the web app) or a token (in the mobile app) together with some other static user information (e.g. nickname). When visiting a page requiring authentication the id is exposed to the backend code so it can recognize who you are and for example decide what actions to take (e.g. take you to the onboarding page or your personal timeline)

Hope this helps :)
I'm not saying it's right to steal, but I have zero sympathy for stores getting fleeced over this. They knew the risks going into it. It's not as if the big retailers just one day installed these things across all their stores, they spent years researching the affect and perfecting the technology.

That being said if you feel you are being ripped off and inconvenience by these things, then refuse to use them and shop someplace else. Tell the store manager that he is losing your business over self-checkout or more likely that there isn't enough normal cashiers available.
So it's $43 / month or $10 / week. Is that really a big number for a primary work tool?
But it doesn't work for items from third party sellers that don't participate in Fulfillment by Amazon. Jet's has no such restriction.
There is no technology available today that would allow an industrialised country like the Netherlands to get to a zero carbon dioxide footprint.

It sounds like sarcasm but the only realistic way to do this is to significantly reduce your population and have the remaining people live in mud huts or caves like our ancestors did many millennia ago. (which would be insane)
I believe this is the correct approach. You're not hiding the complexity of the work, and you're also not compromising on quality. This leaves only the task of saying "no" when asked if you, "for now, could just..."
...and significantly easier than the old GNATS-based system that preceded it.

There have been active efforts within the project to make this sort of thing much easier for newcomers than it used to be.
Meccano Differential Analyzer
There are a couple people who make 3D printed full color maps on Shapeways. They are actually pretty cool:

http://www.shapeways.com/shops/tinymtn

http://www.shapeways.com/shops/smartmaps
>A Chinese or Russian millionaire looking to buy property in Vancouver is going to buy whether it's $5 million or $5.75 million

I don't know why you believe this to be true but it isnt
Show HN: Stdlib.com – Building a Standard Library of Node.js Microservices
> (which generally purports to be "better engineered" than Linux, where sane behaviour for distributing binaries is a long-solved problem).

Assuming your "sane behavior" is referencing .deb and .rpm files, both of those let you run arbitrary, attacker-provided shell scripts as root whenever you install, upgrade, or even uninstall a package.
Show HN: Weekend Project Showcasing US National Parks
I'm a Dutch student, some of my classmates still use teletext.
I don't think expensive restaurants are really in competition with cheap ones (or Mercedes with VW) but I got your point. Still I believe the effect will be close to nil: expensive restaurants and luxury houses already buy originals. Everybody else care more about the price of what they buy. As long it's not too expensive and it looks good enough it's a sell. My point is that this is going to force Chinese companies to do some design, maybe hiring European designers first then learning to do it themselves. No extra sales for European furnitures and it's still a long shot to 3D printing your own furniture copying a famous one. Think about leather, steel, wood, springs, hinges, etc.
Generating sight-reading exercises with constraint logic programming and clojure
What this means:

Some people wanted bin-patches apparently, openbsd is heavily focusing on using its resources as efficiently as possible and doesn't provide them, a reliable 3rd party stepped up providing them for free, charging for binpatches for older versions (a service model built on top of open source software, nothing wrong with that)

A few points:

-) since mtier here tries to basically sell you something, they make it sound harder than it seems, checking the errata page, writing a 20 line script to get notified if the page is updated, that's enough

-) not every bug found is critical towards your own security, not every bug does need you to update (you can decide on an individual basis)

-) micro-managing (as one comment stated) is pretty much the opposite of what you do with openbsd, openbsd is secure by default, if you want to have anywhere near the same amount of security with some other OS have fun reading tons of documentation to harden the box yourself (and you still won't have all the same security mitigations)

-) updates are trivial: update, re-compile, reboot, if the bug is not critical for you then don't, or use -current (rolling release "development branch"), or use the bin-patch by mtier

-) I doubt some of the people here criticising "having to use" 3-rd party binpatches practice the same scrutiny in day-to-day life regarding it-security (seeing how other OSs deal with security they would probably be using openbsd by now then if they were)

-) considering the size of the openbsd project and how many critical pieces of security-focused utilities they maintain (openssh, libressl, opensmtpd, ...), how many security mitigations they implement, how well they do in regularly auditing their code and actually addressing bugs across multiple architectures quickly with patches provided (especially compared to so many so much larger projects), it's somewhat ridiculous for an outsider to criticise how they spend their time or resources (because in my opinion and in the opinion of many others, they actually do hell of a great job!)
I don't believe this is accurate:

> So when hackers stole about 36 percent of the bitcoins at Bitfinex, they didn't just steal 36 percent of each customer's bitcoins: They stole, basically, all of the bitcoins owned by 36 percent of the customers, and none of the bitcoins held by 64 percent of the customers. (Weighting customers by account size; you know what I mean.)

I think that all, or almost all, of Bitfinex's Bitcoins were stolen. Certainly more than 36%! The hackers generated all transactions and then simultaneously broadcast them. There's no reason they wouldn't or couldn't have gone after every last Bitcoin that was accessible to them. Bitfinex did not realize the attack was occurring in time and did not send out any counter-transactions to attempt to spend all of their coins first (realistically they had on the order of seconds to minutes for this). We know that Bitfinex wasn't using cold wallet storage like they should have, instead opting for some multi-sig scheme using BitGo that didn't actually work, so essentially all of their Bitcoins were available to be stolen, and were.

What's happening is that the 36% haircut is across all values in all accounts, including fiat currencies that were on deposit such as USD, as well as other cryptocurrencies that Bitfinex trades such as Ethereum. So Bitfinex lost all of their Bitcoin, which represented 36% of the total value on deposit with them, most of the rest of which was fiat currencies.
That's interesting. Mine have always arrived together in one box per order. Are you ordering a lot of books or some broad variety of items?
For the decades of the VCR the blinking of the 12:00 was used socially to signal ignorance (because being ignorant used to be cool) or signal "only kids are capable of learning technology like programming VCRs and I'm a respectable adult so I don't program VCRs" or general complaints about American laziness. Also it was a poster child for bad UI, with the assumption that everyone wanted to use it (false) and users were only stopped by the UI not having enough flair or whatever was trendy at that time (also false) therefore look how important UI design is. What it really meant was the product was multipurpose and sold to two markets, the enormously numerous pre-recorded viewers, and the tiny little subset of timeshifters who would program clocks and start and stop and channel and rewind the tape (or not) and day of week and various other settings so as to watch a broadcast program later. A large mythology sprung up around why Americans didn't timeshift blaming everyone but the content not being worth it and the viewer not being interesting, neither of which was culturally acceptable to express, especially on TV itself perhaps on a sitcom, so it turned into a weird trope.

For my MiL she wanted/needed a certain size and she really liked the bezel (and the stand, too) and that's how she selected her TV. It happened to be a smart TV but she was uninterested in that feature. She has no interest in wifi. At that time there was no choice or freedom in the market, its smart TV or no TV. Likewise 95% of the countries VCRs blinked 12:00 because the market at that time was fancy time shifting capable VCR or no VCR at all.
> That doesn't seem bad at all.

Its low by international standards.

> That may be roughly the same as the relative percentage of women that are interested in going into politics.

I'm not sure why US culture having a much stronger effect of socializing men and women into different roles vis-à-vis government than every other developed nation and many developing nations would be a positive explanation for that statistic.
Both Equinix and AWS have had cases where the genset tests pass, but entire DC blackouts occurred due to a fault only a few months later.
If you're a cynical person that is an easy thought... but something tells me a 3B acquisition of a company that is losing money in so many places isn't a decision taken lightly. A public company like Walmart, there's some people doing some math here.
It will frequently gobble up multi-lingual emails. I discovered this when I ignored a customer in Chile for a while because he had a Spanish email signature.
Looks neat, but just like the firejail guys they really need to work on their tutorial/readme/docs/manpage.

Many users including myself who want to play around with it get stuck trying to do basic stuff. My first try was using bwrap (not bubblewrap!) to wrap true provides this not very helpful error.

$ bwrap true
execvp true: No such file or directory

Looking in the webpage I see that this is what I want works

~$ bwrap --ro-bind / / true

Is this what I want to do? I am not sure, maybe I want to expose just /bin/true, but I couldn't figure that out. It may be using --symlink, but the docs give no hint as to what symlink actually does. Where does it make a symlink? And when would I use it?

--symlink SRC DEST
Create a symlink at DEST with target SRC

Getting the default behavior right is important as is helping the user, especially for a security tool. bwrap is a tool that wraps other tools so you would expect that if I did '$bwrap true' than it would create an empty fs, expose the one binary it is going to try to run and then run it. Otherwise it is tempting to insert the following alias which may or may not be a bad security practice.

bubblewrap=`bwrap --ro-bind / /`

firejail gets this somewhat right where you can do 'firejail --quiet -- true' and it just works (although the fact that I have to use --quiet and it still spits out a \n is both sad and embarrassing)

Both projects should want to provide tools to help users accomplish the most common cases in a secure manor such as: access to 1 file, 1 directory, network access. As a user my goal isn't to use firejail it is to accomplish something else so the fact that firejail wants to spit out a bunch on stdout is a really weird design choice.

As a user I would want to do the following:

bwrap --rofile foo.txt -- file
bwrap --rodir foo/ -- ls
bwrap --net -- curl
You ignored that I argued your questions about Popper is not relevant for my point [edit: if nothing else, that argument also applies to astrophysics, archaeology, history, etc], so your dismissal here forces me to dismiss you as a serious debater.

Enough.