skysight-inc/HackerNews huggingface dataset:
Link broken, cache broken. I thought maybe it was some kind of page only usable in Lynx... Nothin'. And of course now my Bash on Ubuntu on Windows is hung up. Are we joining the Lynx Queue when going to the page?
Seamlessly Display Loading Indicators and RxJava
Agile Tools and Techniques
Is Costa Rica's preventive prison system in need of reform?
It says right there that they could raise objections before the expert or jury heard the question. If the question were unfair or misleading I'm sure they would.

If you think that there aren't several confident know-it-all types who never get cross-examined on every jury everywhere ever, you wouldn't make a very good defense attorney.
Well sure, but there are still good and bad security systems. How does the cost/benefit of obscurity compare to alternatives?
Package management's come a long long way in the last couple decades tho, setting up a dev environment (assuming you're connected to the internet and can write to the appropriate directories) is easier than ever.
Delft Students on Software Architecture: DESOSA 2016
USB hub + a display link chip + power circuitry. Yes you can!

Check it out:

Surface + Superbook: https://vimeo.com/176370847/ddd187ceab
Mac + Superbook: http://imgur.com/a/oZwwN
PC Stick + Superbook: http://imgur.com/a/eTbtm
And it's still relevant. I read it every year or so and still finding myself nodding to it.
This is interesting and quite philosophical. Is there a difference between procedures and data? Isn't it all just transistors and capcitors anyway? And is anyting really anything? Isn't it all just really quantum fields?

Practically speaking, obscurity is a "platform" that lets you bypass everything, whereas knowing a password is more limited since it grants access to a single user. But practically speaking, obscurity and root passwords are similar..

I wonder if there are formal definitions here that makes the separation clear.
On the other hand, I've recently seen a wall painter balance on a thin and wobbly piece of wood stretched over a stairway (if he falls, it's going to be about 4 meters down and onto concrete stairs). That was apparently necessary to reach some parts of the ceiling. I wouldn't be surprised if electricians or plumbers had to do to this kind of (to me) completely crazy shit from time to time.
Hyperspeed effect with .js (hint: press HS button to go hyperspeed)
Black Hat and DEF CON: The song remains the same
I'll hijack your OT comment to just mention that all this talk of Cathedrals and Master Builders reminds me of the historical novel "Pillars of the Earth" which I found a truly fascinating read.
perfect. Just replied :)
I'm working on a web-audio app at the moment that allows you to import ReBirth files. Emulates 2 303's and the two drum machines. - Will be released as version 2 of this: http://errozero.co.uk/acid-machine/
> Maybe compiling everything on every computer is not the best approach...

If you're working on a FOSS operating system (freeBSD), where one of the components/features you provide your users are the ability to install almost any software, customized to your needs (the ports system), you probably want that part of the system checked and working.

You know, dogfooding your own delivery, and I for one am glad someone is still willing to adhere to that standard of software development.
Well, I finished my studies without borrowing a single (studying-related) thing from a library. We didn't have time to read whole books anyway, due to the way the curriculum is structured, and whatever textbook I needed to consult, I had available as a bootleg PDF on an FTP server we maintained for ourselves and those who'll come after us.
And calming brown noise.
I don't see why it should be so polarized. You can care enough about money to understand the components of your compensation. You can also care about quality of life enough to make decisions that trade money earned for other goals.

There's an attitude of "money is unpure" that is destructive. Even if you are not motivated mainly by money, you will need to understand it so that you aren't taken advantage of by people who are motivated and fluent. Thinking you are above this is just an excuse for laziness - it's about as realistic as saying you're above eating healthy and exercising.
> if you lead developer is keeping on top of the kanban board, he will notice it and address it.

Do you have some extra process that makes this happen? I don't remember anything in the version of kanban I saw that implied the lead developer should be doing this.

> Manage by exception. If most cases just take a few days, set up some kind of system to mark the outlining cases out. Then you can investigate and address these exceptional cases if required.

In the project I'm thinking of it wasn't a single exception; rather the length of a typical task gradually crept up (from below 2 weeks at the point when we switched from scrum) until it was normal to have tasks lasting multiple months.
Now they are in the SMC and the secure enclave.
I know a water treatment plant worker, two plumbers, and an electrician in the Kansas City area, and they all make as much, if not more than my programming contemporaries. For instance, a friend tried to get me to work at Cerner for ~75-80k (good money in the Midwest), but those plumbers were making that plus some (45 dollars an hour, so in some cases would make more depending on overtime), the Electrician worked for himself and though I don't know his yearly earnings, he was making closer to 60/hr (based on a quote to install a ceiling fan, and since he was a HS buddy, he probably gave me a discount). The wastewater plant worker? He's a manager now making 100k or so, but started out at 60k, not bad for the midwest as well.

I'd not trade my cushy, indoor job for that, mind you, just the idea that trade workers necessarily make peanuts, I believe, is without merit.
Hah, yes. I thought, "is this a guide to meetings at $company or a sabotage manual?"
I actually didn't meant the language only. I think white collar workers (well developers at least) are pampered. Almost every boss I had paid at least some attention to my wellbeing on the job. I don't think that's true in blue collar world where, by nature of the job, you're just expected to "tough it out".
A third answer is the USA population is 26% of the developed world population. 319M/1200M. Outside the developed world, the criminal justice system is not quite as ... developed, and therefore criminals often end up uncaught, shot in the street by vigilantes/opposing tribe members, pay a bribe to avoid trial, executed for fairly minor crimes, shorter prison terms to save money, worse conditions in prison mean prison is often a death sentence, etc.

Look at the typical outcome WRT prison time of a felony car theft in the USA vs, I donno, Chile.
Sadly, Kotlin, a language I otherwise like a lot, decided that Java generics were too complicated for normal people, and created a much less flexible version. For the typical case the syntax is easier to understand, but it's not possible to use the full power of the Java syntax.

What I'm saying is that the reason for this simplification is the same as the reason not many people use intersection types.
Can you really call this "following the UK's example of free digital TV" when, in the UK, you have to pay a £145.50/year licence fee, and in Nigera, there will be a $5/year licence fee?
The Smalltalk-like query language is rather different from Redis commands.
It was the systemd of its day... Declare it "broken"; "fix" it; Make it super complex and ignore some of the basic tenets behind the success of Unix-like system ('everything is a file', 'avoid monolithic code', 'filters and i/o redirection', etc...)
If a data collector can choose the epsilon range and the linked parameters by oneself, s/he could choose small (irrelevant) or too large (expandable) ranges and could try to cross reference the result via data-mining (already collected data).
I really want to try it then in pair programming or while teaching programming to someone. Looking forward for the 13" version, thanks!
The IP address change was from spinning up a new server on DigitalOcean.

From what I could gather, changing the IP on a mail server is seen as suspicious and resets your reputation level. Google handles this by “safely” marking all of your mail as spam, I guess until your reputation is restored, which is nearly impossible since nobody will see your mail.
Amazon is one of the least exciting, least cool brands I can think of. It's right down there with walmart and other retailers on my list. But I use them all the time.
I think of stock options and the like as lottery tickets. And I never win the lottery. If I'm offered stock options, I'll gladly take them, but I want real money, too.
>I think it's mostly supply and demand, timing and where you live. But those are the factors we rarely talk about.

I think those are the exact factors constantly mentioned by the HackerNews community.
To be fair, no teacher I've ever known as received only 10 day vacation and 10 holidays.

They have over 20 days of holidays built in during the school year and a legitimate two months off between years.
To be fair, nepotism in tech tends to be of the academic type, and most kids who get into Ivy League have worked pretty hard to get there.

So, in some ways, it's not that bad a kind of nepotism.

Most startups are not hiring actual family members :)
Pretty crazy that such a well know brand still, after all this time, is not making great profits.

I would have guessed that monster was a massive unicorn spinning out loads of cash in the fees they charge recruiters, turns out they're not at all.
Order-of-implementation is entirely a project management issue. This does not affect quality of the final design

These types of products are entirely designed up front and analysed before any code is written so the implementation order is irrelevant.
In the case of a $100 thermostat, knowing it's infected, I'd throw it away and buy another brand, unless I knew how to wipe and secure it. It's two screws and few wires. Why would I pay even a $1 to someone who might or might not get off my network?

In the case of a $2000 fridge, it's more persuasive. I might respond by revoking its network privs and paying for a service call to wipe and reset to factory. Again, I'm not going to trust the bad guy to get off my network.

In both cases, the bad guy has shown bad intent, means, and opportunity. I'm not trusting him after a payoff.
Employers are where the revenue comes from. Number of available Employees is a metric they'd probably use in marketing or acquisition materials. I wonder how many of those employers provide MRR though.
If you're reading Darwin's work, you don't look at a 20th century dictionary to figure out what he meant. The question is, what would the phrase "cruel and unusual punishment" have meant to people when those words were written?
BE BRAVE. TAKE RISKS. NOTHING CAN SUBSTITUTE EXPERIENCE
Google cache: http://webcache.googleusercontent.com/search?q=cache:ekFSEe6...
Both happen.

By designing systems in layers of interacting components, we can grow more and more complex systems. The internals of different components are irrelevant so long as the external interface is consistent.

We evolve them by improving the interfaces (see APIs deprecating functions/methods/messages) and by refactoring/rewriting the internals or implementation.
Colombia's First Bitcoin Exchange Closed by Regulators
In which case you run to the hardware store, or look in the garage for the old $20 bimetal strip dumb thermostat and wire that back in place. You're not obligate to keep the infected one.
Perhaps time to move to 2FA.
Yea, top ones. This sounds like the same old argument: "A handful of top programmers at Google make $300k! Therefore programmers in general make a lot."
Tips for selling your side project
Annecdata: as a teacher in an inner city high school, I did not break past 50k/year for the three years I was there. That includes the summers I worked. Between grading, lesson planning, meetings, and teaching, my typical week day started before 7am, ended around 8pm or later. Typically most of my Saturday was used up and half my Sunday. Normally all of spring and winter break was used up likewise. I typically got close to a week off in summer.

As a developer, I started at nearly 2x what I made as a teacher. After getting real experience, I make more than most administrators and more than any teacher could after a lifetime of service. I have multiple weeks of paid vacation. Aside from a (weak) pension, my benefits are better. My work only follows me home when I am behind schedule (not often) or when there is an outage (a bit cyclical). My quality of life is so vastly better. Another benefit, I now get to work with motivated and smart individuals.
Well, they're both marketplace businesses. Churn is built in for the non-revenue side, but for this kind of marketplace, chrun is only built in on one side. The goal is most likely for Employers to continue to provide revenue month after month.
Amazing. Sometimes things are done for academic pursuit. If everybody would stop reinventing the wheel then we will never get any alternatives at all. The product does not need to have distinguishing features from the onset, it may gain it later in its lifetime.

Building a data structure server is great exercise in understanding a lot of different things: networking basics, efficient storage, fast retrieval and memory safety. Obviously I don't mean to claim that the author of the project necessarily had the same aims.
I've often heard not that "insecure endpoints represent a good compromise" but instead that since:

1. endpoints are vulnerable because they are exceptionally hard to secure,

2. and attacking endpoints can be targeted and specific,

the governments case that weakening encryption is necessary for warranted search is weak. Even with strong encryption the government can exploit the targeted communicant's endpoint to learn either the plaintext or the encryption keys. This isn't a compromise so much as a statement of reality and what is likely to remain reality for some time to come. Weakening encryption, for the most part, provides benefits to the government in the form of mass surveillance, but for a variety of reasons doesn't offer much benefit in the form of limited, specific searches.

>making truly secure computing a reality for computer users,

We can make endpoints more secure, but I see no path to endpoint security that will keep out a determined well resourced adversary.
Ugh, you are of course correct, I should not be allowed to comment on statistics before having my first coffee. I think I had some diffuse ideas about this not being a poisson processes in my head that lead me to this faulty conclusion.
I felt this way about Thinking: Fast and Slow. One of my favorite books, but could have been half the length. At least they included the original white paper in the back.
Taxi drivers more likely to die from homicide than a traffic accident! That's shocking. I wonder what explains this. Is it armed robberies gone wrong?
Quick hack drawing a custom cursor with canvas to break out of a browser window
In general indeed gets its listings by aggregating them from across the web. They also have a lot of people post directly on their site. They also have the Job Spotter app that gives rewards to people to find and upload pictures of "Help Wanted" signs.

https://jobspotter.indeed.com/
If anything, I would use a lock analogy.

Locks are rated in how many seconds/minutes they can withstand from a dedicated attacker. Perhaps that would be a way to determine a similar safety rating for passwords/crypto based systems.

In passwords: how many passwords can you try per second before the server refuses? Then Password space/# per second = total seconds for guaranteed entry.

Crypto: how many keys do you have to calculate before you succeed in finding the correct key? Keys/second * how many machines / keyspace.

But in the end, I don't believe we really have a formalized difference between types of obscurities, aside the "go to /root and get root" obvious badness. It would be a rather nice way to provide security in "seconds to millenia depending on techniques used".
It's a chicken and egg network effect, just like facebook or a dating site.
This seems to be the crux of it:

Part of what makes ProjectSauron so impressive is its ability to collect data from air-gapped computers. To do this, it uses specially prepared USB storage drives that have a virtual file system that isn't viewable by the Windows operating system. To infected computers, the removable drives appear to be approved devices, but behind the scenes are several hundred megabytes reserved for storing data that is kept on the air-gapped machines. The arrangement works even against computers in which data-loss prevention software blocks the use of unknown USB drives.
Couple of interesting quotes that resonate with this.

1. "Company doesn't care about you (employee), and you shouldn't care about the company"

For few years this resonated in my head and I disbelieved it for obvious reasons. Its just demotivating. But after more than a decade I know this is completely true.

2. "Customers don't care how good the code is"

True. As far as the functionality is reliable and acceptable quality. Good code is only a value-enabler.
"then jury duty becomes attractive as a source of income for unemployed people, or as a target of scams and cons."

How? Locally the system is a random lottery based on a pool of drivers license registrations. A standard mantra against voter-ID laws is that pool of poor people is highly challenged to obtain ID (which in reality is false, its just a mantra), so if anything there should be a statistical lack of unemployed people not a surplus. WRT scams and cons I guess you'd have fewer people lying about being members of the fully informed jury association or otherwise trying to avoid service, and that aversion to lie should make the system inherently fairer, so again no problem?
The inkjet method sounds like it has reasonable cost. Maybe there is a way to use a laser printer. Thanks!
I would much rather deal with an xml file than a makefile.
How are they going to apply this to data sent to the iCloud? Is that data encrypted client-side?

Something smells fishy here.
AI’s Language Problem
Is it relevant to the question at hand? Languages != their IDEs.
Show HN: Review aggregation Demo: iPhone 6s Plus
The job of the jury is to determine the credibility of both the evidence and the witnesses. The idea that this somehow morphed me into a shadow expert witness is a very uncharitable reading.
Yes, note that even the amateur astronomer didn't know he had captured the footage until ten days later when he looked at it!
The VAST VAST majority of sexual related crimes are NOT taken to jury because of the stigma associated with those types of crimes. You will most likely NOT get a fair trial in a sexual related case. In a "hand on / aggravated" offense I would agree with you. You have nothing to lose. But in all other cases better to take the deal.
Please give us feedback
Most (all?) U.S. regulatory agencies also use the metric system.
User name xkcd-sucks. Not a fan of coding for fun.

Hackathons?
Have you ever just wanted to write a web scraper in a new language to see how it is different from your usual?
Never coded a small video game?

Why are you a programmer then?
Puthia Rajbari, Rajshahi – Bangladesh – Historical Place
If you get used to writing in inclusive terms, these changes don't cost anything. They're just how you naturally express ideas, and exclusive terms feel unnaturally specific.
Fast and Accurate Document Detection for Scanning
As a gentle reminder to the commenters in this thread, please keep in mind the Show HN guidelines (https://news.ycombinator.com/showhn.html):

In Comments

Be respectful. Anyone sharing work is making a contribution, however modest.

Ask questions out of curiosity. Don't cross-examine.

Instead of "you're doing it wrong", suggest alternatives. When someone is learning, help them learn more.

When something isn't good, you needn't pretend that it is. But don't be gratuitously negative.
Good bandwidth requires clear line of sight. (You can get ~2Mbps through tree cover at 900Mhz). A lot of rural areas, at least in America, also have local ISPs providing service this way. You can also make own wireless link ~5 miles with gear from Ubiquiti or the like. It works basically like 802.11 WiFi but projected in one direction, and some protocol details are different.

My ISP is in Nevada County, CA http://www.smarterbroadband.com/
San Francisco has a cool ISP doing this in the city: https://www.monkeybrains.net/
Chrono Trigger was amazing. Thank you RIP.
SIL usually deals with complete systems and deals with probability that the system will deviate from it's designed behavior, whether such designed behavior is actually correct is somewhat orthogonal problem that is often mostly ignored. (same thing applies to attempts to apply formal proofs to software). The wikipedia article lists some of the problems with SIL rating itself, and I've personally seen multiple instances of "running two redundant SIL N systems produces SIL N+1 system", often with the original N being derived by wishful thinking (this seems to be especially prevalent with engineers with railway signalling background, where I accept that for systems based on relays with redundant coils it holds, but it's complete BS for things with non-trivial software).

Various attacks on car ECUs cleanly show what the problem with current relevant certification processes is: each component is certified separately and nobody cares about the complete resulting system (head unit is not safety critical, engine ECU is, but has no untrusted inputs and there is bunch of things in between that are classified as one of these two categories). What is ironic in the automotive case is that the whole reason why there is immense number of separate ECU's in typical car[1] is safety (ie. limiting impact of one ECU completely failing) and safety certification.

[1] my car has separate ECU for each door even though rear doors does not have power windows and central locking uses dedicated wires. I assume that only purpose of said ECU is that diagnostics system can detect when the door is missing.
You've got it backwards. It's the folks opposing the death penalty,[1] that are arguing the words on the page are so sanctified they empower the unelected judiciary to overturn the results of the democratic process. Given that, it's kinda relevant what those words on the page actually mean. What did people agree to when they committed to letting these words on a page curtail their democratic prerogatives?

[1] I oppose the death penalty as it is used today. Making an example of psycho serial murderers is pointless, because it's not like that conduct can be deterred.
My wife and I are both devs. It's, for the most part, no different than any other relationship; you get out of it what you put into it. One thing I did (am still trying to?) learn is that sometimes she wants me to be a rubber duck instead of actually helping her solve a problem. I try to anticipate a point in the conversation when I can ask which I'm supposed to be.
And you're entitled to your opinion. But there are definitely a pool of developers out there that enjoy programming as a hobby.
I thought this was about Cookie Monster!
I do. I price compare on larger purchases and have found Walmart.com cheaper occasionally. I've even done stuff from Sears, which has a multi-vendor marketplace as well. Both tend to have an addition 5-10% with Discover Deals as well, which I can't normally get with Amazon.
Weather doesn't seem to be a problem. There's some signal attenuation in heavy rain / snow but all I've seen is a 20% bandwidth reduction, not a failure. The one time I had failure was with a heavy buildup of snow on the antenna.
Similarity Analysis of Christoph Hellwig's Linux Code in VMware ESXi 5.5
Actually according to http://transparentcalifornia.com/ my daughter's elementary school teacher makes around 130k in a public school.