skysight-inc/HackerNews huggingface dataset:
3 things I don't like about Scala:

1. It's based on the Java platform.

2. It's excessive use of operator overloading.

3. Mad implicit conversions all over the place.

(yes, I exaggrated a bit ;))
The Online Disinhibition Effect: 6 Ways the Internet Turns Us into Assholes
That's simply wrong, and assumes that everyone in the world lives in the situation you do.

What3Words (the commercial equivalent) has only been around three years, and look at its usage:

https://en.wikipedia.org/wiki/What3words#Usage_and_awards

A single usage (Mongolia Post using it to deliver mail) is enough to discount the idea that it's a non-problem: http://mongolpost.mn/more/156
Mcgregor vs. Diaz 2 Live
I feel compelled to point out that your question has 2 assumptions:
- that the RNC is equally corrupt as the DNC
- that Assange has (or could obtain) evidence of that corruption.

If either of these assumptions is incorrect, then your question is meaningless.
I assume paypal when i see an email.
Right-clicking on the image and selecting "View Image" (Firefox), or "Open image in a new tab" (Chromium), gives the webpage, not the image. I can see why that happens: the menu items just open a URL and don't force it to be an image. However, it was a bit disorienting.
Confirmed in cURL
I love that in the era of the 15 megapixel smartphone camera, someone thinks a person with a 4x5 and a freaking tripod is taking a picture for nefarious purposes.
I'm not saying that it would be better to submit to the security guard but a random crazy person has less potential impact on my life than a random power tripping security guard. Security guard could arguably call the cops on me and make something up.
They release the blades which fly off at high speeds.
> When the government forces private copyrighted materials into the public domain, they should pay the copyright holders for the revenue they would have gotten from paid distribution.

More reasonably, they should pay the copyright holders for the value it would have had had the government not mandated it, since if free access comes with the government mandate, the additional value it has because of the mandate is a direct result of the same action as making it free to access, and should not be factored in to an eminent domain value analysis.
What the hell is that supposed to mean?

Attempting to pull that into this conversation isn't going to lead to anything except grief.
Side remark: The humble bundle actually organized porting games for the bundle, at least in the beginning. And currently they are creating special games for their monthly bundle.
Helicopters get all their lift from the rotor. So, either there's a huge amount of air being blown around, making parachute deployment impossible, or the helicopter has no lift and is free falling, which doesn't give enough time to deploy a parachute at the low altitudes helicopters generally operate at.

Small fixed wing general aviation aircraft are often equipped with ballistic parachute systems, however. It's just what you envisioned - a parachute with rocket-assisted deployment.
Data URIs are useful for embedding resources in a page (e.g. a single HTML file containing all of its own CSS, JS, images, etc.)

This is different: it's a single file which can be parsed as either a HTML page or a JPEG. Hence, when a program expects a HTML page (like a browser loading a Web page), it will be parsed and displayed as a HTML page. When a program expects a JPEG file (like a browser loading the "src" of an "img" element) it will be parsed and displayed as a JPEG.

The trick is to use each format's comment syntax to hide the other format. Not sure if the HTTP headers need to be set differently for each request or not.
Hang on, I think you're misunderstanding my objection.

Clinton won a majority, so the primary wasn't "stolen". She probably would have won without any DNC intervention, so it wasn't "rigged", either. And the DNC is under no duty to be objective, so it wasn't malfeasance in that sense.

My complaint is specifically that the DNC denied attempting to skew things to Hillary, and collected money while pretending to be neutral. Sanders repeatedly accused the DNC of favoring Hillary and attacking him, and DNC staffers said that the claims were untrue and absurd.

Priebus and the RNC openly opposed Trump, as was their right. Donors to the RNC knew that they were effectively donating to Cruz and Rubio, and against Trump. The DNC insisted they weren't opposing Sanders, and then did so behind the backs of voters and donors.

So no, I'm not mad that a party committee tried to influence a primary. I'm mad that they did so while swearing up and down they weren't, and mocking the Sanders campaign for claiming otherwise.
Good catch -- thank you! Imported this from an older blog and must've lost that code block somehow.
You'd be supried how few people actually work on issues such as security in FreeBSD. Unfortunately, instead of using existing solutions to reduce their workload, there's a lot of NIH-ism.

Like writing freebsd-update in POSIX shell, or using a home-made public key signature format instead of PGP, or not using signatures at all for package files, or refusing to use CDNs to deliver packages until very recently.

It's not that those things are inherently bad, it's that the bus factor ("what stops working when a developer is hit by a bus - or goes on a vacation") is very, very high.
I kinda agree, but one has to concede that XHTML has failed for a reason.
In the case of engine failure the rotor acts as a kind of parachute (autorotation). If the rotor itselfgets damaged, the whole helicopter would probably start spinning wildly, making a parachute useless.
Bingo, error detection is functionally distinct from error recovery. In this context, error detection helps prevent some misdeliveries, but can't help ensure additional correct deliveries in the face of error.

By analogy, ECC memory can typically detect two bit errors but can only correct single bit errors. That's because the functionality used to detect two bit errors in ECC memory is insufficient to recover both bits.
"selfish and manipulative in interactions with other people"

aka reciprocal altruism.

As I've aged, I've embraced transactional relationships.

My metaphor is "playing catch". Toss the ball, hope your partner tosses it back. Repeat. The goal is to keep the game going.

Some one doesn't throw the ball back, oh well, move on to next partner.

Works remarkably well for children, lovers, coworkers, grocery store checkers, and every other relationship in my life.
(disclaimer, MS employee, non-security expert here).

I've read through the article, here, and in other places, and I'm seeing sentiment that this is a big fuck up on Microsoft's part. I might be completely misunderstanding, but I just don't see it.

In order to use the backdoor, you've got to flash firmware, so, you've got to have physical access to the device. If an attacker has physical access to your device, you're already screwed.

So, I don't doubt that the key exists (I had to use it myself when testing RT devices back in the win8 days), but what's the exploit here? Why is it, as the title suggests, a 'bad idea'? Isn't a secure boot policy that can be bypassed with physical access more secure than none?
Well of course if correctness is not a requirement then it's not being paid attention to. That doesn't in any way indicate that it was a good decision not to require it in the first place.
Employee #1: Tumblr
In Germany we have something like 6 live streams from the TV stations.[1] It is pretty great, you can watch an entire event, and potentially understand what they are doing. By contrast the TV coverage is half of the time some guy in a studio talking, and then they will show a single attempt by some German athlete, which is over before I have identified which sport they are showing.

[1] (No idea if these only work in Germany... )

http://rio.zdf.de/live/

http://rio.sportschau.de/rio2016/live/Alle-Livestreams-von-O...
https://github.com/interagent/http-api-design
Airlines Need to Embrace Cloud or Outages Will Become New Normal
I always liked Rusty's list on making an API "hard to misuse" (and its followup):

https://ozlabs.org/~rusty/index.cgi/tech/2008-03-30.html

https://ozlabs.org/~rusty/index.cgi/tech/2008-04-01.html
Github authors - Sign your commits and tags with a PGP signature.
https://help.github.com/articles/signing-commits-using-gpg/

It doesn't look like the authors/contributors of requests are using Github signed commits either.
Grocery shopping app Bring raises €1.2M to expand into new markets
For example, see how it renders in a text browser (links here):

https://imgur.com/a/WVWpU
Isn't migrating to a pure LTE network a legitimate option to fixing SS7 ?

Not that I think we'll be rid of SS7 even a decade from now, but there is a reasonable path to take, yes ?
Thanks!

You can control the image plane, the focal plane, and what part of the image circle you want to use. It's wonderful. I really like pictures of tall things with straight lines (not "tilted up" as what happens when the film plane is not parallel to the subject), so it's the right camera for me, because you can use the bottom portion of the image circle to get that field of view while still keeping the film parallel to the subject.

Nobody has ever asked to licence my photos. Please consider them CC-BY. Send me an email if you want something more concrete than a HN comment.
Pretty sure it's a palm squirrel.

https://www.google.co.uk/search?q=palm+squirrel&source=lnms&...
If 'no', then get rid of it. If 'yes', then the full ruleset should be made available.

Even among those who disagree on the utility of the law, there doesn't seem to be any need for a compromise position of "possibly 'yes' so let's keep it, but possibly 'no' so let's hide the rules from the public".
I'm really glad this big fat blemish is now finally going away.

Anybody has a reasonable theory for why this took so long, despite users asking for it for years?
Flutterwave Is Building Digital Payment Infrastructure for Africa
For sure and I'm not saying it's right I'm just saying with how our businesses work it's impossible to avoid.
I know. What really frustrates me is the number of people who try to justify that high rate as if it were a good thing, or at least a not very bad thing. I'm at the point now where I take willingness to encourage people to re-apply in n months as a signal that a company's hiring process is bullshit and that I shouldn't apply.

I have been downvoted on reddit for saying this, but my opinion is that a company should be confident enough in a "no" that they won't reconsider that person for a substantially similar role.[1] If they aren't, they need to fix their hiring process so they are.

As an aside, the other thing that really pisses me off is to hear about how in-demand "software engineers" are while still having to deal with this crap. Seems like a self-imposed problem to me.

[1] "Substantially similar" here means same level, same stack, and same team, as appropriate for a particular company. IMO level should largely be irrelevant at larger companies because a candidate should be judged on hireability into any level and an offer made at the highest one appropriate. If there isn't one appropriate but a slot opens up within a reasonable amount of time, an offer should be made to previous interview candidates who passed that bar but failed the higher one, without the need to re-interview.
Wow what a complete waste of time. I don't understand the infatuation with demos, let alone micro demos. they literally do nothing for me or the rest of humanity. if that's your idea of entertainment, perhaps no one has introduced you to video games...
The largest war in animal history is going on right now
It's one of those "be yourself" types of advice.

It works if "yourself" has certain characteristics and doesn't work if the "yourself" doesn't or has other attributes, based on the context.

> Simple example: I maintain friendships with people I don't genuinely like primarily because they have wide social circles. Through those people, I've met individuals who I do genuinely like.

That's genuinely good advice. You don't have to like or please everyone in your social network. There's simply not enough time or effort, but it doesn't mean you can't have fruitful transactions with those people.
This is a great advice. Recurse center (former Hacker School) is a great way to spend 3 months and will get you exposed to so many different fields of our industry. In my batch, there were people making lisp interpreters, robotics, toy operating systems, solving project euler, etc.

They also have a lot of great residents, people who come in for a week to hang out, give talks and workshops, such as: Peter Norvig and Evan Czaplicki.

If you want to spend 3 months making yourself a better programmer/engineer, Recurse Center is one of the best places to do that.
Generally, in the US, whatever is "normally in public view", such as a facade visible from the street, is fair game. Poking into someone's window is not. Some countries, Germany for instance, have more restrictive laws about photographing private property.
The counter argument is this: It takes a lot of time to figure out what the code should be. Is a 1cm by 1cm board strong enough to hold up a building, what about a 60cm by 60 cm board? Obviously the first is not, while the second is way overkill and a waste of money (I haven't done any calculations on this so I might be wrong!). Someone needs to figure out the properties of building materials and the right margin of safety. That is generally engineers who want to eat so we have to pay them. Thus it costs a lot of money to write a good code. If you can copy their work for free nobody will do that work - you need to eat so you won't have time after your day job to check and recheck everything even if you wanted to.

The problem is this: in a free copy world once someone pays for this work everyone else is free to copy it. So if Chicago pays for it, New York City is free to just copy Chicago's law and save all the money of paying someone to do this themselves. This is obviously unfair to Chicago who put a lot of money into it. (Chicago and New York might agree to share the costs, but there are a lot of small towns that will not)

What code publishers want to do is privately put the money in to write a good code, get the cities to make it law, and then charge for copies. This business model works, and is fair: you buy the code if you want it (and $75 for the book it isn't that unreasonable a price to pay either if you need it). The city gets a copy in their library so if you don't want your own copy just read when city offices are open. It isn't a bad deal.

(do not read the above as my approval of it, I'm just stating the argument)
It's a better web environment than it was years ago, but there was a time that even simple layouts required invalid code to display similarly across the browsers of the time.
Cluster Management Infrastructure Provisioning Script
1. Most Gmail users can receive money by email (https://support.google.com/mail/answer/3141103 and coredump.cx MX records point to Gmail)

2. Ask him his Bitcoin address

3. Paypal to this address

:)
Oracle tried that. At my previous employer, the week after a Java client update was always fraught with peril as the new plugin didn't work with Peoplesoft(!) and prevented us from being able to take orders. The fix was usually some combination of a hot-patch for clients plus extended patching for Peoplesoft.
The very real mess of C++ virtual functions
This looks like a service that would also work as a web app. Having a web app version would allow promotion outside of the App Store and remove the friction/risk from the onboarding process, I mean a person could start using Tourity just by clicking the link on this submission.

For example, I am on my laptop and to try Tourity out, I would have open my phone, start Play, find Tourity, read the permissions, evaluate the risk, and then maybe download the app, and then maybe try it out.

If the phone rings or I get a new like on Facebook or I realize my coffee cup is empty, the odds that I complete that process are significantly reduced. And it's worth noting that this feedback doesn't actually evaluate the function of the app because of all the friction that comes with dealing with a mobile app. Now sure, I'm admitting I'm lazy. But so are users.

Maybe sometimes "build it and users will come" works. But what was built and where the users go is Google's Play Store. Within it every app looks about the same and good and bad apps look about equal and the developer has zero connection with the users...because the users are Google's users not the developers.

Good luck.
I had a personal trainer for a month a few years back and he pointed this out. I was running with a heart rate monitor (belt around chest type). He pointed out that my heart rate fell 10 bpm when I switched from watching readouts on the treadmill to watching whatever was on the many TVs. Same speed and incline, but if I focused on something other than those numbers, I relaxed and it became easier.

It's interesting to see a real test of this. The clever bit in here was asking the cyclists to count red circles on the screen occasionally, ensuring the TV had a large share of their conscious attention.
Technology Creates the wrong sort of jobs
Neurotypical people often err in the direction of overvaluing social status (presumably because in the ancestral environment, it made a large contribution to evolutionary fitness in a way that it does not today).

If you find yourself smiling and nodding at the above, however, bear this in mind also: we geeks often err in the direction of undervaluing social status. If you haven't acquired basic skills in areas like networking and office politics, X effort invested there might do more for you than 10X effort invested in further honing your technical skills.
The counterpoint to the conflict bit is that Archimedes was killed during the Roman invasion. We talk a lot about if this or that book hadn't been lost, but if you're gonna take that tack, why not ponder on what would have happened if the man himself had not literally been murdered? If it hadn't been for the Roman invasion, he'd have lived.

Sure, like Da Vinci, military applications was a driver of his patrons and thus his innovations. But war was also the very thing that cut his life -- and thus his innovations -- short.
>Meat-space is no guarantee of contract-performance. It replaces one set of risks with another.

This is a false equivalency. "Meat-space" contracts aren't executable programs that can unexpectedly, anonymously, and irreversibly drain your bank account of 100 million dollars based on a legal technicality. In "meat-space" the legal system would have very easily halted this insanity instead of forking the entire banking system to evade the consequences of a single agreement. Smart contracts provided no benefit but severe consequences when the risks materialized.

There's risks of theft and mismanagement of funds in crowd-funding companies.

This is another false equivalency, "theft and mismanagement" is always a risk when you're lending people money, that's not the problem; the issue is smart contracts which add the additional risk of random hackers stealing all your money with impunity, a risk not present in "meat-space".

>* Paypal has frozen and seized many individual and project accounts*

Irrelevant.

> credit card companies are forbidden to let you donate to Wikileaks

Irrelevant.

> And hackers could still steal or burn some or all funds. And there's essentially no useful recourse here either. Sometimes the courts get revenge for us, but we're still usually out of pocket.

This is totally wrong. That kind of thing just doesn't happen. If a hacker steals your money the bank has an obligation to make you whole and the courts will absolutely see to it that you are made whole, especially if we're talking about hundreds of millions of dollars.

> And a smart-contract with shares would offer a ton of features "for free". People could transfer ownership of their support (and the perk it represents), for example. And users could have total control of their promised funds until each phase comes due, via an escrow with an agent they trust.

I've already explained why it's not "for free", but you haven't demonstrated "tons of features". Escrows and agents already existed long before smart contracts, so that's not a useful feature.

The bottom line is, smart contracts are an absurdly complex solution looking for a problem, of which some probably exist, but the DAO was not an example of one.
> “Black magic” gives it an undeserved good reputation

From http://catb.org/jargon/html/B/black-magic.html

> black magic: n.

> [common] A technique that works, though nobody really understands why. More obscure than voodoo programming, which may be done by cookbook. Compare also black art, deep magic, and magic number (sense 2).
I think you misread it. Unfortunately it looks like Python 3 is not going away. You did say big fat blemish, right?
This site uses the xmp tag (deprecated in HTML 3.2, removed in HTML5) which I found interesting and had never seen!

https://developer.mozilla.org/en-US/docs/Web/HTML/Element/xm...

It's similar to the pre tag but doesn't require the escaping. I guess you just have to make sure you don't have a closing xmp tag :)
Thailand approves plans to track tourists' phones
Yea grades as a zero sum game really decreases collaboration.
Not to be rude, but in the USA (where SWIFT or bank wire transfers can be expensive) an email address as a recipient of an online fund transfer is a pretty common; ie: paypal, venmo, chase quickpay

now specifically in this case, lcamtuf (at google security) is joking and doesn't want your money.

this hack is actually pretty crazy - an arbitrary HTML / jpeg polyglot file that fooled a browser could be used for js injection, say from a site that allowed jpeg file uploads, and validated mime type.
Not necesarily. RTOS is gaining market.
This is my goto resource when the team starts bike-shedding on implementation details. http://jsonapi.org/
I don't see any versioning on this, and that seems like it is something that needs to be implemented ASAP if you actually want any of these addresses to start to be used in the wild.

If you make any changes to your word lists (in response to, say, all the comments here that say you should be omitting rude words), your old addresses won't be valid.

If someone gives me the address "Afraid Anus" (to pick an example someone found below), but I'm using a new version of your word list that omits "Anus," how am I supposed to know which version of the word lists I should be looking at?

It's all well and good to say that it will be forever backwards-compatible, but what if people find real flaws with the system?

(Another potential flaw: are homophones excluded? What if I'm giving the address over the phone?)
Thanks for clarifying. I'm pretty sure you can do everything you want here. You could install a runner on your production box and run those commands within a deploy job.

Two options for configuring the runner:

1: http://docs.gitlab.com/ce/ci/docker/using_docker_build.html#...

2: http://docs.gitlab.com/ce/ci/docker/using_docker_build.html#...