skysight-inc/HackerNews huggingface dataset:
We're not losing focus. Babel is as focused as ever on being a general purpose parser, transformer, and code generator. Babili is a set of Babel transforms.

Uglify has its own parser and transformer and generator, so arguably any work that goes into that is duplicate work because Babel already covers most of what it does.

Re parsers: we had to fork acorn because they were understandably skeptical of adding all the experimental and non-standard features (JSX and flow types) that Babel supports.

I started this project at Facebook and one of our aims (which is mentioned in the post) was to have access to the original source AST which may include Flow type annotations, JSX and early ES proposal features. Have I spent the time trying to get those into uglify, the majority of the work would've went into parsing and code generation. And I would imagine an uphill battle with the maintainers convincing them of adding non-standard features.
Astronomers Think Planet X Is the True Destroyer of Worlds
Automake/autoconf is terrible a and nobody really needs it these days (and, some say, never did.)
That is the essential question, of course assuming this flight goes off without a hitch they will have new data about what it took to this this booster back to flight ready status, and then they can see what they did that they could do better, what tools they should make to improve efficiency and what tweaks to the design will lower the time to cycle it through.

There are interesting precedents in the tooling jigs that Thiokol built to refurbish SRBs and the Rockwell folks used to do tile repair for the Shuttle.
That's a weak excuse for this horrible security hole.

Google is facilitating phishing with this terrible behavior. It means that someone trying to phish a Google user can send someone to a totally valid google.com URL and it will still result in their credentials being stolen. That's the #1 thing that you teach non-technical people to avoid phishing; "Make sure the site you're on is the one you think you're logging into."

Because Google has chosen to be sloppy and dumb that simple instruction is not enough to protect people.

Google is 100% wrong here. This is a blatant hole and just a lazy, sloppy stupid, way too broad whitelist.
They know that you know that. That's the new info.
There seem to be a lot of skipped rules. I think it has something to do with:

all-1b4059b…-46d74bf1.js:5 Uncaught TypeError: Cannot read property 'length' of null
> Also, remember that most politicians or Fortune 100 CEO's didn't get there by being the smartest. They also got there with a combo of understanding people, focus and determination.

Huh, and here I thought it was access to family money and Ivy League elite connections. Who knew?
Sounds like it. I grew up in Columbus, OH. I was just graduating high school when dotcom bubble was frothing. I dreamed about going out to SV but didn't have the guts to.

Thing is, when I moved out to Seattle, I fell in love with the West. I love the weather and people out here, whether in northern Arizon, or Washington State.

I'm glad things are looking up at the midwest though.
To answer your question: no, nope, no. Absolutely agree with you there. This anecdote is definitely the most extreme and not-advised route of keeping your company alive. They were extremely lucky this worked at all in their favor. Please don't try this at home :)

There are way more reproducible methods of keeping your company above water, such as reducing burn or spending your time wisely and focusing on your core product (as opposed to adding more and more features no one really wants).

I've heard the Airbnb founders tell their story many times and even they acknowledge this was a last-ditch effort. They ate ramen and cereal for all their meals to extend their bank account and tracked it to the penny. I think that is the point that should be taken from the story; when it comes down to the end of the wire, you should be willing to do whatever you can to stay alive. All cliches aside, startups are hard.
I'm not sure I agree. There will be a percentage of users who would see the initial google.com page and not realise the subsequent page was an impostor, especially since Google 'took them there' after they logged in. This doesn't work on you because you have been primed to know what to expect - I reckon at least five percent of people phished this way would not be so observant, and Google should block off-site redirection after login.
TIO: A simple TTY terminal I/O application
Go is hype and people think that because it's done by google it's cool meanwhile people at Google are using more and more Rust they even made their own editor with it:

https://github.com/google/xi-editor
Seems like they just reinvented the lute.

There's a reason no one but Sting plays it.
Vim-one: Adaptation of one-light and one-dark colorschemes for Vim
I did too. In the face of so much for will, there was a lot of forced movement on accounts, real names, comments sections which left people disoriented and angry.

I also think making an incredibly careful integration of Google Reader, the one social network they did right, would have helped (though not cancelling it would have been best of all). I still wish they simply evolved Google Reader into a fully fledged social network.
Click bait title?

Theranos withdrew their application to the FDA for the test. So "Theranos Halts New Zika Test" is technically accurate, but it suggests that the test was actually being performed.
Conflict of interests is not a conspiracy... unless you believe stuff like Fox not covering Republican scandals is a conspiracy (its just Fox being Fox)

Yeah, it may be a lie but not much else.
So Zika, a devastating illness that is likely to cripple thousands, will go on being undetected because Theranos may have not quite followed the rules in collecting finger sticks? This is a public health emergency. Appalling.
ES6 support is another reason why. And also, once we start doing advanced optimizations you might want to marinate that hat in some nice sauce.
Only a small number, used as insurance/backup for problems with GPS. It's not really a huge problem for someone buying many racks of their own equipment.
But how is a nil pointer segv different from a irrefutable pattern mismatch in Haskell, or "undefined is not a function" in JavaScript?
Dustin seems to take offence at the idea that FizzBuzz would be used in a technical interview to screen job candidates.

Jeff Atwood on the other hand thinks it's a great way to filter out "developers" who can't program their way out of a wet paper bag:

https://blog.codinghorror.com/why-cant-programmers-program/
> The Docker orchestration capabilities are opt-in; they must be activated by the user. Though not opting in may lead to backward compatibility issues down the road.

Whoa, citation needed! Not activating swarm features has the same probability of causing problems as relying on fork() to create a process. Maybe not, but I don't see Docker suddenly forcing everyone into using swarm. It seems unreasonable to even suggest this, and a bit of a scare tactic.
Because I go to a page, check the green padlock and all that noise, it's all legit, enter my credentials, oops I typed them in wrong, try again, right now I'm logged in properly... I would say I am dramatically less likely to exercise as much caution on the "Ooops wrong credentials" page having checked the original one.
Really cool to hear about the OER adoption, I'd love to hear more about the decision process. From another comment in this thread it sounds like people in your dept actually wrote/revised significant content of the text. That's both awesome in that you/your peers can update the content that you need, and disappointing, in that it's not going to work on a mass scale if every dept has to dedicate a lot of time to editing the content before they'd be willing to adopt it.

I'd love to hear your perspective on the state of OER resources and their likelihood of adoption. Particularly if you think outside your institution.
Practice. I bought a whiteboard, mounted it on the wall, and practice questions from interviewcake as if I were in front of a live audience. It feels kind of silly, but definitely helped me improve recall under the pressure of an interview. Putting yourself in an environment that most closely resembles the stress of the real thing to induce some or all of the anxiety is paramount!

Repeating this exercise at least once daily has produced real results for me, and helped me get comfortable thinking and speaking about algorithms outside of my normal operating environment (i.e. in front of a keyboard ;).
My "Chemistry for Scientists and Engineers" class had 600 people in it and my "Intro to Programming" had another 600 people.

I've been told that with the amount of students it wouldn't be possible to grade stuff like that by hand.

As far as the online grading goes it is mostly the early STEM classes that have the online grading. The non-STEM classes were mostly "read this and do an essay" and the tests were graded on scantrons. After you move past the courses with no pre-reqs and weed-out classes there are less people left and the professors don't really rely on the online grading as often.
I always wondered about these measurements. Excuse me if this is rookie astronomical information. I have read that we gauge the distance through brightness. That is we know how bright such an object should be at the source, and estimate the distance based on actual brightness at the instrument. How do we know it's not just brighter than we believe, instead of being as far away as we believe?
The whole premise of FB is to "connect people", whether or not you like it, so it's not an entirely unexpected behaviour from them. It's also the reason I don't use FB, and never will.
One of our future plans is to use type annotations (Flow, but maybe typescript too) to do advanced optimozations.
I'm not so sure about this. I have friends who are engineers and lawyers and architects who would say that their schooling was a similar mix of foundational theory that is only indirectly useful to their career and practicum that got them started with the kind of work they actually do as my friends who studied CS at various schools. I guess YMMV?
As long as we accept that "endearing" and "politically radical" are attributes that can and have been held by many, but equally are often not found in the same person. Afterall, the world will change whether or not YC exists.

For both PG and JL, a big requirement is surely avoiding any of the possible and unappealing permutations of the phrase "if I can't dance, I don't want to be part of your revolution". This is obviously really tough to do once you start tangling with big capital. Motherhood and apple pie is terrific but boy is it associated with social normativity.
What does SV represent? As a developer, there is very little difference between SV and anywhere else. The business money is there. Business money does not translate to fame and riches to average employees.
Iridium Satellite Hacking – HOPE XI 2016
NASA's Hunt for Planet X Turns Up New Trans-Neptunian Objects
Turn “docker run” commands into docker-compose files
Thank you, I think it was just me not understanding because I havent been in school in a long time. Thanks for explaining. The more I find out how schools work right now the more it seems like a scam lol Best wishes with your studies!
I highly doubt, jokey rural stereotypes aside, that antibiotic resistant gonorrhea is being transmitted from livestock to humans.
Try this variant:

(link removed, see video below)

And tell me your parents/grandparents/etc will not mistake that for the real thing.

(you can enter whatever you want into the phishing form, it will just take you back to this post – but someone with less morals could do entirely different things)

EDIT: Video for mobile users (this page doesn’t work on mobile): https://cdn.kuschku.de/ServiceLogin/video.mp4
And the point of forcing employers to pay a living wage is so that we don't have to subsidize their businesses via government assistance to their workers.
New Engagement Ring Start Up
Now the page is down again. (NOTE: I wanted to see if they had posted anything else in their defence in interest of hearing both sides to the story.)

Ignoring whether they were in the right or wrong, they're certainly not handling this very well as a company. If they now re-brand themselves again that would not be a great move if they maintain any link to their former selves. As a start-up I'm sure getting investor finance after a media fiasco like this may be particularly difficult, regardless of a name change.
> "If AB is a vulnerability only if B is a vulnerability, then A is not a vulnerability"

Stringing together multiple (seemingly) insignificant vulnerabilities to pivot through a system or own a user is hacking 101. I'm not sure how you'd fix this, but given Google's prevalence as an authentication provider, it's definitely not worth being glib about.
Actually wayyy before WhatsApp announced [0] that they were going to share data with Facebook, Facebook had already started suggesting me to add friends. These are people whom I have no mutual friends with, but after more suggestions popped up, I realized they were all people I added to my address book and contacted before on WhatsApp.

I definitely did not consent to sharing my address book contacts with Facebook, and frankly nor would I want to. Now WhatsApp is offering an "opt-out" option, but I'm not sure how that will help. Isn't it a little too late for that now?

[0]: https://blog.whatsapp.com/10000627/Looking-ahead-for-WhatsAp...
I was going to say impossible as the teacher even said that but I think for small numbers it is possible IIRC.

There was some joke I think by Kenneth that the only fair voted government is a dictatorship.
Münchner Residenz, Munich, Germany
I think there are some products where the company hopes for massive initial success, but fail to achieve it, and then they have to decide whether they want to play the long game, or kill the product. I think Amazon did this with Amazon Prime, and it worked out tremendously in the long run.

Looks like Google decided to be in it for the long haul with Google Plus, but let Google wave die due to a lack of popularity. But that would have been a very good product to play the long game with.
This changed sometime in 2014. You used to be able to use IMAP authtype 'simple', but in April 2014, Google released a rather vague blog post [1] about how they're going to deprecate something; please move to OAuth 2.0.

The Thunderbird team's bug tracker has some context [2] where they had to move quickly to add functionality to Thunderbird to support the SASL XOAUTH2 for IMAP so that Thunderbird would keep working with Gmail.

[1] https://security.googleblog.com/2014/04/new-security-measure...

[2] https://bugzilla.mozilla.org/show_bug.cgi?id=1059100
Yes, but only for Raspberry Pi(s), GoPro(s), and to boot from to install OSs.
https://www.beeradvocate.com/beer/profile/147/246805/

https://www.beeradvocate.com/beer/profile/31272/240040/

http://www.dogfish.com/brewery/beer/loral

http://urbanchestnut.com/our-beers/hopswitch-loral/

Just saving you a trip to google/duckduckgo...
The Culture of Violence in the American West: Myth versus Reality [pdf]
Steps:

1. Send email that looks
like it's from AdWords,
claiming the user's CC
needs to be updated

2. User logs into Google
after verifying URL is
in fact google.com

3. Google literally sends
trusting user to attack
site... to enter their
credit card number

How is this not a serious vulnerability?
> the weather sucks

Yeah, no argument.

> And, less of a concern, but PA is generally an unlovely part of the country in my opinion. I could barely believe my eyes when I saw Oregon and northern CA.

I'll disagree with you there. I think Western PA is quite beautiful in the late spring, summer and early autumn. My reaction to Northern Ireland was "It's pretty, but going up US-22 through the Applachian Plateau is prettier--especially around Cresson."

The problem is that the winter is just awful.
I won't be happy until I see someone do FizzBuzz in silicon.
Cash value is relative.

In the Bay Area $135k salary isn't even enough to rent a one bedroom apartment at current rates.

If you make $135k in the rust belt you can live in a McMansion and own two cars.
Rocks and unicellular life are simply physical physical matter, and they are not conscious. We would not have evolved to be conscious, in a coherent manner too, if there was no benefit to it.
Guess the cavalry didn't show up this time.

So are names of the company okay? I feel that's just as witch hunty.
Yeah, I totally bet you would have turned down MIT because of a PE requirement /s
A lot of research in astronomy is conducted to figure out how bright certain objects are, one classic example is "Cepheid variable" stars, these pulsate at a rate correlating with their brightness.

You're right in that there is sometimes debate about whether the "standard candles" as they're referred to are as bright as we expect, see:
https://en.wikipedia.org/wiki/Cosmic_distance_ladder#Problem...
I'm really disappointed with Pebble.

I had a Pebble Steel (the original Steel) and it was great for a while. But when they introduced version 3.0 (I think?), which brought on the new interface I pretty much stopped wearing it. I'm not a heavy calendar user, except when it comes to work. The 3.0 update was based on the idea that users love using the calendar to schedule their days.

That one primary change took away from the simplistic interface that the earlier versions had and made the Pebble more of a chore to keep up with. I didn't want to be bombarded with notifications about tasks/meetings at work, and I certainly didn't want them showing up in the main day view. But then that single today view was mostly unused and empty.

It's pretty unfortunate, IMO. I enjoyed using it up till then. I guess I could give it another chance but at this point the Original Steel has likely reached its end of life, at least with respect to new updates.
Two Wide-Eyed Aussies Visit Linkedin in San Francisco
Re: github

I can understand why on-premises git is better in some ways.

But you're overstating the frequency of github outages.

And it doesn't exactly kill the business when it's down for an hour.

Git is distributed after all.
Clerk: "You can't do that"

Arnie: "Wrong"

https://m.youtube.com/watch?v=TsMAhHtHroE
I agree with most of what you're saying, but I'm not sure about shifting the cost of textbooks to the school and charging for it through tuition. In my three years of school so far, I haven't bought a single textbook, and I've only had to pirate two. And I only pirated those two to have the questions for mandatory homework problems, didn't really use the material.

I think that if a student can find better alternatives to their assigned textbook, making the school buy it anyway and charge it through tuition just seems wasteful.
"Google takes on Earth by building a new mechanical planet"
Probably like pancakes, the first is always a wash that you feed to your cousin.
I'm on the sign-in page for Google.

I check out the URL, it's google.com. The padlock is there.

I sign in. Whoops, must have typed my password in wrong. It happens sometimes. So I type it in correctly.

...I just got phished.

The problem is that the behavior of this exploit mimics almost EXACTLY the expected behavior. The warning flags to even an educated user are not clear at all. It would be so easy to fall for this.
> In the US, the fact that waiters are paid less than minimum wage and expected to make it up on tips is often cited to explain why it is so bad to not tip at all.

Waiters always earn minimum wage in the US regardless of what tips they get. A waiter who earns $0 in tips must still be paid minimum wage by the restaurant that employs them.

See the Fair Labor Standards Act per the United States Department of Labor: https://webapps.dol.gov/elaws/faq/esa/flsa/002.htm
Post-mortem of Google cloud incident on August 22
You have a valid point. They do it to protect the privacy of their hosts but mostly their best interests since hosting one's entire home/apt is illegal in many areas.

I agree that they should have a clear disclaimer on the exact location because it is very important in many areas. I think VRBO may be exact so you have another option.
I haven't driven Topeka->Wichita, but I've done KC->Topeka and hoo boy I would not call those views "wonderful".
and the thing that sucks about us non-FB using people is that Facebook still has a pretty complete profile of our photo likenesses, names, emails, phone numbers, and other website profiles.
https://news.ycombinator.com/item?id=12391533
I'm guessing the value of concise texts depends upon your learning style. Personally, I like to read beforehand and mull over topics so that I can engage my professor in class, rather than just trying to keep up. This would be extremely helpful to me, because I tend to become frustrated when I see unrealistically long reading assignments, and then I abandon the way that works best for me. I was recently assigned to review three 600-page references before a two-hour lab; when that happens, I stop reading altogether. I know that that's far beyond what would happen with inflated textbook chapters, but it is similar.

My fiancée, on the other hand, does her reading afterwards. She goes to class to see what the professor cares about, and then looks for those areas and reads about them. She probably doesn't mind long texts at all (I'll have to ask her.)
Perfect example. Everything that I can see in my cell looks right, including informations from the green padlock, just opening (and understanding! ) the whole URL would make one NOT enter the password.
Google seems to consider such issues about security UX being severely affected, where expectations are involved, to not be vulnerabilities.

This is one of them. "theoretically", it is not a vulnerability, since the actual integrity of the security model is not compromised. However, the UX changes. A user who checks for the green lock in https urls may not check that a "wrong password" page reached via the google login page is on a different domain because they don't expect it to be. Given the existence of google oauth login, I do agree that this isn't really a good expectation, but I suspect that many folks have it (and it's easy to add "login successful, redirecting to <site>" for non-whitelisted endpoints). It's certainly something to improve upon, even if you don't give out a bounty or w/e.

I reported a vulnerability of a similar kind months ago, which was similarly classified as not a vulnerability. When Chrome receives an invalid certificate which is invalid due to multiple reasons, it does not show all the reasons or prioritize. This means that if I have a self-signed certificate that also expired half an hour ago, chrome just tells me that it is an expired certificate. The integrity of the security model hasn't been affected here -- the warning is still shown, the user still has to manually click through. But the user may be much more likely to. Recently-expired certificates are relatively common, and seem like a reasonable thing to bypass. Of course, you should always check the cert details and cert tree before bypassing (unless you don't want to login or don't care about things being MITMd on that site), but not everyone understands the cert trees, and not everyone will do this.

Of course, it's up to them to not consider security UX fails as vulnerabilities, and UX is pretty hard to get right anyway (Google has some awesome folks working on security ux though!).
I am not going to engage you on what is. My position is that voters ought to be responsible for the policies for which they vote.

To do otherwise is madness, and the degree to which our legal and political systems say otherwise is madness.
Ask HN: Can you fwrite() to a socket?
Socket handle is still a file descriptor, right?