skysight-inc/HackerNews huggingface dataset:
Sorry, I was ambiguous when expressing my ideas. I'm not trying to debate an actual historical fact or to say that resources were misplaced in curing AIDS. I trust you the actual importance placed on AIDS was merited.

I'm rather trying to debate that a more common affliction should have priority over a less common one and thus, pointing out that efforts is disproportionately spent in a field compared to another it not whattaboutism.

I've been trying to illustrate that under the assumption that some affliction _would_ be an order of magnitude more common than another (as the whattaboutists in your AIDS illustration assert). Adding to this the assumption that results would be proportional with exerted effort for both affliction treatments (not always true), it would make greater sense to expend more effort for the more common one, thus the percentage an affliction is present compared to another does matter.

Granted, there are a number of assumptions to my illustration, and in particular cases they can be true or false, but it does prove that the percentage of population a certain issue affects does deserve a part in the equation of how much effort we should expend into fixing some situation and can not be readily excluded from the conversation by simply shouting "whattaboutism".
Because it's the patient's health and their money? It's not like they have to make the decision on their own. The grandparent mentioned he called his insurance company's pharmacist and got advice.
Austria is far more mountainous than Italy.
But what doesn't add up is that only the bigger cities there have proper LTE coverage, the small towns only G3 or G2.
But even G3 would be better than the WiFi on broken 2Mb copper cables in the earth.
It looks like this should be a "Show HN". You should probably resubmit it as one.
That's already the law in the US. Pharmacists have to fill with a generic unless otherwise specified.
It's not about something being lacking. I adore KSP as well, but i can't get myself to play it. Just not my slice of cake.
It's very interesting, and a complex moral issue.

On the one hand, responsible disclosure, and immediate patching would be the ideal way forwards.

However, with a company that has a history of neglecting security, and with such severe possible consequences, speaking the language only language that businesses understand is sometimes the only way to make them pay attention.

Had they gone the "responsible" route with a CERT disclosure, the vulnerability would have been published 45 days later, and would presumably be exploitable (as St Jude doesn't seem to prioritise fixes).

As it is, we get a brief media shitstorm, and hopefully companies paying more attention to product security as a result.

What I'd love to see is responsible disclosure with teeth. Someone like the FDA imposing severe penalties for failure to patch security flaws, and rewarding responsible hackers who find vulnerabilities. This means we avoid the nasty area of effective blackmail, whilst hopefully making it likely the 'good' guys find the vulnerabilities first.
I saw it but due to security concerns I did not click.
I'm jealous. I've had it show up in production. I think we were using script tags with sanitized JSON to re-hydrate an isomorphically rendered page.

Of course, a user entered one of the valid json, invalid JS characters in a field, which made its way into our database. Once there we started having weird errors show up between the frontend and client. That little gem took us days to track down.

JSON should be either a subset of javascript, or obviously not a subset of javascript. 99% compatible systems are dangerous landmines. That you haven't been blown up yet doesn't make it ok.
All they have to do is write the law that says they can.
the red king theory is actually what's discussed in the article. RK hypothesis is sort of an opposite hypothesis to the RQ hypothesis, and that's what's being addressed in this work.
Doesn't that argue for an ad hoc expiry? Product cycles in mobile phones and washing machines are different.
One of the reasons for the high line number count is the decision not to depend on modules that are not part of the core of Perl 5.8.

Quite a few of the lines are to deal with different flavours of operating systems.

The benefit of this is that by copying the same single file you can have GNU Parallel running on FreeBSD 8, Centos 3.9, and Cygwin.
I was wondering the same thing! I did, and it crashed. Currently running 53.0.2785.80 beta (64-bit) on OS X.
“Six months free access to the Apple Music” offered by British operator EE
Nice site! Personally, I'd like to have the option to view by category. Maybe you could just pull this from Amazon or manually curate your own topics.
>> I am guilty of using `ps|aux`

What's wrong with doing that?

I've been doing that for so long I don't know why I do it
Plasma wings could change the way airplanes are designed and flown
In my city in Germany all newer bus models have WiFi. Just join the network, agree to the terms and conditions (which consist of 5 short paragraphs) and you are set. No need for an ID.
If you need a distributed PaaS alternative for RPi and others, you can look at https://github.com/tinspin/rupy.

It's simple and stable!
This article addresses some interesting, real-world problems with the MVC pattern, problems I've run into myself. When writing iOS applications I also usually end up with something that is better described as M-VC than MVC, where the view and the controller are tightly coupled and usually implemented by the same class. This is not how the MVC pattern was intended.

From a cursory read I like the architecture improvements they propose to 'fix' this situations. That said, I can't escape the feeling that for the majority of applications, this is way over-designed/over-engineered, and putting the cart before the horse. Your application should not be written to better suit the MVC (or MVVM-C) pattern, it should be the other way around. Often a merged VC class gets the job done just fine and keeps things simple and concise.

In my experience, my own applications end up with a single class that's both the view and the controller, for the simple fact that there is no reason to decouple them. I'm usually not interested in having multiple user-interfaces on top of the same model, so there is no incentive to re-use the controller. Note that IMO there is a clear distinction between decoupling the model from the view and/or controller (which is almost always desirable to separate data and presentation), and decoupling the view from the controller (which have a lot of overlapping resposibilities)

To be fair, I haven't written any applications that hat different UI for e.g. iPhone and iPad, and I haven't written any applications that also have a desktop counterpart. But even in those situations, I'm wondering how much there is to be gained from re-using controllers for different user interfaces...
11 per Cent of Americans Think HTML Is an STD (2014)
Cloudflare does something similar to AWS. Each user gets different nameservers
Good point. It's actually generally cheaper to serve content through Cloudfront instead of S3 directly as bandwidth is less expensive with Cloudfront.

However you are going to pay for Cloudfront requests in addition to S3's. In the vast majority of cases, it's insignificant compared to the savings you can achieve on the bandwidth side. (And at a certain level you can ask AWS to waive CF request fees entirely).
YAML... really? Looking at the examples in the Wikipedia article (https://en.wikipedia.org/wiki/YAML) gives me a headache. Fortunately, most actual YAML files I've seen are not that complicated.
Probably none

This "contactless phone payment" seems more like a gimmick than anything else
I made the mistake of applying for a job there once. I was discriminated against. Despite being in a protected class, I was so surprised to be so obviously discriminated against by them. (I've interviewed a lot, I don't always get a follow up, this isn't sour grapes, this was very different.) But of course the HR people are careful to not say things that are overtly discriminatory.
But when a company insists on a VIDEO call rather than a phone call (despite asking them to do the first one by phone since I was not in a location with good bandwidth at the time they wanted the call)... and then visibly reacts to your image when they first see it, and then pretty much blows you off, despite being well qualified for the position... yeah, it's not what they say.
Quality is something long term, but because the world becomes faster and faster people care less about it. Hype can generate a lot of money in the short term. And that is what is valued the most in the current economy. Being a quality guy myself I also feel that this is painful, but I think it's hard to blame anybody for that. I don't know anybody who goes for the short term success because they want to live in that kind of world. It's just about the only thing that gets rewarded.
Git commands for various scenarios
>Most of the phones have likely ran out of battery

I would suspect that a notable number of phones are still on. As long as you don't turn the screen on and don't use any battery-draining apps, modern smartphones can easily have a battery life of a week or longer (even outside airplane mode).

Using that big screen, the quad-core CPU and the high speed internet are the battery drains, all of those are mostly in low-power mode while the phone is just in your pocket.
No. Programmers want huge paychecks but everyone ELSE should be FOSS and code for us for free
IMO this is a growing issue with the ubiquity of Github. Github is increasingly becoming a de facto resume, which is a problem for people who contribute to things that aren't on Github. This is also a problem for would-be Github contributors. As an example, Gitlab looks interesting, but I'd be concerned that potential employers would never spot my work there.
Excellent comment.

I'm not sure that many software companies today are aware of how corrosive it is to the company's culture to not strive for excellence and integrity, and to encourage the same from every employee. What exactly does it accomplish to ship a product that is buggy or half-completed, just so that you can hit a deadline ? Do these companies think that the customer isn't going to notice ? It's much better to be honest with a customer about issues when you become aware of them, and allow the customer to plan accordingly.
A Money Burning Ritual
Yes, on the todo list. Still have a day job to do, but it will come soon. Thanks for the feedback!
That implies it would be redownloaded every time rather than just the check for the ROM first and download if absent.
This is a beautiful thing. If I were a teacher, I'd hang these in my classroom ASAP. My office will have to do instead.
> have the highest of ethics

This summer I read a couple of stories about Woz in Programmers at Work. Around 1980, when Apple was about to go public, it became clear that there were two kinds of employees: the engineers who were focused on work, and others who spent all their energy gaming stock options. When Woz found out that the shares ended up being so unbalanced, he made a large pool of his own shares available to employees. The "scheming" employees still ended up taking advantage of the others (and Woz) by gaming that arrangement. This is not altogether shocking, since other stories indicate that Woz spent his own spare time for example, seeing how many digits of `e` he could fit into one of their computers (edit "He had to use every single piece of memory, including the memory on the display screen, to hold this big number. And he didn't have any intermediate results because all the memory was holding just one number. This program took fourteen days to run.")[0]

I have such high respect for Woz. I believe he really does put "being a good person in his heart" above everything else.

[0] This was from the interview with a programmer who worked for Apple at the time (edit Andy Hertzfeld). Sorry for the bad retelling, I don't have the book handy.
Or does it only work in the city of Brest?
The nice thing about the paper is that it is transparent. It includes a TLA+ specification for the claims that they make.

In turn, you have a concrete model checked implementation you can talk about or use a basis for understanding where either their or your proposed idea either holds or fails.

Note that a model can specify the wrong correctness criterion in practice. So you may have a "proof" which works, yet the proposition proven is wrong.

In general, when working on distributed systems, we usually want some kind of formal criterion of correctness. The failure modes of such system are quite hard to get right, and hence retractions of claims are plenty. Sadly, we have too little literature on how to on-board people on model checkers such as TLA+, proof assistants such as Coq, Isabelle/HOL or NuPRL, and QuickCheck systems such as Haskell or Erlang QuickCheck, Clojure's core.spec (I believe), etc.
Great website, but the popup subscription window is terrible.
List of Interesting Tools for Digital Marketing Teams
My feature request is to know the frequency with which these books are mentioned! I love the simplicity of the site though - thank you!
Sounds like a high-risk ploy. Then again, VC money.
JS: If behavior delegation is so awesome why did classes become so popular?
So this is a hack in the browser to fix a security problem in the server. And it requires the same server to send an additional header.

I wonder if they ever evaluate the effectiveness of their work over there at Mozilla.
May as well ignore the "RAID is dead" screams. They are only FUD. Do make sure to run the scrub periodically though, that's the real defense against rebuild failures.
God damn it. There is NO NEED to sell it to me. Tell me where to apply, NASA!
This can't be right. There's zero chance that "Palm OS Programming" is the 16th most mentioned book.
Terrible pop-up subscription panel hijacking my back button.
When I was young becoming an astronaut would have been a dream. In recent years, after discovering the world of online learning, I learned too much though to have any desire to go into space, not with current or even soon-to-be technology. Physiological stress and radiation are very big problems. You must be young and thinking about health never entered your mind to apply for the job (yes of course, risk assessment vs. benefits is highly subjective, here, I'll even help you, see below).

Anyway, if you are interested start here (free courses):

- The Conquest of Space: Space Exploration and Rocket Science: https://www.edx.org/course/conquest-space-space-exploration-...

- Space Mission Design and Operations
Learn the concepts: https://www.edx.org/course/space-mission-design-operations-e...

- Human Spaceflight - An introduction: https://www.edx.org/course/human-spaceflight-introduction-kt...

- Introduction to Aerospace Engineering: Astronautics and Human Spaceflight: https://www.edx.org/course/introduction-aerospace-engineerin...

and maybe even (the more "heavy-weight" and more theory-heavy course)

- Introduction to Solar Systems Astronomy: https://www.edx.org/course/introduction-solar-systems-astron...

- Talking about a journey to Mars, you just must read "Packing for Mars" (https://en.wikipedia.org/wiki/Packing_for_Mars), Google Talk presentation by the author (40 minutes): https://www.youtube.com/watch?v=Y0kaycVtvhU

.

PS: For a first flight experience I recommend you look up and contact a flight school at a small airport near you. An introductory 1 hour lesson without any prior requirements can easily be booked, and it is "self-contained", meaning you don't need to feel you are taking advantage if you don't become a student, they get paid for that hour. But even getting your private pilot license is not all that hard. I got mine years ago :)

For those of you in the Bay Area: http://www.wvfc.org/membership/introductory-flight (not the only address there, but the one where I went) As you can see it starts at $99 and is common enough to be made available in "packaged" form.
Nice site; I would have loved to see monthly and yearly lists too.
For aspiring pen testers who read this article, there's an important catch: if the rules of the challenge (or other Inversoft policies, like any bug bounty programmes they may have) didn't specifically allow targeting their other systems, then the author of the blog post could have been prosecuted under e.g. the CFAA.

Always read the list of in-scope systems and rules of engagement before starting. If that information hasn't been provided, then don't start until it has.
Good question. Results such as these can be of a form where they currently don't provide much benefit, but yet moves the knowledge of Paxos-like consensus forward. That is, you explore where the system has flexibility in its very nature. In turn, this knowledge can lead to faster systems down the track. Sometimes by employing a vastly different approach due to the knowledge. Good research can be indirect.
Let us know how the Amazon referral program treats you.
I'm only on two OSes (Windows, Linux) and predominantly two browsers (FF, Chrome), but Keepass (Works in Windows and Linux - pretty sure Mac too) + KeepassHttp plugin + PassIFox [1] + ChromeIPass [2] works for me.

I find it also nicer than LastPass as it combines with the native password saving of FF/Chrome rather than the highjacking and restyling of input boxes that look like user/passwords done by LastPass.

[1]: https://github.com/pfn/passifox
[2]: https://chrome.google.com/webstore/detail/chromeipass/ompiailgknfdndiefoaoiligalphfdae/related?hl=en-US
Is Sony Going to Launch Its Own ‘Powerglove’ for the PSVR?
I did not know that blog post. However, it does not give evidence that Moxie Marlinspike is friendly to federation and third-party clients. If anything, it shows that he opposes open, interoperable protocols as well.

Moxie Marlinspike asserts that federation needs standardization and that standardization inhibits changes. He also asserts that protocols have to change to keep up with changing requirements. His unspoken assumption is that it is impossible to create real-world forward-compatible protocols.

While I agree with the first assertion, I strongly disagree on the latter two. Consider that protocols and data formats that do not have to change exist. An encoding like UTF-8 will probably never have to change to keep up with new codepoints. Also consider that forward-compatible protocols and data formats exist. HTTP seems to be a very good example for that.
And it is exactly the hacking part that GNU Parallel tries to help with: A lot of the helper functions in GNU Parallel could be done by expert users (--nice, --tmux, --pipepart, env_parallel, --compress, --fifo, --cat, --transfer, --return, --cleanup, --(n)onall).

But non-expert users will invariably make mistakes (e.g. get quoting wrong, not getting remote jobs to die if the controlling process is killed, or re-scheduling jobs that were killed by --timeout), and why not just have small wrapper scripts built into GNU Parallel that are well-tested, so the non-expert users can enjoy the same stability as the expert users?
Please let us know how much the site makes from using your affiliate links.
The internet as an engine of liberation is an innocent fraud
I wonder if devices implemented a communication protocol based on UWB we could leverage it for rescue operations. Along with other advantages, it has a much greater ability to penetrate physical barriers [0].

[0] http://www.thetrackit.com/library/UWB%20Defin.pdf
That already exists in the US. Any drug created with the use of federal money gives the gov't "march in rights" where they can seize the patent if they feel that the company is preventing access to patients. A senator attempted to do this a few months back and the NIH declined to use such rights.[1]

[1] http://www.patentdocs.org/2016/04/members-of-congress-seek-n...
Some climber dude (I forget who) said, paraphrased:

"Only chalkless barefoot free soloing[1] is proper free climbing[2], all the rest is just disguised aid climbing [3]"

If you've ever gone climbing, and compared your experience wearing random shoes (or no shoes) with wearing proper climbing shoes, I think you'll agree that the difference is tremendous. If you consider oxygen an unfair advantage, you will need to include many other tools as well.

Also, in alpinism, the stakes are so high that I don't fault anyone for using the tools necessary to make sure they make it safely back down - for their sake, and for their would-be rescuers'

Competition sports climbing is another matter, but its connection to alpinism is as tenuous (or more so) as that of biathlon to hunting in the scandinavian winter.

[1] https://en.wikipedia.org/wiki/Free_solo_climbing
[2] https://en.wikipedia.org/wiki/Free_climbing
[3] https://en.wikipedia.org/wiki/Aid_climbing
Sorry for that will have a look..
PhpStorm 2016.2.1 is out
? its only 10mW, old BT Class 1 goes up to 100mW (20dbm)
Tech guy sounds naive plus responsible for the outcomes and maybe should just accept lesson learned.
Don't do that on Solaris ;-)
Biologist here; so would the proper approach be

UPDATE users SET password=[generateRandomString] WHERE hashing_scheme='old';

?
It's an honest question, as I can't see anything in the guidelines: are submissions of webs with useful data but with referrals ok with HN? Just asking in case some day I have a cool idea as this.
U.S. And Canadian Travelers Opting to Extend Itineraries in the 2nd Half of 2016
Auto Europe, a leading provider of international car rental services has released a study of 2016 booking data, which includes a forecast of European travel trends for the second half of 2016.
http://customtravelclubs.com/u-s-canadian-travelers-opting-to-extend-itineraries-in-the-2nd-half-of-2016/
Highly recommend "Trust Me, I'm Lying: Confessions of a Media Manipulator", number 18 on the list.

Like others have said, for the love of god please get rid of the popup subscription, or at least make it not alter history.
19 Tips to Make Learning Angular 2 Easier
Right now I aggregate weekly, because I was personally interested in getting a digest of the books. This usually is 1 mention per book, rarely 2-3 (I filter same user spamming one link).

Will soon code an aggregation for the two years, good point.
7 deadly workplace sins revealed
Just to be technically correct, because that's the best way to be correct...

JSON isn't a strict subset of JS. JSON strings can contain literal line terminators. JS strings cannot.
For simple data exchange? Way over-engineered is what it is, TFA specifically noted that they want to stay in the overall conceptual complexity of JSON:

> “Just use X” […] Nah, most of them are way, way rich­er than JSON, of­ten with fully-worked-out type sys­tems and Con­cep­tu­al Tu­to­ri­als and so on.
Beam me up Scotty (to Mars) there is no intelligent life down here (on Earth).
Laravel 5.3 Released: WebSockets, Notifications, OAuth2 Server, Search, and More
This Weird Galaxy Is Actually 99.99 Percent Dark Matter
same - would love top books by month/year.
That's because the Internet does not require human contact. We all act differently in person than from behind a keyboard and a Wi-Fi connection.
Swarm works (more or less) if one has just 2-3 hosts, use Docker for packaging, and want a semi-unified view of those machines.

Kubernetes seems to be quite highly opinionated toward "clouds" and "microservices". I just wasn't able to wrap my head over its concepts' applicability to my "I just have one server that uses Docker for packaging, and now want to throw in another, for resiliency" case.