skysight-inc/HackerNews huggingface dataset:
My wife and I live in an enormous 2-bedroom a block from four subway lines, in Long Island City. We pay $2,000/month for that (with various amenities included). A friend of ours who lives a block away with another couple pays $3,000/month for a house with an enormous backyard. And we're not outliers by any means. My point being, if you live in Brooklyn or Queens, and you're willing to do a bit of looking, you can find a perfectly suitable place for far less than the price points you mentioned.
On one hand, at least browsers are good about maintaining backwards-compatibility of CSS, so that pages that look okay with bootstrap 3 will continue looking okay for a good time.

On the other hand, slapping "Don't care" label on all the issues of the current stable version seems... bit excessive.

All in all, makes me happy I only use bootstrap for the CSS, and not the JS-based interactions.
@tristanj: thanks for reading the piece.

theblacksea.eu is run by the romanian centre for investigative journalism, a romanian non-profit (www.crji.org). RCIJ is part of various international networks, including the latest www.eic.network

you can check the RCIJ/CRJI for investigating the CIA black-sites, partnering with Wikileaks on the cable gate, and other investigative stories;

the black sea website had a grant from the Black Sea Trust, operated by GMFU, in 2012 for one year, in order to build the site from scratch under free software licence and to perform the initial 10 stories or so. that grant expired in 2013, 3 years ago.

we would love some more funding, but for now most of the work is done pro-bono or on a freelance basis.
It's the term @mdo used in other issues like https://github.com/twbs/bootstrap/issues/16913 "Bootstrap 3 is no longer being officially developed or supported."
For comparison: it's $949 + sales tax in the US, and 1075€ ($1200) in Germany, including 19% VAT. So the German price without VAT is the same as the Norwegian without VAT.

Mandatory warranty in Germany is 2 years, where in the first six months the manufacturer has to prove that it wasn't defective when they sold it to you if they want to dispute your claim. After six months, there's a reversal in the burden of proof, but claims are usually accepted without dispute. I'm not aware of anything that requires more than two years of warranty here, even for durable goods expected to last longer than that.
"Should We Stop Bootstrap 3 Support? Probably Not." sounds better?
Not currently in my muscle memory but this does interest me since I use vim sometimes for other ocassions. I'd prefer if shift wasn't necessary though... so I'm not sure I'll commit to this :).

Still, these are worse than Mac shortcuts that Komet uses IMO, and I dislike escape (and control to a lesser extent) :-).

Also you sometimes want to quit with an exit failure status on canceling, and why have two different operations for that when your editor is smart enough to have one.
The New Short: Find Industries Exposed to Exotic Hacking Attacks
Server software might be able to help with some of the foot-gunning mentioned in Scott Helme's writeup. For example, web servers that were just configured to do cert pinning for the first time could default to giving a 5-hour grace period where the max-age was clamped below a day, followed by a 2-day grace period where the max-age was clamped below a week. Problems are likely to show up immediately, so starting with a low max-age makes sense.

This wouldn't help with malicious scenarios though; attackers would just disable the grace period.
Ask HN: How to convince partner to sell
I've got some experience building building SaaS apps, and about 2 years ago was approached by a client with an idea for a new app.

He had the industry knowledge for the app, and I had the technical knowledge to build it. We spent about 6 months building the project (including hiring another developer), with each of us putting in equal amounts of money. In terms of time, I definitely spent more time in building the product, with the expectation that he would do more of the marketing when the time came.

The product itself has done OK with almost no marketing, but we both see more potential in it. Unfortunately, we've let it stagnate over the past year or so for a few reasons

I feel like I would put much more time and energy into the product if it was my own, but unfortunately my partner does not want to sell his share. Although there is no animosity, we don't work that well together.

Any ideas on how I can convince him to sell his share?
Thanks, good to learn the difference. Graves are a pain on UK keyboards though, I propose they switch!
PCI DSS compliance is a company-wide legal issue and thus needs buy-in from all relevant management and legal teams. Period. Self certification is mostly useful for small companies that might not even have a customer service "department", maybe just one or two people.
While all us non-americans can gloat about what great consumer protection laws we have (and I'm very happy about them as a consumer!) it's not for no reason that all cool stuff is made by americans. They have the state of Delaware, and they have the government who prioritize business before social issues. Correlated (and if you ask me, causative (is that a word?)) is that most impressive companies and products are invented by Americans.
Which New gTLDs for companies?
SSL cert expired two days ago
5 Mistakes Managers Make with Remote Employees – Code95
It's reminiscent of the iBook G4 problems with cracking RoHS solder (caused by heat, not bending). Apple denied up them until the National Consumer Agency of Denmark investigated and produced this excellent report:

https://web.archive.org/web/20071021235338/http://www.forbru...

It happened to my computer. Apple delayed and denied and charged me, but wouldn't fix the problem. Eventually I gave up, but I've never bought an Apple device since that failure.
Perhaps but at the same time I think some blame lies on the conferences that try to cater to these folks instead of telling them to grow up and act like adults.

You're right though, the SJW crowd loves to play the victim card and cry racism/sexism/oppression whenever someone doesn't cater to them. If the conference had been like no we aren't doing it, the person who complained would have likely blogged/tweeted/etc. about how the conference is sexist and "problematic" because they aren't listening to her (pretty sure it was a woman) and are therefore engaging in rape culture or whatever stupid nonsense these people peddle.
The growth of economic indexes is meaningless. The gains are going massively onto the people who already own capital. That's the engine of inequality.

Also... You don't "trust" that chart? You can probably calculate it yourself if you want. That chart is data. If you have any reasonable arguments against the accuracy of that data Id love to hear it.
Billions of dirty nappies can be turned into pet litter, insulation and compost
> If the per capita GDP of U.S. grew by 12.4%

Where did you get that number? No way that's right. Here are the numbers from the Fed: https://fred.stlouisfed.org/series/A191RP1Q027SBEA

Annual per capita GDP growth never exceeded 7% from 2000-2014.
All the gains went to the richest in this country.

The middle class in America shrank considerably following 2009.
...and that is a dealbreaker.
I agree with the second, the first however I believe in some situations a confirmation can be ideal - delete, de-activate, flag, etc.

Of course the quick unflagging is nice and works - just wondering if it would help with alerts in the back end.

Maybe the logs could be analyzed to see how many "mis-clicks" are triggered daily?

This should be easily do-able since the calls are timestamped and could be compared (only count flag/unflag that is within 20 seconds of each other or something similar?)
How to Build Your Own Spacemacs
Is AMD for sale?
I would say focus on remote.

The job board market is incredibly crowded and you've got to have something very different to stick out.
Well, the real risk here is that it creates a new consequence for being hacked by a criminal, right. So I can't cop out and say "people should report instead of playing HPKP games".

On the other hand, it's an internalized risk, which is kind of a beautiful thing: so many of the risks we create through poor security are externalized to end-users --- so much so that you can run a secure messaging site, get owned up, cost thousands of people their privacy, and still keep chugging along as if nothing happened. This particular risk though just wallops the owners of the site.
> I sometimes wonder if companies like Elsevier are the patent trolls of the research publishing industry

I assume that 50 years ago the cost of getting information out to people was quite significant. printing, distribution, logistics... a single researcher wouldn't be able to deal with lots and lots of publishing institutions efficiently, and a single institution (except for the largest ones) wouldn't be able to publish efficiently. at my uni school, they had 2 geometry professors, and they perhaps published something every few years. no need for the school to publish its own geometry journal. middle-men such as Elsevier emerged to provide a useful service, achieving efficiencies of scale on both ends, providing a publishing channel for smaller schools and a discovery service for researchers. kind of the same as why travel agents existed. it was too difficult for a single person to deal with all the hotels and airlines in the world, and they didn't even know where to go and ask about that stuff.

Today, the cost of getting the information out to people being insignificant, they are an obstacle instead of being an enabler, adding very little value to what people can do directly. On the other hand, as long as they can keep the effective monopoly going, they can milk the market. Travel agents didn't have a chokehold on a market, and got easily disrupted by web sites. Elsevier requires regulators to step in.
Why GitHub Finally Abandoned Its Bossless Workplace
tl;dr China's social security fund not using blockchain technology
Why on earth do people think this is to the detriment of publishers? This will effectively just lock in their profits by forcing all eu grants to include the cost of payments to publishers to make research papers open access. It just means the taxpayer is now paying for open access instead of individuals having to pay up themselves. Note I'm not saying this is a bad thing, and it is possibly worth publicly subsidising this as an intermediate step, but it is far from being one in the eye for publishers as other comments here seem to think.
The irony here is people like this HURT their own cause. Rememeber the Adria Richards debacle (aka "Donglegate")? That gal set back females in tech years because who wants to deal with a co-worker that might complain to the boss and get you fired because they overhear something you say and don't like it?

Same thing here. These folks aren't fighting FOR equality in work or safe workspaces, they're essentially cutting off their noses to spite their faces because they're going to turn people against them out of the desire to not deal with the drama they bring.
I missed that, so thank you!
If you are taking a degree program, it is the institutions responsibility to ensure that you have met all the requirements. If they don't have enough information on equivalence of a different institutions course, the easiest thing for them is to require you retake the sequence.

The way to get around this isn't by taking pretests (which don't mean much) it's by writing the final exams. In some institutions you will be able to do this without (full?) course fees if you are attempting to demonstrate equivalence.
Why assume bad faith?

I tend to forget passphrases very soon after creating them, around the time I am memorizing or changing a new passphrase, or after a month or so of not using one (depending on how long I have used it for.) Other people may have other patterns.

I have a fair number of passphrases that cannot be reasonably stored in password managers. As we know, it's hard to memorize a lot of high-entropy strings. I suspect that memorizing new ones tends to push out old ones.
Cyber Security of the Connected Car in the Age of the Internet of Things
Show HN: Prototyp – a free framerjs based prototyping tool
All the more reason not to trust cryptocurrencies as a store of value.

The 51% flaw is a glaring, fundamental problem with all current cryptocurrencies. We once thought "oh, the risks are low and it would be obvious if anyone did it". It's still obvious, but the risks are not low (and in fact, seem to be pretty easily exploited with cloud computing).

Not that they won't get there, but I don't think that blockchain solutions work in the absence of legal contracts between the parties involved. Blockchain has a lot of potential as a public, secure, distributed ledger system between competitors who can be trusted to play fair, but as the backing of an anonymous cryptocurrency the risks of a malicious actor are too great. As with anything, you need real-world penalties for breaking the rules -- and a key limitation of blockchains is that it's impossible to prevent out-of-band coordination between 'anonymous' actors without them.
It's said in the article that while it would fix it, but the problem tends to come back with reflow instead of replacing the chips.
An easy guide to Instagram Marketing
This was a big announcement, but there was no action defined at the time of the announcement. I wrote about it several months ago, because I had many questions following this news: https://tailordev.fr/blog/2016/05/31/our-take-on-the-recent-....
Is 'developer evangelist' just the term for a sales rep who makes their personal crusade everyone's problem? Seems as much.

Also, a terrible title. It induces eye rolling as much as rockstar or ninja.
I see, I was not certain if the problems I had with remote portals were something others were facing as well. Since the standard seems to suggest otherwise
If anyone is reading this, being able to write consumer tests would be wicked! The overwhelming majority of bugs I have to squash are because the API deviates form the contract either in my mock implementation or in the back enders implementation.

A frictionless way to write tests on the fly would really speed up spotting these deviations.
Same thought. But then may be Krypton Dev is wise enough to sort out his stuff.
I would probably forget my FDE passphrase if my laptop did not have a processor fault causing it to spontaneously reboot every couple weeks (particularly in hotter weather.)
I was scared by the mention of migrating all code from etherum to bitcoin blockchain in just one night.
Free EBook: Why You Should Adopt Microlearning Based Training
Show HN: Website for getting direct links to CS Internship application
That's why I use startpage.com, it returns Google results while protecting your privacy :).
ZoneMTA: modern high performance outbound SMTP server built on Node.js and LevelDB
My roommates and I made this site while applying for software engineering internships. It gives you direct links to company applications.

It currently has over 100 live links and that number will grow as it gets closer to summer.
> What most likely will happen is that there will be a geoblocked EU repository/ies which will provide free access to research material.

I'd be absolutely amazed if this happens.

The current common setups for funding bodies which already require open access are:

1. Can't go behind a paywall, so money is included in the grant for publishing costs.

2. Can go behind a paywall, but a copy must be made available somewhere else (not as common).

I have no idea why they'd go about building a geoblocked repository, that sounds expensive and I cannot see what problem it actually solves.
> development, testing, and flight qualification, affecting cost, schedule, and risk

These are all a lot easier if you are not worried about mass anymore. Just give all your structures a 3x safety factor like a bridge, and bring extras of anything complicated. Heck bring a mechanic and tools, too.

Of course this is all fantasy, which was the point of this subthread under kordless, in the first place.

EDIT

> Focusing on a point solution like "propulsion" is not even the right kind of question to answer "why not solve this problem with humans?".

To be more clear: I agree with you. I'm just playing the idea of "what if we had much better propulsion." But of course we don't, so in real life, we do need to carefully consider the factors you mention.
Note: if you are in the EU, settle for nothing less than a new phone (rather than refurbished).

There was recently a lawsuit in the Netherlands where someone sued Apple after receiving a refurbished phone after replacement under warranty [1]. She won the case:

https://www.iphoned.nl/nieuws/rechtszaak-apple-garantie/

The judge based his verdict on a verdict of the European Court of Justice [2], so it's likely that the outcome would be the same in other EU countries.

[1] 20 months would still fall under warranty in the EU.

[2] http://curia.europa.eu/juris/liste.jsf?language=en&num=C-404...
Unfortunately people always haul this quote out as proof that because they're being ignored and ridiculed, they must be onto something and about to "win".

It's supposed to be an inspirational quote to keep you motivated when it feels like the whole world is against you, but whenever I see it used (on online forums at least) it's always by someone who seems to think that it not only has predictive power, but it somehow illustrates the inevitability of the total dominance of desktop Linux (or whatever they're insisting is inevitable).

I've seen that quote so preposterously misused over the last 20 years, over and over and over again as a form of argumentation, that I fear it's lost all meaning at this point. :(
Wrong series. This is the right one:

https://fred.stlouisfed.org/series/A939RX0Q048SBEA

Real GDP/capita = $43,935 in Q1 2000, $50,549 in Q4 2014. That's 15% growth.

Your own numbers don't disagree with this if you integrate them and divide by population.
IIS running your web app is kinda slow, because the request has to be pumped through a long, old and rusty pipeline.

IIS as a reverse proxy in front of kestrel should be very fast.
Please don't steal our software, hacker news is also no place for such garbage links.
The Physics of How Your Earphone Jack Works
Yeah, they run https://hola.org/ that uses said P2P application to bypass netflix country limitations.

The company is sketchy as fuck, the service they offer is awesome.
Impact of metadata on Image Performance
> Now, researchers is poor countries may be able to access existing research but they won't be able to publish their findings…

Well they definitely can publish, but they will have to pay a decent amount to publish in a big journal. Grants will include money for this purpose.

edit - I'm not sure why this was downvoted. There are free places you can publish work, and grants that require open access include money for publishing costs, certainly the grants my wife has worked on included open access publishing money.
Any chance this was meant as sarcasm? As in, they're suggesting that even C is more secure than what Ethereum has developed?
I've had three bikes stolen, but none in the traditional way of coming back to a bike rack only to find the bike missing.

Two were stolen from my garage by workers, these were by people with jobs and not by homeless crack heads. One was a $2500 road bike and the other was my mountain bike.

The other a multi-speed street bike was lost to a mugging (like a bike-jacking) by an organized bike theft gang of around eight that attacked me all at once. (Stay clear of suspicious groups of cyclists in isolated areas where one spry rider is riding double.)

The workers didn't get my nice tri-bike because it was in the house attached to a wind-trainer.

It's all very irritating; the value of the bikes to the bike thief is so low compared to the cost of replacing them.
A sustainability leader’s lessons of a lifetime
Generally I agree with this sentiment. Having no previous exposure to Bootstrap's development process, it is interesting to see @mdo acting so unilaterally (and I can see why he is able to after reading his GitHub profile, hah). Particularly considering that he signs off all the issue closures as "@mdo and team". It's hard to understand that (again, as an outsider) without a deeper explanation.

Given that, knee-jerk reactions to the mass closing of issues surely won't come as a surprise, but it also should make for some interesting debate. Is that the best way to stamp v3 "done"?
^ Exactly. And the backlash against "PC" is yet another overreaction.

We're in a time where voices that didn't command respect in the past now have vastly more access to an audience. On the balance, I think this is a really good thing. However, we haven't yet evolved an ability to reliably sift the real complaints from the unfounded ones. This, of course, is not a black and white distinction.

From what little I know, this seems like an incident where a hasty decision was made, without much of a process. Hopefully, as a community we'll learn and improve, but with the maturity to do so without discrediting the very real issues of diversity and inclusion in tech.
The Centument Assets Trading Software 2.0 Version Honest Software Review
Ha, but seriously you probably want someone with a bit more experience in remote system programming. I would think a person who plays with drones would be a good fit. Thinking about it, there must be someone on HN whose done the whole police robot thing.

Don't get me wrong, I would love to do something like this, but for the time being I'm stuck were I am. Plus, I have a side thing going on myself that needs to get done. In truth though, there are better people than me who could make this a success.
How did you arrive at 270 mW?

I scanned the linked docs and did not see power specs leading to that number.

(Sorry, I know this is 'noise'.)
Googling for "iphone witch doctor repair shop" gives 263k results. So there are roughly half as many iPhone witch doctor repair shops as iPhone micro soldering repair shops?
> INANE (I Am Not A NASA Engineer)

Neither are the people who worked on this lander :)
For the moment, they should if possible be selling phones that dual boot Android and Ubuntu. As you say, that would make it zero risk for the consumer, either that they'll buy an Ubuntu phone and end up with a phone that doesn't do everything they need to do, or that they'll have to buy an Android phone and spend an unknown number of hours or days fiddling around to sort out a Custom ROM. Android compatibility is unfortunately necessary, two examples for me are for transport apps and parking apps. I personally would be happy to buy a phone like that, but a pure Ubuntu phone will not do it for me.

I think if they did this, they could get a decent percentage of tech-orientated people to sign up. It may be they could make a mass market bid in two to three years if at that stage they are the only company offering cheap smartphone convergence, but for the next few years they need to target the tech/OSS crowd where they already have name recognition and goodwill.
Just wait till you see how many people use "America" when they mean "The United States of America".
I didn't check the link, but I bet that "HTTP server in one line of code" doesn't include a TCP stack.