skysight-inc/HackerNews huggingface dataset:
Like this:
https://news.ycombinator.com/item?id=12431248
Doesn't direct me to a single page, just to `smartcuts.xyz` Is this a ShowHN centered on smartcuts.xyz? Or a link to a specific story on smartcuts.xyz?
Its likely this isn't a troll post.

The security community has a whole lot of idiots in it who figured out that they can get a CISSP and turn themselves into a security auditor and get paid extremely well while getting to enjoy acting like tyrants. In reality they're not fit to manage a McDonalds.
You really don't know that. It takes time for the algorithms of companies like Facebook to optimise properly. For my company, CPA has come down significantly as we have spent more.
> I'm all for women in tech, I'm all for equality and people not being attacked for who they are. I'm not for people using ridiculous mis-representation of a person to have that person removed from an event.

Then we don't disagree. I see too many people in this thread who seem to think the entire project of taking inclusivity seriously is either silly or actually offensive. Terms like Social Justice Warrior have been used to disparage inclusivity broadly instead of narrowly addressing ways we can do better.
VR on steam grew 0.06% in july and 0.02% in august
Oh, there is a huge difference between the objective fact "Life's not fair" and the belief that it shouldn't be. No matter what your definition of fairness is.
Woman who received the world's first partial face transplant dies
Firefox has been painfully slower than Chrome by great magnitudes for me on a cheap Dell Windows laptop. I have almost identical extensions except for NoScript which might be the culprit, although it is also the main reason why I use FF over Chrome (and for enabled extensions on private mode, which defeats the purpose of private mode but it has been used more as a "don't save history" mode than private mode if you know what I mean).
I like that, in response to a name resolution failure in a ping command provided by the "See a random example" button, it suggested

sudo rm -rf /*

Maybe a little curation might be of value here?
How to get people who installed a leaked build to stop using that build?
The government "freely" giving people money to spend on questionable goods and services doesn't help or protect the vulnerable people. The government "failed" first, the for-profits ripped people off, now the government is "saving" the vulnerable people that they allowed to get into the crappy situation by allowing them to accrue loads of debt to start with.
The actual program, hosted by HackerOne:

https://hackerone.com/yelp

Already paid out $65,160.
Quoting from The Peter Principle:

in most hierarchies, super-competence is more objectionable
than incompetence.

disrupts and therefore violates the first commandment of
hierarchical life: the hierarchy must be preserved.
There's too many paying entities to appease - not just hundreds of CA's but various browser vendors as well. Either MUSTs will be changed to SHOULDs - or fragmentation of the CA/Browser body itself.

Look no further than at some of the past transgressions browsers let CA's get away with.
Sourced from /r/oculus on Reddit

https://www.reddit.com/r/Vive/comments/50vst9/vr_on_steam_gr...
While I agree that I would rather my browser use more RAM than constantly suspend pages, I disagree with your notion that

>A lot of the improvement in the reliability of consumer grade SSDs is due to OS improvements in how they manage their write operations to the hard drive.

We're talking on the scale of writing 500gb to your SSD every single day for 10 years in order to reach their endurance limit (on average). Writing a few more gb at worst from your browser is hardly going to affect that. It's even doubtful that OS improvements change it much, as Windows 7, which a lot of people are still on, doesn't come SSD optimized.
That's a bold claim to make the day they shut down. :)
So, virtual memory done yourself for fun and profit

Interesting
Safari uses Quartz/Core Graphics for the painting, via OpenGL if applicable. Chrome uses Skia/Ganesh, sometimes via OpenGL--Chrome is more conservative about when it enables the OpenGL-based painting than Safari is, I believe.

If everything else on your machine is slowing down, then chances are good that Safari is hitting some bad case in the way it uses your GPU. CG::OGL may not be optimized well for this use case. (In general retrofitting CPU-based 2D graphics APIs to run on GPUs, as both Chrome and Safari attempt to do, is difficult.) Or the layerization heuristics may be going awry in Safari--unlike Chrome, which does things manually, Safari has a completely different implementation of layers that exports the layer structure of the page to the OS window server.
> sudden chemical imbalances?

Nobody credible believes the chemical imbalance stuff anymore. That doesn't make depression any less real - the fact that more people have a diagnosis might mean that a bunch of people who had unmet need are now getting the treatment they deserve.
> Mobile apps typically have other key pinning mechanisms that are preloaded (i.e. baked into the binary), but that's typically easy to bypass if you're the owner of a device; it's not really effective as a mechanism against reverse engineering.

Your comment makes me realize that HPKP can bootstrap itself, and is unlike regular pinning (with certificate bundled in the binary, as you say).

So do you agree that a powerful enough owner of the device should be considered able to setup a server which poses as the regular server the app talks to, and sniff any request the app sends to its server?

(edited for spelling)
I'm currently at a little over 1 GB with 8 tabs open.

I really wish I had the option to trade off responsiveness for memory usage by being able to mark tabs as "no background activity allowed" so FF could serialize that content to disk when the tab isn't in focus.
Yeah I built the ESP8266 version with SRAM and I2S codec, works well. The ESP32 might have enough internal RAM to not need the external SPI RAM, and the hardware pwms might be usable for audio out (or do we have a usable dac now?).
There are plenty of first-party Nintendo virtual titles, though, and most likely plenty of people (like me!) who now refuse to buy them because they have to be bought over and over and over again for any new hardware.
I've never really understood the problem with green screen programs: for most businesses, a green screen is perfectly usable, and it has the added bandwidth of low bandwidth requirements. A company I worked for uses Windows apps hosted in a Citrix environment. A green screen would lower the bandwidth requirements and remove a lot of the parasitic drag between servicing the customer and storing data.
There's more and more features every month. Add that to the various performance improvements (that can take a hit on the ram, dependending on how they're implemented), and it becomes a bit more understandable why you would see such an increase.
If you're on Mac, Safari is good in terms of both memory and cpu.
Wow! That's awesome! Thanks for sharing...
I believe in current Firefox you could kill the memory-hungry tabs, then go to about:memory and force a GC. Or restart and let your tabs stay open but not loaded until you use them. Not that either of these is super-convenient.
Indeed curation is required, as an example you forgot to include ..

--no-preserve-root

;)
Hi, I tried to explain the other deeper complex situation happening with PCI below but it was flagged?

Image of flagged post: http://i.imgur.com/eCZHAyJ.png

This is the reddit link I was referencing in the image:
https://www.reddit.com/r/sysadmin/comments/4z25cb/hipaa_brea...

If you don't like my HN comment, at least read that reddit post. We need PCI because of the crap observed from that reddit post.

"Speaking of PCI, I remember having to tell the PRESIDENT of the company I used to work for that "No, I will not print out the customer database with full CC+3, including their name, address, and phone number. You could ruin the business." Took a while to really make him understand that."

If you need a PCI Auditor, make sure they have a background like me: http://www.linkedin.com/in/akshatpradhan

That's all I want to say. No need to flag me for it...gratuitous negativity?
Very interesting. I wish I had read this before I started my last project
Plus fantastically uncomfortable physical side effects, and on the positive side an experienced spotter to help you along.
Yeah - in theory, but in reality the browsers are reluctant because of all the other sites that a CA has issued certs for - no browser wants to be singled out for blocking some other non-related sites.
I was quite enjoying the introductory paragraphs and looking forward to the meat of the article, when it abruptly stopped. It doesn't read like a complete composition.
Webkit also learned from the experience of chrome with WebKit2 architecture, and uses less ram
https://trac.webkit.org/wiki/WebKit2
yeah, the young ones have spent the last several years distancing themselves from everything the old man has done, that doing anything that the old man does is seen as regressive. They don't want to do it the way the old man does until they ARE the old man.
Vigilant Global | Montreal, Canada | Full-time | ONSITE
Vigilant Global combines new and emerging technologies with sound and forward thinking strategies. A strong focus on research and development has allowed the firm to expand in the rapidly changing environment of electronic markets. Vigilant Global is among the top employers in Montreal for 2016.

What are we looking for?

* Bachelors Degree in Computer Science or Computer Engineering.
* Strong experience with one or more dynamic languages (Python, Ruby, JavaScript).
* Some experience with one or more web application frameworks (Ruby on Rails, Sinatra, Django/Flask, AngularJS).
* Experience with provisioning tools (Ansible, Chef) an asset.
* Innovative thinking and problem solving.

Apply online at http://www.vigilantglobal.com/en/careers
There are many parallels to the music piracy controversies with Napster, etc. iTunes gave people a convenient alternative and turned into a big success. If they would just make more old games available people would probably be willing to pay for them.
> Simplest way would be to embed public key in the application

Yes, but one eventually faces the need to update the certificate on the server, and still support installed applications (which fails when apps have an obsolete certificate pinned). Hence the need for smooth certificate updates, and the good smell of HPKP. But it addresses another need, hence my confusion.
Ask HN: Beside Java what languages have a strong tooling/IDE ecosystem on Linux?
I am mainly a C++ developer (which has doesnt really have any great IDE on linux). I am starting a new project, would prefer not to do it in java, but would also like to have something like intelliJ/visual studio.
Can't you just use an RSS feed reader?
Playing devil's advocate, there are definitely entirely legitimate reasons one might fail a "culture-fit" interview, especially for a remote hire: Perhaps you weren't so much "not-like-us" as "you kids don't know shit, just wait until you hire me" (your comment does come off slightly condescending) or just generally as someone who'd struggle being outranked by someone 10 years your junior (I understand mid-western values to be slightly more conservative)? Perhaps they didn't feel your ideas of what remote work would look like was aligned with theirs, and they didn't feel you responded to hint that they didn't? Perhaps you indicated a style of working that they feel wouldn't fit well (are you going to be actively picking up work on your own, or are you just going to work your tickets and check out -- or perhaps the exact opposite, either is bad if you're not aligned)?

Culture fit (or, more like "working-style-fit") is even more important for a remote position, because the bandwidth for subtle feedback is so narrow.

But of course, I know neither you nor the startup in questions, so purely speculation -- but there are reasonable explanations that isn't that you didn't fit into a small, narrow-minded box (which, of course, is definitely also a plausible explanation).
As always it's probably a plugin. You could integrate the functionality of plugins which everybody uses, such as an adblocker (Instead of pocket? You are already doing it with the developer tools) -- but you get all your money from Google...
I "solved" this by running Slack on a second computer (even being on the same one with the same notification feed was no good). I occasionally look at it, but try to avoid doing so unless I'm at the start of a pomodoro period (because Slack is work, it gets a work period).
It has been life changing through and through -- too much to type and so much to say. But a few suggestions for those who are curious:

1) Do your research; don't go in there not knowing what you've signed up for. It can be incredibly transcendent and healing, but also quite possibly the hardest experience of your life. Difficult experiences make you stronger; this is the point. 2) For first timers -- and really anyone -- I would highly, highly recommend starting at a minimum of TWO nights. When going into the experience for the first time there's a lifetime of tangled psychology that the medicine loosens up, and there have been many people who go in for a single session unaware that the experience changes over multiple nights, end up disappointed or scared, and then leave and never touch it again. Night one untangles, leading into the second night and beyond which tends to get much, much deeper. 3) Read this book by Ralph Metzner, who has studied the subject extensively; it will give you a better idea of the pharmacology as well as the experience: https://www.amazon.com/Sacred-Spirits-Ralph-Metzner-Ph-D/dp/.... And lastly, 4) leave your expectations behind. I can only speak from personal experience, but the Aya seems to enjoy toying with those who expect certain things from her -- this ends up generally being a valuable lesson in humility, for better or for worse.
Ask HN: If finding great engineers is so hard, then why
(Complete the sentence & discuss.)
But it's a backup? If you have one copy, you pretty much have the other, right? And that just adds another password you can't forget, lest you lose your data.
When the CEO helps you find your next gig
While it's not an exact match, patreon.com more or less does this in letting people crowdsource one-time/monthly payments to a person in exchange for their works. I know several musicians, youtubers, and social media personalities that have used it to varying degrees of success.
rmlint – File System Linter and Cleaner
I agree with both of you. Ceremony is one way to attain a pleasant set and setting, but ultimately I get somewhat exasperated by all the woo and mysticism surrounding psychedelic use.

Psychedelics can be therapeutic or "spiritual", but once you have some familiarity they can also just be fun. I've had equally wonderful experiences sitting alone in the woods, playing beer pong at a frat party, exercising, playing an instrument, having sex, etc. Higher doses of certain psychedelics will make some of these experiences less pleasant / possible, but in general it can be much more than the solemn introspection that most people expect.
Why are not already free? Most EU scientific institutions take tons of public money (even private scientific institutions).
As a compromise between SSL and plain http, wouldn't it be enough for most of the content to be signed? E.g. background images don't necessarily have to be encrypted. They can be sent in plain sight with a signature which ensures that the image hasn't been modified. The signature has to be computed only once so that the overhead can be neglected.
1) No, it is not necessary to have full control over your domain's DNS to obtain a certificate. There are various domain validation mechanisms. Having full control over the HTTP server (as mentioned in the article) would be sufficient, as would having access to certain email addresses associated with your domain.

2) I don't know why you're telling me this - it's not related to either your original post, or my reply. I'm quite aware that CAA is only really effective if it is mandatory (in fact I've mentioned it in a sibling comment a couple of hours ago).
interesting domain name. HN shows it as xn--thibaud-dya.fr but browers show it as thiebaud.fr (accented e) . Reminds me of something I read here on HN about a month ago about the history of web/URLs
Lol. Mobile device fail
Gonna write a medium post about it.
I learned more advanced math in high school than I did in college (as a mech. eng. major). I wished that instead of sitting through basic calculus/lin. algebra courses again in college, they had challenged me with something more advanced.
For the speedy first 1,000 we also have free copies of The Node Beginner Book in PDF/ePub/Mobi to giveaway: https://hyperdev.com/help/free-copy-node-beginner-book/
Dogs Trained to Find Electronic Storage Media for Police
A lot of successful websites seem to know (or learned) which market channels bring in the right customers.

Yeah. We do grant writing for nonprofit and public agencies (see http://www.seliger.com if you're curious), along with some small tech companies, and for us ads that target conventional consumers are useless. We did find Google Adwords useful for many years, but over time its effectiveness has declined to the point where we stopped using it. We've tried some advertising in other domains but found them ineffective too. A lot of our traffic actually comes from search queries that pull up blog posts.

I think the larger point is that what works today may not work tomorrow.
The Changing Value of ARR IV.5
Note that NCD is really not far from a general-purpose programming language. You can see some "modern" NCD code of mine here [1] where I use it to control a Sphero robot with a joystick. Well, I admit I added a few more features to NCD while coding that.

Probably the most important feature missing is floating-point math, which I had to outsource to a Python program. Which was possible since NCD does have the facilities to create child processes and communicate with them over pipes. It also has TCP sockets and a higher-level simple RPC mechanism using "NCDValues".

[1] https://github.com/ambrop72/spherojoy
Haven't really looked into the data .will write a medium post about it .soon.
I'm taking # of votes plus comments over time since submission as a proxy for activity per hour.

This is still a pretty quick hack at the moment, but I've enjoyed using it over the past few weeks.

What I'm focused on at the moment is playing with alerts when a story starts trending. I really enjoy knowing about the latest topics but would like to avoid excessively refreshing the page :)
If you want to truly understand political correctness, try living in a communist country for a few years. The media is maddening. So is the word-policing.
I've worked with several companies that have either tried remote or actively pursuing remote working and my general conclusion is that it's not for everyone. Managers who don't understand the nuances of remote work will struggle hard.
Well aware, but not having to pay for it makes it more widely accessible. Any nation-state attacker or attacker with the will to also compromise an identity or two will have no problems either compromising a CA or swiping an owned credit card respectively, but will either of these actors really go out of their way to ransom a site for up to a five figure sum? The former has no incentive to make money, and the latter makes money through identity theft as-is.

For what it's worth, we're aware of rapid rekeying with other CAs because Cyph uses rapid key rotation with DigiCert right now and has since before Let's Encrypt entered open beta.
Did you read the article? Considering the number of phones they talk about it is certainly not widespread or even Apple policy to replace these phones if out of warranty.

Perhaps a timely reminder than the plural of anecdote is not data.
They're getting worse at a linear pace, while hardware improves exponentially. Effectively that's a pretty good improvement each year.
See e.g. https://www.scala-js.org/
US Air Force, Running Low on Drone Pilots, Turns to Contractors in Terror Fight
What exactly are western values, other than a not-so-subtle way of asserting hostility to Muslims? The people who go on about the importance of opposing immigration in the name of maintaining liberal and tolerant values (a code word for 'gays and feminism') seem to be exactly the same people who hate gays and feminism in the first place.
ESP8266 has ADC. It does not have DAC, however for some purposes (e.g. low quality audio over WiFi) I2S output can be used with DMA as PWM output.
Isn't IPv6 supported for ESP8266 with lwip?
https://en.wikipedia.org/wiki/The_Tyranny_of_Structurelessne...
Startup math: where revenue multiples break down
Thanks for letting me know. Safari doesn't like the use of const yet and not using a transpiler at the moment. Should be fixed, but will clean it up properly.
If Google taught us anything, it should be that it's nothing wrong with being in perpetual beta.

Not sure if I mean that sarcastically or not.
use a usenet client and the gwene rss to nntp gateway.
Are We Heading Toward a Charter School 'Bubble'?
Benchmarking Microservices for Fun and Profit
As an iOS engineer looking for a remote role, I can tell you it's extremely competitive to land one.
I studied neuroscience in college, so have tried to stay up to date on what we know about the biology of things like anxiety and depression (surprisingly, we know very little for sure). The "chemical imbalance" hypothesis that I was taught in college and that is widely accepted is increasingly being challenged. For example, is it possible that depression is a symptom of a larger inflammatory problem vs. its own disease? Inflammation caused by stress or undiagnosed food or environmental allergies? (People with allergies have a higher risk of depression and suicide, especially in the spring. Allergy shots can help.)

In terms of non-pharmaceuticals, here's what seems to be effective: B Complex vitamins (make sure to get methylcobalamin form of b12 included not cyano), sleep, meditation, exercise, social support, omega 3, vitamin D, probiotics (refrigerated, not gummy), not taking NSAIDS, not taking proton pump inhibitors or antacids, low carb/very little sugar.
Hey HN - Quill maintainer here. The 1.0 release has been a huge effort with spanning almost a year, over a thousand commits, and hundreds of issues closed, since it's announcement[1].

Feel free to AMA.

[1] http://quilljs.com/blog/the-road-to-1-0/
This is actually a good article, but good lord is that a clickbaity headline.

The article discusses another provider that provides better price/performance than Digital Ocean for certain tiers. With that subject line, I expected a story about billing fraud.
Where's gwern to give us a writeup?
I'm not seeing anything on page 7 that details "blind call mode" and only one mention of "blind call mode" in the document-- Do you have any further reading on this?
c++/Qt creator

https://blog.qt.io/blog/2016/08/25/qt-creator-4-1-0-released...
people are so quick to make this a "for-profit" college issue, when it's not.

they shut down because the u.s. department of education banned them from enrolling new students who use federal financial aid.

what do you think would happen to "not for-profit" colleges if the u.s. department of education did the same to them? i'd argue it's the "not for-profit" schools who are driving tuition prices up because the government won't stop loaning money to anyone with a pulse.

dry up that loan money and watch prices fall from the sky.
Seems even more probable that the controversy exists because it's a two-way feedback effect.
More like, certainly... but I'd say, on a radically different level. It's a very powerful thing, much more of a tool for personal discovery than anything remotely like a recreational or party drug.

Source: first hand. :)
Are they going to pay you overtime?