skysight-inc/HackerNews huggingface dataset:
My take is that such software needs to follow double entry principles and part of that is that the system is based on human attention to detail to at least some minimum degree. It also means that the software requires minimal domain knowledge.

GnuCash might be an alternative: https://www.gnucash.org/

Ledger is another: http://www.ledger-cli.org/
tl;dr Individual Computers launches a new plastic case to house either an original C64 mainboard, or the "C64 Reloaded" board released by hardware designer Jens Schönfeld last year.

http://wiki.icomp.de/wiki/C64_reloaded

Sadly the C64R is currently out of stock.

https://icomp.de/shop-icomp/en/shop/product/c64-reloaded.htm...
The regulation on brick color mentioned above is at the city level, not federal or state. You have districts that enforce ascetic rules typically to preserve the look of a neighborhood.
Point taken. I overlooked the detail that it is a Chromebook. Is it possible that Chrome is further optimized on these machines?
Exactly my feeling, you would never do business with anyone who would act this way in public. The risk is far too great that you trivially upset them, and they go on a similar crusade against you.
​Oracle pledges continued support for Java and NetBeans
Ten Four = 10/4 = October 4th = The date of the announcement
Well, I imagine that maglev is faster, quieter, and has better acceleration than a subway or light rail. You don't need to go 600 km/h across town.

Getting tens of thousands of people to their destinations 10 minutes quicker adds up.
Getting Press for Your Startup
Right, but if the device exists more or less to run a single program or small set of programs, what do I care if I own the box once I've taken control of that program?
The better article would have been the one that they copied out of: http://polygraph.cool/kickstarter/

It's got interactive graphs and lots more information.
An open source machine vision Robot with 720P video&photo capturing-n-processing
The mistake you're making is that the Chinese government has chosen one standard and applied it consistently throughout the web. I imagine they've applied it like a game of wack-a-mole: if a group embarrasses them, they block it. Otherwise you can continue rockin' in China. There is a national law against pornography, so that's not surprising.

I imagine that isoHunt and the BBC and Wikileaks just haven't caused China enough trouble yet.
Given the current code and no races against the values being initialized: no, there is no chance for a panic.
great. another addition to the javascript clusterfuck
Wow, timing out. It's already fallen over from referral traffic :D I hope no-one gets shot over this
Artificial Intelligence MicroMasters by Columbia University on Edx
2016 on Track to See Over 1B Records Breached
What Trump is right about (and why people support him)
North America, you?
Regulatory Capture will by definition always result in Regulations working in the interest of the major companies(or special interest) in an industry, rather than the public interest.

Definition:
Regulatory capture is a form of government failure that occurs when a regulatory agency, created to act in the public interest, instead advances the commercial or political concerns of special interest groups that dominate the industry or sector it is charged with regulating.
New free HR platform. Looks good. Your thoughts?
Right. And that fragmentation is probably a bad thing.
That statement is a case study in poor corporate communications. It would have been way more elegant if they said something along the lines of:

'We thank the 20 persons affected by this change for their contributions and we are committed to doing as much as we can to provide them with a respectful exit from our company.'

Not perfect, but at least this way it doesn't seem like like they're trying to minimize those who are affected. But, I'm a technical writer and my hobby is to make fun of the material folks in the communication and advertising departments churn out.
If someone has got a CA to produce a fake certificate for your website, you have more serious things to worry about that progressive enhancement!
I'm comfortable with where we've landed if we've arrived at the three reasons for Snowden not leaving Russia being (1) Snowden's desire to remain in Russia, (2) Russia's unwillingness to let Snowden leave, and (3) the US's shadowy spy network detecting the specific flight he's on and diverting it to effect his capture.

I will note, with bemusement, that our shadowy spy network was unable to effect his capture when he was known to be in Hong Kong. We must have a gap in capabilities for the most westernized part of China.
Funny to see how comments about pretty much the same subject [1] are completely different depending on the company on the spotlight even when the number people getting laid off is way higher here.

[1] https://news.ycombinator.com/item?id=12538640
I would like to see this from another angle though - not why they grow so big - but what it takes to kill such a company (i.e. cause it to fail).

One of the big advantages the giants have is that while no doubt they hire very capable engineers, the number of engineers who need to leave to make a dent on their performance is a really large number, and gives them a really long notice to correct things. In other words, at any given point of time they have many more 'dispensable' employees.

A second benefit of being a giant is that you can forego revenue streams which would be the size of an entire business at a competitor to gain some advantages in the market - for e.g. Google made Android free. I don't think they could have pulled off such a move when they were younger and poorer. This diversity of income streams gives them plenty of time to leave behind lagging products/services and concentrate on the cash cows - that is, they can apply the Pareto principle at a much much larger scale.

Contrast that with the potential disruptors who simultaneously compete with the large companies for employees, could sometimes get killed if just a few key hires leave, rarely have diversity of huge income streams to allow them to change course, and then have to bear the burden of regulation without the cushion of the cash pile. It lends a more stable environment for the large companies to move in the direction where the market expects them to go without having the tremors which the small companies face when they try to do similar things. During those tremors - engineers at the smaller companies - don't usually like to stick around and see what happens. This has been compounded of late because of the huge salary difference between working at a giant versus working at a smaller company.
I've implemented off-shore teams for North American companies three times successfully, and what we learned is that engaging an off-shore team is really an investment that takes time, money & manpower to pay off. Many companies don't fully account for the true cost of outsourcing as it impacts your business processes for your on-shore team. Case in point, we engaged a team in India, started with 2 engineers, and within 3 months (of a complex platform) they were producing in alignment with the current code base. A year later, that team had grown to 6 including 2 QA, and they were basically running the show with guidance from the senior developers / managers / customer service / product owners. Part of the on-boarding process was sending reps over to their India office to embed and work with them for a couple weeks and understand their working environment, challenges and hear their ideas for improvements to the whole process.

My cousin has a 50-person team in India (dislcaimer: I'm of Indian heritage) producing mostly mobile apps these days and in the early days his apps were of poor quality -- looking at his latest efforts, his team has really progressed and are producing decent apps with nice UI/UX and functionality. This process has occurred over the course of 6+ years.

In my observations re: raw creativity and talent, Indian developers do lag behind their Eastern European/Russian and now South American rivals... part of that is the cultural. i.e. unwilling to take risks. My exposure has been small (less than 100 devs from all over the country) However, you can guide them to be productive and follow the right processes to success & scale.
I think ADHD is actually considered a disability. However, most people probably wouldn't be comfortable telling their boss that they have ADHD. If your ADHD having a negative impact on your performance and you're about to get fired revealing your disability might save you from losing your job. However, I don't imagine being known as the ADHD guy is going to brighten your prospects for future promotions.
It was really not my intent to put myself in that position. It was my hope that I would encourage people to think for a moment before commenting and swapping stories about how awful Roma people are.

I think I was just seeing a flood of unconstructive racist comments before they got flagged.
We need to go deeper!
epimetasploit
I'd never heard of one-for-one, but it's such a brilliant idea! Thanks for sharing
Newsflash: big company does strategic business and decides to clean up redundancies...

I get that it's sad when your job no longer exists, but you can't really expect a business to pay for people it doesn't need anymore. I see a lot of outrage as people seem to think it's unethical to have your job lose it's right to existence, but it's just a fact of life if you're working for a larger business: you might be needed at some point, and at some other point, that might no longer be the case.
Wonderful concise description of your tech stack. Thanks for sharing! Love it when people actually describe this on HN
But this would not work in this set-up right? Wouldn't the user facing server (in your case Nginx) have to be the one that serves over HTTPS?

I'm a bit confused about this package.
Poor xkcd. Frowning upon people freely interchanging their, they're and there is not being grammar police (unlike complaining about split infinitives, dangling preposition etc). It seems such people that make this mistake are too lazy and arrogant to correct themselves and are too eager to call names. The placard ruined what would have been an average comic..
Sometimes I wonder about the invisible costs of a popular messaging system that often drops messages and/or notifications. How much miscommunication and missed connections has it caused?

It's really shameful to not have something reliable after we've had SMS for 2 decades with <1% failure rate and iMessage/Hangouts is generally okay. It really irks me in the worst way, being someone who has enough problems keeping in touch with people.
Ask HN: Suggestions for email provider separate from vps
I currently use a shared hosting provider to handle my email for several domains, but I run all other aspects on a digital ocean droplet. The costs for this shared hosting provider has skyrocketed. I am looking for a good email provider that does not break the bank that I can setup a few domains on with a dozen or so email accounts.

Can anyone suggest a good provider?
keep calm and learn Clojurescript. it will make you happy, I guarantee it.
This is hardly the first time, Acunetix still has a few vulnerabilities which you can exploit by configuring your website to respond with a specific header to the scan.
SANS' GUI version of SleuthKit was vulnerable to HPP which could lead to persistent XSS/RCE.

Overall it's highly likely that most if not all security testing tools are vulnerable to some attacks, and I have a pretty strong suspicion that governments do work on movie like "counter hacks" by identifying RCE vulnerabilities in common network/port scanners, vulnerability scanners, and other enumeration tools.
From my brief experience running Skype on multiple devices; if you can get both of them online at the same time for a while, it'll sync up eventually. If it's always one or the other, good luck (there's a reason I stopped running it on two devices)
The original version of the article said

"Initially we were taken aback and confused. We knew there must be some mistake, so we quickly sent you a DMCA takedown requests and waited patiently."

They "clarified" it after a while, but if someone read the original version of the article and did not see the update, it could be easy to miss.
Sounds like I should take a look at the latest client, I stopped using Skype years ago because the Linux client sucked so much.
> The document you cite was news to me.

"There is a deeply disturbing trend in the world of ever increased deference to power. The free press is ..."

I respectfully suggest to you that this is no "trend".
Torrent-of-ions is correct. Equal temperament is a compromise in tuning (assigning pitches to notes) which makes the most keys sound ok. The intervals aren't perfect, but close enough. If you tuned a piano for perfect intervals in one key, those pitches would be too much off for another key.

See e.g. http://www.phy.mtu.edu/~suits/scales.html
Search engines queries, the most personalized advertisements on earth, without having to know the exact make up of your DNA
At least in the earlier years disk drives were high-end equipment. I started out with cassette tape, and it's much less reliable.
Teenagers will eat veggies–if you tell them they’re sticking it to the man
You don't have a real phone anymore? Because that's what I'm using...
This is a particularly bad editorialized title, since nobody familiar with Metasploit or tools like it would assume it to be secure code.

The right title is the boring one, "Pre-auth Remote Code Execution Vulnerability in Metasploit".

The rule on HN is, if you want to put your own spin on a story, like "This bug will delight irony lovers everywhere", you put that in a comment like everyone else. Submitters don't own the stories and don't get to editorialize their titles.
After purchase, Microsoft changed the architecture from peer-to-peer to client-server, which incurs extra latency
obviously.

https://blogs.skype.com/2013/10/04/skype-architecture-update...

http://arstechnica.com/business/2012/05/skype-replaces-p2p-s...
What alternatives do you suggest for business?
Just curious if the PRU compiler is some sort of gcc variant or something proprietary.
United World Schools – teaching the unreached
if you're not too familiar with bitcoin and don't care too much to get technical about it, listen to Andreas Antonopoulos on jre https://www.youtube.com/watch?v=1sOxtBiBpE4
Get Your Hadoop Elephant Moving with a Docker Whale
Same people in this photo: https://madeby.google.com/static/images/tenfour/stills/035.j...
Reflection of a "responsible" disclosure culture...
Just went through Prague on a shoestring budget. YMMV but that salary over there seems like you'd be living very, very well.
Honest, unloaded question for you as a hiring manager: do you think accrediting body that is neither for-profit nor funded by for-profit entities could strike a balance in an industry as dynamic as software development?
How to Create a Twitter Widget for Your Website
To be fair, there's a long and repeated history in the US of

----

GOV: We know this law is overreaching, but we promise we'll only use it the "right" way.

... 2 years goes by ...

GOV: If you don't <plead guilty | accept this plea bargain>, we'll tack on a charge of breaking <this law that is overreaching>, even though you didn't violate what it's supposed to be about, and add 20 years to your sentence.

----

It's seen over and over. The US citizen's distrust of government getting more power than it absolutely needs isn't paranoid, it's based on the actions of the government.
No way could anyone else have discovered and used the same vulnerability during these 14 years. Thanks for making use safe./s
How best, or how would one expect the NSA to behave? Where is the balance between offense and defense? On one hand, I can see this exploit needing disclosed to the general public. On the other, I can see this being useful for offensive purposes.
Where does it indicate the NSA had anything to do with this?
Hindsight is always 20/20.

Overall this sort of redaction smells like legal advice.

You define the record as the body of the message and archive messages without the headers, or at least without the sender and recipient headers in them.
This might even be a valid interpretation of the US records act.

When asked why you can say this was the archiving policy and you stored the messages as a document and the headers were irrelevant since they did not hold any information.

When asked about who sent or received a specific email that has been redacted you can 'honestly' claim "I do not recall".

Overall this is pretty much exactly the borderline illegal narrative that a good legal counselor would provide in this case.

Of Course that advice was granted based on the premise that there would not be a trail that would make this look premeditated and suspicious.
I wish Skype for business was a decent product but it's not. Strange UI quirks. Limits on the length of messages for no good reason. Emoticons which only appear once the message is sent - SQL statements are rendered to nonsense. All images are converted to thumbnails which need to be opened. Audio quality issues galore too. A lot of companies have moved to Skype for business for IM and VoIP. Not an enterprise level product.
Fear of a College-Educated Barista
Great idea! Thanks
Where in the page is the NSA mentioned?

Not saying it's not reasonable for the NSA to have exploited (they probably did), but unless we have proof, the headline is a bit clickbait-ish.
Why the UK is the best vacation deal right now – and Brazil is the worst
Algebraic effects are a way to make well-behaved languages (Haskell, Idris, etc.) more intuitive/generic/terse/etc. to write; I'm not sure how useful they are for reasoning about an arbitrary snippet of JS taken from the wild.

One problem stated in the article is we can't even rely on things like variable substitution to be effect-free, due to mechanisms like "valueOf". For example, in your "map" definition, the value of "f" called at the head of the list may differ from the value of "f" passed to the recursive call.

With this level of monkey-patching possible, it becomes quite hard to say anything about a piece of code other than "it's return type is Any, it might throw an exception, and it could perform arbitrary effects" :(
Try using one of the JetBrains IDE's, such as IntelliJ or Webstorm, on plain old Javascript some time. It does a surprisingly good job inferring the methods on an object, as well as autocompleting the names of stand-alone functions (much of what I write) that are in scope.

Aside: I tend to do much more with higher order functions than with classes, so Typescript and the like really don't excite me very much. I'm happier to skip the whole transpile and source-map shuffle. Also, I tend to put at least partial JSDoc comments on just about everything, so that an open documentation panel explains things as I move the cursor down the file. Any type annotation is also shown on the function names/params in the structure tree browser.

Finally, autocomplete is not as useful when not using "Enterprise" style naming conventions. E.g. - "inv_acct.load()" vs "checkoutInvoicePayableAccount.asynchronousLazyLoadFromRemoteServer()". Hopefully, between context and comments, such ridiculous names aren't really necesary - like, how many "account" type values do you have floating around in the current scope/context???
I fail to understand how funding is something that governments can't do.
Not looking forward to the new rumored price tag ($649+). Might have to go back to OnePlus then.
Not necessarily, one of my previous workplace did the same with the team in India due to some language barrier issue that has cost the company 10x of the savings on not hiring a native English speaking team somewhere else (for more money obviously). These events usually boil down to financial details. I bet Twitter made a calculation and it was not financially viable to maintain that team over there.
The only boneheaded thing I see is your comment. What did he say that was racist?
We updated updated the headline from “NSA had 14 year old zero day to take VPN keys”, which breaks the HN guidelines for editorializing.
Doesn't look like her.
Right there, No workaroundS Available.
Finally Twitter did it!
Is this a newly published article? Or am I likely to have seen it on HN before?
Ah, "Unify some positions", - the old - "we are not sacking YOU, but your role doesn't exist any more".

I believe this works around some relevant labour laws.
Interactive Scheme tutorial for beginners
Self-Driving Cars Gain Powerful Ally: The Government
China Confirms Its Space Station Is Falling Back to Earth
looks like a slandering title : how do you know NSA had the knowledge of this vulnerability ? I know that NSA may be considered "allmighty" considering its researching power, but this sounds a bit like a fast and easy accusation, and misleading title... I expected a whole different story (disappointed to see that ctrl+F "NSA" had no result).
Communication is essential for any remote team, but in particular for one that operates semi-independently.

The issues I ran into in the past were made worse by poor communication from both sides. However, once we got past those, the underlying lack of skills became apparent.
Meet the Makers #1: Ranger Dave Bot, Outside Land's Festival Bot
If I came on here and said that Google should keep a copy of every email ever written or received in Gmail, just in case the police wanted to look at it later, how many folks here would think that is a good privacy policy? I'd guess not many. But that is what you're suggesting Clinton should have done with her personal email.

If a piece of information is stored so that it can be given to someone else later, that's not really very private. Privacy means the right to keep things away from others, and it includes the right to delete things.

Now maybe you want to argue that certain public officials should not permitted to have privacy while they are in office. That's fine, make that argument, but it's not the state of things now, legally or culturally.

And consider that there might be unintended consequences. It might deter some great people from considering public service. And it might put a hole in the legal concept of privacy that others will try to widen later.

I would argue that if we're going to be serious about legally protecting privacy, we need to be consistent. "Protect privacy, except for politicians I don't like" is not a particularly strong legal framework.
This exploit seems to have come from the equation group "leak" which supposedly came from the NSA.
I think they mean to "check" it off your to-do list.
That's just right. We've updated the title from “RCE exploit found in Metasploit itself, delighting irony lovers everywhere”.
Seattle Tech Vets to Propose Driverless Stretch of Interstate 5
Hello Tomorrow release 69 finalists out of 3500 deeptech startup – 100 countries
Well, technically it's still a POST request.
TypeScript with JSPM and VS.NET works great, IMO even better than Babel since it doesn't require additional configuration for Babel or managing a separate watcher process since VS.NET compiles on save - providing an optimal dev experience. The additional complexity TypeScript requires is typings for each library which is designed to add value over time through typing feedback, but sometimes the typings can deviate from the implementation which is currently the only friction I hit when using TypeScript.

If you're interested in this combination, I've published a step-by-step guide showing how all pieces fit together in:

https://github.com/ServiceStackApps/typescript-redux

For a decent sized TypeScript + React code-base checkout https://github.com/ServiceStack/Gistlyn - a C# Gist IDE written in TypeScript + React and Redux - a large enough project that would've been painful to write without React or TypeScript. A Live demo is available at: http://gistlyn.com