skysight-inc/HackerNews huggingface dataset:
Racket isn't anywhere near close to what CL offers.

Your comments make me think that you've never used CL/SLIME extensively.

CL and SLIME are geared for __interactive image-based development__. The DrRacket IDE makes you jump through hoops to get but a tiny subset of that interactivity [last I remember, the Racket devs themselves said publicly that interactive development is not a priority to them].

I see Racket as an interesting experiment with lots of applications in academia but compared to CL, it's not anywhere near as pragmatic or capable. To believe otherwise you're simply deluding yourself.
Sub-minute history with anyone in real-time: every minute and every picture
This tool they just released, is hopefully helpful, and will help site administrators craft specific CSPs for specific parts of their site -- other, more generic tools already exist.

On the HN thread on the cited study, I posted [1] that C-S-P is 'another damn header' that has to be included to stay secure and, unlike many of the 'other damn headers', its value is hopefully fine-tuned to the particular protected resource, unlike a site-wide hardcoded string.

I think more so than another configuration helper tool, what the Web really needs is a CSP rule engine evaluator that allows rules to be specified declaratively ahead of time, and integrates with some existing web framework to allow the resulting C-S-P value to be spliced into the outgoing response. Portions of this approach are implicitly proposed by OWASP here [2], but I've yet to see it written down formally, as opposed to just some code example. Widely adopting this approach would result in a paradigm shift that lifts C-S-P from 'just a header' to a first-class construct integral to the operation of the web application.

[1] https://news.ycombinator.com/item?id=12408680

[2] https://www.owasp.org/index.php/Content_Security_Policy#Coun...
Not really fulfillment like we normally call it, I'd say more like acceptance.

That's exactly it -- people strive for "fulfillment", but find it to be at best a nebulous goal, ever out of reach. So they settle its poor imitations - acceptance and recognition.
I'm no communist, but sometimes I wish there was less model churn "innovation". Just have a standard "Model T" washing machine that covered 95% of the market. Patents expired, several generic manufacturers, economies of scale, new and used parts readily available, websites dedicated to it...
> Second it's clearly against Trump, because Trump's base consists of older white people with racial anxiety/anger. Young people lean democrat, but they don't get out to vote.

If you honestly believe this, you are very out of touch with reality.

Young voters hate both major party candidates almost equally.
ImageNet 2016 Winners: CUImage Wins DET, Trimps-Soushen Wins LOC
Use the n and p keys for next and previous respectively.

Use the ? key for the help and other useful keybindings.
Predicting Airbnb Prices with Logistic Regression
Nuke it from orbit. The whole idea of PKI is Broken and Wrong and confuses two different goals.

Here's a fun one I noticed: Wells Fargo and several other banks are CAs. This is idiotic. The "logic" behind PKI dictates that it's a third party identifying my bank to me. If banks themselves are CAs even that fig leaf doesn't mean much.

We have known bad actors in the pool of widely accepted CAs, right now. There's no sense bringing up obscure possibilities of MitMs that might happen absent a CA system: we have bogus certs, in the wild, today. Nuke it from orbit and teach people to pin certificates.
There are plenty of module systems already there.

If you want racket-style modules you can also have them by implementing them.
We probably should have mentioned Linux explicitly but it's part of the very first diagram: .NET Core runs on many Linuxes, Xamarin runs on Android's version of Linux.

We highly care about making it easy to write code that works cross-plaform, especially on Linux. That's why we created .NET Standard!
If you skip the whole .enter() pattern then D3 is more approachable, IMHO.
The video says you support Linux for XDE but I don't see[1] a build for it.

[1] https://docs.getexponent.com/versions/v10.0.0/introduction/i...
I haven't seen a Windows server in quite some time, but then I haven't worked for "normal" companies for ages. How ubiquitous is it in SMEs?
The Purjury Paradox: The Amazing Under-Enforcement Regarding Lying to Congress [pdf]
A disaster is looming for American men
Tell HP – Say No to DRM
Some projects (like Chromium) squash all of the contributor's commits into a single commit representing their entire local branch history (it was local, no one needs to see their "aw shit I broke the tests" commit), and then rebases that commit and lands it directly on top of master.
It's quite amazing just how easy it is to see options and flags when first reading documentation but not remember them because they are outside the normal usage.

seeing examples of why you might want to use or remember flag/options is great.

I should revisit the docs for things like the old core gnu stuff to see what gems I've overlooked.
I somehow suffer from the software / hardware split. The more I master the former, the more I need to learn about the latter. This is a good series. Kudos to their dedication and success.
haha, oops. Internet
What's the preferred way to test an Exponent based app?
The apps in the App Store/Play Store support multiple versions of our SDK. The current versions support back through March. Not sure which SDK version the Pluralsight course is targeting. It might be easier to follow our docs here: https://docs.getexponent.com/versions/latest/introduction/in... which will always be up to date.
Conditions and restarts, read macros, interactive debugging, native code compilation, extremely easy interface with C, intrinsics, compiler macros, full control of code generation, built-in disassembler and so on and so forth.

Clojure is ok if all you're doing is based on the JVM.
If that's not the case, then it simply doesn't exist.
Now that StartSSL is effectively deceased, is there a commercial CA that supports the ACME protocol? Or is the ACME protocol a vanity project unique to Let's Encrypt?

I manage several dozen certificates; I was very pleased when StartSSL offered an automated API to work with. Despite their flaws, they offered EV certs, wildcards, and automated one-shots, and it was very convenient.

I'd gladly pay for this functionality, preferably while supporting standards-based ACME functionality... but so far it seems Let's Encrypt is the only one playing that game, and their featureset is crap for anything but their very narrow use case.

Any advice, HN?
Not yet, we are still debating internally if to open source it or release it as a docker image.

Feedback will be welcome!
>American citizen has less spending money than the average developed country citizen

You seem to be confusing real and nominal prices. Australian's merely have more dollars worth less, in goods, each. That's not necessarily a "good" thing. In fact, it's likely a negative.
I have had success with LaTex -> Inkscape -> SVG ... It was a kludge but got automatic fancy ligatures and such. YMMV!
Not quite VR, but there exists someone's personal hobby 3D fractal viewer that has an absolutely bananas level of polish:

http://sub.blue/fractal-lab

I highly recommend taking the time to watch his video.
Probably will crash if you told it correctly. You know, the old Y2K problem. ;-)
From the sweepstakes rules:

> YOU AND INDIVIDUALS TO WHICH YOU PROVIDE THE REFERRAL LINK DO NOT HAVE TO REGISTER TO VOTE TO RECEIVE ENTRY INTO THE SWEEPSTAKES. This Sweepstakes is non-partisan and open to all individuals who satisfy the eligibility requirements above. The number of unique individuals who check their voter registration using your link may impact the VotePlz leaderboard, but entry into this Sweepstakes is solely based on the steps provided above.
Can you describe how OpenMW is not a cleanroom implementation? I couldn't find anything on it on the website.
You need to rely on someone who sees certs in the wild that aren't in the CT log and complains. Chrome is capable of doing that (I don't know if it actually does), as are Google's web crawlers. I don't think Mozilla has anything that does that.

It is true that, provided you have a CT log, it is append-only, and data can never leave the log file. But you need to make sure the right data is in it at some point.
Also be consistent with their grammar, naming schemes, and conventions.
Europa moon 'spewing water jets'
>In certain areas, more than half of the young adult males are unemployed. Lyft and Uber, and the gig economy, have created access to economic opportunities that they wouldn't have otherwise had.

Only as long as drivers are needed.
FT Partners: Overview of Key Insurance Technology Trends [pdf]
Awesome!

All you need is the white lab coat and Gene Wilder's "It's alive!" in the background. Congrats on getting it to this point, as anyone who has brought up new systems for the first time knows, once you can get your central processor to load and run software of your choice, you can use it to tell you what it not working correctly and bring everything else up. It is always a total rush when the system boots for the first time. (or in this case, "boots again" :-))

I would be particularly keen to insure that the arrow keys work on the keyboard, as a lot of Altos were used to play mazewar and that was hard on the arrow keys.
There is no difference between using NDP and GDP; the shift emerges only when you switch between PCE and CPI. It is totally about whether the PCE or the CPI is a better index. We can see this clearly enough from the fact that there is a notch in the graph one way and not the other.

If you simply don't believe in wage stagnation, then I'm not sure what this whole conversation has been about.
It is worrisome that the posts which are factually accurate are getting downvoted. This raises a question about economic literacy on Hacker News. Presumably the people downvoting this comment simply don't understand how the economy works.
Yes, but that wouldn't be dynamic (unless, of course, you run LaTeX and Inkscape in JavaScript, which would be cool but a bit wasteful).
> Why are simple expressions not simple in all "natural" representations?

I think because that simple description describes a non-linear iterative process that feeds back on itself.
It's the Windows 10 start menu. It's basically still the mobile-style start screen from Windows 8/2012, but doesn't take up the full screen, and has a vertical list of apps on the left-hand side.

Classic Shell should continue to work if you'd like to restore sanity.
Yeah, this was totally the wrong page to link. This seems more appropriate for HN:
https://www.microsoft.com/en-us/springfield/
Yeah but the existing certs are still out there. While it's great that a company is being punished, this completely ignores the fact that we have no idea what they've signed, and short of laboriously checking the trust path of every single certificate you encounter there's no way to know if the cert you're looking at at any given moment came from them or not. And worse yet, the bigger problem is there's not a practical way to actually yank all of the certificates they signed that will work for arbitrary clients who don't know anything about this process to begin with and just look for a lock in the address bar, if that.
SVG as a representation language for draw programs is pretty good. Most draw programs don't utilize it fully. While SVG can represent dimensions as inches or mm, most programs only support dimensions as pixels, which makes SVG useless for CAD drawings.

If you need drawings with lines and boxes, Inkscape is very helpful. Most drawings in Wikipedia are in SVG, and many were drawn with Inkscape. You can update drawings in Wikipedia by bringing them into Inkscape and editing them, then checking them back in as an update. It's not a read-only notation, like Postscript.

Manually tweaking SVG text, though? Painful. It's encapsulated like XML, so you can, but you probably shouldn't. After you've done that, most draw programs won't be able to handle the fancy stuff. And really, drawing by typing text is like pounding a screw with a hammer.
Sheep.exe! I missed you!
RDP actually worked in early tech previews, and I think Microsoft is trying to use some of this for browser-process isolation in Microsoft Edge, so maybe some day :-)
538 has Trump .6% ahead of Clinton, the other polls have CLinton ahead, but her highest is at 54% right now. That's basically a coin flip, not an act of god.
http://projects.fivethirtyeight.com/2016-election-forecast/?...
Can you elaborate on that? Wasn't it a private facility? Why is your green card status relevant to that? Were they hosting government assets and that was a requirement on the government's part? In that case odd that it's "green card" and not "citizenship".
Not really. High compression engines need higher octane in order to achieve full performance.
http://geizhals.eu/?cat=monlcd19wide&xf=103_flicker-free#xf_... lists a LOT of displays that are supposed to provide a flicker-free viewing experience, and you can also filter for other technical properties to your heart's content. (Caveat: parts of that site are machine-translated to English - but that doesn't affect the rigor that went into curating the original data).
The long road to ubiquitous 3d cameras
> I don't think it really makes sense to try to roll your own module system?

Obviously Fare Rideau thought it was a good idea when he started hacking on ASDF. He could just have used Defsystem or whatever. It's very popular now, but its name stands for "another system definition facility" for Lisp!

If you don't like anything, roll your own.

Sharing with the community isn't the entire point of a module system; it's also to internally organize the software you're working on, whether you're just one hacker or a team of one hundred. Niklaus Wirth's Modula-2 language has a module system, and so does Ada. The concept of sharing modules with the community didn't even exist.

A module system as a hub for sharing is a relatively new thing: it's a fusion of the ideas from open source OS distro package management and language modules.
I didn't mean stretch your arm out for pushing, just hold your hand up to create some extra space in front of your face and signal you have no interest and you're in a hurry. It also helps avoiding eye contact.
Generally I agree that SVG is awesome, but there are a variety of cross-platform issues with it and I worry it does not get enough serious use to see them addressed. The status quo is pretty good, but if you run into issues there is not always a work around.
WoSign/Startcom signed their own "death warrant" by engaging in fraud.

I only wish death sentences for companies participating in blatantly fraudulent activities would be issued more regularly by regulatory agencies.
I think you need to read between the lines of your own post. That's some pretty serious Stockholm Syndrome going on there... Despite horrible service, a forced monopoly, and continual racist crimes, you want to support the incumbent system.

You also got the business aspect totally backwards. Very few taxi drivers own their own medallions so the money almost always flows to a rent-seeking corporation anyways, and at least Uber drivers don't have to rent the medallion each day - if they want to leave early they aren't under any penalty. Taxi drivers pay ~$200 a day to rent their medallion - if they don't make more than that, they've worked all day for a loss.

If you support taxi companies you're abusing the drivers by perpetuating a broken system.
Yeah but it's still a real problem. I know this personally from getting in a side impact which was my fault. The whole measure twice, cut once maxim I think applies to handling traffic at intersections. I've more than once since my accident was right to be cautious as I've seen people just blow a red light even if it's been a solid red for more than 20 seconds. When it doubt check the traffic that's coming to the stop light at the intersection by more than a few seconds if you have that kind of visibility. I'm sure Google's algos will start having that sort of sliding cautious scan of cross traffic at intersections in the future.
For Linux, you have to build it from source. https://github.com/exponentjs/xde#build-from-source It's usually pretty smooth to do so.
Right. Until one person gets laid off, has a car accident, wants a divorce, etc. 8000 in 12 months is 96000 so now one salary goes only to the mortgage...

Now make those salaries for the next 30 years.

Your point is valid in that as you make more money more of it can go to housing because a smaller portion is required for things like food, clothing, gas, transportation, etc.

3x gross income was the conventional rule of thumb but truthfully that was back when interest rates were 7% or so. However, just because you can afford something doesn't mean you should.
To the programmer, the Alto's instruction set is the same as the 16-bit Data General Nova minicomputer, with the addition of a few crazy instructions such as "copy character bitmap from font file to screen".

The Alto's CPU is built from a whole pile of TTL chips on three boards. The Alto's arithmetic-logic unit, like many computers of that era, uses 74181 ALU chips. The CPU runs a crazy multitasking microcode, with one of the tasks emulating the Nova's instruction set. The hardware manual refers to the "microprocessor", meaning the microcode processor, not a microprocessor chip since microprocessors as such were in their infancy at the time.

There's a picture of the Alto's ALU board in one of my earlier articles [1]. You can see the individual CPU registers, as they are made out of multiple latch chips. For all the details of the Alto's CPU, see the hardware manual [2].

1: http://www.righto.com/2016/06/y-combinators-xerox-alto-resto...

2: http://bitsavers.informatik.uni-stuttgart.de/pdf/xerox/alto/...
Not worshipping.
The relevant competitor to discuss would have been AWS.

Adobe is hooking its Photoshop, InDesign, Lightroom, etc. customers into a subscription-based cloud platform...they had to choose whether or not they wanted to offer their end customers Microsoft or Amazon's SQL storage space and ML capabilities.

Microsoft probably gave them a killer deal they couldn't refuse as they continue to fight their way into the cloud services market.
Thank you, though the Qihoo relationship is not what I was referring to.

I actually meant executing two votes in the CA/B Forum. As the connection between WoSign and StartCom was only incidentally found while investigating the other issues, I am questioning if there may be more dark sheep in the herd of CAs... we may just haven't looked hard enough. Do the Audit Requirements include checking for such relationships?
"Why are we here" and "where are we going" are vastly better questions than "what are we meant to do".

Do you see the difference?

"why are we here" can mean "how did we get here, how did we come to be here" ... but if it means "for what purpose are we here" than it turns problematic again, no?
By "home", the author apparently means "120 square foot studio apartment". And by San Francisco, the author apparently means "somewhere near San Francisco, except the zoning laws don't allow this anywhere near SF right now".
Clinton is a 36-point favorite over Trump with 18-34 year olds:

http://www.usatoday.com/story/news/pr/2016/08/15/poll-finds-...
Congrats to everyone who made this happen. It's so cool!
Recent polls (2014) say young people are strongly leaning democrat. This may not match your experience, but then again, I don't believe you can understand a country by extrapolating from your social circle.

http://content.gallup.com/origin/gallupinc/GallupSpaces/Prod...
Exponent apps have URLs, so if you have the URL for an Exponent app, you can just download the Exponent developer app from the iOS App Store / Play Store and then open the URL.

Ex. Try opening https://getexponent.com/@exponent/floatyplane from your phone.

If you have the source code for the app, just open the project directory in XDE (our desktop software) and it will give you a development URL that you can open in the Simulator or on your phone.

In general, testing Exponent apps is way easier than testing apps other ways. We put a lot of time into making it simple.
.enter() was sort of confusing for me at first, but you lose the data-binding goodness of D3 if you drop it. I think the real issue is that the tutorials don't really explain it correctly:
.enter() is where you add things and make changes that will be with the nodes for their lifetime.
Do that, and then do your update logic (setting path attributes & fills, etc.). Don't run update logic when instantiating nodes, except for animation.
I don't really agree that the primes “have a very simple definition” in that the notion of ‘primeness’ is one of satisfiability and no constructive algorithm is known to exist.
No, wmil is not wrong about piracy on the Dreamcast. It clearly was a contributing factor for developers not supporting the Dreamcast, it just wasn't the only reason.
Hmmm, why not both?
I am using react-native for my startup too, and we thought of doing something like exponent before going the way we are going now.

A great option for exponent, once it reaches a certain level of maturity, can be a new type of browser.
storing them doesn't give you the same value. instead of enabling people to be alive you're now only increasing a safety margin for those who are already living. and there are rapidly diminishing returns for increasing the storage factor.

That's why it's categorically separate in my mind. For a fixed amount of people you only need a bounded amount of resources to satisfy their essential needs, which can be met with a relatively small fraction of the population's work capacity.

Everything beyond that is subject to drastically different dynamics where your want (not need) for luxury goods can gobble up a practically infinite amount of work capacity.
Could you please refer to the actual Issue? I can neither find anything related to the CA/B-Forum voting fraud nor to the yet unresolved Qihoo relationship.
Thing about dense housing is that one or two streets lead in/out of a community of 1000 cars. When everyone wants to leave at 8:30 AM and get back at 6 PM, this often ends in traffic tragedy
Roller Coasters Could Help People Pass Kidney Stones
I wonder if the printer example is the right example. Perhaps IBM was merely test-marketing and planned to use cheaper parts if the printer was a hit? (I don't know much about IBM printers.)

In the semiconductor industry, often cheaper chips are the same chip is the expensive chip, but because it didn't test as well, features are disabled or the chip is intentionally sold at a lower clock speed.

IMO, I would call intentionally crippling a product a win-win-win situation if it's basically test-marketing that leads to lower manufacturing costs. (This only works if people don't catch on and hack the product to re-enable the disabled features.)
There are plenty of people who would happily live in those, if the choice were available to them:

http://www.sightline.org/2016/09/06/how-seattle-killed-micro...
Strange that places like Manhattan and Paris have a solution to this issue
> The "logic" behind PKI dictates that it's a third party identifying my bank to me

Not true. The third party is an operational detail to scale, there's no reason your bank is less trusted than anyone else to confirm that they're really your bank, are they?

You're suggesting that you don't trust your bank's opinion on what websites belong to them, but do trust some third party's? Even if this made any sense, the third party is doing nothing but taking the bank's word for it, if a bank for some reason _wanted_ to affirm that some random domain was EV-certified as Wells Fargo, they surely could, even if they weren't the CA -- that's just not a threat the CA model is designed against.
Quite ubiquitous in healthcare.