skysight-inc/HackerNews huggingface dataset:
Yes, you have an excellent point, and I worry about that. It also worries me that what I am proposing is pretty much what Flash did, I think, and we all hate that. I think we can do better because we know what we need now, and we have some good and bad examples to guide us. The problem with the JVM is that it is too heavyweight. But we know that lightweight is possible because everyone loves Lua.

Security is doable because BrowserVM does not need to do everything. It isn't generable purpose like the JVM, it is an embedded VM like Lua. Lua has great security, as far as I am aware. I expect that having a secure VM is no more difficult than having a secure ECMAScript implementation.

I think we want low-level execution primitives (i.e. assembly), which pretty much forces a VM, because it gives people flexibility to use whatever language they want. However, even the minimum of keeping JavaScript and having the page be a large canvas with (fast) drawing primitives would sufficient. Writing windowing systems and UI toolkits is a solved problem. I think the browser should, at minimum, provide primitives for drawing widgets, so that webapps can take advantage of OS-native widgets. A well-designed toolkit, though, would be handy. And here we have a number of examples. Qt is very well-designed and a pleasure to use. Cocoa is a little clunky, but effective. Even Java/Swing was fine (aside from horrid aesthetics). We know that Microsoft-style MFC is a bad idea, the Win32 callback idea is clunky, and Android is a mess. In particular, a constraints-style system seems to be clunky. It was clunky in Motif, clunky in Android, and even Apple's version doesn't seem all that great. Constraints seems to suffer from the same problem of HTML: describing the system is clunkier than just telling the system what to do. Hence, Qt and Swing's layouts are a lot easier to reason about.
The short comment in the news here was they're mostly against it to pester the Flemish, because they'd benefit more from this agreement than Wallonia.
I know of at least three:

Hamilton's 001 Tool Suite
http://htius.com/

Cleanroom Software Methodology
http://infohost.nmt.edu/~al/cseet-paper.html

Praxis Correct-by-Construction
http://www.anthonyhall.org/c_by_c_secure_system.pdf

All three have some upfront time in specification with Praxis doing refinements, too. However, they all knock out tons of debugging and integration problems since errors don't slip in at all. Altran/Praxis charges 50% premium on top of normal contract so the extra labor is probably less than 50% given they're profitable. Cleanroom anecdotes showed the reduced debugging and maintenance issues meant it actually barely cost anything extra in time or money. A few outliers had it saving time.

There's also a number of people and companies that are encoding business logic into specs that they implement with logic programming languages. This eliminates mismatch between business requirements and code with quite a bit of productivity and safety advantages if it works in one's use-case. I haven't evaluated their effectiveness but here's two:

http://www.missioncriticalit.com/technology.html

https://dtai.cs.kuleuven.be/CHR/files/Elston_SecuritEase.pdf
Writing this from hp prBbook that worked 7 years changing 4 users without any single issue.
I too briefly got excited when reading the headline. That would've really made my day. So many people could work full-time on the Linux kernel.
The really bizarre thing is that during the time that the iPhone was AT&T-only, AT&T had terrible cellular coverage in SF. Somehow this did not stop developers in SF from writing apps which did not work on an unreliable connection.
You understand though that if MSFT had 100B USD in cash and spent it all in stock repurchase, then, in theory, its stock price wouldn't move but its market cap would go down by 100B. The market cap is not a perfect indicator of the value of a business either.

If we start to nitpick, why not calculate share price in real dollar terms (take inflation into account), adjust for the average P/E ratio of US stocks, adjust for dividends etc...

That quote is just trivia.
Anyone having any issues with WhatsApp? Mobile text seems to work fine but all images fail, Desktop & web browser aren't connecting at the moment (west coast)
The End of the Black Turtleneck
These people are so dumb and just don't get "it." Samsung is so dumb, they are very dumb, for real. So dumb, so dumb, so dumb, so.... they climbing in your windows trying to rape your GTA and youtube accounts. ([0])

All this is going to do is encourage tens of thousands of young kids to figure out what things like "DRM", "free speech", "EFF", "privacy", "copyright" and the like mean. Maybe we get a few good lawyers out of this, a lot of great parody and a lot of great art.

[0] https://www.youtube.com/watch?v=mEAKsaQOCpQ
For me it resolves to 192.30.253.113
And they have to do that precisely because there are 170 or so entities of various levels of dubiousness that are by default authorized to sign any certificate for any domain, and everybody knows that this is fundamentally a horrible idea.

For that matter, since HPKP requires sideband key management, it's
A) an admission that PKI doesn't actually work, and
B) a pretty clear example of why the CAs are unnecessary

If you have pinned certificates you are essentially operating exactly the way 99% of us do with SSH (only rather better because there are several million eyes on high-value certificates), which means you don't need CAs anymore.
Greetings from the Eve Community :)
It is possible to do any number of weird things that practically nobody in the whole world, including companies with the best security teams in the world, actually do. Tokenizing email address is indeed one of those weird things.
It grants corporations the rights to bypass national courts and directly file claims in some kind of international tribunal. But the way it's setup is really fishy to say the least.

Unfortunately in this case it also has some local political reason as the national government is a right wing government and is Pro CETA/TTIP. That is also the case with the regional Flemish right wing government. The regional Walloon government is left wing and is against. So it's a bit of an impasse.
If you are not concerned with the difficulty of running plumbing/electric, you still have thermal bridging through steel at 400 times the conductivity of wood. The people who use steel framing often thermally isolate thin strips of metal, not the entire wall. The insulation job the guy says he hasn't done yet, he's going to find out he'll need to insert a cavity air gap. If he chooses to stick it with a gap as external sheathing to save space he'll still need to contend with condensation on this very conductive surface. If he goes for passive house level air tightness and internal smart vapour barrier he could be fine but somehow I think he's just winging it which means water vapour will condense inside his house and not be able to dry out. Hello mildew and everything he owns will rot. You can build with shipping containers, but you've got to really know what you're doing.

tldr; A guy spent 50k+ to put his house inside a heatsink. This looks environmentally friendly but with the probable dehumidifier requirements it is probably much worse than regular building.
The Embody is worth every penny. It's ... it's really fantastic. The Aeron is not bad, the Embody is great.
add moz.com
yep, but add some relatives and it all goes bad

How are Chromebooks for people who have to deal with "family / friends" support issues?
> hardware is usually assumed to be bug-free

I feel like exploits like Rowhammer really threw a wrench into this. Now one would also have to specify allowable interactions with the hardware?
>Why can't we have something that is both standardized and easy to pick up?

Simply because one has to learn the standards in the former case. In the latter, it is mostly left to the users imagination and their own sensibilities, which differ from person to person.
A massive cyberattack is taking down major websites across the internet
Show HN: AI lifecoach
Cool story from 3 years ago. Thanks, hacker NEWS
The headline is what I take issue with. Calling it hacker-proof just because it's formally verified is wrong.
Sounds promising. I'll want to take a look when GitHub is resolvable again. :)
Interestingly enough, maintaining and developing Vue.js is now the author's full time job! Check out his patreon here: https://www.patreon.com/evanyou
> DNS is some of the most distributable, cachable data I can imagine.

Indeed. How can it be so broken? And, it seem that it would make sense to use the last known value if upstream is unavailable.
GitHub.com is down
Brief Introduction to DNA Computing
Neither parent comment even insinuated that what they said applied to all people. You're seeing phantom generalizations.
You say you read 100+ stories. How do you keep track of all of them? It is easy to forget when you read so much and more difficult to exactly pinpoint where you read it?
For me it is a nice counterweight to the idyllic future Silicon Valley paints, its nice and understated, compared to the bombast of TechCrunch articles hawking the next greatest start-up that is going to "Change the world". It's nice to have balance in my life.
Massive DDoS attack knocks down Twitter, Spotify, others
Netflix as well
The 128GB iPhone 7 wrote to memory at 341Mbps, but the 32GB iPhone 7 was over eight times slower at just 42Mbps.

Slow write speeds are the hallmark of being too much of a cheapskate when buying SSDs. 42Mbps would be miserably slow for a laptop SSD. Buying such a slow SSD is the kind of mistake I'd expect from a non-savvy consumer.

Then again, how much data is being written to an iPhone's SSD per second on average?
OpenDNS DNS Servers (208.67.222.222 and 208.67.220.220) are still resolving websites while my typical fallback to 8.8.8.8 is not.
Your first hire should be a woman PoC because diversity has to start at the beginning.
subs TLS then; this isnt about the semantics of names.
Server Authenticated TLS provides these things.

"With a self-signed cert, I know I am talking to exactly one party and that no third party can surveil or monitor that communication."

You can't state this. The self-signed cert you are seeing could be the one that my MiTM proxy has substituted on your connection! The only thing that saves you is your Trust Store.
I feel like you don't quite understand public key substitution and MiTM attacks.
This isnt a Phishing problem, its a 'breaking the encryption between client and server' problem.

"Furthermore, for the vast majority of websites I visit, an assurance from a third party that they are who they say they are is of absolutely no value to me. Take HN: I do not particularly trust ycombinator.com more than I would trust a phisher trying to convince me he is ycombinator.com, so a third party's assurance that this is in fact ycombinator.com doesn't give me any useful information."

This is HIGHLY ALARMING! If this is the case then please use my proxy server and do your banking. Im sure its cool, you don't need to check with a third party that i'm not messing with your encrypted connections.
Agreed -- so troubling. I actually felt sick to my stomach just from watching the new trailer. It's a really well done show, but so, so dark.
GitHub seems fine for me.
The toy smuggler of Aleppo’s jihadist connections, made-up stories
@wadentandy, Yes that is still something we are figuring out the best way. For a major feature (like issue boards), because we won't use Vue for everything, we load those files on a per page basis.
Show HN: Keyword based placeholder images
The borders of China aren't exactly clear in the image you posted, but here's what I'm seeing:

Europe ranges from 1-14

"Western" ranges from 1-23

China ranges from 12-17

Am I interpreting the image incorrectly? Doesn't it confirm my assertion that China has a smaller range of skin tone?

Edit: The definition of "Western" appears to be very vague, but for reference I referenced at the rough vague shape of the United States to determine the 1-23 figure.
Hi! Never thought I would find another community member here!
`dig NS $domain`

Query for the root domain, without any subdomains like www. That is, you need to check the "zone apex," the shortest name purchased from a registrar and potentially delegated to Dyn. Look for dynect.net in the list of authoritative name servers.
Ideally yes, but practically it more often than not isn't, especially if it's the federal government that decides.

If governments owning and directing whole economic sectors truly was an efficient way to manage an economy then Socialism (government demand driving the economy) would've beaten Capitalism (private demand driving the economy) easily and by a long shot.

It didn't just fail being more efficient than Capitalism, it even consistently ended up impoverishing and corrupting any nation that tried implementing it.
We had a demo at the exact same time. (Internal weekly product demo, not that critical).
We did it on local host, the only one reliable 100% of the time.
I haven't used a high-end Windows laptop recently, and the mid- to low-end ones I've used all have bad trackpads, so I'm assuming that "not terrible" means it's still way behind Apple trackpads.

I use a MacBook, and anything less than a great trackpad would be a dealbreaker for me if I were to switch. (I would potentially be interested in a good Linux laptop otherwise. I guess I could just install it on the MacBook...)
Study Confirms Natural Gas Economy Has Lower Methane, Global Warming Emissions
We are beginning to have infrastructure around another planet. Very cool.
I'm in the process of learning React, so I don't have any strong opinions of my own yet. I've read through the Vue.js "Getting Started" docs and it does look very intuitive/simply. However, what motivates me to learn React is the fact that I can build an app once and then use React Native to create an iOS and Android app. I'm assuming this isn't a requirement for Jacob and the Gitlab team but I'm wondering if his decision would be the same if he had to support native apps as well?
I've been singing the praise of AWS Route53 for a long time, they up and running. I can't believe major multi-million dollar companies (Twitter, GitHub, Soundcloud, Pagerduty) would not run a mix of multiple DNS providers.

Also what is happening is a cascade effect, where a 3rd party being down effects others.
The basic tactic is release the clip, watch for the "its edited, that's not what I said" response, then release the full video with even worse stuff in it. I really think in this day and age, its a really good template for anyone doing investigative reporting. Plus, it works fine with click advertising since it creates two waves per video.
I'm not sure which comments you are referring to, but there is a lot of truth to the idea that developers (especially frontend developers) are, in some cases desperately, trying to build their reputation by contributing to or starting GitHub projects. Notice I said "build their reputation" not "get attention". The fact is it is almost impossible to get a job as a non-junior frontend dev nowadays without a GitHub profile showing a long history of contributions. That leads to a lot of desperate and low-quality projects...and that's just reality not a disparagement. It goes hand in hand with the industry shift (especially for frontend tech) with considering one's GH as an essential aspect of one's resume.
Seriously? The portal is bad so use a CLI?

I don't want to have to look up the commands every time I want to run a thing I do once a month, quarter or year. I just want to click a button that doesn't take 20 fucking seconds to load and isn't buried amongst a ton of useless menu items.

The joke in our office is that the Azure team gave the portal interface to the interns to do. It's a UI that's poorly thought out, poorly programmed and massively unresponsive.

It's so obviously been conceived of by a programmer who is inappropriately obsessed with their "innovative" modular design.

But a CLI? Certain types of people with amazing memories like CLIs, but please don't inflict them on the rest of us. They're shit. AWS's portal is good enough, but Azure's is rubbish.
One possible issue is that IPs are re-used in cloud environments. Potentially, your browser could POST sensitive data to an IP address that now belongs to a totally different company.
I guess "scorched crater" is about what I expected from that. I really hope the ESA folks got enough data from the lander to figure out what exactly went wrong with the chute and jets to cause them to both terminate early.
Show HN: 1400 books/people mentioned by prominent people
> Estimates are that Schiaparelli dropped from a height of between 2 and 4 kilometres, therefore impacting at a considerable speed, greater than 300 km/h.

Ouch. It will be interesting to read the results of the investigation as to why the landing thrusters turned off prematurely.
It was a trial run lander, the real one comes later. The primary purpose of the mission was the orbiter which is functioning, and lander testing, which failed but hopefully they get useful data from the failure.
We live near the border, and I've never seen anyone questioned (myself included) when bringing dairy across; it's one of the primary purchases of people visiting the US side.
and mixpanel and zendesk
This is simply my highly subjective opinion, so take it for that, but it was really a number of factors.

Template format.

I actually really like Mithril's view format: it's an API built exactly as it should be -- to make using it very intuitive and natural. I also think it's a great solution technically, since it fluently combines a shorthand for generating HTML with data binding and lets you use native javascript (making it easy to build parts with functions or loops or whatever).

What I didn't like was actually working with it, as a lazy and mainly non-web developer. I like to copy and paste chunks of markup from bootstrap's documentation or other places. Recreating is fine for small things, but then I started porting pieces of another internal app that involved at least a couple hundred lines of HTML. There is(/was) a tool to convert, but it didn't work well enough to be usable for me.

I also realize there's MSX now, but I don't remember it at the time: I'm not sure if the documentation was lacking, or I was just tryin to avoid the complexity of a build tool for this (or both).

For my purposes, the only really fundamental difference between the two was the template format, and being able to stick HTML into Vue, add a couple attributes and have it work just worked better for me.

Community/Growth Potential

I felt the Vue community was bigger and growing more. The Mithril documentation was and continues to be great, but at least at the time there didn't seem to be much writing about it beyond the Mithril site.

Contrast to Vue, where it was easy to find many blog posts, StackOverflow questions/answers, etc.

I've used my share of frameworks/libraries that were later abandoned, and I really try to avoid that.
I know that our first hire is definitely gonna be a front-end developer so I can focus solely on the backend
I have to say I enjoy "Shut up and Dance" the most out of any Black Mirror episodes. It is utterly breathless in pace and the twist was a kicker.
How do I run Minecraft on this thing? Goes badly.
JS won out the web long before anyone ever heard of HTML5.
I'm struggling to see why i would want to use the new built-in functionality instead of Vundle. Vundle seems a _much_ nicer solution to this problem.
I kinda get the feeling like you are baiting me to mansplain...

Speaking from my own limited experience, my wife finds the whole process of pumping at work uncomfortable, regardless of what her coworkers might feel.

Having to carry dirty breast shields to the sink to clean, having to hold the bottles up to her (exposed) breasts (pump bras don't work for her), the fact that she may leak, the sound the pump makes etc.

> I believe most women would surely prefer to pump at their desk while they work instead of having to sit in a bathroom stall.

Forcing mothers to use a bathroom stall just seems cruel. In Seattle, it's now building code that office buildings provide a "wellness" room for mothers returning to work.

My wife's office turned an old supply closet into such a room, but it was pretty bad, and guys were using it to take naps (they would leave when she knocked on the door--but still what a shitty thing to deal with).

Once Corp HR found out about it, they got a different room that is a bit nicer, and installed a lock requiring a key. Even still, she will prefer to come home and pump.
The chances of landing are 100%.
It's true with the normal definition of happiness. Think about it. Whatever you're doing now is an attempt to get you to a happy state. If you're already happy, it'll fade and you will take more actions to be happy again. This seems to be part of our human condition.
Twitter's working fine for me. This attack is affecting different people differently; as a DDOS, attacking a distributed system (DNS) with a lot of redundancy, it's possible for some people to be affected badly while others not affected at all.

I briefly lost access to GitHub, but Twitter has been working fine every time I've checked. Posting status messages in multiple venues helps to ensure that even if one channel is down, people might be able to get status from another channel.
"Previn says that while a Mac initially costs anywhere from $117 to $454 more than a similarly configured Windows PC, over four years IBM saves between $273 to $543 per Mac compared to a similarly configured Windows PC."

Its late over here, and I could be misinterpreting this, but this feels like meaningless clickbait. 3 times cheaper to own is based on 117 * 3 ~= 543? Taking the extreme low end of one value and the extreme high end of the other feels dishonest.

Perhaps a more appropriate title would have been "In the long run, you'll probably save about $25/year by buying a Mac."
Jobs. The amount of people and documentation required to develop anything FAA-certified is enormous.
Hi Hacker News!

WikiMentions lets you discover books/people mentioned by prominent people in books/videos. We already have around 2200 books and 1250 videos of 980 people. Its a wiki, so anyone can add content. We would love to hear some feedback.

Thanks!
Ah, to be young.
Bad Desktops: Windows Vista, Windows 8, Windows ME, Windows 3.1, O/S 2 Warp
Good Desktops: Windows 95, Windows XP, Windows 7, Windows NT
Confidence and attractiveness. I sincerely doubt the researchers were being able to replicate attractiveness before the experiment took place.
2nd this request, what are the names of 2 or 3 shows that aren't "trite"?
Your assumption is completely and absolutely wrong. Not just wrong, but actually the opposite of the traditional reality -- market cap usually doesn't even consider cash and short term equity reserves for traditional companies, so you end up with companies that have more book value than market value. Which is exactly why these companies buy back shares -- a smaller circulation benefits their shareholders more than money sitting in an account on the company books.
I'm confused. The fine article itself mentions Vundle?
Might just be a result of the dns issues?
OS licensing is probably cheaper as well come upgrade time. I understand macOS license is tied to the hardware so for a new version don't have to pay? With hundreds of thousands of machine that can add up.
If you need access to GitHub, add these to your hosts file:

192.30.253.113 github.com

151.101.4.133 assets-cdn.github.com
Don't forget 'Brass Eye' too!
Github down too :'(
went down 17 days ago
I hope it doesn't go the way of sourceforge