skysight-inc/HackerNews huggingface dataset:
If a given voter could vote for President at any polling location in the state, how would you design it so that after someone votes they cannot go to another location and vote again?

With voting limited to your designated polling place, all they have to do is have at each polling place a list of people who are registered to vote there, and check them off as they are let in to vote.

With "vote anywhere" voting, you'd have to have the polling places all coordinating in semi-real time to maintain one big list. If a polling place lost network connectivity they might have to suspend voting there until it is fixed, and in less densely populated areas where polling places might be very far apart that could be a big deal for the people who came to vote at that location.

The semi-real time constraint is that when someone votes at place X, then for each other polling place Y in the state, the knowledge that the person has voted at X must be available at Y in less time than the person can travel from X to Y.

Note that you cannot rely on simply detecting who voted more than once after the fact and disqualifying their votes, because you won't know who they voted for and so won't be able to correct the count.

There are ways to design systems so that you could vote anywhere, with after the fact checking that does allow the count to be corrected instead of semi-real time checking, without having to keep track of who voted for whom, but those would require big changes to how we vote [1]. Until we can do something like that, limiting in-person voting to a designated polling place is probably here to stay.

[1] For example, one could do a system based on a digital cash system. There are digital cash systems where a bank can issue you a digital dollar (basically a string of bits) that has these two properties: (1) the bank can recognize it as a digital dollar they issued when someone tries to deposit it, (2) the bank cannot tell who they issued it to, and (3) if the same digital dollar is deposited twice, the bank then can tell who it was issued to.

Using such a system, election officials could play the role of the bank, setting up two different kinds of such digital dollar systems (I'm assuming a two party race). One system issues "Digital Trump Dollars" and one issues "Digital Clinton Dollars". Each registered voter is issued one Trump dollar and one Clinton dollar. To vote, the voter "spends" the digital dollar for their candidate at any polling place, and simply deletes the digital dollar of the other candidate.

To count, the election officials simply see which candidate has had more of their digital dollars deposited. If someone deposits their candidates digital dollar at more than one polling place (or more than once at the same polling place), the election officials know who they were and they know which candidate's digital dollar it was so that they can correct the count.
> In this case: I did, and it was immediately closed without any change to the code, documentation, process, or culture.

You left out the part where they told you this perceived issue did not impact their codebase, due to how they were using the upstream project you cited.[1]

> While this is an issue it does not affect us as we aren't using session cookies with slim

You then started to rant about how they don't update their dependencies "quick enough".

[1] https://github.com/samilliken/openDCIM/issues/837
Here's the updated link for Software Engineer, Product (Full Stack)
https://www.facebook.com/careers/jobs/a0I1200000JXY2nEAH/
I agree and its wrong. India should have a path to allow for long periods of staying and working in the country and provide for a valid path towards citizenship. Thats the only way India can be a country that can attract and retain smart global talent to enable its companies compete globally.
Ask HN: Ratio of sales in music equipment between hobbyists and professionals?
Hi HN,

I recently bought a Roli Rise - a MIDI controller. I'm no professional and am unlikely to make any income using the device, and yet to Roli it makes little difference. I'm a customer to them as any professional user, and part of their income is now coming from me.

My question is, how many of me (i.e. hobbyists) are there relative the target audience, presumably professional producers? Is it large enough to target? Could it in fact be larger than the target audience itself?

For example:

Hobbyists: 80%
Professionals: 20%

(Music equipment is just an example in this case, I'd expect similar trends in sales elsewhere.)
My biggest challenge is lack of customers.
I did not downvote you but it sounds like the author works at one of those horrible places where developers get to do things that make no sense in production without undergoing an operational review. He probably cannot change that (change would have to come from devs in a company like this), so your advice boils down to finding a new job.
I'm writing a quick program that's supposed to compute something and print out the answer. I don't check the return value of printf(). Why not?

1. printf almost never fails. If it does, I'm just going to re-run the program. If that doesn't work, I'll reboot and then re-run. On average, I waste less time with that approach than with checking the return value of printf.

2. If printf fails, what am I going to do? Print out an error message? But that might fail, too. Log something? That could also fail. Should I check the return values of those attempts, too?

But safety-critical code is usually not calling printf - it may not have a conventional output device at all. (It should have some mechanism for alerting the operator if there are failures, though.)
This Hack Can Silently Break into 1B Android App Accounts
ISP pricing/caps?
I'm not sure if there's been an official announcement, but I had assumed that AV1 was going to be adopted/ratified as NETVC so that it's got a standards body rubber stamp, as well as the practical adoption/support from browser vendors, GPU manufacturers, streaming sites etc.
Do we doubt 'Europe' exists or something?
OpenSCAP [0] has made a lot of progress in the last two or three years. The SCAP Security Guide [1] includes security policies for USGCB, DISA STIG, PCI-DSS, CJIS, etc. and it's really easy to get started, scan your host, and generate a nice HTML report of the results for quick consumption. They've also started including "remediation" scripts to fix any problems that are found (n.b.: that can be dangerous).

To scan remote hosts, they simple need a single package installed (I think they actually only need the oscap binary) and an SSH server running.

In recent versions of Anaconda, you can specify a security policy in your kickstart file and have the host configured in accordance with the security policy as part of the installation process. The host is in compliance before you even get that first initial "login" prompt. (For those of us who have to deal with this, this is f'ing awesome.)

Another thing you can do with it is compare a host against, say, Red Hat's security errata and get a report of which security updates a host is missing. This can be automated, ran by cron, and the results e-mailed to you once a week or whatever.

All that said, OpenSCAP isn't a panacea. It's still pretty "rough around the edges", so to speak, but it's much, much better than the tools we had to deal with this stuff just two or three years ago.

Windows isn't a supported platform (yet). There's still a lot of work to do on the Linux side of things to improve the software so I'm not sure when (if?) they'll start working at Windows.

[0]: https://www.open-scap.org/

[1]: https://www.open-scap.org/security-policies/scap-security-gu...
I did extensive testing in FF. This seems to be an issue related to privacy settings: https://github.com/rydama/mailchimp-ajax-signup/issues/6. I will look into additional ways to allow sign ups that don't have this issue.
How would using a pipe prevent you from inhaling the smoke?

I have never used one (but I was always curious when I smoked) so maybe it's a silly question.
8 redenen om meer komkommer te eten
For such people, transportation can't be good if it is public.

Never mind the fact that it is transportation. Being unprotected in a city is threatening. Walking counts. Sitting in a park counts.

Note that city and non-city have different political behavior. The people are different. Many people will simply never feel safe in a city environment. Private cars mitigate that somewhat.
And this is what is so painful for the rest of us to watch or deal with. This inability for the Linux folks to admit these glaring architectural problems.

Alright, the suspense is killing me: what OS is the one that gets it right? I ask this to "the rest of us" as you put it.
Isn't the irony here that the world isn't becoming more uncertain?
Current is much more useful in engineering, because it is more constant for this type of device than power. Power varies with supply voltage while current normally does not.

Other than doing temperature calculations, power is not a very useful metric. And for such calculations you would use a max power rather than average power metric.

If you were optimizing a system for "power" use, it is much easier to work in units of energy than power anyway.
It's not that everything will be alright. It's a way to focus and take back your life. Your life sucks, your boss is an asshole and if you don't stop, your every move is dictated by the environment and you are just caught in this flow of negative things happening to you.

People tend to be caught up in the past or future. They are either constantly thinking about regrets or hopes and wishes to distracted to see the opportunities in the present.

There's a saying. You should meditate for atleast 30 minutes a day. If you don't think you have time for that, you should meditate for 1 hour a day.x6
OTOH moderate intake of alcohol, despite the risks, also has positive effects on the cardiovascular system. Wine has antioxidants which are associated with longevity, beer is good for bone strength, and so on. While an alcoholic may have a higher chance of dying before cancer gets them due to organ failure and accidents, a glass-of-wine-a-day drinker might live longer with a higher quality of life with the increased cancer risks than they otherwise might have with their congenital heart disease or whatever. Cancer typically gets you when you're old, heart disease gets a lot of people in their 40s and 50s.

And while the first world doesn't benefit directly anymore, typical brewing and fermenting processes ensured a drink was sanitary due to lengthy boiling times or yeast out-competing other microbes. Alcohol and hops/flavorings provide antimicrobial effects, acetobacter competed and inhibited against other water-born bacterial and mold growth. Alcoholic beverages are an easy way to store and preserve calories in times of scarcity, etc. It's quite likely that those who chose low-alcohol beverages were saved from other water-born diseases and lived longer thanks to it.
How odd. A former British colony with a land price problem washed through banks that are making life worse for working people.

Most unusual. /s
This is why DevOps became a thing. It's complicated managing systems at scale. If you were using these tools and aren't at scale, well, that sucks.

Unplanned downtime is the main drawback to both hosting your own OS's and using leading edge tooling for your critical systems. It doesn't matter what the underlying system, stuff like this happens. This stuff is complicated. You will find major warts in every new system. Everything will break, often, leaving your users stranded. It takes a very long time for software to mature. [0]

That's why you see engineers with 15+ years of experience patiently waiting for new technologies to mature before putting them in place in our critical infrastructure. Sure, we'll play with them, but putting new tech in production that could easily make your entire system unavailable is too risky. Yes, three year old tech is new.

[0] http://www.joelonsoftware.com/articles/fog0000000017.html
Julian Assange predicts Donald Trump will not be allowed to win US elections
Serverlessness, NoOps and the Tooth Fairy – Charity Majors
What a very strange article. TES were using docker in production in October 2014. It was certainly possible to run docker containers (docker run -d) in the background and to view them (docker ps) as early as October 2013 when we first evaluated it at the Daily Mail.
> Chroma Subsampling.

Sadly, this is what makes video encoders designed for photographic content unsuitable for transferring text or computer graphics. Fine edges, especially red-black contrasts start to color-bleed due to subsampling.

While a 4:4:4 profile exists a lot of codecs either don't implement it or the software using them does not expose that option. This is especially bad when used for screencasting.

Another issue is banding, since h.264's main and high profiles only use 8bit precision, including for internal processing, and the rounding errors accumulate, resulting in banding artifacts in shallow gradients. High10 profile solves this, but again, support is lacking.
Face electrodes let you taste and chew in virtual reality
How is this better than SQLAlchemy Core?
Why I won’t use ‘preferred’ pronouns – and why you shouldn’t either
I think it ultimately comes down to the vaporization tool. Older brands and vaporization techniques used by things like the Volcano or Silver Surfer, I would consider pretty safe. But once you get into the lower budget vaporizers, e-cigs, wax on metal coils, I think it gets more sketchy and its harder for the consumer to determine quality
I'm only going to address your first sentence -- I wasn't talking about being allowed to literally walk in anywhere and cast an immediate vote; if you were to go to a different precinct than where your registration is you'd still have to cast a provisional ballot so that they can reconcile later and make sure that you didn't cast another ballot somewhere else.

After the election, they consolidate all the provisional ballots, make sure there's only one with your name on it, and that you didn't sign the register in your registered polling place, then they should have opened it and counted your votes for Federal races.

I was only talking about the "being disenfranchised" part of the original post - you have the right to cast a vote on Federal issues as long as you were registered in the state by their deadline.
I feel like that's Silicon Valley's motto at times.
I think you are on to something. I don't have stats.
I would presume it's a pyramid.
I haven't read "Better Angels" yet or gone through this interview, but if he actually ignores the forces that are aligned toward making the global situation worse, that would surprise me. I have read "How the Mind Works" and "The Blank Slate" and neither lacks that nuance, especially the latter title. He continually refers to the political struggle at the core of the Nature/Nurture debate and its practical implications for everyday life. Given the nature of his thinking and the thickness of Better Angels, I'd be surprised if he doesn't acknowledge the possibility of malign forces. His motivation for writing the book, I thought, was to encourage people to participate in the struggle against that malignant current (even if it's the minority vector in his view) and engage in the opposite direction of having a positive impact on global society through the continued pursuit of Enlightenment.

Edit: for clarity.
Totally legal! (Just don't sell it for profit.)
Funny timing: I just suggested those guidelines, and several related ones, in a post over here: http://embedded.fm/blog/2016/11/3/resources-for-software-bes...

(Check out "Rules for Defensive C Programming" by Dinu Madau for starters.)
we should also carefully note whether we currently appear to be on an upward or downward trajectory (IMO, downward)

There's no interpretative reasoning required when you're looking at a graph of the level of violence in society - it can be, and is, something that we can measure. You don't need an opinion about it. There's nothing subjective to think about and decide on. It's based on information. As such, your opinion is objectively wrong. There is a wealth of evidence about how bad things have been over the past 200 years or so, and every metric shows that things are getting better. The only way to make the numbers look like things are getting worse is to cherry pick a short window - for example, you can show violent crime rose in the first decade of the 21st century, but it fell for the previous 5 decades to that, so things are still better now.
Making the ultimate darkness visible
He was talking about the boot speed, and the push/pull image workflow.
Expectations vs. Reality: College Edition
This is the answer. It is about doing business while shifting risk to a 3rd party.
Uploading a copyrighted work, then editing it, and saving it into a new file is a clear case of making a derivative version of a protected work. There's no issue if it's Creative Commons allowed or Public Domain, that's just fine and I don't intend to say otherwise. It's when it comes to the nature of the source and the editing and saving that is, to me, just troublesome from a legal / academic standpoint.
Death and transfiguration of enterprise software
I remember reading this article when it came out and found it fascinating but didn't have the knowledge to refute its more amazing claims, I wonder if anyone around here might be able to chime in?
From the username, x86 BSD perhaps?
Thanks for the shout-out! If you can't remember the long URL, http://algorithms.wtf also works. Please send me bug reports!
Enterprise: Solaris and use zones.
Internal/Personal/POC: FreeBSD 11 and use jails.

Both get you ZFS and something lighter-weight than VMs. Need Linux? Bite the bullet and use VMs.
Most people can't understand the code in openssl. So we shouldn't use it? Let's just make all cryptography closed source then. The average person doesn't even know what an elliptic function is.

The point is that there is a large amount of people that do. They check. Not every citizen needs to check, but it is harder for there to be an error or to hoodwink someone if there are more eyes on the code. Essentially why opensource cryptography is good too.

Essentially, it can easily be audited.
Adobe’s Project VoCo lets you edit speech as easily as text
AI/Machine Learning Skills
The makers of this product would even tell you that you aren't in the target market. This is a System On Module, not a Single Board Computer. The later is a "unbox, boot up, and play" experience. The former is "unbox, wire into my existing circuits, standup the board, start coding" experience.
Medieval technology, indistinguishable from magic
A meat-free Turin? Is Italy’s first 'vegetarian city' a recipe for disaster?
"House prices in New Zealand increased 12.7 percent in the year through October, and the average price in largest city Auckland has almost doubled since 2007 to more than NZ$1 million."
That's about $730,000 USD which would make me worry if I was a New Zealander.
In my experience, no more so than any other person in a band, but the principle is that for the up front $300 you won't have to pay the machine at the end of a gig. All things considered it's customary to lightly jab each other based on the chosen instrument (singer, guitarist, bass, drums, keys) as a form of endearment.
I don't think that you can compare a backwards-incompatible change in a low layer of the stack that runs the internet with a feature of CSS parsers that was standardised 4 years ago. Some things are expected to take more time than others.
> Building an opt-out system that no one in their right mind would ever opt into just reeks of anti-consumer behavior trying to hide behind a polite face.

What system are you referring to? If the system is "opt in to being tracked if you want to read this/use this service for free" then plenty of people would opt in. Look at Facebook.
> Engineers have questioned the wisdom of building skyscrapers with foundations in mud and clay. A skyscraper being constructed next door has made it clear that its foundation, unlike the Millennium Tower, reaches down to bedrock.

Even in the "valleys" below Manhattan, where the bedrock is deeper than downtown and midtown, skyscrapers must be anchored to the bedrock [1]. For all of San Francisco's development brouhaha, it appears that when the political stars align its regulation is light.

(The conventional wisdom, "that Manhattan developed two business centers--downtown and midtown--because bedrock is close to the surface in these locations," is wrong. "Bedrock depths [have] very little influence on the creation of separate business districts; rather its poly-centric development was due to residential and manufacturing patterns, and public transportation hubs...[there is] evidence, however, that bedrock depths influenced the placement of skyscrapers within business districts" (emphasis mine).)

[1] http://andromeda.rutgers.edu/%7Ejmbarr/skyscrapers/bedrockJu...
Hell, why not just put "NOT SECURE" on everything? Then people will just be extra careful all the time!!
That's some very creative selective historicising.

The modern definition of guy is man. Unequivocally. Beyond the very seasonal references to the effigy in England, that definition is not in general discourse outside of tomorrow's holiday and your archaic definition is certainly not used by anyone save etymologists.

The modern defining to mean man is not purely an Americanism by any stretch.

The pluralisation is also contemporary.

Regardless of etymological technical "truths", can you really say with intellectual honesty that there's no masculine connotation inherent in "guys"?
Android developer previews in Firebase Testlab
> we'd have lots of empirical evidence

That assumes there would be many attempts at this kind of blackmail, and that any attempts that did occur were discovered and documented.

> I'd like to see some link to that.

Even if the conditions above were satisfied (which I find highly unlikely), this assumes that we (the public) have access to the documentation.
Hmm, interesting read, thanks. Fooled me. I still stick to the overarching point about it being a potential blind spot. Even if the Bush example is false I've known lower-profile wealthy/privileged people who were totally out of touch with the needs of regular people.
Thanks. Easy to remember domain :)
That's not the same. It just means the yes/no vote is just proportional to those that voted. 50 people voting yes and 50 people voting no would be split evenly at 50% for both opinions. But if you have 50 people voicing idk, you have 33% yes, 33% no, and 33% idk.
Show HN: My debut jigsaw puzzle for iOS
The benefit of a container over a full VM is meant to be that the container scheme has just one kernel running.

This scheme would effectively be just one container per VM, thus negating the benefit.

(Edit: So.. it would appear that the benefit is that they're read-only-sharing the kernel between VMs)
Third Blockchain Project Joins Hyperledger Incubator
Oddly enough the current situation in Scotland is that people from the rest of the UK do pay fees when attending Scottish universities but people from Scotland and the rest of the EU don't.