skysight-inc/HackerNews huggingface dataset:
This is great news. Furthering HTTPS adoption is the best way we have to combat pervasive surveillance, and we're making steps in the right direction before HTTP2's opportunistic encryption [1] will improve things on an even wider scale.

We'll also face some new challenges. Over the years, many users have learned to "look for the padlock" before entering their passwords. More sites moving to HTTPS will also increase the percentage of phishing/attack sites served over encrypted connections -- with the padlock to match. We'll need to renew our focus on training users to check for the correct domain name (and possibly an EV cert), or phishing sites with a cert from Let's Encrypt will become a real threat. Browsers are moving in the right direction, displaying https less conspicuously than before, and emphasizing connections with EV certs.

[1] http://httpwg.org/http-extensions/draft-ietf-httpbis-http2-e...
https://en.wikipedia.org/wiki/MPEG-1#B-frames

https://en.wikipedia.org/wiki/MPEG-1#Macroblocks
I had someone on here mention the write protection screw removal method to me before, I just couldn't bring myself to do it on my Pixel 2. But I should try it, I'm glad to hear someone say it worked out great for them. I definitely want to still be able to boot into the normal Chrome OS because it's preferable to me when I'm not working.

I think I see what you're saying. Maybe it's because the pixel is actually a beast, I don't notice it as much. I have VS Code installed, maybe I should give it another shot. I'm probably just used to Atom, and the only time I really used VSC I was trying to work on one of our really large .NET solutions and it just started throwing hundreds of errors at me. I should try one of my MEAN apps in it.
Did Jobs leave Tim Cook in charge because he wanted Apple to fail without him?
It's pretty clear Steve understood what happens when you leave the wrong people at the helm of a technology company.

https://www.youtube.com/watch?v=_1rXqD6M614

For a while I've been wondering why he left Tim Cook in charge and Apple's continued stagnation hasn't helped... I'm starting to think Steve wanted to be sure history remembered him as the only one who could make Apple successful.

Thoughts?
FYI: your summary is more likely to discourage people from meditating than encourage them if:

1) They are not enthusiastic about religion.
2) They are already members of another religion and do not wish to convert, particularly if said religion is not very positive about Buddhism.

For any readers in those two camps: meditation and religion are often linked, but do not need to be. There are plenty of secular guides and practices too, and if you are religiously inclined, there are also likely to be guides on combining your religious beliefs with best-practice meditation.
84 Swedish Krona equals 9.40 US Dollar, according to Google
and 169 SEK is 18.90 US Dollar.

Per the comment page, shipping is expensive outside of the US.
I don't really understand why some big companies are so excited about blockchain. The trustless part of it seems unnecessary for them.
I know I can't. But to do:

>>imagine a world filled with people like Erik (in all careers) how beautiful that world would be

You have to also include `normies`, right ?
In regard to various software engineering literature and quotes (hofstadter's law, mythical man month, etc) while there's some truth in what they say, what you'll take away is absolute lies.

- Just because you can't reliably estimate a project doesn't give you an excuse to refuse to give an estimate. We get it, your estimate will be off. Whats important is that you communicate deadline changes early and often.

- Contrary to everything you hear, software projects can be finished on time. Most of the time we procrastinate at the start of a project and crunch at the end. Stop procrastinating at the start and more projects will be completed on time. Which brings me to...

- If you fail to complete a project on time and failed to communicate this impending delay early, this is 100% your fault. This isn't the fault of some stupid law, or book you read. You slacked off and as a result couldn't reliably see how much work was involved in the project and by the time you realized it was probably too late. This is on you.
If I want to be honest I worship teachers and instructors I have watched their course. I have been in sucky university, I know how it feels to waste your time. The first moment I find my first course (Erik all algorithm course) it was revolution in my life.

I literally worship people like Douglas Schmidt, Erik Demanine, Tim Roughgarden, Robert Sedgwick ...

They literally changed my life.

Can you imagine third world universities? I am sure not. After 4 year , you end up knowing nothing , literally nothing,not even writing hello world.

Thanks to these guys I am reading a book every month.
For past two months I was reading Silberchats database books.
But the more air-aluminum interfaces you can introduce, the better you'll degrade the signal.

Experts recommend wearing a minimum of three tinfoil hats.
List of places with “Silicon” names
I'll take the bait. It's easy to write a slow SQL query, and equally easy to write a fast ORM query. In the long run, for readability and maintainability, ORMs win most of the time. I've rarely found a slow ORM query that couldn't be fixed without resorting to SQL (half the time it's bad indexes, half the time it's doing something un-performant in the ORM).

The few times when I do need to force a certain SQL syntax that the ORM won't give me, I drop down to SQL. But doing that doesn't magically make all queries faster.
It is an open standard. Anyone can purchase and implement it, and it was developed by ISO. The technologies are not royalty free in the US. Don't conflate the two. *

Edit: I emphasize this mainly because the terms have a specific meaning in standards jargon but also because it places the blame for software patent abuses on the wrong parties (the standards developers rather than the lawyers and legislators).
is the site down?
He is talking about the possibility to build AOSP without certain propriatry (native) libraries that are used to communicate with the device components. While you always need them at runtime for a lot of features (but some devices run in wifi-only mode without prorietary libs) it was possible to build without them because of the way they're linked. This was changed in Nougat where it became impossible to build the source code for certain Nexus devices, because during build process there are references to the source code of some proprietary libraries. I had this problem myself while building AOSP for Nexus 5X and can confirm it.
I agree. I guess it is to seem more like buddies, I think it is strange dynamic. I am paying for the product, I don't want an emoji response.
If you like the formatter in the current version of Prompt, wait until you see what's coming out in version 7.3. They've gone nuts. The new mechanisms for formatting are far beyond anything we've had so far. I'm pretty jazzed about it (disclosure: I work for Redgate).
It takes nearly 2 seconds to switch from Teams to direct messages, that is inexcusable.
I've noticed this before on another laptop. I believe it is EFI being picked up by the laptop amplifier, not from the touchpad, but actually from the graphics adaptor or display panel controller. You'll likely actually get the noise any time you cause the whole screen to refresh for a long period.
raise the phone price $50.

i think what would make sense would be free backup, you pay if you want to offload photos from the device to cloud only. that said, google photos and amazon prime photos are much more attractive. both unlimited
Sorry - But I'm not going to meditate so that I can be better at working for somebody else.

I'm going to meditate to improve my own state of being, awareness and oneness with the Universal Mind/Source.
Agree, hence why I mentioned that for the price those boards cost, going Linux might be what the majority will do.

On the other hand I look at chips like the ESP32, and given that my coding skills started on Z80 computers, 512 KB is more than enough and actually more fun to use.

Given the set of high level programming languages I was using in those days, there is plenty of juice to squeeze out of those types of MCUs.
Thank you for sharing this.

Anyone would recommend resources for learning fundamental of data structures?

Book, video, or courses are welcome. I don't care the programming languages that are used for implementations. I am OK with C.
Why do you hate Trello?
Female depressives attempt suicide at a higher rate than men. Men achieve suicide at a higher rate than women because they on average use more violent and irreversible means (such as firearms vs pills). The higher success rate doesn't mean the symptoms are worse.
Ask HN: Shared DevOps for OSS. What would it look like?
A friend and I were arguing whether a "shared devops platform" servicing OSS projects, would be helpful! Many OSS communities I've interacted with, have very little time and resources. Setting up your typical servers (CI/CD, irc, mailing-list, web servers, DBs...etc) just eats a lot of time, let alone baby sitting all this software (security patching, backups...). Yet, almost every OSS project has to do almost all of that.

So HN, do you think a standardized devops platform where any OSS project can get managed standard software stacks helps OSS projects thrive faster? What would that platform look like ?
This is really interesting and the imgur picture you linked (with your explanation) explains it really clearly!

But when seeking, why wouldn't any local media playback seek backwards and reconstruct the full frame? It's not like the partial frame after seeking is useful - I'd rather wait 2 seconds while it scrambles (i mean "hurries up") to show me a proper seek, wouldn't everyone?

What was your Internet search for finding that imgur frame? What is this effect called?
Damn, lost me during the frequency part.
This use case is closed to BLE and particularly iBeacons, but with the advantage of potentially requiring less special hardware and matching physical delineations better than radio (e.g. won't pass through walls to a neighboring business)
Open Source tools are way behind commercial software. Just look at PolySpace Code Prover for example:

https://mathworks.com/products/polyspace-code-prover/

ou PolySpace bug finder :

https://mathworks.com/products/polyspace-bug-finder/
IoT Goes Nuclear: Creating a ZigBee Chain Reaction
H.265 gets you twice the resolution for the same bandwidth, or the same resolution for half the bandwidth.
A solution is to separate the encryption and authentication parts of SSL icons. Lets Encrypt and the likes get only the icon for ecrypted, the other old CA:s gets also the authenticated icon.
Box spent a lot of money on sales and marketing acquiring customers and so IPO'd after in 2014 after being at a net loss of $168M over the course of 2013. Levie had to give up a lot of equity to justify raising more money. More in this TC article: https://techcrunch.com/2014/03/24/hotshot-ceo-aaron-levie-wi...
http://www.thedailybeast.com/articles/2016/06/30/the-billion... disagrees with "He flew on his plane once" as the only involvement Trump had with Epstein.

> “I’ve known Jeff for 15 years,” Trump told New York Magazine in 2002. Calling him a “terrific guy,” Trump continued, “He’s a lot of fun to be with.“

> in the late ’90s, Trump would attend dinner parties at the 71st Street mansion.

> In April 1999, The Mail spotted Trump among the guests at a dinner Epstein threw in honor of Prince Andrew.

> Police evidence shows Trump has called Epstein, flown on Epstein’s plane, and eaten in Epstein’s Florida home.
And the relevant book for people who prefer reading material.
https://tra38.gitbooks.io/essential-copying-and-pasting-from...
why are these hand drawn diagrams easier for me to understand and remember?
I'm thinking this is a prime Betteridge headline.
>Drumpf

Are you 12?
...yet it doesn't count against your karma. Starting from zero would make more sense for a true hacker.
The Algorithm Design Manual by Steven Skiena

Really enjoyed that book! It intersperses real world use cases which helps when your motivation starts to wane and has a warmer tone than most algorithm books. That being said, it is still pretty rigorous and will take a lot of work to get through it all.

Whichever resource you choose, make sure it has exercises and do them! Even if you can't 100% figure some of them out just trying to will help your thinking immensely.
I grew up with Rage Against The Machine and have never trusted a political party. If you are able to take an objective look the utter hypocrisy from both sides is staggering. Clinton supporters will tell you to ignore her scandals because it has not yet been adjudicated but anything said about Trump should be treated as fact and vice versa. Frankly I don't think they can handle the cognitive dissonance as the real world collides with their rhetoric.
I think they ran into the problem that running the programming competition sites costs a lot less and has little maintenance compared to building and updating the classes. It was doubly difficult since they needed mostly applied classes to have students that were interesting to employers and finished in under 4 years.
The CIO of most large US states, with dramatically more responsibility make less than $200k. Some make as little as $150k.

Low risk, public sector jobs shouldn't be paid premium salaries.
I totally oppose this. Sometimes there are to many unkowns to give an estimation. Its better to NOT estimate because it doesnt hold any values.

'finished on time'.... This is the waterfall approach. Its broken in its core. So i also disagree with that.
Yes, after watching so many of Vyacheslav Egorov's (from V8) talks on microbenchmarking, I'm convinced that JIT's are doing some serious witchcraft unmeasurable by microbenchmarks; yet googling relevant tests on jsperf is tough habit to shake off. As this example shows.

While we are on the subject, can I ask if there are any performance advantages of using data attributes over custom attributes for storing data in an element? In other words, can adding non-standard attributes to an element cause any deoptimizations? I know that JS engines use hidden classes/object shapes to optimize JS objects, I assumed something similar might be the case for DOM elements, in that case adding non-standard attribute must mean deoptimization.
It's not entirely clear whether the cores were dummies in either case although it sounds plausible. When actual nukes were dropped as in the Goldsboro incident, the government didn't claim the devices weren't fully operational weapons, just misstated the risk of detonation.
I was excited to see this but this game is crazy partisan and does nothing but to further divide us.
Choosing an Export Distribution Channel
I don't because it's pretty amazing. You get a super easy and flexible planning tool for free. If it has a drawback it is the lack of a calendar that gives you an overview of all pending dates.
Don't fall for the memes. The overlap between what people talk about online, and what people are succeeding with in industry are way way smaller than you think.

Some people can't be bothered to blog. Some people aren't allowed to blog. Some people are paid to write blog posts they know are bullshit bad advice.
>We still haven't seen a true modernist design movement in the digital age.

But we have -- unified design guidelines like Metro and Material Design ARE modernist design movements for the era of displays and interactive media. Just because it only applies for an Operating System or an Application doesn't make it any different than using cut-out colors or Gotham in your print ad.
Inside Walmart's 2025 sustainability goals
No it isn't.

Operating systems like INTEGRITY RTOS are.

http://www.ghs.com/products/rtos/integrity.html

Which is why GNU/Linux gets packed into his own little sandbox running on top of INTEGRITY.
This basically glorifies being a white programmer in California. It's just going to push up rents as people give up on being a black salesman in Wisconsin or a latina nurse in Texas to move to California.
"Somebody heard: Data is the new Oil: No it isn't. Data is not a commodity, it needs to be transformed into a product before it's valuable"

Err...Oil needs to be transformed and refined before it can be called a product (like gasoline, plastics). So the analogy is good and even supports #1!
It's interesting to note that if you add a modulus to the calculation (i.e. if you calculate F(n) mod M), you can calculate ridiculously large values using the matrix/doubling method. You can, for instance, calculate the last 10 digits of the Googolth Fibonacci number instantly (since you only need O(log n) multiplications, it's just a few hundred for 10^100 ). Doing it the "naive" dynamic programming way, it would take you far longer than the age of the universe.

It's a neat illustration of asymptotic running times.
Can you provide more context? Are you trying to enhance Trello? Are you building a Trello competitor? Just curiosity? An informal user case analysis?
So, what would a pro laptop look like in my opinion? Not too different from todays top laptops, but a few things would be improved:

- Easier to repair / upgrade. Dont glue or solder in parts if it is not absolutely neccessary. If the device gets a few mm thicker, its not the end of the world.

- Specifically, make the battery switchable. There is a battery capacity limit for flights in the US, and I've heard this is one reason the new MacBook Pro has the specs it has. A switchable battery would be a way around it.

- Be completely honest about your incentives, and then side with the customer. Say: "We would like to glue down everything, so you can't repair it and have to buy a new one when the battery fails - but we won't." This is a business disadvantage in the short term, but you gain trust and can charge more to customers who know what's important.

- Give it a matte, high-dpi touchscreen. Note, I don't mean mattED, where you stick a matting foil on top of a regular glass screen. I mean native matte, like good business desktop LCD screens.

- Here is an important, overlooked point: Make it "just work". In the sense of "software eats the world", you can do a lot by getting the software right. Have a dedicated team make sure that all popular OSes (Linuxes, Windows) work properly.

- A good keyboard is really important. Let the keys have enough travel, make sure that they have standard sizes, that cursor and home/end keys are easily reachable.

- Give customers the ports they need, or at least make the dongles cheap. Offer a docking station, or recommend one.

(- And if you want to create a Myth, source your components (graphics, WiFi card, touchpad) cleverly, and people will be able to make Hackintoshes out of your machines. Just be careful never to advertise this, or to give instructions :-D.)

I believe a smaller vendor could pull this off nowadays. Even if you don't have the economies of scale, you are selling to a pro segement who is willing to pay more for a "no-comprimizes" device.

(Edit: cleaned up)
This is not entirely correct. Google has no possibility to break things in short time if they work exactly like the Google implementation. Although Google can update their clients through automatic updates there are still devices only connected via low-bandwidth and similar things which will receive the update heavily delayed. And finally there are devices that will never receive certain update.

Example: The Android Market API (yes android market, the name it had before play store) is still available and can be used, although it was replaced by a Play Store API years ago and there exist public client libraries for using it and the API is heavily used to grab free apps from the play store. However, as Google Play was never available for Android < 2.3 and there are still some users with this OS, the only way to disable this old API would be to remove Play Store access for a few hundred thousand users, which they refused to do until now.
I wasn't aware (and would be surprised if) iOS apps with microphone privileges could listen all the time, even while in the background, which is really what would be required in this situation.

Is that really the case, or is the Ars piece suggesting I would be walking around with the advertiser's enabled app open all the time? (And I'd guess Android is in a similar boat.)
Connectors+in+PC+Motherboard
Other parts of the world should have made the internet then.
For any readers in those two camps... I really recommend Zen. It in known for its rejections of beliefs.
Ignoring the price tag, there's no difference between Let's Encrypt and "other old CAs". They both perform the same kind of validation for DV certificates. Some might even say Let's Encrypt does more than others, given that they support CAA.

Other types of certificates (such as EV, which attempt to verify the business entity requesting the certificate exists and is indeed requesting it) already get different treatment in most browsers (namely the organization's name being shown in a green box).
I don't think the political prisons were built overnight. It was likely small, well meaning laws that slowly over time became corrupted. I can see the grandparents point. Reporting hotlines for things that are essentially thought crimes worry me.
> Over the years, many users have learned to "look for the padlock" before entering their passwords.

This is - unfortunately - bad advice. The padlock tells you that you're on the site that you are. But it doesn't tell you anything about the trustworthiness of the site.

If you're at https://evilhacker.com and you enter your password then evilhacker will get your password.
I wonder how effective HTTPS is against MITM attacks. When I type www.somedomain.com into my browser, it goes to http://www.somedomain.com. If the page then redirects to https://www.somedomain.com it is too late already.

A MITM attacker could intercept my initial request and then proxy everything afterwards. So he would get all the data in clear text.

Somebody could probably put an app onto a phone that offers a wifi hotspot and then MITMs everything. By walking around with that phone he would probably capture all kinds of "private" communication all the time. And none of us would know.

When I am in an airport and see a hotspot "Free Airport Wifi" I always suspect it is such an app in reality. I mean, everybody can call their hotspot "Free Airport Wifi".
4) Get out in time :D
> that women on various forms of birth control have put up with for the past several decades. And continue to endure.

I keep seeing this kind of thing spouted and it's ridiculous. No woman has to take birth control. They do it because they want sex without any risks. If a women gets depression from it then she should stop taking it.
Nope. I'm going for FaceGooSoft or FaceGleSoft. First writes better. Second sounds better. But you can have the copyrite because all are fun.
Deploy .NET Core Apps with CI and Docker to AWS ECS
Canada investigates mysterious 'pinging' sound at bottom of sea in Arctic
"Tell them I was a writer.

A maker of software.

A humanist. A father.

And many things.

But above all, a writer.

Thank You. :)"

- Pieter Hintjens http://hintjens.com/
This has been posted once before, its cool.

Do people actually use it though?
Google's A.I. Learns How to Encrypt Itself
already there and heavily relying on EU software directive 2009/24/EC :)
MISRA only goes thus far.

For writing safe code in C, you should also check Frama-C and CERT Secure Coding Standards.

http://frama-c.com/

https://www.securecoding.cert.org/confluence/display/seccode...

Even better, get the algorithms written in a theorem prover which is guaranteed to generate reliable safe C code.

This is approach taken by Microsoft with P Language(Windows USB device driver stack) and F* (new TLS implementation).