skysight-inc/HackerNews huggingface dataset:
Typical users vomit and faint when they see text set in Tahoma that was clearly meant for Helvetica, or when a paragraph is one line taller or shorter than the one and only official layout.

Telepathic sensitivity to designer intent is extremely common! Don't let elastic, robust CSS layout techniques mess with your pixel-perfect templates!
Yes I can. But first I would like to say that I could too just have requested citation from the parent comment and be done. Finding papers you read a month/year/years ago take times, and links goes sometimes dead, and in a online forum like this it is generally appreciated if the requester has done some initial attempts themselves to search online for sources.

Anyway, it was a polite request and I happened to save the pdf. Source: Rapport 2009:7 R, Swedish national agency of higher education, title: Man ska bli lärare!.
The "let it crash" philosophy assumes that there is some external system monitoring & restarting the program that crashes. They mention this explicitly in the article, but it's worth repeating: you need this external system anyway. Your program may stop executing for all sorts of reasons other than a bug in your program, from bugs in your dependencies to uncaught errors to infinite loops to cosmic rays to someone tripping over the power cord to an earthquake destroying the entire U.S. west coast. Your distributed system needs to handle these as operational errors, and in extreme cases you might not even have power available for 1000 miles; there is no possible way that a single process could recover from that.

They also recommend configuring Node to dump core on programmer error, which includes (literally) all of the diagnostic information available on the server.
Ask HN: How many times has the “user” type been implemented?
We probably will never know, yet it doesn't matter. I think most people would agree that it's "too many", and that's the point I'm trying to make.

How come are we so quick to look for libraries and modules in the name of code reuse, yet we still reimplement common models/types/classes over and over again?
There is something like that for JavaScript https://emilschutte.com/stackoverflow-autocomplete/
If this was a side effect their pool was almost certainly vasectomy candidates, and rather than there being compensation, they probably didn't need to pay for their treatment.
As a self driving car engineer, hands free is exactly what you want to achieve ;)
> The highest in U.S. history was 61%.

That's not surprising since the US doesn't make election day a public holiday.
.us is barely used. The three letter TLDs started out as US only because the whole internet started out as US only. The first country that got its own national TLD was Netherland (.nl). .us was introduced later, but by that time, the ship had sailed.
That's fine for experimenting but sounds terrible when you want to track down where problems came from and rolling back.
In the article you posted the WOT spokesperson appears to say that they'll be making sure that data is better anonymized in future - not that they will stop selling it. I don't think this type of response is going to work out well for them...

"When there are cases where information has not been anonymized and protected, we will, of course, review this and, if necessary, take steps to ensure adequate protection for our users."
I would agree, except substitute Plasma for Gnome 3.
Same here. When the application has been designed from the ground-up with the target platform in mind, the user experience is almost always better than the equivalent in-browser, at least for me.

Apart from performance-intensive apps/services like Netflix or Twitch, even things like Linkedin I find more engaging on a tablet/phone.

The app feels more responsive, the design does not have the same constraints as when designing for a browser.

But I really don't see the need of seeing it as a dichotomy, as a "there will be only one" thing.

The convenience/ubiquity/versatility of a browser is hard to match.

Just like the browser didn't kill desktop applications, native apps won't kill the browser.
The most annoying thing about all this is that the central argument of this article "Separate recoverable errors from bugs" never made it to a widely used imperative language. C# had the opportunity but blew it.

Java mixed the two kinds of exceptions up completely and checked exceptions just added insult to that injury.

The best implementation I have seen for an imperative language is in Midori (The language used in Microsofts research OS with the same name).

http://joeduffyblog.com/2016/02/07/the-error-model/#bugs-are...

It's basically "C# done right". The blog post is well worth reading.
There is this:

http://dev.nauck-it.de/projects/license-manager
Where I live, buzzwords probably a longer shelf-life than normal. Also, industry tends to become aware of buzzwords a few years later than everyone else so the dynamic is a little different there.
Not very easy to read

http://i.imgur.com/G7ivBBs.png
A fast and (possibly) new algorithm for performing the division of large numbers
ROM bootloader initially, chainloading a flasher that supports fastboot, if I remember correctly. Most Allwinner hardware is relatively brick-proof thanks to this.
Ditto that! I use mine as a Linux workstation for the desktop .. like, I literally leave it on my desktop with a pencil through it, and treat it like a little workstation.

Great device, amazing price, and finally: the year of Linux on the desktop! :P
For every phone where I could replace the battery, I did. I talked to friends with the same phones, and they often did as well. Comments along the lines of "Wow, battery life as good as new, I'll keep it for another 6 months".

Similar for laptops. Replacing batteries, upgrading ram, and upgrading storage are very common.

You really think that if you blow $2 or $3k on a new laptop that somewhere during it's life you might not want a larger SSD or more than 16GB ram?

Sure it might have made it a mm or two thicker, definitely a price I'd pay for something that's easier to fix (or have fixed) or upgrade.
How to create a tweetable link from your articles in WordPress
Ask HN: What is your developer hiring process that works for you?
I'm very keen to hear from people that are part of a developer hiring process about what works for them.

Specifically, what are the kinds of things you do and processes you follow that give you the best chance of finding the right person.

Also maybe what you have tried that didn't work so well!

Thanks!
Smart people can do stupid things.
> Your last point doesn't explain why or how time dilation occurs, just that we know that the speed of light is a constant to all reference frames.

But that's what the light clock experiment [1] is all about. The two observers see the light moving at the same speed, but one observer thinks the light takes a longer path than the other observer does. If both observations are equally valid, the inevitable conclusion is time dilation.

[1] http://www.emc2-explained.info/The-Light-Clock/#.WBxO8vnLdPA
I'm not sure if I understand you correctly. What do you mean by "allow it"?

I would even define an error to be a situation the code can't handle properly, and those things are usually not under your control (if I rip out a harddisk while some program is running, the developer can't do anything against that - but I would hope that the program fails accordingly and states why it failed).

I'm obviously paraphrasing here, but things like this do happen (USB devices get disconnected, remote services go down etc).

Edit: Obviously, this applies to different code at different levels. Serialization code might fail due to input - but that also is not under the control of the dev writing the serialization logic. Thus, it should fail.
Ha! This is the best answer I've ever seen to the tired old "you'll change your mind one day" argument. I'm stealing this one.
Actual details: http://n-o-d-e.net/post/152643238256/how-to-create-the-diy-1...

I'd be interested in knowing if the resulting Ubuntu installation could be upgraded to something more modern. The instructions seem to rely on a rather old non-LTS version.
Web of Trust is a browser extension that claims 140 million installs. The marketing language on the home page [1] is all about how the extension will help users decide which websites to trust.

Their privacy statement [2] includes a section that describes "Browsing usage, including visited web pages, clickstream data or web address accessed;" as one of the categories of "non-personal information" that they may disclose or share with 3rd parties.

I'd imagine most users installing an extension to make their browsing safer would not be happy to know they were also making their entire browsing history available to 3rd party data brokers at the same time.

Unscrupulous business practices are definitely made easier when no one actually reads Privacy Policies...

[1] https://www.mywot.com/

[2] https://www.mywot.com/en/privacy/privacy_policy
To be honest, the very first books - The Structure of Magic - are much better than later "practical" and manipulative stuff. The notions of "patching reality" - what we call today the Confirmation and Self-serving biases (deletion, distribution) and "framing effects" are correct in general.

Programming, or what they call "re-framing" works to some extent, by "unlearning" some wrong concepts acquired through social conditioning and biased perceptions, by re-framing (transforming) them into more closely related to actual reality. Anchoring is already crap (but use of amulets and "things of power" is exactly this). So are the supposed correlations between looking patterns and modes of thinking (while naive people (children) some times show such correlations).

The core ideas of early NLP, including re-framing, were nothing new. The prophets of old times seemingly did exactly this - they succeeded in re-framing of traditional views and beliefs.

The later "technique" stuff, is nonsense. It apparently worked because hypocrisy, manipulations, reading and use of so-called body language are as old as humanity. Again, priests of any kind are famous practitioners of such manipulative techniques. Nowadays businessmen and politicians are using similar tricks, as if we are still in ignorant middle ages.)
Show HN: How We Accidentally Built a Multipurpose WordPress Theme in Two Months
Counting pixels is primitive; accepting text layout variance and making the web page look good with all variants and renderings of any reasonable font is less primitive.
My list of essentials for a pro computer at this point would be:

* Robustness

* Upgradeability

* longevity

* reasonable performance

Having the latest and greatest isn't essential, since I've had my current pair of thinkpad and custom build desktop for a few years now and after a some upgrades(new SSDs, maybe a new GPU and extra RAM for the desktop, etc.) I expect to use them for a few more, maybe even until 2020, if nothing blows out. They perform reasonably well for my needs and are very versatile machines. Right now I can replace the HDD, upgrade the M2 SSD, put a new screen on my laptop and replace the battery myself. That is worth a lot to me and I'm willing to pay more for a machine that isn't a sealed monolith, that is the biggest anti-feature for me. I grew up back when you could just open up your PC case and swap components out and I'm absolutely unwilling to give that up. I don't really want to buy a new laptop every two years, if I do now it will be because I want one, not because I need one.
It may be my misunderstanding, but isn't 11% ridiculously low?

As I founder, if I sold almost 90% of MY company along the way, I would feel like I didn't do good enough job of building it without relying too much on other investors.
Give up expectations. You will be free from stress. Thats it.
While reducing the influence of lobbyists is a laudable goal, it's hard to imagine how anyone could honestly see Trump as a fighter against corruption. His own business has been far too riddled with corruption and scams.
My understanding is that ML is largely driven by academics, not professional programmers, and as a result, they tend to gravitate to easy to understand languages like Python. A similar thing seems to have happened with Data Science, Statistics etc.
Na, I think it has more to do with either projecting ones own wishes onto somebody else or maybe even talk somebody down so that you can feel better if you don't are completely happy with the current situation.

I find it much more interesting to ask why somebody wants no kids. That gives much more insight into the person's mind than when you try to persuade them with your own experiences and produces much better followup talk opportunities.
OpenGL was never an advertised feature of the C.H.I.P as far as I can tell. Economies of scale mean that it's cheaper to reuse a tablet SoC and just ignore the GPU entirely than it is to use a chip where all the functionality is available. The GPU probably works fine in its intended application, low-end Android tablets.
Pro computing could also mean moving to a more open hardware platform; consider Talos workstation with a Power8 CPU instead of x86

https://www.crowdsupply.com/raptor-computing-systems/talos-s...

I've had a chance to test some Power8 systems, and they perform very well. Given the choice, I'd take one over a Xeon system, for intensive professional work.
And then: http://code.visualstudio.com/blogs/2016/11/3/rollback
Both parties have plenty of faults, but lately the Republicans have refused to even do their job in governing the US, and have promised to undermine the Supreme Court with their misguided power games.
Was expecting generic, run-of-the-mill "just containerize using Docker/LXC", found a refreshing perspective on dealing with services without explicit containerization. Awesome post and thank you!
> His research and writing focuses on the notion that subconscious beliefs are the major influence on our perceptions,

I think there's definitely some truth to this. Here's a concrete example from my life: I have anxiety in crowded grocery stores, which hampers my ability to shop for food and eat healthy. On the surface, thats "social anxiety", but digging deeper, for me it's about some deeper baggage I have about being ignored. The people intruding my space at the supermarket are activating this subconscious fear/pain because they seem to "ignore" my physical presence.

Very fascinating how the layers of psychology/physiology meet. I will look into Liptons work some more.
From https://en.wikipedia.org/wiki/United_States_military_nuclear... :
"Broken Arrow refers to an accidental event that involves nuclear weapons, warheads or components which does not create the risk of nuclear war."

It usually means lost nuclear weapons.

The title is editorialized and should be changed to the original article title: "Canadian army interested in old nuke that may have been found off Haida Gwaii"
HeartMath sounds like a good base with a lot of esoteric bullshit thrown on top.

Maybe breathing in a consistent rhythm to get a coherent heart rate variability (HRV) is the sole magic behind meditation, HeartMath, etc?

Here is a good TEDx talk by Alan Watkins on HRV: https://youtu.be/Q_fFattg8N0 (there is also a part 1, but part 2 has the good demo)
Little Known Ways to Hassle-Free Software Localization
Show HN: Will there be space?
> if cannon design techniques are a closely-guarded state secret.

Which indeed were, for a long time, specially regarding metallurgy.
Being a polyglot programmer
> What’s more, we lack the innovative institutions that previously provided cover for the future to take shape: PARC, Bell Labs, et. al.

We may not have as large corporate sponsored basic research, but we do have the Internet. We should be able to leverage that advantage to some effect :)
Meet with new business collaboration service – CONNECTOR73
Install cyanogenmod, do not install any google apps or "pay services", use f-droid.

Use webapps, a browser to sandbox better websites.

Phone is marvelous now.
If it culture has a major impact, it should be fairly testable. Any differences, after correlated to gender distribution in the work force, should hint to it.

Theories that can be tested to either be false or true is always valuable in this kind of discussions.
It should be rebranded as WAT
App I made for fun at uni to predict when a certain area might have spaces to work in. Could be useful in a variety of other situations!

Currently has limited protection against malicious users (although there is a ReCAPTCHA to avoid bots) which makes it quick and easy to update a location 'on the go', but I guess we'll see how that goes. :)

Basically all the places on the website so far are from my university (except for a few 'funny' ones from my friends :P), but feel free to create any more you might find useful.
Growing Demand for Self Drive Car Rental Marketplace
Because you seem to focus on e-commerce/web startups, but there are established engineering companies in the SoCal area too.
6 Ways to Lose Belly Fat, Based on Science
GPON FTTH networks (in)security
Anyone have any experience with the Nikon KeyMission action cameras?
Not exactly an answer to your question, but some years ago (2010) this report was made in the UK about the Harm Caused By Drugs:

http://media.economist.com/sites/default/files/imagecache/or...

Edit: here another chart showing the 'dependence' of tobacco is very high:

http://medicalmarijuana.procon.org/files/1-medical-marijuana...
What course did you study to get this knowledge?
Nice try, capitalist hawks!
Sure, I agree -- but that's not what the page claims. It says "insecure protocol versions and choices of algorithms are not supported, by design" -- the protocols and modes that I listed are known to have various insecurities, and it still supports them.
I agree that to be useful it's necessary to support old, less secure or even insecure modes, but this is at odds with the above stated goal.

My point is about the imprecise description.
It is a social problem, there is a saying, "Humans are like pigeons, alone and in small groups they are elegant and nice, together in large group they are obnoxious and leave huge piles of corroding shit".
Getting a quote from The Clash from the US Government, that's actually pretty awesome.
9 - frequency, amplitude, and delta for each _x _y and _z
I think you are on to something. You should really consider publishing this, just don't forget to add some graphs and equations. Hell, screw that, just package it as a book and start selling it for £6.99 a pop.
This product already exists, check out https://www.isidewith.com/
I wanted to host the whole thing statically, hence no search. I'm just a mediocre hobby developer, so I can live with it.

Regarding the missing pages, I noticed that too. Will look into it.
This argumentation is complete bullshit and even dangerous.

> "Parsing JSON is a Minefield": From a strictly software engineering perspective these ambiguities can lead to annoying bugs and reliability problems, but in a security context such as JOSE they can be fodder for attackers to exploit. It really feels like JSON could use a well-defined “strict mode”.

Not at all.
This article just outlined the differences of the various implementations regarding the 2 specs. And then added a spec test suite, including all the undefined problems, with suggestions how to go forward.

JSON is already strict enough. The problem are people like op to make it even not-stricter. The latest JSON spec RFC 7159 adds ambiguity by allowing all scalar values on the top level, which leads to practical exploitability.
See e.g. https://metacpan.org/pod/Cpanel::JSON::XS#OLD-VS.-NEW-JSON-R...

"For example, imagine you have two banks communicating, and on one side, the JSON coder gets upgraded. Two messages, such as 10 and 1000 might then be confused to mean 101000, something that couldn't happen in the original JSON, because neither of these messages would be valid JSON.

If one side accepts these messages, then an upgrade in the coder on either side could result in this becoming exploitable."

What the op now suggests is adding the insecurity-mistake YAML took by adding tags to all keys. Here types don't add security, they weaken security!

It is security nightmare as it is leading to exploits which are e.g. already added to metasploit (CVE-2015-1592). tagged decoders are always a problem, and currently JSON and msgpack are the only serializers safe from such exploits due to its strictness.

I would suggest that the remaining JSON libraries first fix their problems by
conforming to the specs. First the secure old variant (RFC 4627) as default, and then maybe the relaxed new RFC 7159 variant, but denoting the security problems with interop of scalar values.

Currently only my Cpanel::JSON::XS library pass all these tests from the Minefield article. E.g. the ruby one, which the author complains about, not.
The type problem is esp. problematic in dynamic languages like ruby, where classes are not finalized by default.
I've been thinking about licensing recently, in the context of package managers.

How can you allow people to install and update commercial packages, without the problem that anyone can use any key?

I'm thinking particularly in terms of software which is licensed to run on 1 domain, 3 domains, 5 domains etc - but as soon as you use a CLI package installer, you don't know the domain being used.
How did we get here: ESLint
> I'm not a fan of defensive programming as it can hide an obvious bug for a long time (I consider it a Good Thing that the program crashed otherwise we might have gone months, or even years, with noticing the actual bug).

I've had segfaults "hidden" for a long time because my artist coworkers weren't reporting crashes in their tools. They assumed a 5 minute fix was something really complicated. Non-defensive programming is no panacea here. Worse, non-defensive programming often meant crashes well after the initial problem anyways, when all sane context was lost.

My takeaway here is that I need to automatically collect crashes - and other failures - instead of relying on end users to report the problem. This is entirely compatible with defensive programming - right now I'm looking at sentry.io and it's competitors (and what I might consider rolling myself) to hook up as a reporting back end for yet another assertion library (since none of them bother with C++ bindings.) On a previous codebase, we had an assert-ish macro:

..._CHECKFAIL( precondition, description, onPreconditionFailed );

Which let code like this (to invent a very bad example) not fatally crash:

..._CHECKFAIL( texture, "Corrupt or missing texture - failed to load [" << texturePath << "]", return PlaceholderTexture() );
return texture;

Instead of giving me a crash deep in my rendering pipeline minutes after loading with no context as to what texture might be missing. Make it annoying as a crash in your internal builds and it will be triaged as a crash. Or even more severely, possibly, if simply hitting the assert automatically opens a bug in your DB and assigns your leads/managers to triage it and CCs QA, whoever committed last, and everyone who reviewed last commit ;)

> Logging is an art.

You're right, and it's hard. However. It's very easy to do better than not logging at all.

And I think something similar applies to defensive programming. You want null to crash your program? Do so explicitly, maybe with an error message describing what assumption was violated, preferably in release too instead of adding a possible security vulnerability to your codebase: http://blog.llvm.org/2011/05/what-every-c-programmer-should-... . Basically, always enabled fatal asserts.

This might even be a bit easier than logging - it's hard to pack too much information into a fatal assert. After all, there's only going to be one of them per run.
Tracking anyone via mobile phone (WiFi-based IMSI Catcher)
Twitter: “Help