skysight-inc/HackerNews huggingface dataset:
J. Alex Halderman provides the backstory (in his own words) to yesterday's front-page story from NYMag.com:

https://news.ycombinator.com/item?id=13019333
Sessions by Pusher
Took less than two seconds to google. https://github.com/vuejs/vue-router
So can PNG. WebP doesn't add anything new here.

Webp compresses to much smaller file sizes than PNG in lossless mode.

Debunked in the post you're replying to

Sorry, which post?
Theranos whistleblower shook the company and his family
There are plenty of things that could be used to speed up particular hotspots - arena allocators are one option.

Better than that is to not allocate at all, which is the focus of the effort here.

A step further down the line of optimisation may identify allocation hotspots and use custom allocation strategies rather than using the language default (the heap).
This particular setup can/will leak cookies set on foo.tld to ads.foo.tld which leads to security concerns - only in your specific example though. If you were to use www.foo.tld and ads.foo.tld then you're good to go. While it is possible to carefully setup cookies that do not leak, its something you need to be careful of when recommending. That said, I do agree with your premise and wish native ad hosting like this happened much more often.

Reading material: http://erik.io/blog/2014/03/04/definitive-guide-to-cookie-do...
It does... until everyone stops talking about those interesting things, and starts ranting non-stop about politics. I may even share their political views... but I'd rather be able to mute that garbage and only read about the stuff I have interest in.
> Its such a simple transformation and adheres to javascript standard behavior. JSX doesn't add anything new, it just adds a way to do something old.

I don't understand your point, to be honest. A lot of language features are just syntactic sugar for lower-level language functionality. ES6 getter/setters are just syntactic sugar for Object.defineProperty. Does this mean that ES6 and ES5 are the "same"?

No, of course not, but ES6 getter/setters are specified in ECMA-262 and JSX is not, so ES6 gets to be called JavaScript and JSX doesn't. It's really as simple as that.

My point is that because JSX is not JavaScript it then requires a ton of complexity to use it. Whether that complexity is justified is up to each person, but we can't ignore that complexity exists when arguing it vs. alternatives.
I don't see why not. Their customers appear quite loyal and their product features continue to expand in a way that hasn't added too much complexity for people new to the platform and since their brand recognition in their vertical is so positive and we'll communicated I don't see that added complexity turning off to many new users, because their experience of that complexity appears to be, 'well because it's powerful and awesome, so I expect I'd have to spend some time learning it and I'm prepared for that', versus 'ughh I don't get it and it costs and I don't know if it'll deliver what I need so I'm going to quite right now... Company-x sucks'.
Just commenting on what I'm seeing from others.
Maybe to preven plagiarism? If people share the same image around, you can trace it back to the original author with a watermark, etc.
"Currently you cannot run Python 2 inside the Python 3 virtual machine."

does this mean he tried to run python 2 using the python 3 interpreter? no shit it doesn't work ._. that's not how turing machines work
With regard to the $1T platinum coin, sounds like more people should read "Man, Economy, and State" https://mises.org/library/man-economy-and-state-power-and-ma...

There is a lack of understanding around money and currency, and how they come to exist in an economy.
GuriVR – Describe your VR experience and the editor will do the rest
Github Pages with CNAME file, CircleCI, Cloudflare. Free, CDN, and SSL hosted if it's all open source.

No how-to, but it's all open source here https://github.com/barricadeio/docs

Most awkward part was figuring out the voodoo required to get Hugo and Middleman working (lots of trial and error).
> It's a suspension, not a deletion

I'd doubt that the underlying data is deleted even if you choose to delete your account.
> Oh and by the way, remember to buy lettuce today ;)

Raymond Shaw is the kindest, bravest, warmest, most wonderful human being I' ve ever known...
We're using Vue and its router in production since 1.x, so I'm not sure where you got that impression...
"The simplest thing that works and still meets all legitimately needed requirements."
Aren't patents exactly for protecting a particular way of doing things, instead of applying to concepts?

Not to defend software patents, I still think they're a stupid idea, but for patents prior art applies to the exact workings of something, not the general idea and concept.
Eh, you may want to peek at the XKCD things explainer to see what is life under 1k words.

Everybody uses more than a few thousand words on at least one language. And selecting the least used ones will make your passprhases easier to memorize, because they have much more concrete meaning (by virtue of their rarity) than the most used words.
None of your documents indicate exactly what this does. It looks like it is a way to pull from multiple version controls systems with a single command, as well as do queries of some type.
Learning to Be Thankful Year Round
I use Google AppEngine with Python SDK for http://HockeyBias.com It is easy to use and update the site.
Heads up, passing 0 as first parameter to generate-grid makes the javascript on the page to freeze, at least on Safari (maybe an endless loop).
Thanks, I am more interested in developing social websites with modern look and more performance, I mean like the design of medium.com or hashnode.com, I think they do render the first page fully canonical HTML, and then every subsequent request is rendered using the js framework GETing some JSON which gives more space to the server to do other work.

I am really interested in this approach but I fear about the SEO and any additional unnecessary complexities like compatibility with old browsers and OSs especially in Android.
Consider looking at GitLab CI. The Runner builds Docker images, it includes a docker registry, and we call pipeline steps stages.
I believe if Sun and MS had provided optimized AOT native compilers as part of Java and .NET, instead of waiting 20 years to do so or relying on third parties, C++ use cases would be even less than they are nowadays.

Just in cases someone mentions NGEN, it is just intended to enable fast startups.
Privacy is the biggest problem - both sides of the connection present their identity simultaneously, so you leak your identity to a MITM. For server-to-server communication, that's fine. For person-to-website communication, the two sides are semantically asymmetric, and I don't want to prove to 104.20.44.44 that I am geofft until 104.20.44.44 proves to me that it's news.ycombinator.com.

UX is the other one. Chrome is removing support for <keygen>, and they have excellent arguments for why: https://groups.google.com/a/chromium.org/d/msg/blink-dev/z_q... (Essentially, the ability for a website to inject certs into the system cert store is super weird.)

And without <keygen>, the experience of installing certs is completely awful. Let alone the UX problems with expired certs, etc.
I'm going to build a vuejs markdown site editor similar to Gatsby I just don't like Facebook it's refreshing that an independent project is gaining popularity the server side rendering is a big deal when you want to support mobile well.
5 Common Turkey Setups for Your Dinner
On the other hand, the OP's assertion that money just flows to people who "look right" (my words, but true) without real regard for the product itself, applies largely to seed money only. A proper Series A round (or more) should require a strong product and customer feedback. So I think my point still holds. Seed VC is looking at market opportunity and founders who "look right", not a killer product that customers love, because the product may not exist or have a significant customer base yet.
This makes me sad. Academic and medical sites should really be the last places using TLS breaking gateways. Mainly because staff frequently have to sign legal confidentiality and data access agreements granting them personal access to other institutions patient data rather than having an institutional agreement.

Posture checking and zero internal network trust really needs to take hold in these places. If people must tap TLS, they should do it via installation of software client side, not MITM.
I'm well aware they want to, and usually do, do that, but they never should have been given that ability in the first place. SO is in a position to take that option off the table. I'm sure there are plenty of companies willing to give SO money to advertise their product with an image and a link, even if it means they have to trust SO to do what they agree to without being able to stick a nanny-cam in their website.
First 64-bit distro for Raspberry Pi 3 is… SUSE?
Thats usually not possible. We're not doing pure science, we're doing engineering - which happens to mix science AND economics.

This means the "no deadlines" wet dream is usually a recipe for "oh shit, we ran out of money" for most projects. Also programmers are usually big babies; give them unlimited time and they'll give you unlimited bloat. Other than doing R&D it usually is impossible to have no deadlines.

Most people are not doing R&D, but when you really do your government usually has programs to finance it. That's precisely how you can afford to not have deadlines because your company is paid to advance the state of the art. And even then you usually get paid after the project is over and after you've filled a bunch of forms to clearly state the problem, your solution as well as existing work in the area and why it did not apply to your case.

Or if you're doing servicing work you get paid by shipping at predetermined milestones. Building software is a LOT more complex than just writing down the code and too many developers are clueless when it comes to politics, economics or management.

I used to think the same when I was still new to the software industry. It took me years to understand theres a whole world around programming required for programming to happen in the first place.
The blogging platform (http://telegra.ph/) is claimed to be anonymous, not Telegram.
Regarding the iPhone 5c, the attack from Sergei Skorobogatov is very interesting.

"The bumpy road towards iPhone 5c NAND mirroring" -
https://arxiv.org/abs/1609.04327

And the video:

https://www.youtube.com/watch?v=tM66GWrwbsY
Well, they do show in-group preference.

Does that count?

I'd say yes.
It's literally as complex as transpiling ES6 to ES5.

And although JSX is not in the ECMA-262 spec, it does have a spec, so there's that.
It IS fast.

We are doing a project with a company that uses it for all their Windows applications.

Delphi conferences are still a thing in Germany.
You can use SSL with S3 as the backend, you just have to set the distribution origin to s3.amazonaws.com/bucket-name/
thanks for trying to help out. just checked, this is how I'm running it:

while : ; do SYNAPSE_CACHE_FACTOR=0.01 python -B -m synapse.app.homeserver -c homeserver.yaml ; sleep 20 ; done

I'm not even using runit or anything; I set it up like this several months ago and haven't bothered touching it since because it's been relatively solid and reliable.

Even at a "cache factor" of 0.01, my tiny DO droplet is still swapping and eventually the homeserver gets OOM killed.
Two factor authentication (2FA)?
Even those 44 bits are too little nowadays. Passphrases are not a godsend, but something good to use when the correct technology - a password manager - is not available.

A notable use case is choosing a master password for your password manager. And you'll want a longer phrase.
Yes, I'm well aware; what would make you think I didn't know that? There is allowed to be more than one politically active Latino advocacy organization.
I'd like a Keybase plugin that performed that function!
Revenue website here in Ireland does this, you need to have a cert which is read by a java applet, cert is issued after you use a one time password mailed to your home from what i remember, they expire every so often and need to be renewed.

One of the banking sites did as well but dropped it, now my gmail is more secure than my bank account since there is no 2fa on this bank.

The java applet approach must cause endless customer support requests
9 must-read eBooks for Product Managers: prototyping, UX and enterprise software
I roll in an unusual way, so take this with a grain of salt:

I'm very dubious of resumes. Typical resume is an alphabet-soup of "hot" technologies alongside a 4.0 GPA they got by remembering, regurgitating, then forgetting.

Two things that seal the deal for me are: A) well-executed personal projects that they can B) discuss their methodology fluently, casually, and competently so that I know it is truly their own work. If they can do A and B, I don't even care if they graduated high school.

That, and the definition of "data scientist" is somewhat up-in-the-air. A lot of jobs listed as "data scientist" are really more like map-reduce DBAs than anything remotely resembling science.
Asking as someone not as familiar with the research community as I'd like to be, what are DOI files, what advantages do they have over PDF/PostScript, and are they common?
Rust uses jemalloc which has per-thread-pooling (sort of). There is very little lock contention as there are multiple pools per-thread.

Also per thread pooling doesn't use more memory then not. In some cases it actually uses less. Citation: https://people.freebsd.org/~jasone/jemalloc/bsdcan2006/jemal...
There is no need to smear another site.
It's not that hard to remember, but some sites (my last encounter was paypal) still insist on truncating passwords to a certain length. It's not much fun having to remember "My 42nd spacesh".
you seem to be garnering a bunch of hostile responses, so I want to say I agree with you. And I think a lot of their "prestigious education" is somewhat "prestige theater". I believe it's artificial scarcity, either to keep the prestige high, or (somewhat cynically) to keep wages high.

Yes, there has to be a rigorous QA process to get your medical license and keep practicing. That's already covered by a state board of medical examiners. Where I think the artificial scarcity comes in is medical schools. There shouldn't be this "interview" process and excessive scrutiny, 6-figure tuitions, and do-or-die levels of pressure to simply learn how to practice medicine. I think this manufactures prestige.

There should be enough medical schools for virtually anyone who wants to get in. If idiots go they will flunk out at exam time. No need to screen them at the door. No need to ensure they have "straight-A's". What they need is the willingness to learn. It should be "to be a doctor, you need to learn topics {A,B,....Z}, and once you do, and demonstrate that to the board, you are a dr."

You should be able to start out emptying bedpans and have a ladder you can climb to get to physician. I can't think of someone who would make a better dr than one who has already worked 10 years in a hospital. Go from orderly/CNA, to nurse, to practitioner, to dr. And structure the education to work around this! Once you get to nurse, allow a 3 day-work, 2day school schedule. Even if it takes you 8 years, you have an MD with basically an entire clinical rotation completed. And (theoretically) no debt! Now this person doesn't need a $200k salary to pay back their tuition loans. Ultimately this could lower medical costs for everyone.
Then we just need a phone inside a phone right? Provide them with a fake password that shows no data, has 1 kids game app, and gives you plausible deniability. If coded correctly would be no way to prove if there is or is not a second deeper encrypted device.
Ask HN: Examples of C# or Java legacy code
Hi,

I'm putting together a guide (or course, depends on how you look at it) for people who want to self study and get better at
1. recognizing code smells and poorly designed code
2. refactoring legacy code
3. then bringing it under tests

I am not an expert in any of these and am hoping that pulling all of the material together, creating exercises, and working through them with others will help me and also provide some materials for anyone who wants to do it after us.

Do you know of any open source projects or good examples of C# or Java legacy code? I'm open to other languages but everyone doing this class with us the first time will be primarily experienced in C#.

I have searched on GitHub a lot but am only finding code refactoring and TDD katas.

Thanks!

Edit: Trying to make a list
sigh, can we please just stop re-implementing S-expressions and Lisp, and instead just use S-expressions and Lisp?

It's like I'm the only one using electric lighting while all the hipsters are upgrading their wax-dipped hemp brands to artisan whale oil …
From the very early days of the discipline (basically the eighteenth century, when it was called 'political economy') economics has had a strong normative slant. It's always been about what should be done, as well as about describing what currently exists.

This is normal, because the foundations of a given society are intensely political and have a huge impact on the nature of economic activities that exist (whether independent courts will enforce loan contracts, for example, is a political decision with major consequences for capital flows).

Recently, the public face of economics has been largely microeconomic modelling, which looks (from a distance) like an apolitical applied science. But the economic historians and the political economy people have always been part of the discipline as well, whether they be Marx or Milton Friedman.
I'd prefer to be on a mountain top far away from any tarpit, than only partially submerged in a tarpit.

The mountain tops are modern JavaScript engines. How much work have Mozilla, Google, Apple, IBM and many other big organizations and excellent engineers poured into making XSLT run fast and efficiently in the last decade, compared to how much has been applied to JavaScript? Can you cite any interesting SIGPLAN articles about XSLT optimization? Have any commercial games shipped using a ray tracer implemented in XSLT?
This sounds exciting specifically for selling tickets to anticipated events. The amount of servers crashing under load is too damn much in my experience.
Why? Every other browser supports it and hacking style with js is imho wrong
I just call alert('dada') from the console, and it tells me congratulation the site is buggy as well
Yes, quite, and fun to read too, thanks! (Saying it after reading a few more, too. :)
Similar ideas are the BrowserAuth stuff http://www.browserauth.net/ , which I think hasn't seen much activity, and FIDO https://fidoalliance.org/specifications/overview/ . FIDO is focused more on using some authentication system (either a biometric reader, or a Yubikey or similar token), but I think you can just use "I am logged into this account on this computer" as your client auth backend.
Here's a google bigquery that lists the most common PDFs referenced in the github sample dataset, and the top 100 results: https://gist.github.com/llimllib/3f1877eab06208958060f491cf3...

It's possible to run this query against the full github dataset but I couldn't figure out how to pay for it, so if somebody wants to do that it would be excellent.
Thanks for the heads up! I need to update my site's version of the KLIPSE plugin to a newer version that contains https://github.com/viebel/klipse/pull/131 , which detects situations like this and allows the user to break out of them - my bad. I'll do that early next week.
Followed immediately by "But I don’t believe that either one of these seemingly unlikely explanations is overwhelmingly more likely than the other."
"Silicone Valley" is actually in Southern California—land of the implants.
Thanks, we had updated the link from https://keithsawyer.wordpress.com/2016/11/22/are-you-too-old... a little while ago.
Tell me upfront if you have sane engineering culture or not, i.e. 40 hour workweek, good planning, etc..

Not just me, either: I've gotten massive responses to posts about shorter, saner workweeks (front page of HN multiple times, e.g. https://codewithoutrules.com/2016/08/18/productive-programme... hit #1). So there's obviously large market of engineers who don't want to work insane hours.
Fast and reliable dependency manager for Go
This is your brain on JS
Gatsby is awesome. Would love to see something like it without FB's licensing attached to the underlying libraries. Please do a Show HN when you've got something more-or-less working :)
surge.sh - i can get a website up in 10 seconds with a normal folder structure from my machine. i love it.
Actually they just killed that program, and you won't be able to log via certificates starting early next year.
yes, but as the server responding to your webp enabled client, I can't tell which version of support you actually have. I can infer, but that's problematic.
I've seen a couple brief comments about Upsource in this thread. Can anyone give a deeper dive on their experiences? I tried it very briefly but didn't have time to configure integration with my IDE, just played in the web browser. I suspect that means I didn't try the best feature.

Pros/cons of this tool?
previous hacker news discussion from 2014 about it: https://news.ycombinator.com/item?id=7815237
To be fair, government is one possible solution to a collective action problem. There are other possible solutions involving various kinds of voluntary cooperation. It just turns out that some collective action problems (such as the existence of child labour, for example) are much easier to solve by a body with coercive power than one without.

But you're quite right that the notion that 'the people' once had such power before being oppressed by the creation of collective government is an ahistorical idea, normally deriving from dubious state-of-nature theories.
Threat model! You've only lost to other people who have previously had access to that computer. Sometimes those people aren't within your threat model.

For instance, "a close friend impersonates me on HN" is pretty strongly outside my threat model. And as mentioned for people whose only computers are shared computers, "someone installs malware on the computer at my shelter and spies on my tax return" is a preferable outcome to "I don't file a tax return" (but we still have authentication, because both of those are still much better than "my abusive ex, who is not allowed in the shelter, spies on my tax return").
Probably not, it's an Israeli firm.
I work for Netlify.

We host the sites on our CDN, which has more than a dozen points of presence around the world. You can either let us build your site using anything you can get working on linux (see https://www.netlify.com/blog/2016/10/18/how-our-build-bots-b... for details) or build it yourself and ship the finished product to us. Nothing "runs" on our side after build, so there are no servers/VPS's which you can configure in the equation as far as hosting is concerned. We let you do a few things that you used to do with htaccess files (redirects are free; custom headers including basic auth are a paid feature)

You can check out our list of past incidents on our status page to gauge uptime for yourself: http://netlifystatus.com/

Since we use redundant DNS (NS1 + self-hosted), and use dynamic DNS response based on both location the query comes from cross product which CDN nodes are responding, we can (and occasionally do) remove, rebuild, or add CDN nodes without affecting our overall service. Since we use multiple network providers (for instance we use AWS, but we also use 3 other services), downtime at any one of our providers won't introduce any substantial problems in our network.
It's much more common than one might suspect. "Red-green color blindness affects up to 8% of males of Northern European descent." [wikipedia]