skysight-inc/HackerNews huggingface dataset:
Don't do process for its own sake. Before you do any practice, understand what it is for, and what you hope to get out of it. Trial it and abandon if is more effort than reward.

Make doing the right thing easy. Commits to source control should be easy because people do them a lot. Same with writing tests.

Make doing risky things slow. Deploying to live should involve some checklists and "management sign off" because you want people to slow down and think about whether they are about to fuck up. Ditto anything that could sink your business or unexpectedly cost a lot of money.

If you are delivering contracts, and a lot of enterprise sales involve these, then you signed up to deliver something. Track what that thing is, and have a way of proving you delivered it.

Some people genuinely enjoy filling out repetitive forms. They also enjoy writing them and getting doing one accepted as part of your project cycle. Spot these people by boilerplate to content ratio in the documents they are writing. Keep them away from core development.

Don't cargo cult. Don't re-invent the wheel. Use tools that don't get in the way.

It is useful for teams of 4 or more / mixed abilities to have a process just so everyone knows what they are doing and doesn't have to think about it. If you are in that kind of situation, just do scrum with actual postit notes for a couple months, then start dropping some bits and using tools for others. Scrum is only a good estimating tool if your developers don't do operations too. Less people than that (even as a team within a larger company), can probably get away with just talking, shared todo lists.
I'm looking to move a few projects from Angular 1. What do developers think of migrating to Angular 2 vs Vue for this? I've played with Angular 2 but can't shake the feeling that it's overly complex.
Satya Nadella says Microsoft is planning the ‘ultimate mobile device’
Previously: [1][2]

Telegraph appears to be a minimalist anonymous blogging platform, with images and markdown support. It's link of a blank canvas -- pun intended. It's like anonymous gists where the post becomes uneditable once you clear your cookies. It may turn out to be the next great thing, or may turn into an abusive slugfest of scum and spam.

Other than it being an experiment, it's clear to me that Telegram is actively looking at ways of increasing time that users spend in its app -- much like every other chat messenger has done in recent years, with bots, in-app browsers, stickers, and integrations. The way to cultivate a walled garden people actually like is to have it be a pleasant and varied garden; this seems to be the way of the game, and it's amusing to see Facebook (through its four platforms), Snapchat, Google (through its 3+ platforms), Kik, Viber, LINE, WeChat, Microsoft, and even Apple and Slack get a piece of this pie.

[1] https://news.ycombinator.com/item?id=13017592
[2] https://news.ycombinator.com/item?id=13017604
Ask HN: “Permanent deletion” of Facebook account not really deleted?
I deleted my Facebook account back in 2013. I requested a permanent deletion. I still have the email confirmation from Facebook to prove it.

Shortly before I deleted the account I altered my Facebook login from my Gmail email address to an Hotmail alias, so that Facebook wouldn't have my Gmail email address (since I didn't trust them not to delete the account properly). I removed any other email addresses that were linked to that Facebook account. I did not ever log back in (until today).

I've just noticed that since the beginning of November I've started receiving spammy emails from Facebook to the original Gmail email address I used to have as my login for Facebook. Subject line like "Do you know..."

Out of interest, I decided to see if I could still login. After a simple password reset, lo and behold - my old Facebook account still exists.

Has anyone else seen anything like this? Is there any way to truly delete your Facebook account, because at the moment the "permanent deletion" promise seems like false advertising?
It's not clear to me that there's a confusion. These seem like related categories (and, as a UK political scientist) his analysis of the British constitution seems both funny and broadly accurate.
To be fair, sometimes code and comments get moved around, and any of us can use grep (or whatever other search tool you prefer) to find a specific link in the source.
Profound-Zebra-med Deep Learning Powered Scans
I should say "37.5 hour workweek" if you're in UK, maybe? And to be fair this seems to be less of a problem outside the US.
The GfyCat URL generator list is about ~1800 animals and ~8000 adjectives [0]. All fairly memorable words. Add in other types of words and 2048 quickly becomes a small number.

The words don't have to be incredibly simple, either. Grabbing a random GfyCat image from the front page gives me "OrangeLankyBasilisk" which is easy to remember, none of those words are particularly foreign. But they're not in your list of most common words, nor are any of them in XKCD's simplewriter [1], which keeps track of the 1000 most common words.

[0] https://github.com/a-type/adjective-adjective-animal/tree/ma...

[1] https://xkcd.com/simplewriter/

Edit: The words need to be randomly chosen by a computer, so it doesn't matter what the most common words are. You could generate the password from a list of 2048 spanish words or japanese words or emojis and the entropy is the same as the previous scenario (assuming the attacker knows your dictionary of symbols just like they'd know your dictionary of English words). If you let a human choose, of course the smiley-face and poop emojis are going to be picked 50% of the time, but that's not the intention of the comic or passphrases.
Seems to be like ibood.com but as a service.
Really like the ibood concept as its European based, a lot of the deals you see online are exclusive to the US, hope that won't be the case with getfrenzy
DOI isn't a file format. It's an object identifier for papers like ISBN is for books.
I'm a fan of the nested poultry approach to scalability. The Turducken setup as described in Advanced Festive Food Editing by Fritjof Dogemann provides excellent carbohydrate-to-weight ratio and its uncommon architecture frequently amazes clients. The high cost and complexity are drawbacks I'll admit to, but can be mitigated by going for SaaS (Slaughter as a Service) models.
A classic example of attacking the straw man.
Might not be full bible level of importance, but if you intend to do any work on Fortran and legacy science codes, "Modern Fortran Explained" by Metcalf, Reid, and Cohen is a must. Better examples and explanations than anything you can find on stack overflow with a focus on f90 (the most commonly accepted flavour) while also discussing the useful parts of 2003.
Your smartphone is a civil rights issue [video]
I wish Amazon used this for their sale of the Classic NES (https://techcrunch.com/2016/11/11/nintendowned-amazon-sells-...) flash sale.
https://news.ycombinator.com/item?id=12972388
Oh, I thought it's something about the mobile client. I also noticed it doesn't support drag/drop with an image, probably because it's an electron app and things like that has to be coded specifically.
I wonder if they can crack devices that haven't been booted. Many of the newer smartphones encrypt data and require a password on boot.
dupe: https://news.ycombinator.comitem?id=13022968
I don't understand the security argument you're making. Are you claiming that, if I use client certs, I am protected against a rogue CA issuing a fake certificate for web.whatsapp.com? How?

If you're thinking of a protocol like Kerberos, then yes, you can derive a shared secret because there's a single-point-of-trust authentication entity (the KDC) which has knowledge of both your password and the server's password/key, and yes, your password certifies that you're talking to the right server (as long as the KDC is trustworthy). But that's not how TLS mutual auth works.
I'll be honest, I really don't appreciate it. I've become very leery of giving out real information when I have to before downloading some trial product[1], because if I put real email addresses and phone numbers, I start getting hounded by sales reps. It's not worth wasting their time or mine.

[1] typical case is, some customer of ours has a weird piece of third-party enterprise software that is flubbing up one of our products. Anti-virus and web proxies tend to be particularly over-aggressive, both with dorking up other software, and with the sales reps.
Paypal and other websites are not mobile devices. Using a high-entropy random password is still a best practice with those, and many of us recommend a (database or deterministic) password manager.
Ask HN: Best homebrew computer for noobs?
With the holidays coming up I'll have some free time for projects. I've always liked the idea of building a computer, even a very simple one, from scratch. What books/articles/kits out there does HN think are good for a first timer who not only wants to put something together, but also gain some understanding on how everything works?

I've seen the N8VEM/RetroBrew, RC2014 and cpuville Z80, are any of these good candidates? I'm not set on any specific CPU type, just something that is basic enough for me to understand how it all works but also a system that can do _something_, even if it's just basic loops or whatever.
I really don't think that having to be a suspect is in ANY way meaningful, since there is absolutely no bar to being a suspect. It is perfectly reasonable to state "we have no idea who did this so every UK resident is a possible suspect".
Building a Go Debugger
If you are interested in federation, riot.im [1] / matrix.org seems to have comparable security properties to Signal, allows federation of servers and does not require your phone number or Google Play.

[1] https://riot.im
Vote what you want the Webpack team to focus on
Sure, and it's great to take a moral stand, but those folks shouldn't pretend that moral stand is constructively helping the situation (and they often do!)

IE if someone wants to say "I find this abhorrent and refuse to participate", that's 100% okay. But that stance doesn't actually help change the situation to one that is better.
Anyone could claim absolutely anything, and the bigger the player the more likely it would be without any negative consequences (and with positive ones until the discovery - and sometimes even after), even if it's discovered to be an outright, blatant lie. Not like Telegram is unique or exceptional in this regard.
The victim of your XSS attack will not use the console, so when creating a XSS attack it shouldn't require the use of the console to activate it.

I can break any website for myself by putting stuff in the console.
Yeah, I follow mostly nerds and comedians on twitter. Up until this election season, most of my feed was nerds talking about things they built and comedians telling jokes.

Now my feed is literally 60% nerds talking about politics and comedians talking about politics.
Does that work with s3 static websites though? I recall that a different endpoint was needed, and it's only http.
Backup your phone. Wipe your phone. Cross the border. Restore your phone.
How is that different from using a C function called add_two_ints which deletes the root file system and returns 42?

I don't think it is possible to create a language that can prevent dumb code from being written.
+1 for uberspace.de
Hey! Lucas, another Zenkit team member here! We're trying to answer your questions as quickly as possible!

Price: we'll use a freemium model, starting in Q1 2017. Pricing will be similar to other tools in the market.

Trello/imports from other apps: we have one click imports for Trello and Wunderlist, & working on more. We're also in beta with Zapier. You can see our Trello comparison here: zenkit.com/trello

Unstable/Problems registering: sorry to hear there are issues here! HN was pretty unexpected :) we'd be happy to fix this on a case by case basis. Please send us a short note to hello@zenkit.com with your username / registration email.

API/webhooks: we're working on publishing our API and we hooks. We'll make them public as soon as we release our iOS app at the end of this year.

Localization : support for more languages coming in Q1-2 2017!

Tutorials/onboarding: we're releasing videos in the next week or two. Again, HN was unexpected :D

Feature requests : thank you so much for your requests! We're taking note and will definitely keep everyone updated with new features. (we've already got a lot of great stuff in the pipeline!)

Feel free to get in touch via email if you want to chat!
Recent discussion: https://news.ycombinator.com/item?id=12884694
We're going through various audits for PCI right now. Our auditor insisted that we need to add checks for reuse of recent passwords.

However, I've heard that the process varies widely depending on who your auditors are. Some are apparently very permissive, but we got the other end of the spectrum.
I fear making those kinds of "inferences" may one day soon get people in tangible trouble.

Crimestop comrade, crimestop!
Continuous Deployment of Golden Images with Packer and Semaphore
Building a fault-tolerant Telegram bot
I don't understand why you need the S3 if you're already hosting it on github pages.
Protip: If you have a live/animated demo/video as the first thing in your README, then you should really, really explain what happens and what is done.

Here is an example (which is perhaps a bit too verbose/long): https://asciinema.org/a/28691?autoplay=1&speed=2
"Note that Google hasn't committed to not be litigious with most of it's good patents.'

Google has released 4000+ open source projects[1] under the apache license, which has a pretty broad patent grant, something you seem to be completely ignoring.

This includes things like tensorflow, the maps geometry library, etc.

I'm not sure what you consider "the good patents", but for most developers, it's the stuff we open source.

[1] This is just the 30 day active number, the total number over the 11 years i've been at Google is closer to 12k, last i looked.
Probably because they couldn't? Far easier to show of a random android handset.
Rust uses an arena for the type graph as well. Note that jemalloc gets you a lot of the benefits of using an arena for free.
What makes you think that when cloudfront requests objects internally from s3, it's using http?

It could just as easily be connecting with s2n and authenticating both endpoints of the connection.
You just move the goal post 10 yards in a different direction every time you respond. That's not a discussion.

When I see responses like this:

>You have provided one (1) source: Wikipedia. I rejected it out-of-hand, just like any serious researcher or academic institution does.

It's pretty clear you don't understand the basics of how wikipedia works. There's no point in discussing with you.
I use GitHub pages with Cloudflare (free CDN + HTTPS) for simpler sites but I'm a fan of netlify.com right now. Setup is simple, atomic deploys are simple, rollbacks are simple, caching + cache invalidation + HTTPS is done for you and there's paid plans if you need passwords, form submissions and custom response headers. There's probably cheaper options compared to the paid plan at $9 a month but you have to ask yourself how much your time is worth in comparison if you're burning just 1 hour a month on configuring your hosting.

Deploying over S3 sounds like a bunch of hassle to me. Can you deploy atomically? Can you rollback?
and is positioned in a way that frequent use of the USB ports was convenient. I'm thinking of 2 places I visit frequently where the computers are hidden under a big ol' desk
This is main objection to e.g. negative returns on deposits. "it just isn't done". You do that, people will have zero faith in banking system. Tell you, living in society where nobody has faith in institutions is very unfun.
There aren't any liberal areas in the US, at least with respect to the handling of people addicted to stuff on the narcotics schedules.

Switzerland (that notorious wussy liberal haven where every adult male is a member of the army) treats heroin and cocaine addiction by providing people with the substance, and helping them stop using it when ready. They save a lot on police and prisons.

That will never happen in the US. The police and prisons are far too big a part of the economy, and have too much influence over legislators, to allow them to be laid off.

Switzerland can get away with this. When DEA people from the US tell them, "recriminalize drugs or we'll cut off your foreign aid," they can say, "OK, it's a deal."
When a city has gigabit Internet, prices for slower speed tiers drop
> It'll just start circulating on USB sticks.

Don't worry, they are already working on a law to make it illegal to use non-government sanctioned USB sticks with built in remote access and bio-metric access control so the government can monitor everything that is put on it and by who.
Well, thats great. Now we just need to find a feed for animals requiring about 200 lbs each day, without having the production of that feed adding to global warming. Good luck, meat eaters :)
OpenBSD changes of note 2
Not sure when you switched, but NearlyFreeSpeech works fine with Lets Encrypt and doesn't require opening a ticket with support. https://deletethis.net/dave/2016-11/Let%27s+Encrypt+NearlyFr...
> Harder than what? If I told you sunscreen works and you called it anecdotal evidence and claimed sunscreen might do something but no more than thickened water (whatever that may be) it would be very easy to test correct? Rub sunscreen on half your body and the water solution on the other half and lay out in the sun. Well aloe is no different, lay out in the sun a little to long and get a burn, then rub aloe on one side of your body and water on the other half.

No, the thickened water comment was in reference to aloe, not sunscreen. As for what "thickened water" is, it's what it sounds like: water that has been thickened. Aloe gel is thickened water. Lotions are basically thickened water (often with some oil added).

There's no scientific debate about whether sunscreen prevents or reduces sunburn. It clearly does and it's not hard to find many studies demonstrating this. Wikipedia has several citations and you can find more without looking very far. e.g. There are piles of citations here: https://www.aad.org/media/stats/prevention-and-care/sunscree...

The question about sunblock is whether it actually prevents skin cancer, which is a much harder thing to test or prove. From what I can tell, the general consensus is still that sunblock use reduces the incidence of certain cancers.
A practical guide to securing macOS
> > That the Python 3 VM doesn't run Python 2 code - and that the Python maintainers apparently say it can't - means the Python 3 VM isn't Turing complete.

> No it doesn't.

You do realise the next four words in the post you're replying to is:

> > This is nonsense obviously

?

And then a reason why the claim is being made?

To continue your CPU analogy (I actually read your post), it's like Intel saying x64 can't run x86 binaries, then someone else saying "why not, isn't it turing complete?" as a joke way of pointing out that it should.

It perfectly reasonable to read Zed's post and argue that Python 3 VM should not be able to run Python 2 binaries. But not even bothering to read or comprehend the post (or this thread) and claiming he doesn't understand Turing machines is a waste of everyone's time.

* We know AMD invented x64, and x64 does run x86 binaries, and the IA64/Itanium story, but anyway.
I use github to host the source code for my static Jekyll site, but since github doesn't support HTTPS on custom domains, I use Netlify as a CDN. Netlify automatically hooks me up with an A+ rated Let's Encrypt cert setup.

So my domain points at Netlify, which pulls the site from github.

The total cost of this setup is only the yearly cost of the domain, which you can eliminate too if you use a sub-domain on netlify.
This is weird reasoning, you don't wake up one morning and are suddenly addicted to opioids, all involuntary and without your doing. Becoming so addicted to the drug of your choice that you can't quit is a process, and it requires a conspicuous absence of introspection, if not conscious choice.

I'm saying this because I have seen close relatives turn into alcoholics. The mental illness/disease angle doesn't do the addiction dynamics justice, and you know that when you have seen other relatives develop genuine mental illness. There's a difference between drinking too much for several evenings in a row without a real reason and not getting worried about it the following morning and losing touch with reality due to developing schizophrenia.

There are living conditions that make it understandable why someone would like to choose not to be sober but leaving personal responsibility out of the picture, saying it's the doctors fault or it's all in your genes, is infantilizing.
Thank you, that is a more in-depth and useful definition of virtue signaling than I was working with before.

> You were complaining about the motives you imputed to their choice to say that thing.

I was complaining about the content, as you can tell from the fact that I immediately said "this is wrong" after making fun of their (presumed) motivation for making the false claim.

> WHY are you complaining?

A sense of civic obligation to object to misinformation.

> Could you help me to understand what sense of "ironic" you were using

The irony is that the truth is precisely opposite to the author's claim.
That's not quite true. We'll ban serial trolls or spammers without notice, but otherwise we announce and explain the ban. See also https://news.ycombinator.com/item?id=12972039.

We detached this subthread from https://news.ycombinator.com/item?id=13020206 and marked it off-topic.
> But in general, JSON, XML, S-expressions, yaml, HTML, and many data interchange programs are all 95% the same hierarchical data structure.

S-expressions can also represent graphs. I have a vague recollection that YAML can as well.

An S-expression example:

(nodes #1=(a #2=(b #1# #3=(c #2# #3#)) #3#) #2# #3#)
Containers is a poor example since it has nothing to do with "Linux community". Containers, Unikernels, Library OSs or whatever you want to call them, have been a staple of operating system research for decades. Pretty much no feature on any current OS is really all that innovative.

Even so, give the extremely large pool of talent at their disposal, there is nothing that Microsoft would not able to implement on their own. Whats typically the case is they often wait for something to become popular and then enter the market with their me-too. Not knocking their strategy, it certainly works because they are good at making incremental improvements (esp in the core OS/kernel space)
If nothing ever comes of it, it doesn't matter either way.

If it becomes successful enough to launch into its own company, there is a huge disadvantage to not having the IP situation clarified up front. For one thing, investors get very concerned about even the remote possibility of someone else trying to claim copyright to your code. And once you are successful, it's not safe (or ethical, really) to just assume your [former] employer will never hear about it and connect the dots.
It is auditable, but probably no one capable is going to spend time on this. As I get it, it's like developing software for really ancient computer platforms - possible, but no point in doing so, and there are probably better things to do in one's spare time (unless they're really into this kind of stuff, of course).