skysight-inc/HackerNews huggingface dataset:
You use a library.

On what basis did you choose that library? Did robustness of the software come in to your evaluation? Did you request a sample from the supplier, and performed stress testing on it? Did you check for certifications/audits of the code you were including in your project?

If that library is found to contain a vulnerability that allows your site to be used in a DDoS, where do the "consequences for failure" lie?

With you, unless you have a contract with your supplier stating otherwise.
You could get close to this by just using multiple PDFs. However, no one seems to do this (@haskellbook is the only exception I can think of), so perhaps editors feel it's not worth the extra time and effort.
Balloon rides into space
What my siblings said, or in short, "easier to profit from hacking". See also the DAO debacle.
Apple mysteriously stopped disclosing how much it spends on ads
BTW some of their open source code (like XNU, the kernel) is on GitHub: https://github.com/opensource-apple/xnu
SRS is reddit's favourite bogeyman, but it is, and always has been, just a place that pokes fun at the rest of the site.

The admins aren't even on their side (their political leanings are assuredly different); SRS were just never as bad as people claim, and so the admins never had a reason to ban it.
How would what he did do that?
This doesn't seem to fit normal cheat sheet format = funny concept, but needed more work.
A Calculus of Communicating Systems (1980) [pdf]
OP here. This is my first React JS app. I put this together in a week. That includes both learning and coding. Shoot me any questions and feedbacks.
There is an estimated 5k more developer jobs per year in central Scotland than there are developers to fill them, so it is a pretty good time to be a developer here. Especially if you're senior level or above as you'd be in high demand.

Salary is not going to be as high as Silicon Valley, but living expenses are much lower[1]. A senior developer can expect to earn around £40k

I actually live in Glasgow and work in Edinburgh, and both cities are fantastic. Glasgow has more vibrant nightlife and music scene; while Edinburgh is so historic with beautiful architecture.

Also our politicians are not as bat shit crazy as the rest of the UK which is nice.

[1]: https://www.numbeo.com/cost-of-living/compare_cities.jsp?cou...
Back to Basics: Direct Hydropower
Black Friday Promotion
> Bayesian statistics is great, but often the calculations are much more difficult because of your distribution of priors.

This is often a feature, forcing you to actually look at the complexity head on before you sweep it under a rug.
Writing widgets with Algolia and Github API for a HN meetup page: https://hn.silexlabs.org/index.html
Quantifying Municipal Growth
In my experience, celery handles the asynchronous tasks pretty well (and with minimal configuration)
For web-sockets, yes django is a (or was) a nightmare to work with. I had to use nodejs and django with a common redis backend to implement chat functionality (not fun at all).

I have high hopes from django-channels and the asgi server. Hopefully, we will get plug and play asynchronous chat apps for django in the future.
From what I can tell, liberals aren't exactly skeptical - I've seen a huge amount of fakes spread virally on Twitter, even ones that are on Snopes and have Snopes links in the replies. They just don't seem to be willing to link to fake news websites, and without those links there's no way to turn a profit on the fakery.
PHP's compiler is written in C, and its AST isn't garbage-collected. I think we just throw out the entire arena, actually.
Fully agree, I never understood the stereotype of coder closed in a cubicle breaking LOC records, coding without any other knowledge than programing language and libraries.

I always have spent a big part of my time interacting with those that would eventually use the programs/libraries. Without domain knowledge and communication skills, there is a high probability of misunderstandings.
Yes I suspect this too.

Look at a small part, in a small area and you see positive.

A lot of things are moving back home because of automation, devastating some countries.

Garment workers are about to be fucked. Robots are getting cheaper than cheap labour. So why not process it next door to the subsidized cotton.

But even from a selfish point of view, things currently at home are also going to be devastated.

One industries small renaissance at home is probably coupled with another's larger destruction.
Yes, but there are tons of "passionate" people out there, so they are looking for them. Here in my country (Brazil), we are nearing a ridiculous situation. Most startups set stupid hiring metrics managed by people ignorant about technology and most of them (if not barely all) fail badly. And then the CXO's all blame their "passionate" programmers and leave with the pockets full of money.
Constellation – encrypted node to node communication
How ready is Holoportation to play around with? If I get a developers edition of the Hololense...could I recreate the guy with his kid in the room demo they did?

Found this paper, guess I'll read it on the train:

http://dl.acm.org/citation.cfm?id=2984517
> I think Shadowban has an important role in spammers and (heavy) trolls. It should not be discarded

I agree; anyone who disagrees has never moderated anything.

It's asymmetric warfare; moderating a single troll costs about ten times the effort that troll puts in, and it scales geometrically from there.
> But the disdain expressed toward the garish colors that Perkin’s purple, and related dyes such as magenta, made accessible to the general public from the 1860s had within it a clear distaste for the arriviste. Now that simply anyone can wear what once marked you out as a person of consequence meant that new ways were needed to arbitrate social distinction

A similar thing happened to lobster. It used to be considered poor people's food because of how abundant it was. Prisoners used to eat it.

A good source for this is:
https://psmag.com/how-lobster-got-fancy-dab39dcf688a
There's a lot of interest in supplementary tooling around this format, too. See MARV robotics (formerly bagbunker), about which there was a ROSCon talk this fall:

https://github.com/ternaris/marv-robotics
https://vimeo.com/187705380
Scientists Create Battery That Charges in Seconds and Lasts for Days – Slashdot
Randomized Scheduler for Discrete Tasks on Large Hadoop Clusters (2014)
Senegal to Introduce a New Blockchain Based National Digital Currency
This thinking is part of the problem. While an individual average may just be "a fact", you cannot meaningfully compare two averages without knowing more than their values.

Pretending you can has lead to a lot of muddled thinking.
Not entitled different from my own sketch: https://roamingaroundatrandom.wordpress.com/2014/06/01/a-dec...

The way I'm imagining it, you can both use server based and P2P based distribution.
You can federate across servers, have channels/rooms with filters / blacklists set by the moderators.
You can have one-time user keys and PFS algorithms, with optional support for users later claiming authorship if they preserved their old keys.
And everything would be timestamped using transparency logs or a blockchain.
Edits are diff messages.
I agree for small screens -- reading anything on my laptop is painful -- but reading on a 32"-40" 4K screen, where you can have two pages shown in full at a larger-than-life size, makes a huge difference. I still prefer paper overall, but I no longer mind digital.
The shortcomings of data science
Nice! Looks like the process was changed after I switched. Still, since they don't support cron to use Lets Encrypt I'd have to remember to do that every 90 days.
Matrix.org will probably get there first
7 software quality KPIs favorable in agile development projects
I'd love some figures on whether the main popular extensions will continue working, as well as how many in the Firefox Add-ons site are already web extensions.

I'm curious about my mains:

- Classic theme restorer

- uBlock

- DownThemAll

- Markdown Here

As I'm already using electrolysis, I know Markdown Here basically doesn't work. How I can check whether things will break or not.
I can't believe I've actually had to defend my anti-censorship stance on HN of all places
So since the founding of Reddit in 2005 and now—we're expected to believe that Reddit hasn't hired a single security expert, engineer or otherwise which has rightfully removed any unnecessary access to user data? This seems incredible to me.
Not necessarily very well; my cars' mass airflow sensor went out a few months back... the performance was all over the place and sudden engine stalls were frequent. You could kill the engine just by accelerating quickly when it was cold.

... and that was a single sensor out.
Webpack 2 boilerplate (React and Redux)
Why is watermarking "just as bad"? It doesn't interfere with me using the files, so I personally don't care.
SRS also migrated to SRD, so they can stealth brigade subs with little backlash
Sharing. In the current political climate of the US? Good luck with that.
Lol. A software Engineer that worked with her would write a really fun reply. This way of thinking is a the kind of bs we hear from guys (and girls) in a suit. A fun experiment is to change "software Engineer" for "civil Engineer" or "Chemical Engineer" having a "business person" saying how to work. It is awkward how them don't feel stupid.
Point 2 didn't work on my Mac, nor on my Windows box.

I did notice later on that I needed to install libusb drivers for it to work with Windows 10, after installing it to flash, flashing worked but I haven't tried the serial connection yet.
At a time when automation is under fire for decimating employment, we get a report that implies robots = jobs.

Moving on from this waste of time...
# -*- coding: utf8 -*-
print "Hi, my name is Łukasz Langa."
print "Hi, my name is Łukasz Langa."[::-1]

This is a bad example. Reversing Unicode strings isn't an operation that is often needed in practice, and it shouldn't be done codepoint-wise anyway, because some characters have to be represented with multiple codepoints:

Python 3.5.2 (default, Nov 7 2016, 11:31:36)
[GCC 6.2.1 20160830] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> 'x́q'[::-1]
'q́x'

Doing it properly is bit of a grapheme clusterfuck: <http://unicode.org/reports/tr29/#Grapheme_Cluster_Boundaries....
Jill Stein raises $2m to request US election recounts in battleground states
I myself have a genetic disabling combination of anxiety and "depression of a bi-polar nature", our best guess, it's not the normal unipolar and my engineer uncle with this is frankly bi-polar, but e.g. self-administered cognitive therapy in the '80s helped a lot, and at least for me there's one other treatment, low dose (50-100mg) Seroquel taken before bed (and now very small doses at 8 hour intervals in between to avoid withdrawal effects during the day). Would not be able to sleep more than 4 hours a night without this....
Honestly, why do people get riled up about death threats on the internet? How many death threats have resulted in actual deaths? I'd put the number at around zero.
I think it's safe to say that many if not most popular extensions will be provided API support and converted over.

I think the real issue is that innovation in the extension space is effectively over - the Firefox extension system is so vibrant because anything was possible. Now Mozilla is reducing the possibility space to that which is provided by the much more limited WebExtensions and adding in support for existing popular extensions. But new extensions, doing things yet undreamed of, will no longer be possible.

I'm not sure what the distinguishing features of Firefox will be moving into the future. More and more, I think it's becoming Just Another Browser, with a better ideology behind it. Well, that's not a winning formula. I'm really disappointed and I don't know what to do other than stay on old versions of Firefox as long as I can.
CoI to whom? Ctrip I assume? I don't think China really recognizes that concept in business from what I've been able to ascertain.
About DownThemAll:

http://www.downthemall.net/the-likely-end-of-downthemall/
That's the surprising thing, though: "its radar Doppler altimeter functioned correctly and the measurements were included in the guidance, navigation and control system. "
The thing is, that's not surprising at all. 4chan and Reddit does this kind of things ALL THE TIME.

The Reddit's CEO should have been made aware of such troll'ish behavior. He responded in the worst way possible.
And the intended landing site is at an altitude of -250m referenced to the Martian datum.
Not to be snarky, but NASA also had its fair share of failures. I mean ... it's rocket science after all.
Agreed the whole thing is disgusting, but I'm actually very interested in the last part you said about duping millions of people.

When I heard this story yesterday, I started wondering how many people's views were actually changed by these outlandish stories (the FBI agent found dead with apparent links to the clintons comes to mind). My guess would be that many of those who devoured this sort of story were only confirming their previously held biases about the corruption of the clintons--they just enjoyed having more reasons to hate them. I would also suspect that along the edges of this population, let's say people who are open to either party but have faced economic challenges over the last 10 years, there might be a cumulative effect of reading headlines like this every day on Facebook, even if you don't read the articles and assume they are fake. Something subconscious that holds more weight that a simple opinion post by a friend. Trump himself used a variation on this idea by simply parroting unfounded accusations, fake news headlines, and conspiracy theories to brand Hillary as a criminal. And maybe that effects all of us, to some degree. In an election where 1% swings in a few states could have changed the overall result, these effects may have been very important.

I do think that FB, Google and others have the responsibility to prevent fabricated news stories from spreading like cancers.
Further to other people's posts (and again, I don't want to spend time ragging on this, it's got some really good ideas, the PocketCHIP is definitely an innovative concept and I do want to see this go well), someone posted a thread in the CHIP forum that accurately reflects what I think will be the experience of many people here: https://bbs.nextthing.co/t/a-constant-struggle/12141
PAL is a tool for injecting secrets into Docker containers
I might be off topic, but JetBrains is making a cross-platform .NET IDE which is currently in open beta. I tested it and it had no difficulties to open/build/execute existing solutions.
Hypothetical:

Let's say GP was right and 1M jobs disappeared. Robots are cheaper. Are cars going to get cheaper? My bet is on no. Where does that money go? Up. Who will buy the cars? Definitely not the 1M people losing those jobs.

I'm not saying we should go backwards, but just producing more stuff cheaper with less labor without a goal in sight isn't a net positive impact on the world, and the economic inequality will only grow steeper.

I'm saying this as a cushy white collar business owner that will likely be comfortably ahead of that curve. But we're still just lemmings scurrying to get ahead of everyone else, while a whole lot will be left behind.

This is what decided this election, regardless of anyones politics (I certainly didn't agree with the choice).
Congratulations to the team! Happy to hear that you guys are going further. Looking forward to see what the future brings.
Basic, basic stuff:

If the app is accessing a database, is it using prepared statements, or concatenated strings?

... are you sure that, even if you are using prepared statements, someone didn't concatenate variables into the statements themselves, perhaps to make column selection or something easier?

If the app is dealing with passwords, is it hashing, rather than encrypting them (or, heaven forbid, storing them in plaintext) and comparing them using hash_equals() rather than directly?

Are there any user-supplied variables being echoed to the browser? If so, and if you're not using a templating engine that does escaping by default, are you sure every single one is properly escaped?

Do exceptions leak information to the browser rather than being logged?

Is every POST request validated using a CSRF token, and are POST requests rate limited?

Is every other type of request which requires elevated privileges validated using some kind of token?

If files are being uploaded to the server, are they being chmodded to be non executable?

... ok, are the filenames being randomized?

... ok, are the filetypes being validated using the file headers and not the mime-types?

Do you have a sane Content Security Policy header?
They made sure in the media they are.
This fact is what got me to learn about RES's feature to hide select subreddits from r/all. It's helped Make Reddit Great Again(TM) (or at least suck less). Now, when reddit's scroll jumps with many 10s of missing posts, I know T_D has been blasting and I smile in willful ignorance of their contents.
How to Read a Self-Help Book in 90 Minutes
Here's better advice. Apologise swiftly for your errors if they impact other people. Don't apologise for anything else
and 2 years old
> I am afraid that your average engineer will make a pretty incompetent legislator. So let's leave legislation to legislators... :-)

We can no longer separate legislation from engineering. We need a way to get people who are good at both, whether that's training engineers as legislators, training legislators as engineers, or something else.
>Now this is more a matter of dispute, but I wouldn’t say the hacker stole the funds...

Verification is Ethereum's Achille's heel. Everyone seems to trust that someone else will verify that the contracts they participate in will work securely as intended, and the DAO showed how well that works.

If Ethereum ever gets used as its proponents imagine, with multiple interacting contracts in progress at any given time, rolling back an error will not be nearly as easy as it was in the DAO case (and that was not particularly easy.)
"They"
Not sure about that. For the last week or so I've been bombarded with Porsche ads in the YT videos I'm listening even though I will never have that much money in order to buy a new Porsche vehicle.
most, not all. hn is a small forum compared to those others.
But it's not censorship when the "good" guys do it!
Lets hope Zuckerberg doesn't snap then, but I'm sure "dumb fucks"* will find an apology for that too.

*his words, not mine
404s for me …
RSS reader, Another RSS reader, Dictionary, something for user scripts, domain white list, Another dictionary, Gmail checker, uBlock origin. 4 of those extensions are my own. NIH much :(
/r/HillaryForPrison? (just kidding, there are none)
Well done SkyScanner! I live 20 minutes from Edinburgh, and I don't really see what others are saying here. I am in a very flexible but really lame paid role, I have friends who have offered me a job in England twice. In Edinburgh though, it is either corporate jobs (demand), low paid hacky jobs for media agencies (pays in peanuts), and everything else is 50k jobs paying 28k via a recruitment agency who skims all the cream... ie: You need to be a mug.

Otherwise where are people seeing all the tech jobs?
I don't know how altitude is calculated on Mars, but, for instance, there are some landing strips of Schiphol Airport (Amsterdam) that are below sea level and I expect an altimeter to give a negative value there. But this value is correct though !

Not everything is as easy as it seems.
Continuous Feedback
They're just one big advertisement nowadays

Money handlers, that's what these enormous buildings were for. And at this point in time with our use of a fiat currency, money is just a digital construct. So what is the need for having a physical space to house all of these people booting up their computers and networking and playing around with these numbers in a virtual environment? Perhaps at one time when computers were not a thing it would be necessary to collect those types into a consolidated area for the purpose of communication and organization, but we are no longer at the mercy of physical proximity being necessary for that. We continue to utilize these structures and maintain this method of worker placement and organization past their relevance, for seemingly no other reason than perpetuating an archetype of the "business building". Why else would there be a need to have these monuments to the conquerors of finance?

Goldman Sachs maintains them as monuments so that we continue to look upon them as monuments, and the institutions they represent as being deserving of such reverence. They never turn off the lights because they can, not because they need to.
Question about type assertion in Go
You'd have to know someone, most likely.
The decline of XUL started around 2009. I spent months building a very complex app around XULRunner only to find out that Mozilla had no interest to support the technology in the future.

So I decided to leave the platform and put my efforts on native and web and frankly it was a good decision.

The WebExtensions API is no match to XUL and XPCOM but I only hope that now that we have Mozilla behind the technology we will see further API improvements.
A man was walking down a city street when he saw another man wandering around a lamp post looking at the sidewalk. "What are you doing?" the first man asked. "Looking for my keys," said the second man. "Oh, did you lose them around here?" asked the first man. "No," the second man replied, "but the light is better here."
Wrong. Only admins, not moderators, can edit content. I should know, I'm moderating /r/crypto in Reddit. You can confirm it too by simply creating your own subreddit and look at what moderator tools you have available - removal and adding flairs is really all you can do.
additionally, there are rumors (maybe more than that now) that the next round of HIPAA/HITECH /etc... regulations are going to adopt a lot of NIST standards and frameworks. So, this could potentially trickle down to the Healthcare industry.
I could see some interesting things happening with this and zeromq
uBlock and Markdown Here also exist for Chrome, so they'll very likely work or be ported.

The DownThemAll devs have been very vocal about "WebExtensions being the likely end of DownThemAll", although I don't know if due to understandable unwillingness to redo a lot of their work or actual technical limitations.

Classic theme restorer probably relies on XUL/features unlikely to be re-implemented, see dev response to this review https://addons.mozilla.org/de/firefox/addon/classicthemerest....

Ironically the long-term ideas of having a HTML based GUI could enable heavy modification again, at least in modified "distributions" of FF? Doesn't solve the now/next year though :/
An interactive matrix multiplication calculator for educational purposes
This episode makes clear that uttering "Reddit" and "chain of custody" in the same sentence should get one laughed out of court.
just `dotnet migrate` if you have an old project.json, or create a new one with `dotnet new`.

after that as usual

- dotnet restore

- dotnet build

- dotnet run

- dotnet pack

- dotnet publish

- dotnet test

the cli is the same, the dotnet/cli team added other commands too (dotnet msbuild, dotnet clean, and more in development using an extensibility to install global commands)
AWS CodeCommit Available in EU (Ireland) Region