skysight-inc/HackerNews huggingface dataset:
> We, the "guy/gal I know who's really good at tech stuff"

Being good at tech doesn't necessarily correlate with trend setting and being an influencer.
For institutions (e.g. courts) to work, people need to respect the authority of those institutions.

If you take moves that hurt trust in those institutions, people might no longer consent to being governed by them. Now, a world without courts is economically worse of, so take public trust into account when making decisions.
As it usually is in this industry, the answer to this question is: "it depends".

There's a point, where using jQuery alone just won't cut it.

I guess a rule of thumb here would be: If you're providing a service that requires an account - you probably need something more than jQuery.
Awesome! I love the simple, clean and tidy design!
I don't know. Too much duplicated content and unanswered threads. I have to sign in to participate.
Timeframe is important here. Your reference is older than parents'.
Ask HN: Analytics and Metrics System Brainstorming
Analytics and Metrics: There are so many analytics and metrics system in the market that its hard to choose. I know every product has its own merits and people choose them according to their use case. I looked at the following systems:
1) AppDynamics (Pretty cool and easy to set)
2) MixPanel
3) Google Analytics
4) New Relics
5) Tableau (Just reporting system)
6) Many more

Having so many systems in the market and all of these companies are big players now, I feel like something is still missing from end to end. That's the reason why companies are using multiple systems to get their data.

Ask: Want to ask Hacker's community, what do you guys still feel like biggest gap and should be addressed?
I did this for a while and ended up expanding out to setting up my own email server, calendar server, and contact server. Needless to say, I'm a happy customer. :-)
Remember when Apple was like na, we're not gonna build that feature for you Uncle Sam cause then you and every other government will abuse it. They must have allowed China to backdoor the iPhone. Also, this is evil.

Forget China and forget doing things they want them done. There are more people in the world not in China than in China. Would you rather the world be more like the USA or more like China? For better or worse I say USA.

This is how manufacturing left the US. We allowed it to happen. Why is there no regulation that says if you build stuff anywhere it has to be to US labor standards? I think that's what Bernie and Trump were getting at. Fair trade. I would put this Facebook debacle in that bucket.

Downvote away!
HTTP Host headers, IP addresses and HTTPS hostname negotiation headers are sufficient to meet that requirement without a doubt.
How is it tongue-in-cheek to suggest putting a professional with relevant experience in charge of critical national infrastructure?

One of us has a misaligned Overton window.
"This exploit is impressive because it manages to bypass modern protections such as ASLR and NX without being able to programmatically interact with the target software."
The sad thing is that the patents are not even on the filesystem, but on the workaround they had to put it to support long file names. And even that wasn't a novel concept - OS/2 had already added long file names to FAT, just in a different way.
I can confirm.

In my work deploying desktop software to institutions, often academic and medical, I had to disable client-side certs to allow for connections to be made.

Apparently, even though it should be technically more secure, client-side certs are so infrequently used, these types of gateway monitors block connections made with them!

Maybe not as surprising, but non-browser software making connections to servers with non-publicly-signed SSL certs (but embedded CA chains) were also blocked.
Well that is one approach and it sometimes works. But usually it fails or least forces excessive rework because much of what you thought you knew at the beginning of the project later turns out to be incorrect. Another more agile approach is to avoid big up front design. Treat design as an emergent property and keep the internal OO design clean through constant refactoring.

https://en.wikipedia.org/wiki/Big_Design_Up_Front#Arguments_...
Since I didn't see this elsewhere - client certs have privacy concerns, because by the time you've done your handshake the other side knows exactly who you are. This pretty much rules out always-presented certs. Because of that, you would need to manage the certs more directly, and then you get into all of the UX issues around managing certs.
Same reason it still hogs memory and crashes when I leave it open with no more than a dozen tabs for a while (Chrome never does this).
Yes, expensive. That means it's perfectly doable (and was already done a few times).
Ah, RP2. On of the finest mods that ever came out of the fantastic modding scene around Minecraft. It was one of the four foundational mods in the scene: BuildCraft, IndustrialCraft (and later IC2), Better Than Wolves, and RedPower2.

Sadly, RP2 is dead, and with it the RP2 computer model, the likes of which will likely never be seen again (for those not in the know: most mincraft mods adding computers of some sort essentially allow scripting in some HLL, and maybe a primitive DOS-style prompt, akin to ComputerCraft. Not so in RP2. RP2 computers were actually full emulated 6502s, with a FORTH monitor built in (although you could, of course, write your own). This should give you an idea of what made RP2 so special). Except not quite, because Eloraam is now working on RP3, which will actually be its own game, because she got sick of putting up with MC's limitations. Knowing Eloraam, it will be done by 2030.
Not if properly combined with other technologies.

Cryptographically signed voting enables vote selling only in the same sense that requiring voters to present ID at the polling place already enables it.
the idea is you use a mnemonic generator to pick the words. The fact that "100 most commonly used, make up 50% of written words" (a dubious statistic, source?) is irrelevant.

Here's a mnemonic generator I wrote in Rust https://github.com/leshow/rust_mnemonic for example
The alternative was to burn some millions on lawyers, possibly ranging in the hundreds, in attempt to contest it. With no guarantee that they will win, and a fair chance that their products would be blocked from the market during the years that the process would likely take.
I'm surprised the author didn't search for DOI links.
The parent question was about static site hosting so one would likely use a static site generator like Jekyll.

If you want a CMS you need to either install it on a server (via Amazon EC2) or use a serverless product like AWS Lambda (which lets you run functions on demand.

But with a static site generator you will usually run and test your site locally before it generates static .html files and pushes to S3. But S3 just hosts static content. The only thing it can do that approaches anything dynamic are redirects. You can also lock down permissions by role but you wouldn't want to do that for a public static site.
> the first amendment

It took great effort to get crypto even recognized under the first amendment -- the USGov kept insisting that source code was not speech. In the 1990s it was against the law to let foreign nationals have access to the source code to DES. If you had folks from overseas in your organization, technically you couldn't let them see the source for crypto in your product (e.g., you had to wall off pieces of your repositories, and many companies did).

We could see a return to this. Don't take it for granted.
In the writer's view (AIUI), the "consent of the governed" is not a constitutional property arising from the existence of universal suffrage, it is a dynamic property that rises and falls over time in response to political and economic events. No dictator can hold power without some degree of consent from those they govern because ultimately they can only rule by giving orders which are obeyed. If this consent collapses then the dictator is no longer in power.

In democracies the rule is by institutions rather than by individuals, but the same principle applies: we can only have a liberal capitalist democracy for as long as enough people believe that liberal capitalist democracy is the right thing. Once enough people believe otherwise the government collapses and something else (probably a lot nastier) takes its place.

Therefore it is beholden on those who manage our liberal capitalist democracy to ensure that they maintain this consent. Economic and political policies should be fashioned, in part, around this principle.
Show HN: A free introductory Python 3 course with exercises to solve online
From personal experience for general web-sites like blogs, etc. it's better to do them old way, you don't need to worry much about seo, caching, precompilation, etc. But business apps huge community-like ones, and big shops benefit a lot from frameworks like that. But you should always base your decision on cost of implementation, support, etc.
Another interesting point they mention is "recovering years long deleted texts." Consider the filesystem your phone uses for volumes it's writing data to and how it (probably just) unlinks files when deleted... [edit] and I should add a 'factory reset' will probably just write a new filesystem table over the old on disk without wiping anything on most devices
I completely agree with you. It just seemed like your initial comment was dismissing the effect/impact of ML because not everyone has the time to learn how to implement it.
Go's minimum bar is well below Active Oberon, Delphi, Eiffel, Java and .NET ones.
Human Resource Machine is a decent game (from the creators of World of Goo!) that teaches this.
The One Cent Blog: Static Web Content on the Cheap
Assuming you can't block a VPN connection since business use them, how would this work? I assume at some point you simply ban HTTPS or non-public connections, or require government certs to be the only ones used (I think Turkey or some similar country is looking at this) so MITM can be done. Of course once you stick your foot into security, all the bad folks out there will take advantage, and their goes your financial industry and more. It's a stupid idea all around but the dolts in charge seem to either not care or don't understand. Also calling all of your citizens terrorists is a nice touch.
Your hex value does not accept uppercase values. Might I suggest this instead:

#([a-fA-F0-9]{3}){1,2}\b

Neither of ours accepts 8 character Hex values (transparency in 7th and 8th characters).

I have some more to share:

Match the 'src' for images
\< *[img][^\>]*[src] *= *[\"\']{0,1}([^\"\'\ >]*)

Match ID's for Youtube Videos
/http:\/\/(?:youtu\.be\/|(?:[a-z]{2,3}\.)?youtube\.com\/watch(?:\?|#\!)v=)([\w-]{11}).*/gi

Match CSS comments
\/\*[^*]*\*+([^/*][^*]*\*+)*\/

Match every word except words in list:
\bTarzan\b|\bJane\b|\bSuperman\b|(\w+);
The point was that instead of focusing on maximizing utility across the whole economy, economists should have considered policies, that while not globally optimal, preserved the consent of the governed.

The recent wave of populism, Brexit, Trump, etc., can be interpreted as a revocation of that consent. The implication is that now populists might impose much worse economic policy than a moderate consent-preserving policy beforehand.
New York Legislator Names Law to Ban Conversion Therapy After Mike Pence
Confused why they didn't demo it breaking a modern iPhone instead of a random Android device.
Simply install any linux distro of your choice (mine is Ubuntu) and fire up apache/nginx to load in your HTML. Then port-forward 80 to your raspberry pi IP address and you are done. If you are on dynamic IP (which most of the residential broadband does), set up dynamic DNS and add a CNAME record in your DNS to point your custom domain to your dynamic domain - this way visitors will be able to access your site even after your IP changes.
Yes, although some colleagues prefer logging their time separately. The commit message allows only for specifying hours, the separate time-sheet entry also date and activity (i.e. designing, testing, documenting, and other non-strictly programming activities). It also allows to specify the same task several times, without having multiple commits :)
> After these, a lot of power shifted from the people to the federal government.

That's the fault in this line of reasoning: the people never had the economic powers of a government. Government derives its power from being the solution to a collective action problem. Or, in other words, the people gained power by pooling their decision making process.
Could we bootstrap this by starting with support in password manager browser plugins, rather than better UI support in browsers?

Say Lastpass, KeePass, and 1Password agree to support an open public-key auth protocol, where during signup if a site supports the protocol, your password manager will provide a public key instead of a password, and will then sign a challenge with that key during login.

Advantages:

- Progressive enhancement -- everyone doesn't have to switch at once. Switch if you already use a password manager and want to opt into better security. Start with power users and trickle down as the pattern establishes itself.

- Workflow -- my password manager is already necessary for me to log into most sites, so I'm already solving the problem of syncing the cert store everywhere I need it. My password manager is also already part of my UI flow whenever I'm asked for a new password. If anything this will simplify my life as a user, because server-side support will let my password manager offer better UI. (This would require some manual challenge response for the rare occasions I can't install the PM -- not sure how tricky that part would be.)

- Incentives -- supporting the protocol is a value add for password managers -- it's another way to get higher security by using the product.

I'm sure folks are ahead of me -- just tossing out this angle in case it's helpful.
You can't ignore syntax, hyperscript isn't very popular.
I'm sort of tired of not being able to point out that the white working class is racist. If they want to work with their 'natural allies', they should probably just get over their racism and do it.
The 7 Step Guest Posting Process to Guarantee Email List Growth – SumoMe
> It's not a conversation anymore if you are left blindfolded, speaking to a room you don't know is empty or not.

That applies your entire facebook activity, you've no idea who if anyone actually sees anything you post?
Note how the server code for at least one level adds a header something like "XSS-Filter: 0", for the browser to not block old attacks.
I'm on NearlyFreeSpeech now for a small MediaWiki installation I didn't want to have on my other server, but it's terribly expensive. They charge me $6/mo for a small installation when I can get a whole droplet in DO for that kind of money.
Amazon offers basically hardware. You rent a piece of server resourses. What operating system, what CMS you use is up to you, but prepeared to install and configure everything.

But, they also offer plenty of free (and good) "ready made and pre configured" packages for people to use (for exampe wordpress, bitbucket etc.). You can search them here https://aws.amazon.com/marketplace/
Has anyone gotten linux working on Macbook9,1?
It's already out. Toyota will only sell you one if you live near a hydrogen filling station, which are few and far between at the moment.

Hydrogen is looking like a dead duck, at least as an automotive fuel. The Mirai costs about the same as a mid-range Tesla Model S. I know which I'd rather own.
I don't know, not being able to pass lvl1 with "<script>alert();" made me not want to continue...
Amazon declares war on Ticketmaster with new ticketing service
> coin toss...

So the whole 'toss half of the resumes in the garbage because we don't want someone who's unlucky' story basically happened to you? Wow. I guess I prefer that to 'we just thought this other guy was better than you'.
Ask HN: What do engineers prefer in terms of project management?
TLDR: Were this year’s deviations from pre-election polls the results of a cyberattack? Probably not. I believe the most likely explanation is that the polls were systematically wrong, rather than that the election was hacked.
i've personally found using Reviewable[0] to be a delight, automatically plugs in your github workflow in that it modifies the comments in your original PR with comments left on reviewable itself. one killer feature is their batch comment mode, the ability to draft up a whole set of comments and publish in one go all the while tracking the resolution/conversation of each point brought up.

an example of this is here[1], batched comments with the multiple threads of discussions across various revisions and tracked to resolution.

[0]: https://reviewable.io

[1]: https://github.com/cockroachdb/cockroach/pull/10618
My pet peeve is the "cosmetic surgeon", making obscene amounts of money and wasting valuable medical resources to pursue a practice of enabling vanity.
There is no single answer - AWS isn't a single hosting service, but instead more of a "parts bin" that you can use to build simple or complex services.

I don't think it's what you're looking for in this case.
+1

For basic blogs/sites github pages are free and fast. For all custom static sites I run a local Jekyll setup with multiple plugins and push the _site folder to Github for free hosting.
Replying to myself to offer more info:

https://medium.com/@jhalderm/want-to-know-if-the-election-wa...

Apparently WI does use paper ballots, but they are not checked at all unless a recount is called. Which is ridiculous.
Thanks! But it wasn't the prospect of the assembly that scared me: Android's Java API is a disgusting mess that I would happily never touch again for as long as I live.
Because you end up with:

Sorry, no results were found for <b><script>alert();</b>.

which is a syntax error. You need the closing </script>.
Be careful with it. Was dealing with credit card stuff (raising limit to go on travel) and when they were verifying my identity the policy was evidently to combine my questions with a "background check"

Said background check basically being they googled my name.

Which you would think isn't a problem until you get to "What school did you graduate from?" and have to go through four levels of reps to explain that (not actually what I typed) "Omelette Du Fromage" was my way of making it harder to social engineer my account.
The computer industry is perhaps the most extreme example of this. From a dizzying array of different systems in the infancy of computing, the overwhelming majority of the market has consolidated to two instruction set architectures and a handful of operating systems. Magic things happen when your economies of scale are big enough.
Win Sublime Text 3
Hey runevault. I wrote the article and I agree! There are limitations to the data. I'm not aware of a dataset that will allow me to do that nationally. This was my best attempt to capture this idea. I also thought about filtering for people who went to college in the state they were born in but this seemed like worse option. But if you are familiar with another way to capture this idea, I'm all ears.
I feel like "agile processes" is an oxymoron. Real, actual agility requires a lot of thinking; something usually prevented by having processes in the first place.

A better question to ask an "Agile" team would be: "what problems are you trying to solve?" - most of the time they haven't taken the time to properly analyze the problem in the first place, even when the project is near completion. They just run with dumb user-stories and start piling up Jira tasks with no clear vision.

At this point I don't believe Agile can work whatsoever. A success rate of one in a thousand projects, which usually happens to be a dead-simple CRUD app anyways, means absolutely nothing, other than it has failed in a spectacular way. If software development was an actual science instead of a pop culture, the scientific method would've thrown Agile out the window decades ago.

Your last two sentences almost exclusively applies to web services, which is a tiny fraction of what software engineering can do.

For me real agility is how much effort you're willing to spend upfront to properly analyze problems before attacking them, how quickly do you adapt your solution when new facts become known.

Its dead-easy to have agility at the beginning of a project, what matters is still having it 2 years down the road and more. Continuous deployments, database migrations, automated builds and whatnot do absolutely nothing to help you reason about the simplicity of your codebase - which is what yields true agility.
The First Open Source RISC-V Microcontroller
If you like XPath and JSON, too, you can use my just updated Xidel (http://www.videlibri.de/xidel.html) to run XPath queries on JSON.

It can do transformations, where you write the output structure, and then pick the values from the input JSON. E.g. to transform from {"a": [{"b": 123}, {"b": 456}]} to {"c": [123,456]}, you could write an XPath expression {"c": a/b }
The author confuses "it just isn't done" with both tradition and the social constraints of polite society.
How does userbase affect usability?

Also, I tried Wire recently, which has e2e and all your messages on all your devices. I tnink sent messages duplicated, encrypted with each of your devices keys. So when you add a device it can't read previous messages.
> Shit like this seriously makes me want to give up on the internet and walk away from it

You echo my thoughts exactly - I've recently been thinking about moving to a small town north of where I currently live, where land prices are cheap, and you can get 10 acres for nothing. Bad part - little to no internet access.

Part of me thinks that's a good thing.
Facebook HHVM Eng. Sara Golemon, Leaves the Valley for Paris to Join Platform.sh
I tried about a year ago and gave up...

But it looks like it might've worked if I had looked here:
https://wiki.debian.org/InstallingDebianOn/Apple/MacBookPro/...

Which points to the 9,2 page, saying "everything works fine now," which sounds promising.
I can't find the article yet, but a few months ago I read that only some chinese search engines had problems with that. The big ones didn't care much.
A container in which you can run Windows processes. I'll be honest and admit that I haven't done my homework on this and I don't even know if anyone does this.
I wasn't referring to emojis, but to GNU and GNU/Linux. GNU and Stallman are the culprits here; Emacs is just a symptom.
Why Web Application Firewalls fail to protect web applications
https://patents.google.com/?assignee=Google+Inc. puts them at 30,440 but I'm not sure that'll include Motorola ones or any acquired ones.
I tried to use Vue 2 for a pet project but couldn't get the routing to work. It seems the router was lagging behind in versions and there were no guides on "router 2.0".

Does this version have a routing guide and production ready routing solution? That's pretty important.
As one of the resident cryptography nerds: Matrix/Riot seems to be in every way better than Telegram. I still need to review it before I can wholesale recommend it, but it was audited by NCC Group previously.
that didn't work for me. this did: <img onload="javascript:alert(0);" src="http://i.imgur.com/fXYSkbC.gif">

img tags support the onload attribute and is a typical element people use in posts
Why do the best math and science teachers quit teaching?
Yeah, one and two are obviously tory/labour, after that it gets confusing.
Could Iceland export power?
I wanted to migrate to Netlify (I'm currently very happy with Gitlab pages), but I don't want to have to install all of node just to use their utility. What's wrong with static binaries, or at least Python?
UBER PORTAL LEAKED NAMES, PHONE NUMBERS, EMAIL ADDRESSES, UNIQUE IDENTIFIERS
What happens to your Google Rankings when you disallow all in robots.txt?