skysight-inc/HackerNews huggingface dataset:
> The entire point of concentrating on your breathing is that your breathing is always there

Once you reach some level of mindfulness, you start to notice that your breath is very seldom there. There are all kinds of distractions that your attention is moving to. You may not notice it and 'think' that you are watching the breath, while in the center of your attention is eg. an internal monologue or concept of the breath or mental image of the breath (how you imagine it).

> The entire point of concentrating on your breathing is that your breathing is always there and is boring!

Here you go. If there's boredom, there's no breath. If your attention is on the breath there's no boredom. Boredom is a specific mental object (state and story) and it's a distraction from the breath.
'Breath' is a concept and looking at a concept is boring indeed. If you look at the actual breath, however, you see something that's never the same, constantly changing stream of sensations, reality behind the concepts. It's always amazing, it's more interesting than anything you can ever see in ordinary closed, story-driven state of mind.
ha, it's quite obvious if you check the front page http://nationalreport.net/

They may need to make things more obvious.
I've always found this to be overlooked or at least a misguided design decision. IMO would be very helpful to be able to specify a commit, tag or branch to pull down.

The Go team's solution to this problem was allowing vendored dependencies. Basically you can put the dependencies inside your project in a directory called vendor which will be used instead of whatever is in your $GOPATH/src/. This allows you to pin deps to a specific version and not need to pull deps from the internet at all.
How we became more than 7B – humanity’s population explosion, visualised
If you're total price shopping, yes.

If you want a specific frame for some reason, it's a good value. I bought a pair of Oakleys from glasses.com ( a luxottica online outlet) for a savings of about $50 from retail. I think the high index lenses were cheaper too. But if you buy $8 glasses, they are going to be junk.
Rich Hickey gave one of my favorite talks that I recommend to all programmers no matter which language they code in:

https://www.infoq.com/presentations/Simple-Made-Easy
So far, Go doesn't have warnings, which is great. Either it's an error, or it's nothing.

This is great IMO, because I've seen too many codebases that just end up having infinite amounts of warnings that never get fixed, making them (1) useless and (2) annoying.

(Extraneous imports is a great example of something that in most languages would probably be a warning (or nothing); I remember in the early days people bitched like crazy about it, but on balance it's really really nice. (goimports also removed a lot of the pain.))

I think it's clear that if this goes in, people will use it beyond just refactoring. Honestly, I'm ok with that, if it's restricted to just types.

Here's something I've done from time to time:

func now() time.Time { return time.Now(); }

Just because typing time.Now() everywhere was getting tedious.

Having a type that's an explicit alias doesn't seem too bad to me.

type Time = time.Time

Sure, it's an extra step of indirection, but a very easy one.

(I feel like having variable aliases would be much more confusing, because variables are mutable.)

===

And it's not like the situation is that different from right now. For example, maybe I have some package with an api like:

func DateMagic(t time.Time) time.Time

OK, super-obvious what it's taking.

Now maybe I'm using aliases and you see:

func DateMagic(t Time) Time

Hmm, not quite as obvious, now you have to go lookup

type Time = time.Time

But still today I can do

func DateMagic(t x.Time) x.Time

Hmm what's x?

Oh

import x "time"

Of course it could get a little pathalogical...

func DateMagic(t DumbName) DumbName

type DumbName = time.Time

but I feel like you're really trying there.
JumbleChase
Knights and Dragons GUILD SHOUTOUTS, UPDATE ON MY CHANNEL
I'd never heard of this theory. Interesting.

I always thought that the neolithic revolution narrative needed friends. It seems entirely possible that other forms of "civilization" existed even if they did not persist and/or spread the way agricultural ones did.
I strongly believe nukes should only be launched with the approval of two branches or government. Limited pre-authorisation should be allowed, but it must sunset every few months.
The usual way that dead people vote is for a person to vote early or by mail, and then die before election day.
Lazy Loading Web Fonts Is Probably Not What You Want
No idea what it does, add a README
YOU WON'T BELIEVE WHAT THIS MAN DID FOR HIS DOG! [He dressed up like it's favorite toy and it was adorable]

God that sounds amazing. I'd want to see the dog video, but I refuse to click on principle.

Can crowdsource summaries and make a chrome plugin?
ZeniMax contacts DoomRL creator to take down game
I first came across the Black Magic Probe (BMP) when starting doing ARM Cortex-M bare metal development. Since that time I've used a number of solutions from OpenOCD (opensource) to Segger J-Link (proprietary) to various incarnations of ST Micros ST-Link. There really isn't anything easier than telling gdb to attach to a serial port and go.
People needed a state engine for sewing Lambda functions together. For example, try doing retry with exponential back-off in Lambda. You quickly run into a number of problems that are difficult without an execution context outside the Lambda itself.

Step Functions give you this external context for doing retry, conditional trigger of downstream functions, parallel trigger of additional functions and more. Execution time of a state machine can last for up to a year, so this also gives you a way to do more than 5 minutes of work at a time.
For example, they might benefit from the set of opinions baked into k8s. I'm partial to convention over configuration, and I appreciate that there is a "Kubernetes way" you can follow and rapidly have a robust and conventional set of infrastructure. I like that Kubernetes encompasses a pretty large footprint of functionality. For example, I haven't used Terraform personally, but from what I understand, Terraform is not opinionated about secrets management; I imagine some Terraform users are using Vault for secrets, and some are using other solutions. Kubernetes has secrets management built-in, so most k8s users are going to use that functionality; it's one less decision for the team to debate.

Edit: to be clear, there are important things that k8s doesn't do, like templating, that run counter to convention over configuration, so this benefit is certainly arguable...
What makes you think you can trust the journalists to keep you correctly informed?
Military, maritime, energy exploration, adventure/scientific exploration. They all either have a life or death need for comms in an emergency or extremely accommodating budgets.
So JSON has officially Jumped The Shark (like XML)
Have you tried

du -macx ~ | egrep '^[0-9]{2}' | sort -n

egrep filter for files at least 10m ends up being a nice speed up, otherwise you end up spending most of the time sorting all the tiny files to the top while up writing hundreds of megabytes of /tmp/sortXXXX files in the process.
Less snarky answer than most people are giving you: street parking is free, while parking garages cost like a significant portion of your monthly rent per month.
"a lot" is two words.
I tried that in the AU: let's just say this is better than nothing. Well. Hm. Well, actually I'm not even sure about that;

First not only programs must opt-in (through a manifest) -- and that is quite natural given the way some existing Win32 functions are modified, but that won't be taken into effect unless the computer is also opt'ed in. That second condition both makes little sense, and is improperly documented (the doc tells us: a manifested app or the GPO option; while in reality this is: AND)

Then a single example so that you can understand the new "quality" of what MS is shipping: SetCurrentDirectory()
https://msdn.microsoft.com/en-us/library/windows/desktop/aa3...

Once you've manifested your program correctly (mainly by extracting what is interesting from powershell.exe, like usual because MSDN is shitty and does not describe the procedure to create the manifest with enough details) and configured your install with the good GPO (home edition users: go to hell) you happily starts to try the good old SetCurrentDirectory without the 260 chars limit.

It fails.

2 hours latter you understand that it fails because the MAX_PATH LIMIT IS STILL THERE IF lpPathName DOES NOT END WITH A BACKSLASH ‘ß‘¬ð’€¬ð€þ¬ð€

You then take a look at CreateProcess and understand that there is just no way to bypass the MAX_PATH limit with it on some of its params.

So you stop trying to use that half-backed and poorly documented "feature". The MAX_PATH (=260) limit in Windows is not gone. Maybe it's 5% gone, but that insufficient as hell.
Looks interesting. But what does:
"By combining cutting edge E Ink Carta technology with ultra-thin high-friction surface materials, the CANVAS display is purebred paper experience."

What exactly is purebred paper?
This is exactly the stuff I look up every single time. Very helpful writeup!
If you really find that attack interesting, you might also find it interesting to read the paper Thompson ripped it off of. Paul Karger co-invented INFOSEC and more attacks/defenses than about anyone in the field if you're counting foundational stuff. He wrote during his landmark pentest of MULTICS that the PL/I compiler could be subverted with a trap door. Added you could even do a compiler/compiler trap. The trap doors were their favorite technique. Thompson was working on MULTICS and received that evaluation. His initial citation for his idea was "an unknown, Air Force document." They made him change it later by giving him another copy. Everyone still credits Thompson despite Karger inventing it and the original mitigations. Those became part of Orange Book class A1 requirements for security certification with all those products coming with defenses against subversion by malicious developers.

The misattribution and forcing a correction by Thompson is in 3.2.4 of their lessons learned paper:

http://hack.org/mc/texts/classic-multics.pdf

Here's the original paper where the so-called Thompson attack is described on page 17.

https://www.acsac.org/2002/papers/classic-multics-orig.pdf

Also note they were inventing both hacking techniques and INFOSEC while doing this evaluation. It was part of forerunner work happening among small number of people with little to draw on. It's why you see me say "the legendary Paul Karger" when describing the results they got. Due credit might be "Paul Karger's compiler attack popularized & further explored by Ken Thompson's paper, Trusting Trust." I keep mentioning it until more give it.

Back on topic. These days we have verified and certifying compilers, too. Even typed assembly language with correctness proofs. Lots of stuff to base it off of that's close to what most developers can understand. Basic refinement from Rust compiler code with no optimizations to macro assembly or local scripting languages is what I've been recommending outside verified compilers since any developer can do it without special tooling. I even proposed bash one time although as a compile target more than what I'd try code it in lol. I see using local scripting is in your suggestions, too. That different people are thinking on same lines here more often might mean it's worth exploring further.
There's internet outrage when this is done overseas, but we need cracked (who despite their name do publish real articles these days) to let us know that it's going on the US?

I'd though that stingrays were passive MITM devices, not jammers.
The slightly more sane idea would be to look in the other direction, and build underground. That would be extremely expensive and have to deal with all sorts of issues, but at least it's physically possible.

The actually realistic solution is to focus on developing housing and infrastructure in the outer boroughs; Brooklyn and Queens are full of the absolute worst kind of inefficient quasi-suburban accumulated sprawl.
Location: Louisiana
Remote: No
Willing to relocate: Yes!
Technologies: Java, Python, SQL
Résumé/CV: https://docs.google.com/document/d/1AZA4YxRZBoYGsc1DuzHA-5C9SqbCHlrXiuNApd0ZY1g/edit
Github: https://github.com/BoraxTheClean
Email: colliero[at]my[dot]canisius[dot]edu
I don't write huge systems with dozens of other people. So I can get away with basically "almost everything is a state machine" in C. The parts that are not a state machine are encoded patterns that are matched against in tables, for simple command parsing and the like ( for when an fsm is overkill ).

The only cognitive load is generating test vectors, and I use scripting languages for that.
windows has hard links.
Once the satellites are launched, they require relatively little maintenance.

Per https://en.wikipedia.org/wiki/Iridium_satellite_constellatio... the service is useful for journalists, explorers and military units.
It is, Cutler famously hated Unix.
ZipRecruiter - https://ziprecruiter.com - Santa Monica (LA area) - REMOTE OK for some positions

Our goal is to create the best online services for filling and finding jobs. We bootstrapped for the first four years, growing to 450+ employees.

We have a number of open positions:

- Software Engineer (primarily Python) (Santa Monica)
- Software Engineer (primarily Perl) (Santa Monica or remote)
- Linux Systems Administrator (Santa Monica)

We're growing rapidly and have a large customer base (primarily small and medium sized businesses). We have interesting problems to solve in the areas of search, yield management, analytics, scalability and new product development. If you'd like to learn more, please visit https://www.ziprecruiter.com/hiring/technology or email us at techjobs@ziprecruiter.com
I had overall good experience with Zenni. One downside is that their rimless frames are not particularly sturdy; but then, for the price that I pay for them, it's still cheaper to just order a new frame.

I didn't have any problems with tint, fishbowl, or other optical abberations. This is with -4 correction on both eyes.
> Most — if not all — the commands that I thought I had mastered after years working on Linux environments stopped working because their BSD counterparts have slightly differences that completely break everything I try to do.

This is the true 'unix philosophy.'
I think you'd find a lot more voter fraud if you did away with vote-by-mail. It is far easier, far less likely to be caught, and scales a hell of a lot better.

And if we were actually serious about voter fraud, we would of course demand that all voting machines would have real audit trails.

But curiously, for some strange reason, people who loudly display the most concern about the integrity of our voting system never have much to say about either of those issues...
They have the only global, instant availability, low latency, SBD (short burst data) capability.

Transmitter is very small as well. https://www.iridium.com/products/details/iridium-9603
Interesting to see a reference to Culadasa on HN. I discovered his site in 2013 and listened to almost his entire podcast archive. For more than a year I meditated 1+ hours every day, but ultimately I didn't make much progress according to the 10 stages model he has laid out. I ended up getting skeptical/discouraged and stopped meditating regularly. How about you?
Context: https://spring.io/understanding/HATEOAS
Ask HN: What keyboard layout (for programming) are you using?
Hi HackerNews,
I'm currently using a german laptop keyboard and I've been playing with the idea of replacing it with a UK/US keyboard.

I've asked some friends about this I got mixed answers:

- Buy a german keyboard and use stickers (more keys)

- Buy a UK keyboard (bigger enter key)

- Buy a US keyboard (better key arrangement)

In all three cases I'd have to relearn/retrain my muscle memory, but I think it might be worth to know another layout if I get a job abroad?

I'd like to ask HN:

- Have you switched keyboard layouts before and which one are you using right now?

- Is it worth learning a new keyboard layout?

- Anything else to consider?

Thanks!

EDIT: Tried to fix the lists
It appears that most libraries download the list from Mozilla, but yes, you do need to ensure that it's downloaded frequently.
Love jq and https://paw.cloud is another of my favorite tools for working with APIs, when curl | jq . Isn't enough.
The registered voter rolls might shrink a bit, but it isn't likely to have much effect on vote outcomes. Sometimes, an organization will pay people to go out and register voters, and those people then make up a bunch of fake names because it's easier than going door-to-door.

https://web.archive.org/web/20090124050328/http://www.factch...
So much of the benefit comes from adopting Kubernetes in in entirety? As in it could potentially bundle and replace commonly needed operation tools like secret management, etc?
extremely effective learning tools

As far as they go, maybe; but I worry that people don't appreciate the limitations. Making sure that someone can't code up an exploit against your system in half an hour is absolutely essential, but it's not the only thing that matters -- a serious cryptographer is also going to be concerned about "two years of coding and ten million dollars of computing power" attacks, which can be safely disregarded in CTFs.
If I have a network scanning tool that tells me what's on my network, it's nice to know that an unknown prefix is likely an Apple product, or an HP printer, etc etc.
Everything old is new again.

So, now that it is happening to me, am I allowed to apologize to the numerous old-coders that tried to tell me this when I was coming up?
It's quite impressive that you've got so far so quickly.

There are some similarities to my own Full Metal Jacket (http://web.onetel.com/~hibou/fmj/FMJ.html), which I'm still actively developing, but I suspect there are significant differences as well. So I have a few questions.

(1) Is the computation model dataflow, i.e. do vertices execute asynchronously, when all their inputs have values?

(2) If not, is Skov a visual equivalent of factor or some other textual language?

(3) Is it statically or dynamically typed?

(4) How is iteration done?

(5) Is there a lambda?
Not sure what's your point. wsh91 is explaining how much it means to him/her that at Google we're generally happy to personally do those kinds of "accommodations" (for lack of a better word).

I couldn't care less about any team-mate of mine coming dressed the way they wanted. And I'm not surrounded by "every minority group", so if someone told me tomorrow he rather I use "he"/"she"/whatever when referring to them in public, they'll be the first one and I'll have no problem at all. I might forget some times, but that's fine too. Pronouns are also more of a personal thing than a minority group thing: I don't change my language when I talk to black people, or to white Americans, but if a person asks me, sure, why would I give a damn about language if that makes them feel better.
This isn't Grammar News. Unsolicited public correction of someone's second-language grammar is beyond rude.
The old Cryptopals challenges (http://cryptopals.com/) seem to cover the same material in a pedagogically very different way - they don't feed you the information as this book does, but give you a practical task which can be easily done with e.g. reading the specification of an algorithm from wikipedia, but figuring out the implementation of the attack yourself gives a much better understanding than simply reading about it.

Although this book claims a "Learn by doing" approach, I didn't find any specific assignments or data samples to facilitate that.
Is it really that difficult to address people how they wish to be addressed?

If someone said to you, "Please call me Matt" do you respond with "But your birth certificate says Matthew! How am I supposed to handle this cognitive load? What's the benefit for me, Matthew?"
Google Earth VR Glitch Art
I have a feeling the stores on 5th Ave would be less optimistic. Like I said - I think this idea is an eventuality in such dense urban centers.
In explaining the choice of JSON as the description language for state machines Tim Bray briefly said, "I couldn't find a good reason not to express it as JSON and in this day and age, you need a good reason for it to not be JSON."

He also mentioned that because it was a formally specified syntax, you could, should you choose to, build other more convenient syntaxes that reduce to it. It won't surprise me to see that happen fairly quickly.
As others note, the issue with PyPI and other download metrics is there are tools which frequently download the full set of requirements for a project in order to run their tasks, and those downloads shouldn't be counted.
What's funny about that characterization is, living in the suburbs, I spend quite a bit of time driving recreationally, and I can't rely on public transit, so I appreciate cars a lot. However, Downtown Manhattan is not the suburbs, and it's an inappropriate place for passenger vehicles. I don't think it qualifies for the "old way of travelling" bucket in that context: subways are already the standard.
I guess we never do bit shifting in higher level languages at all. E.g. in Python, there is no point to do this, there is only one type of int (64 bit) and it still creates a new int object, which is not very fast.
Anaplan | http://www.anaplan.com | San Francisco, CA

Open positions in Anaplan Engineering:

Anaplan | UI Engineer – Javascript/React | San Francisco, CA

Anaplan | Principal Software Engineer - Data Platform | San Francisco, CA

Anaplan | Software Engineer - Data Platform | San Francisco, CA

Anaplan | Test Engineer - Data Platform | San Francisco, CA

Anaplan | Site Reliability Engineer | San Francisco, CA

Anaplan | Senior Software Engineer, Security | San
Francisco, CA

Anaplan | Software Engineer, Security | San Francisco, CA

Link to These Jobs: http://app.jobvite.com/m?3TZ1liw1

About Anaplan:
We are expanding our engineering team in San Francisco to build more cool stuff. Our team is building cloud and data platforms to enable Anaplan for the next stage of growth. Along with that comes lots of opportunities for innovative, creative and iterative development of next generation systems to cater to new demand. Join our awesome team of people with incredible knowledge and experience in building real-world scalable systems for well-known tech companies in the bay area like eBay, Google, Okta, Tidemark, Oracle, and other stellar companies. We are an engineering-led and innovation-focused company.

Anaplan is a well-funded and profitable startup headquartered in SOMA. In fact, we may be the most successful company you’ve never heard of! We are on a mission to revolutionize how companies analyze and plan their businesses. And it’s working - we are already trusted by hundreds of Fortune 2000 companies and we’ve only just begun.

Our engineers are foodies, music nerds, Pokéwalkers, and ex-Googlers from around the world building great things together. We strive for cross-team collaboration and innovation. Our offices are super cool and relaxing with all the yummy foods, free beer, and healthy snacks galore, happy hours, karaoke nights and Settlers of Catan. We have phenomenal benefits, medical, dental, flexible work hours and unlimited vacation.
Defense in depth mostly does not work (against willful targeted attacks).

Software is not the real world where things bend. If a barrier is sane, it will stand, nobody will break it. But no matter how many non-sane barriers you add, you can not turn them into a sane one. The only thing you will achieve is to increase your system complexity and get more bugs as a result.