skysight-inc/HackerNews huggingface dataset:
Yes, after reading a draft[1] of this document, I suggested to them that they seemed to be insufficiently emphasizing remote execution vulnerabilities (due to invalid memory access). I also pointed out that they neglected to mention Rust and the Clang/LLVM sanitizers. (And SaferCPlusPlus[2] too.) They acknowledged my comments, but it doesn't seem to have had much effect on the document.

[1] https://news.ycombinator.com/item?id=12643463

[2] shamelss plug: https://github.com/duneroadrunner/SaferCPlusPlus
Apple Delays Requirement for App Transport Security
This is great until we realize that Google is a friend of oppressive regimes and will turn over data without requiring a warrant to the regimes.
You might want to take a look at Fabric.js, while it lacks keyframe based animations, it does support other things.

http://fabricjs.com/kitchensink
The title doesn't really say much about the article, but this post contains some interesting thoughts on open source development, the drive, expectations, how authors become disillusioned and how to move forward.
I did not intend to be offensive, only skeptical and cautious. I was pointing more to people's nature to erroneously construct narratives regarding cause and effect in their lives. We are all guilty of it, no doubt. I also don't think Dalio is being intentionally misleading. But, people tend to give less credit to chance and more credit to a very concrete chain of events that they can attribute a narrative to.

However, I think you bring up a fair criticism. It's worth reading, if nothing else, because of what Dalio has seen and experienced, situations I will likely never find myself in. As such, I would otherwise not learn firsthand how to react to or solve problems in such environments. Whether his association between actions and the outcomes are true is only part of the value of what he has written.
Title is misleading. Views are down for the 49 "YouTube personalities" with >10 million subscribers. Views may well be increasing for other categories, such as smaller channels or channels run by television studios.
Well, it is partly Apple's fault in that they chose to go completely type c only, and that they chose not to provide the right sets of clearly marked and explained adapters that would be guaranteed to work with their hardware.
Does anyone know if viewing times are down too?
Details on the tech stack: We are using React and friends for the front end and Programmable Chat by Twilio on the BE (https://www.twilio.com/chat)

Happy to go further into details on any of that if interested. We are considering open sourcing the entire project, is that something people would be interested in?
I feel like commenting on the callbacks and variable-bound-contexts, and saying something about the glorious wonder of modern JavaScripts... better not, tho :)
Presumably those would be included, as well as anything with a speaker and an interface to the internet, because SC's obscenity statute is incredibly broad.
I agree with avoiding a VPS when you can. I think e.g. Digital Ocean + Let's Encrypt is just way too low level to be toying with when there's lots of hosting services that let you work at a higher level of abstraction where they deal with all the SSL details for you (e.g. GitHub Pages, Netlify, Heroku).
To be fair, string interpolation is an outlier. Also, Python 3 cleaned up a few areas where there were redundant ways to do something, like standard library modules that had both C and (pure) Python versions.
Not type systems per se.

But lack of garbage collection and the need for lifetime annotations for references and memory management with Box, Rc, Cell, Mutex, etc, combined with the type definitions makes Rust a lot more verbose than any dynamic language or even statically typed languages with GC like Scala / Go.

That can't be avoided, but you have to be prepared. Rust code can be short and elegant, but it can also be tediously verbose.
These are basically the same rules for any distributed application, like something using microservices. An app is just the edge node of a distributed system.

In any distributed system, the biggest cost is moving data between nodes, and therefore the biggest failure case is when data is moving slowly or not at all. It's a case you should always be prepared for.

If you write your app in a way that assumes the network is bad, which you should always do, whether it's an app or two microservices, then you'll have a more robust system.
GPS is indeed happily unaware of leap seconds, it started counting seconds on January 6th, 1980 (UTC) {1 week is 604800s, weeks count 0..1023, there already was one rollover}.

http://imgur.com/a/uq6D0

A few minutes ago, when the screenshot was taken, this was second #501074 in week #1928.

As a courtesy to users, GPS transmits the current number of leap-seconds inserted in UTC (currently: 17) and the fact that a leap-second will be inserted the next occasion (end of this year: "LEAP PENDING!"). That's of course very helpful when you are using GPS disciplined clocks for timekeeping.
I know the article is about ants and not bees, but it reminds me of that Fight Club quote:

Worker bees can leave.
Even drones can fly away.
The Queen is their slave.
Nobody thinks the year boundary has real meaning with regards to this or that anything will change. We spread the meme as a way of experiencing the observations of 2016 together and finding comfort in making it a shared phenomenon rather than one to experience alone. Rest assured, we know that attaching meaning to 2016 is symbolic and that "2016" is not a property of the universe that brings any intrinsic context to our civilization.
A homemade receiver for GPS and GLONASS satellites
Is Peter Thiel the Most Powerful Person in Tech?
Can swarm workers be programmed to control vast flocks on Lambda?
Blockchains aren't expensive unless they're anonymous. If they're anonymous, you need something like "mining" as a proxy for reputation. If the players in a blockchain are a dozen known mutually mistrustful banks, that's not a problem. It takes a majority of the players, acting together, to make a change. Banks are interested in this sort of thing because they need clearing intermediaries, and those intermediaries are expensive organizations to operate.

The parent article, though, is a solution looking for a problem.
You still have to handle cases where the server state has been updated (possibly via another medium, event, ...) and when the user's internet comes back it's not a matter of pushing clients' commands anymore. Instead you have to merge changes (either backend or front end side) before fetching the new state. For example, I try to purchase an item on my desktop, but can't because I lost connectivity. So, I proceed to buy it on my mobile. When the net comes back, did I mean to buy this item two times or just one ? In this case, it's easy to find a workable solution (cancel the second order command), but you get the idea: It's not trivial.

CQRS and ES, are wonderful tools in such situations. Past that point, your web app is far away from the little CRUD mashup it was at the beginning.
I didn't see it in the docs, but does there exist a concept similar to java's servlet filters. For instance to check apikeys globally, perform compression, input validation, etc. Really any common operation across multiple routes.
Show HN: RollOver – A webgl based drop-in curled background for visual tours
It's still end-to-end encrypted though, so all google can hand over is random data.
This is why I was so curious. Being a high school kid, you're completely ill-equipped to understand the nuances of these sorts of programs.
No religious flamewars on HN, please.
Nobody believes it, it's a joke.
Thanks I look forward to checking it out.
Ever heard of Enron? Also just google for "nuclear corruption" and you'll get a lot of reading material. For example this article http://nautilus.org/napsnet/napsnet-policy-forum/nuclear-cor... which has links out to sources including the US DOJ about corruption cases in Korea, Taiwan, Japan, the US, and more. It's a huge problem. And the key players would like to keep it all hidden, so your being in the dark about it is no surprise.

Corporate overlords (can't tell if you are trolling, but I'll answer) is just a shorthand for corporate decision makers who prioritize corporate profits over other considerations like consumer benefit, care of the environment, freedom of consumer choice, fair dealing, etc.
From the article:

"The 13-inch model without the Touch Bar worked for 19.5 hours in one trial but only 4.5 hours in the next."
EFF to Supreme Court: Strike Social Media Ban for Sex Offenders
There wouldn't have been any auxiliary advantages to switching to full TB2.

TB2/mDP can't carry power. It was physically a much larger port, which means they couldn't scale down the size of the machine. And, ultimately, mDP is a much less useful port than the universally standard USB-C.
Ask HN: How to earn trust from users and increase conversion rate
We are operating an app helping people apply visas using their mobile phone (fill forms, submit supporting documents by taking pictures etc.), we have acquired 300+ customers in less than 2 weeks, and 350+ visa applications created, most of the customers stop after the 1st step (Basic personal information), they won't take further step, only 2 users completed the whole process, and they are very happy with our assistance. We believe it's because of lack of trust, people are not willing to give out their private informations, but how could they trust the other traditional agents?
President Signs Law Protecting Your Right to Review
Smart users don't like installing every little thing they want to try and giving them all full unsandboxed access to their computer.

On the desktop, the easiest way to run an app in a sandbox is if it's a web app that runs in the browser's sandbox to begin with.
Sorry if I wasn't clear, but the implication was intended to be that the prosecution would set out a case (witness statements, DNA whatever...) and just replying as the defendant with a simple statement would not be enough.

The jury will do what the jury will do, but my very very limited experience (was on jury duty but didn't actually sit on a case, chatted to a defense lawyer and chatted to someone else who has also actually sat on a jury for a murder case - all in the UK) is that they are more inclined to side with the defendant.

Edited to clarify the first paragraph
Please post civilly and substantively, or not at all.

https://news.ycombinator.com/newsguidelines.html

https://news.ycombinator.com/newswelcome.html

We detached this comment from https://news.ycombinator.com/item?id=13245862 and marked it off-topic.
Network Solutions Steals Customer's Domain, Holds Hostage for $358
Relevant piece of information as to why this is important:

> "Furthermore, so far, it has been impossible to conciliate in one common theory these two aspects of physics. To succeed in this quest, almost all unification theories predict a breaking of Lorentz symmetry."
It is missing anything about ServiceWorkers.
How much is this emphasized when his philosophy is being taught? That is, who is doing the ignoring: those who teach, or those who were taught and now forsake it?
I'm not sure how it compares, but I recently went 4k@60Hz with a Dell XPS 15 + docking station.(Dell WD15) + Vizio D40u-D1 (40"). That uses Displayport out of the dock, and a Plugable active DP to HDMI adapter before going into the TV as HDMI as 4k@60Hz. I find it surprising that the monitors, which likely cost 2-3 times what that TV cost ($400) don't support it over HDMI (but then again, the TV doesn't even have DP).

That said, Dell did have a USB-C dock, the TB15, which was plagued by a lot of the same things I hear about USB-C from the Macbooks with USB-C. Wifi and other components stop working intermittently, and on the dock, it flickered intermittently when connected at 4k[1]. Dell just released a new dock, the TB16, and there's a BIOS update for my XPS 15 that says it fixes some docking issues.

1: I seem to recall someone mentioning this was related to the firmware in some connected peripheral, but I'm not sure.
https://en.wikipedia.org/wiki/Enron
Agreed about the dangers of less than explicit communication.

But I'm not appalled by Dubai. If anything, I'm appalled by the childish arrogance and "moral superiority" on display in this thread. There is nothing "hackerish" or clever about getting inflamed against a far-away country you probably know nothing about.

Nietzsche has a good quote about this pestilential habit of moral condemnation, which I can't find right now. It's a bad habit, an addiction we should recognize and discard.

(Now a thread about the unique ways of the Emirates and how to navigate there would be worthwhile.)

People don't talk in this ridiculous, irresponsible way when they have skin in the game. I wouldn't expect loose, childish talk from you, Dan G about moderating forums, because you moderate a forum and know what's involved.
You might want to check out Python 2.8

https://www.naftaliharris.com/blog/why-making-python-2.8/
Why couldn't they define the leap second more precisely then? I think there has to be an astronomic reason for the leap second. Either the Earth is slowing down or maybe the they want better alignment between the earth daily rotation and annual revolution.
Haha, oh that definition of curious. My bad. (side note: I am curious why the M-W dictionary puts the archaic and obsolete definitions first)

Gotcha on the carried interest. Ya we have come a long way from sailing molasses across the ocean to calculate a carry. While scenarios and clauses can change payment to managers, c.p. or not, if we cut to the chase I think it's safe to say yes the incentive carry structures in hedge funds generally favor HF managers getting paid much more compared to VCs. When the top HF managers annual pay news articles come out, these numbers can get crazy, top 10 HF managers can make more in one year than the entire net worth of a top venture capitalist with decades in the industry. But VC guys get to do way more interesting investing, meeting with new tech companies is much cooler than public equity research I think. Thanks for posting this article btw.
I didn't say typed languages are inherently more verbose. I said that a type system tends to make things more verbose (in some cases), e.g. having to bang out types in function signatures, etc. When writing small scripts you usually just write down what you want to happen, and it works. There's some extra mental/typing overhead in a typed language in many cases. For larger programs, this overhead isn't important since you get many other benefits, but for small scripts sometimes it can be problematic.

It's not a hard-and-fast rule. It's something that I've experienced when trying to write small scripts in all kinds of typed languages. I keep going back to Python.

For larger scripty things I've found typed languages to work just as well.

> but this necessarily means paying a price in expressiveness.

I don't think this is true. You can have higher level abstractions in Rust too.
All mobile apps will be offline at some point. Cell coverage doesn't cover 100% of the planet yet.

The question is, how good of an experience will you be able to deliver when your client is inevitably in one of these places?
Yeah, this changes everything about what the title seemed to imply.

I think it's a case of people becoming tired with the same stuff that's churned out by those YouTube personalities with >10 mil subscribers. Once you reach that level you have to appeal to the lowest common denominator, and once you do that you're competing with a host of fresher channels with newer ideas.
> making sites simple also make them more compatible!

For some reason (probably that I recently ran across it), this reminds me of:

"designing the system so that the manual will be as short as possible minimizes learning effort."

- Mike Lesk, as quoted in Expert C Programming, Van der Linden. https://en.wikipedia.org/wiki/Mike_Lesk
for being based in new york, and ostensibly the nation's newspaper of record, the new york times, regularly (either through ignorance or malice, distorts the story

yes - if a hedge fund under-performs, investors still ended up paying a bunch of money for under-performance. I'm not sure what is surprising here.

As it relates to incentive fees, the issue that needs to be discussed is when is incentive calculated, is there a claw back, and is there a high-water mark?

Different funds' positions on these issues varies considerably, but its not some mysterious subject.
_ is a placeholder for the next lambda argument. So, for example, `x => x.blah()` could be rewritten as `_.blah()`, and `x => blah(x)` could be rewritten as `blah(_)` (or, since we don't need partial application here, simply `blah`).

It also works for multiple arguments: `_ * _` is equivalent to `(x, y) => x * y`, which is really `(x, y) => x.*(y)`.
Anyone using PouchDB + CouchDB in production to solve this type of problem? It is my go-to solution but I'm unaware of problems at scale.
Your account has a long history of posting uncivil and unsubstantive comments to Hacker News. Please don't do that. We're looking for thoughtful discussion, which I'm sure you can contribute to if you want to. If you don't want to, that's fine, but then please don't post at all.

https://news.ycombinator.com/newsguidelines.html

https://news.ycombinator.com/newswelcome.html
I've been using rust to as a more performance-oriented tool alongside python. It _is_ a different tool: there are certain tasks (for an irl example: taking a Unicode data file, parsing its contents, transforming it in some way, and writing it to disk) where python works very well and Rust feels like overkill.

That said, Rust is very elegant for the work it is doing. Rust iterators and iterator adapters are a powerful and clean way of manipulating collections, and the `match` syntax is an elegant way of handling errors and Option types.

Rust isn't a scripting language in terms of its strengths, but it isn't far away in terms of how pleasant it is to read and write. I would definitely suggest taking a look at it next time you run into performance constraints in python: it's easy to create python-native modules & interfaces with tools like rust-cpython (https://github.com/dgrunwald/rust-cpython).
How does clawing back some of the variable fees alleviate the fixed part of the fee? You're still paying the fixed part of the fee no matter what!

It sounds like you work at a hedge fund and are rationalizing...
Googling displayport++ returns a bunch of confusing pages - can you summarize what the ++ signifies in your own words and with some examples?
> No one is forced to put money in his hedge fund.

...except the people represented by those "legislators and regulators" that you sneer at for being ignorant, and thus can be educated by articles like this.

Your posts in this thread feel like libertarian position-staking more than anything coherent.
Can be in std without being exposed. libc does this IIRC; the stdlib depends on libc but doesn't expose it.
This is just a very thin and worthless wrapper around https://github.com/misterhat/omdb
That wasn't a big problem in our particular application, so in case of failure we would just report a potentially unsatisfactory error message along the lines of "Your changes could not be saved. Please try again." (with a list of the discarded commands' descriptions).

In a situation where this kind of thing was more important, I would think about how to let the user decide how to reconciliate their changes. It could be that a choice of discarding or retrying would suffice, or something more complex.

The "chokepoint" notion is also useful, and in fact our app did have a distinction between potentially offline actions and necessarily synchronous actions, but our synchronous actions were mostly queries like searches.
Good chance it's because facebook is driving away traffic from Youtube
This isn't a dupe. It's a response to the other article with a similar title. I've reposted under a less-confusing title.
I don't mind the ads but I hate the delay to dismiss. I actually enjoy watching relevant or non traditional ads, seen some great ones lately from other YouTube channels advertising. But my ability to decide if an ad is relevant is way faster than 5 seconds. It wastes everyone's time and money by making me wait longer.
Sounds like a perfect use-case for a lawyer.
Contentiousness is a ~50% heritable personality trait, only slightly less than IQ.
My experience with "pounding the pavement" at IT conferences has been the same. I'm there to network and learn, but also to make acquaintances and friends. People there tend to be less social than ones at hobby related meetups. Their mindset isn't as social. And I hate to say it, but there's truth to the stereotype that IT people aren't the most socially adept either.

It's frustrating when you're trying to make friends to work on an open source collaboration with, or just grab a beer and vent or talk shop.
I believe the article I linked mentioned the thought being that it was the queen from Aliens, not the original xenomorph. I also wouldn't be surprised to find it to be untrue altogether, thus the "believed to be" phrasing.
Show HN: Sud.c, Sorted list of all solutions for any Sudoku
I'm not an investment expert, but wouldn't there be virtually unlimited upside in an optimal hindsight strategy? I.e. you could use derivatives and other financial instruments to gain an arbitrary amount of leverage and hence return, since there would be no risk.
Nice work, I like it. Two peeves:

1) Mobile is broken (iPad). Maybe you don't expect a lot of mobile users but it's not a lot of extra work, and can be productive for large tablet users.

2) I would prefer that twitter not be used for your dev blog.
Please don't create new accounts just to post like this.
The fact that supposedly "sophisticated investors" didn't figure this out years ago amazes me. Hedge funds, as a class, don't perform that well.

The main difference between hedge funds and regular mutual funds is that regular funds have to report their numbers in a standardized way. The SEC requires mutual funds to report 1, 5, and 10 year performance, after all fees. Hedge funds don't have to do that. That lets them boast about their performance in good years, and shut up in bad years. This fools a surprising number of investors.

Under US law, hedge funds are for "sophisticated investors". Unfortunately, pension funds qualify.
I found http://www.chesscademy.com pretty helpful. It takes a MOOC approach to chess, while keeping things fun and manageable.
When did you last try them? They changed over to a new selection process and a new batch of puzzles a few weeks ago, and they're much more real-world now.
That's possible, I can only speak to standard SWE type roles, and in those situations the inter-person variance is larger than the inter-institution variance.
It doesn't waste your time; it uses it to force you to watch that ad. That's worth money!

The ads on YouTube are not there for you.
It is built right on top of .format(), so perhaps it's more accurate to say 3.1 ways.
Ads, but also content / recommendations. I signed up for YouTube Red to finally get rid of ads & support the few channels I subscribe to, but instead it started promoting YouTube Originals that insult my intelligence. (I'm really, really not interested in Scare PewDiePie, or Prank Academy, or Foursome.)

YouTube keeps shoving recommendations on me that I'm just not interested in. I'm more likely to start at Netflix first now (no ads, better quality), or even Vimeo (which has tons of really good conference videos that aren't on YouTube). I do miss watching TechMoan on YT, though.