skysight-inc/HackerNews huggingface dataset:
haha. There is ONE variable that violates the naming convention. srch!=search.ts. I had a reason for doing that but just never changed it back.

The code will easily convert to modules if I ever decide to. For now I'm just keeping it simple. (i.e. no circular-reference risk, etc) It's easy to throw rocks at a design, but if you spent a day working in meta64 you'd realize how intuitive it is. Obscure is never the word you'd use.
+1. As a small development company with limited resources (read: one developer and no designated front end designer), Bootstrap gives me the opportunity to create a really nice looking web app without having to get bogged down with CSS details.

Plus the fact that there is a really rich ecosystem around Bootstrap with third party templates that are VERY well written and documented. I am not too proud to say that I routinely go to wrapbootstrap.com to purchase a template for ~$20 and use it as the basis for my web apps. Users love it, and I save having to hire or contract a dedicated front end designer.
It takes a lot of work and isn't something someone in their college dorm room can make. It takes industry contacts, specialized skills, and solid marketing to build a network and trust in the system. To do this for nonprofit is a sacrifice when the people with these skills could be chasing big money. LE is a good example of the tech community doing something that probably a government agency should be doing with tax dollars to support the industry. Private sector altruism.
Show HN: Thirty Bees – A PrestaShop 1.6 fork
I remember reading an article not too long ago indicating those machines were still selling well because of how upgradable they were. I will see if I can find a link.

EDIT: here it is: https://marco.org/2016/01/04/md101ll-a
I would suggest starting with compojure-api (via its leiningen template) on the backend and Reagent on the front-end. Super simple if you're familiar with building API driven SPAs and in particular React apps.

compojure-api will get you going, and you can sort of back in to a fuller understanding of compojure and ring, which I agree is a bit confusing -- hard to know which of the zillion ring plugins to use, and where.
The reason tptacek looked at the illumos source code is because I mentioned to them that a blog post you've previously linked to about the Solaris random devices [1] appeared [2] to suggest that the entropy provided by KCF randomness providers is given out fairly directly by /dev/random (with each byte of entropy XORed with the byte returned 1024 bytes earlier). Do you know if that specific thing has been changed to stop being true since illumos diverged? Do you know if urandom has been changed to no longer always run things through fips_random_inner (as illumos does and Darren Moffat's blog post says Solaris does)?

[Edited to add: it looks as though the tweeting questions-at Darren Moffat protocol has been initiated: https://twitter.com/tqbf/status/817496091759362048 . It's also worth noting (which I failed to do previously) that two of the three random providers in the blog post are described as doing their own hashing/similar processing of the entropy bytes they provide to the random pool, and the other one appears to do so from the illumos source.]

> Use of urandom contrary to official guidance is not recommended.

This is, I think, a case where using the passive voice is suboptimal. The official guidance obviously does not recommend using urandom contrary to official guidance, nor do you. Some others do recommend it, as this whole argument shows.

More substantively, this is the part of your stance that would be, as tptacek previously suggested, equally applicable to Linux urandom prior to Linux fixing their man pages. At that time, the official guidance on urandom was that it was inferior to random in general instead of solely in the one specific case of requests before the kernel CSPRNG has been seeded. If the official guidance is incorrect about when and if urandom is inferior to random, then use of urandom contrary to official guidance should be recommended.

[1]: https://blogs.oracle.com/darren/entry/solaris_random_number_...

[2]: The blog post only briefly mentions the rndc_addbytes and rndc_getbytes functions where the entropy provision and randomness-extraction bottom out, so it is possible that it just omits the details of any additional processing performed at that level. But it at least does not mention any further processing performed on the bytes from KCF providers except in FIPS mode.
The difference here is accessibility.

There's a number of public ways (which could be automated) to find out information like people's home addresses, but generally it's pretty difficult to figure out how (provided someone isn't just publicly posting their address).

Online harassers are often deterred simply because it takes too much effort to find out the information to do more harm.

Doxxing takes some amount of know how, and that's the only thing preventing it from happening more often.
Ask HN: Starting an Agency and Finding Projects
For a variety of reasons not communicated to us, last month our small, agile team got dissolved and the project moved abroad.

As the synergy that we have developed over the 2-3 takes a lot of time to build and that such team is more than the sum of its individual talents, we decided to start a small agency, but we have no experience finding projects.

Can you please share your experience in finding contract work? Big thanks in advance!
Everything assumes you're a Java expert.
I did go to a bootcamp for Python/Django in SF, 2014. I was previously doing basic small biz wordpress sites and graphic design, now lead backend engineer at a 5-year old startup, making 115K when hired.

If you want to learn to code, definitely a bootcamp is a great resource. Sure, you can do it all yourself, find materials online for free, but putting in the time with other learners for 10-15+ weeks in an actual learning environment is for me worth the $10K.

A lot of people (who almost always have never done one) like to say that you shouldn't do them, you won't get hired, you can find it online. I'd ask them if they have a college degree, and they why waste your money at college when all the info is available online?

In the end you're going to get out of it what you put into it; before, during, and after. Obviously do your homework not only on the camp and instructors, but as well all the time you can into online resources.

I'll never regret my choice to go to a programming bootcamp. It literally changed my life in amazing ways.
Nice to see there are three back-to-back eBPF talks on Saturday, starting at 1pm:

https://fosdem.org/2017/schedule/room/ua2114_baudoux/

The focus there is networking, but we're also using eBPF for performance observability, and security monitoring.
You can also set tmux as your default shell with chsh. I've been doing this for a while on macOS and have enjoyed it (other than user namespace issues that still drive me crazy)
No, but you might be on the hook if it is vulnerable to heartquakes.
I put this comment elsewhere in the thread, but maybe if I put it in this subthread you'll get to see it.

I tested on my laptop (a ThinkPad X250) and alacritty is slower than xterm. xterm can display find / at 80x24 in 11 seconds, but alacritty takes 17 seconds or more, depending on how large the window is (smaller seems to be slower) and whether it's on-screen or not (off-screen seems to be slower).
Edit: The document you linked to was recently updated, but the top of the page incorrectly says "Last updated: August 10, 2016". I wrote my response with the old document in mind. It's obvious to me now that this page was actually last updated in December 2016.

If I don't batch multiple SANs into one certificate and stagger a certificate queue, I will very quickly run into the Let's Encrypt rate limit.

If I don't want my users to wait for the queue to be processed, I could immediately request a new certificate for every new user's subdomain, but then I'd be limited to 10 new users every 3 hours.
> I had a WSJ journalist threaten me if I don't participate he'll write whatever he wants.

You don't abandon a story if the people you are writing about refuse to participate. There's nothing wrong with this.
I love iTerm2 and hate tmux, but can't use iTerm2 on Linux. I greatly prefer iTerm's window splits and tabs to tmux's. Please reconsider.
> First, I'm not aware of any tech giants who store passwords in the clear.

Mozilla, Microsoft and Google all effectively do this in their browsers. Don't believe me? Run the nirsoft webbrowserpassview. With just the files in your profile directory someone can dump your passwords. Sure, they're not "in the clear" but in practice it's just as bad if not worse. The number of accounts stolen with things like istealer is ridiculous. You can literally grab someone's entire lifetime of accounts in a fraction of a second.

I'd argue this isn't something a good developer would even attempt as it provides little more than a false sense of security to users. Good developers should be safe to absolutely refuse half measures like this as I do.
I attended a bootcamp in 2014. I regret it.

I entered because I wanted to switch from front-end development to full-stack. I'd really enjoyed what little I'd done with Ruby and Rails, so I fell for the pitch of this bootcamp that I could be retrained as a Rails developer in three months.

What I wished I'd known:
- everything about the bootcamp (schedule, curriculum, equipment) was set in stone. You are just a widget on a conveyor belt.
- the bootcamp's mandatory pair programming did not help me to learn the material at all.
- as others have mentioned, bootcamps are untruthful in their statistics. Mine even lied to the state regulators, claiming 90% of my cohort was employed as software developers, when maybe half of us were.

I ended up going back to my previous career.
Fix for Golang runtime memory corruption bug
There's Distance Fields[1] and Loop-Blinn[2] aside from standard textures that I'm aware of.

Valve uses the first, very few people use the second because of patent issues. They're more computationally expensive in some cases so there's always tradeoffs to be made depending on your hardware.

[1] - http://www.valvesoftware.com/publications/2007/SIGGRAPH2007_...

[2] - http://http.developer.nvidia.com/GPUGems3/gpugems3_ch25.html
An alternative view: https://github.com/golang/go/commit/b902a63ade47cf69218c9b38...
I've honestly never seen anything but love for tmux, can you explain why you hate it?
I for one welcome this change. Hopefully they are successful and can fix the issues that have plagued the software for so long.
I may just be another bootcamp grad, but the people who hired me said having multiple side-projects in Github was a factor, and it's certainly a factor when I'm interviewing and hiring similarly.
Why can't Apple ship both a USB-A and USB-C cable? In the early 2000s, Apple bundled both a USB and a Firewire cable in the packaging with a new iPod, presumably to facilitate exactly the sort of transition they're confronting now.
After learning syntax, the most valuable Clojure book to me was "Clojure Applied". Most books seem to cover the what of a language, Clojure Applied focused more on when and why. Which is extremely important, because I found that there tended to be lots of similar ways to tackle something in Clojure, which created mental gridlock whenever I tried to code a larger project.
It's not cheating if you gain those features back by using a separate program (tmux) and still see a performance improvement over all other tools, which is what the author is implying. All that does is suggest that terminals might not be the proper layer at which to implement those features (and for the record, I'm on the side of having scrollback, but the lack of it isn't a dealbreaker).
Celebs are not the most healthy people. Having money can give you too much access to docs and prescription drugs (see prince). Many also have pasts involving non-prescription drugs. A decade of the wild life sticks with you forever.
Not that I'm trying to discourage you, but why? Stability ? Money ?
Not saying this is great, and I don't have experience with an ES system in production, but... Could you do one of:

1. Manually remove the specific problem event from the store, then re-run all events starting from the previous accumulated state snapshot stored before that event? Then you get the new state snapshot just by re-processing all the events. This of course assumes you have state snapshots, and may not be feasible if this is a common occurrence and there are too many events to process.

Or:

2. Create a "reverse" event? This will cancel out the bad change and give you a new, valid state to work from and continue. This is nice since the historical state of the system is still represented, but that may be a disadvantage in some situations.
That will lose by a lot overall. Hit rates on the glyph cache are massive.
Looks great so far. Other than scrolling support, the one thing I miss the most is the use of the up arrow to scroll through history. Ctrl+R is great, but sometimes I just want to scroll through my most recent commands.
I feel that closed beta is not in favor at HN. But I'm trying to get some early users to test product and API before can open it to public.
I believe in HN community )
That is far from what I meant, and the suggestion that Rust is "salvation" is the stuff of infantile delusion. I'm a big fan of Rust, too, but it isn't going to be the "salvation".
That feels ironic. Is that ironic?
I love Clojure, and have spent most of the last seven years in a Clojure REPL inside Emacs. But it still doesn't feel like critical mass has been reached. If anything, large efforts like Incanter have mostly died off, because most Clojure people are smart and resourceful enough to build their own stuff. There's an aversion to frameworks and a reliance on gluing together smaller libraries, which is totally valid as a philosophy.

Me, I'm fairly dumb and lazy, and basically at the point where I wish I'd stuck with something like Python all along.
Sounds like an opportunity for a startup: SEC compliance as a service.
Show me evidence of your claims suddenly isn't a reasonable ask in the face of an accusation? Don't complain about lack-of-evidence, just put your trust blindly in someone. This argument feels quite weak.
Can you paste that config somewhere for the rest of us to see?
You're explaining high speed networking to the system architect of infinipath :)
Mine even lied to the state regulators, claiming 90% of my cohort was employed as software developers, when maybe half of us were.

A prior employer employed an advisor at a famous Data Science bootcamp. We wound up interviewing a ton of his students (I guess required for him being an advisor?) and most hadn't learned enough to be useful. Not even up to a BA/BS in CS/Math level. Even after the program ended, many of them will still in the job market for extended periods of time.

My current employer has someone who had a non-technical job, left for a boot camp, and came back for a more technical job. In his case it worked because he had a lot of market context.

So it's hit or miss, but not worth a guarantee.

If most people can't make it through a 4 year CS program, how can open-entry programs create better output in 3 months?
What was the first job experience like?
I think besides the logo the characters that run are related to Netflix show. It struck me only after I read your comment.

Marco Polo - from Marco Polo series
The female - from Organge is new Apple
Pablo - from some drug related tv series. (is he the math teacher who makes crack ?)
Show HN: Polltab – Create a Poll, because polls are fun
Kind of reminds me of this: http://web.archive.org/web/20160304105922/http://www.lambdas...

"Another feature about this guy is his low threshold of boredom. He'll pick up on a task and work frantically at it, accomplishing wonders in a short time and then get bored and drop it before its properly finished. He'll do nothing but strum his guitar and lie around in bed for several days after. That's also part of the pattern too; periods of frenetic activity followed by periods of melancholia, withdrawal and inactivity. This is a bipolar personality."
That also gives you a lot more to talk about in an interview :)
> Why do all the other CAs cost so much and take so long when the actual cert is generated in seconds?

I guess "so much" should be put in perspective: Domain Validation certificates, like the ones Let's Encrypt issue, are not really expensive - resellers typically offer them for something like $10/year. The more expensive certificates - OV and EV - involve some degree of manual verification of the information on the certificate (such as the company name). That's a large part of the cost.

But yeah, commercial CAs are (were?) money printing machines. Running Let's Encrypt costs about $3M/year, and they support >20M active certificates. Commercial CAs are going to have some marketing and support expenses, but the rest would be profit.

> Isn't that how it's supposed to work and LE is breaking the rules, thus living on borrowed time?

All CAs (should) follow the same set of rules - the Baseline Requirements. Let's Encrypt has had a pretty good track record so far - definitely better than some of the big commercial CAs like Symantec or Comodo.

> If it was possible to be so easy why no else did it? What is the secret ingredient?

To be fair, they were not the first free CA - both StartSSL and WoSign offered free DV certificates (for non-commercial usage). Not the best examples, I suppose.

Cloudflare offered free SSL (via Comodo) for their customers as well, as does cPanel via AutoSSL It's definitely viable, just took some time for people to care enough about encrypting the web to make it happen.
It's these sorts of tight feedback loops that makes HN great. Thanks for all of your hard work!
The situation feels tragic.
We have the most powerful country in the world, a country that has almost always adopted an aggressive attitude towards its enemies, that is openly accusing an enemy superpower of having influenced the democratic elections of its new president. Implicitly, it is delegitimizing its own democratically elected president.

Trump has been democratically elected, the people have spoken and the elections can hardly be invalidated.
But if he stays, he's at high risk of being considered by the institutions of his own country and by international political actors the puppet of a rival country.

Nothing good can come out of this.
After reading that book, I also suggest trying this free MOOC, http://iloveponies.github.io/120-hour-epic-sax-marathon/

It really helped solidfy some concepts for me by presenting concepts one at a time with built in unit tests to provide fast feedback.
Oh, misunderstanding. I was arguing that they were not just slightly below standard but grossly negligent, and therefore far away from being impacted by any attempts to discourage security by the 3-letter agencies.
I can see why your projects failed. That EventStore does not support you editing an event is not something that makes it "not production ready" it is in fact a feature that keeps you from doing stupid things.

If you go and edit an event, how do subscribers receive that edit? Let's imagine I have a projection updating a sql db and you now edit an event,how will this projection receive the edit?

"We had no solution for this problem in prod. How would you fix an event that should not have gotten in to the store? (Wrong contract, bad data etc) I understand it shouldn't happen, but in the real world all kinds of things go wrong."

You should do some more research into eventsourced systems as there are patterns for handling these exact scenarios. http://files.movereem.nl/2017saner-eventsourcing.pdf discusses some. In your scenario the most common is read the problem stream out, write it to a new stream (with any changes that you want) then either delete the old stream or leave a last event in the old stream saying it has been migrated to the new stream.
Definitely. Jupyter makes it very easy to display SVG, which graphviz (naturally) targets out of the box - as an example, I've used this before in a project to display Python ASTs ( https://github.com/hchasestevens/show_ast ).
Show HN: Dress: add symbols back into a stripped ELF binary (~strip)
I was thinking about #2 - would it be plausible to get ultra-cheap laptops, and run virtual machines in ec2?

According to this, you can get a high-end gaming rig going for fifty cents an hour; can we get a nice programming environment set up for the kids, too, running off Chromebooks or cheap Dells?
How the hell did you get an F? Do you not have SSL at all?
my answer above ^^ assumes we really want to remove it. compensating actions are generally the preferred option
Made a pull request to switch it almost completely to stable. https://github.com/jwilm/alacritty/pull/131

I didn't remove the dependency on proc_macro since that stabilizes in the next release and I'm lazy (if someone else wants to try, go for it!)
watt is a poor measurement for measuering the quantity of visible light.
Well I mean just knowing the lumina of a bulb doesn't help since it's a subjective measurement and can change depending on the kelvin of the light. For myself I usualy look for 600-800 lm and around 2600K well for the bath I go lower and only take a look at 400lm.
As said measuring the light is extremly subjective for different kinds of people
Just to be clear, Let's Encrypt does issue for non-governmental entities in U.S.-sanctioned countries (which some other U.S.-based CAs don't do).

https://crt.sh/?Identity=%25.sy&iCAID=16418
https://crt.sh/?Identity=%25.cu&iCAID=16418
https://crt.sh/?Identity=%25.sd&iCAID=16418
https://crt.sh/?Identity=%25.ir&iCAID=16418
No, GPL is fine. AGPL is not.
tmux handles mouse events very well. Scrolling, pane resizing (in tmux and vim), selection work once you add one line in config. For me it works so perfectly that it successfully goes in nested tmux sessions over ssh.

However, some people complain about mouse issues. I would suspect that some terminal emulators are trying way too hard to properly handle mouse events.
https://news.ycombinator.com/item?id=13317959

That one
No. You are full of it, and you know it.

The post was by WL Taskforce and was clearly explained -- read their twiter feed.
> a foreign corporation

> California-based D-Link Systems, Inc.

If you don't want to be bound by the laws of the United States and the State of California, maybe don't incorporate there.
Complexity Theory Problem Strikes Back
I'd put money on the proposition SODD could be made to work.
That only addresses part of the reason for the policy. Please, you have to be aware the legal world and companies is very complicated, and smart people spend a lot of time analyzing this.
How would you rate that experience against going through some books, if you have to do a bunch of work on your own either way?
> So if they are successful at suing D-Link does it create a carve-out that says "If you tell people your software does x or has feature or attribute y, and it doesn't actually do that or have that, you are liable for misrepresenting your product."... Because it it does create that carve out then there are going to be a BOATLOAD of lawsuits against software companies.

They also need to prove material harm to consumers. So lawsuits will almost certainly focus on security, privacy, and outright fraud/theft.

I really do not understand why this bothers people so much. Hire competent engineers. Follow best practices. It's really not that hard, and it's in your company's best interest anyways.

(Also, since its come up in other sub-threads, the name of the FTC is the Federal TRADE Commission, and they regulate commerce. OSS projects that don't engage in commerce aren't subject to these regulations.)
Pablo is from Narcos
Don't Let the Swag Throw Off Your Swagger
It does happen but I don't see this with Greenwald, or even Assange for that matter.