skysight-inc/HackerNews huggingface dataset:
We had no data loss incidents. My concern was around tooling and maintenance of the database. Once you had to start clearing out bad events in dev environments or doing common administrative chores there were many holes. I never did find out how to remove specific problem events. We ended up just purging the store every time something went wrong in lower environments.

We had no solution for this problem in prod. How would you fix an event that should not have gotten in to the store? (Wrong contract, bad data etc) I understand it shouldn't happen, but in the real world all kinds of things go wrong.

I can't imagine running a massive system on something like event store. Fortunately the projects always failed well before we got in to any kind of production with real users.
You're not disilliusioned, the Mac always was a niche player for games.

Everyone for the past 2 decades knows you don't buy a Mac for games.
Why do you make these assumptions that they're well paid?

And aren't VCs well compensated as well? In many cases taking the bulk of reward despite not doing any of the work?
Secure Headers for PHP
It has that fun Hackathon / side-project feel, that someone probably noticed and said "Hey, if you polish it up, we can host it for public use, because why not?".
For real, anyone remember flappy bird? This is pretty similar and flapper bird made a LOT of people happy.
If you're interested in getting better idea of where LE is being used and under what configurations this may be useful:

https://www.shodan.io/report/QlH0jpvb
As Steve mentioned, it was mostly for ffi. There's also a few places where I'm doing my own bounds checking in order to provide nicer error messages. After doing the bounds checking, doing an index operation without the standard library's bounds checking requires unsafe.
I think your understanding of the AGPL (specfically) is in error.
This is by far the best book around for learning Clojure from scratch (IMO).

If you always wanted to learn Clojure but never had the time, 2017 is the right year, and Clojure for the Brave and True is your companion. Buy it, or just read it for free on the website.

(Disclaimer: I'm not in any way associated to the book or the author, I'm just super thankful for all the times this book has helped me to learn new things and solve issues :)
Use cert bot to auto renew https://certbot.eff.org/docs/using.html#renewing-certificate...

Also include command like below as part of your automated audit scripts:

echo | openssl s_client -connect google.com:443 2>/dev/null | openssl x509 -noout -dates

http://www.shellhacks.com/en/HowTo-Check-SSL-Certificate-Exp...
One of the projects I worked on was in finance. The fact that we were going to get "a free audit log" from the architecture made everyone so excited.

After the CQRS/ES project failed (I was on cleanup duty) we used a more traditional arch. To handle the audit log we just had a separate table. ("customer" table had "customer_audit" table. Both were written to in transaction. Solved.)
And damage to their careers, and of course the simple time lost on fraudulent ventures.

Imagine the young, newly-minted PhD looking to strike out in industry and kick-start their career with some real cool engineering. They saddle up with Theranos and sink several years of productive life into a technology that will never work--and that people at the top knew would never work. They'll move on, but at what cost? This is their life and career, not just a bit of cash.

Compare that to a VC losing their investment? That is insulting and wrong on every mark.
Actually, no. There is no available correction that would allow me to read the smallest letters on the optician's test board. Age, floaters, coming presbyopia combining with aggravating myopia, uncorrectable changing astigmatism, etc. You're probably too young to understand :)
You're 100% right, which is why "periodic evaluation of industry standards" is such a critical part of any SDLC or best practice. Tech moves faster than other industries of course, but in general technology is just a sped-up clone of basically anything else. We didn't (and couldn't) make a definitive set of best practices the day we invented the computer, we made them up as we went along. Like the car industry, where safety standards were tightened as technology improved.

We do have companies already making a stand on security, using it as a competitive advantage. Apple, for one, has staked their name on their security in the past few years. That's their competitive advantage, is how secure TouchID and their secure enclave is. You're right that consumers don't see security as entirely necessary yet, but it took a long time for seat belts and airbags to become standard in cars, and even longer for them to be appreciated. Even today, many people refuse to wear seat belts.

But bear in mind, automotive security is a moving target too. Seatbelts, then airbags, then roll cages, then crumble zones, then backup cameras, then backup sensors, then automatic parking, then self-driving. There's very little that's new in the world, it's almost always been done before.
10 places remaining.
That's been the case for the most part on WrapBootstrap. Items that are very active are pushing out new BS4 versions while keeping the 3.x-based versions in the package. Some items that haven't seen an update to newer versions of the 3.x branch are jumping straight to 4.

The jump between 3 to 4 isn't as great as the jump from 2 to 3. With the jump from 2 to 3, many items never made the transition. I don't think that will be the case this time around.
.gov source: https://www.dni.gov/files/documents/ICA_2017_01.pdf

$ cmp ICA_2017_01.pdf Russia-Hacking-report.pdf; echo $?
0
Observations:

1. Wealth is exponentially distributed.
2. People tend to socialize with people in their rough income range.
3. Expenses tend to grow to fill any budget.
4. US society isn't very good at saving money, so most
people's budget for spending is their entire income.

Corollaries:

1. People tend to know a few people who make >10x what they do,
a few people who make <1/10x what they do,
and a lot of people that make about what they do.
2. Normal expenses in a milieu are enough to use up a person's entire income.
3. A person's idea of a luxury will tend towards something
that would require >10x their income to be affordable.
Because it is their company. They own it. They can do whatever they want with THEIR investment, including firing the CEO and putting someone else in charge to give back their money.
One of the interesting things, which may not be obvious, is that using a strobe in a dark room like that actually lets you see the bullet location with your naked eye. You didn't need to use a Polaroid to "see" the position.

The microphone is best triggered on the shock wave of a supersonic bullet. Accidentally shot a mic once trying to get it to trigger off a subsonic air pellet :-)
The illumos code is more than five years diverged from Solaris. It is no longer a point of valid comparison for some subsystems such as crypto.

Use of urandom contrary to official guidance is not recommended.
.gov source: https://www.dni.gov/files/documents/ICA_2017_01.pdf
It's an ad.
Wow, that's a huge mistake. Especially considering how rare USB-C was in 2015.
Sorry Manish, I had meant that you can have code that can be built using a stable compiler while still using Clippy via another means. I typically use stable, but I run clippy on my code anyway. I realize that my post is confusing, I'll edit.
There are sysadmins that use complexity to maintain draconian control, hide laziness or mask a lack of knowledge but don't throw the baby out with the bathwater. No matter what these people will find some way to obstruct you or maintain control. Even if their hearts are in the right place and they are using security best practices it sounds like they weren't doing a good job of automating the complexity and processes. Complex doesn't have to mean complicated.

A security design that takes advantage of multiple layers and compartmentalization is your ally against attackers. They love networks with hard shells and squishy insides. Once they are in via a service, no matter how innocuous, they can move laterally to the real targets with impunity.

But ultimately this kind of stuff is a culture issue. Culture issues are hard to fix but it's usually the root cause of bad blood between operations and development. It generally needs to be addressed on both sides though. It's really easy to think it's just a bunch of grumpy and possessive ops people but those behaviors are often rooted in how the dev teams interact with them. Things like punting releases over a wall and calling it a day, not participating in oncall duties despite causing many outages and a disparity between how credit (for releases) and blame (for outages) are assigned are often cited as issues that create what devs think or irrational BOFHs.
or you could type
CTRL+Z
BG
> does anyone actually like the new mac keyboards?

Yes.

I have being using three 2016 MacBook Pros regularly so far (two 15" and one 13") and I absolutely prefer the new keyboard on two of them to the old ones. The keys are more stable and feel better in my opinion. That said, the larger keys (esp. Space Bar and Left Shift) on one of the 15" MacBooks are a bit less "clicky" and that is an absolute pain in the ass to use. I am thinking perhaps the new keyboards vary more or at least a slight imperfection in the build of a specific machine can make user feeling much worse. I also believe that the first gen butterfly keyboard (on 12" MacBook) feels much worse than the newer one on the MacBook Pros.
I used to work for a company basically copying and pasting data from one excel spreadsheet to the other. I didn't know how to program yet, but I knew there had to be a better way, so I learned macros. I spent ~20 minutes a day working. I worked part-time and when I left, my boss commented on how I got done more than all of the full-timers there.

I personally think the biggest benefit to every company would be to drill into people's heads how software should automate your day to day work. Software people think that way, but most employees don't.
Pushing read model updates back to the client using a two way communication channel is one technical solution. I want to experiment with using Phoenix channels[1] to solve this. I think that has potential for easing the UI/UX concerns. You post a command from the web front-end and subscribe to receive updates for the read model you're looking at. Domain events can drive the client notification.

[1] http://www.phoenixframework.org/docs/channels
The renderer is custom in order to have complete control over when and how the screen is drawn.
I was being sarcastic, not sure if /s was sufficient to flag it, I can't quite tell from your response.

I agree and I've tried to explain that to my conservative friends and co-workers but it never quite makes it through. Because Sharia law and death-panels never came to be a lot of them feel fine in brushing off my concerns about Trump, despite the complete false equivalency between the two.
Exactly. The GP of my comment talks about 100k not being lifechanging money. I know for a fact that it would have been dramatically lifechanging if my mother or stepfather had been making anywhere near 100k during my childhood, even adjusted for inflation.
Crowd funding: World's First Open Source RISC-V-based 32-bit ΜC
This is a fantastic book-- but it's hardly news. It was released in 2015.
That particular example of find not needing to sort persistently annoys me. sort doesn't know anything about the structure of its input, so it has to read and buffer all of it before it can sort it. find knows that its input is a tree of strings, which it could exploit to produce sorted output at the cost of buffering one directory's worth of filenames at each level of the tree.

It's rarely a significant problem in practice, but it annoys me in principle!
How do ER surgeons avoid dumb, deadly mistakes? Ask their doctor
Why is anyone even still sticking around voluntarily? There is no chance of a lucrative exit and the company will probably die off on its own within 1-2 years.
The sparsity encouraged by ReLUs is one reason they are used but not to the exclusion of all other activations. ReLU variants can indeed outperform standard ReLU[0] but sometimes sparsity is a desired property. For example, in generative models.

[0] https://arxiv.org/abs/1505.00853
Yahoo Finance spelling mistake
Well, the difference all comes down to how one views tmux, and I'm on the side of hating it. I personally use tmux only to background applications, and any of its other features are "bloat" to me.
Purpose and Benefits of User Stories
The stock was flat but they were very profitable. Look here:
"Microsoft was very profitable during Steve Ballmer's tenure. As you can see from the chart, revenue doubled and net income doubled as well. Nearly $19 Billion in net income from $62 Billion in revenue is nothing to sneeze at, and that kind of growth is not easy for a company that large." [1]

[1] https://www.quora.com/Did-microsoft-make-a-profit-under-stev...
As someone with basically zero talent for salesmanship, from my outside perspective I'd describe the sales process (and thus the process of getting a sales job) as anticipating, identifying, or manufacturing a need in someone, and positioning yourself to fill that need. So I imagine the parent commenter could use that to decide if/how to transition to sales.
I had a WSJ journalist threaten me if I don't participate he'll write whatever he wants. Another NY Times journalists wrote completely made up stories and sold their version of it to the public. I really don't like the media, a bunch of bullies and slimeballs.
Unless Solaris regressed its urandom, the difference is immaterial.
This article and its headline are misleading. No one is being "punished" and no one's pay is being "cut". All that happened is that 2015 was a blowout year and 2016 was (by comparison) not, so the exec team got a lower percentage of their target bonuses. From the actual filing

2016 net sales and operating income were
96.4% and 99.5% of the respective target
goals set by the Compensation Committee.
This performance resulted in a combined
payout at 89.5% of target for each named
executive officer ... the 2016 payouts to
our named executive officers were significantly
less than the annual cash incentive payouts for
2015, reflecting strong pay-for-performance alignment.
The Compensation Committee determined that no downward
adjustments to the payouts would be made, based on
Apple’s 2016 performance and the individual
contributions of our named executive officers.
> I worry that a "simple" feature like this may be overly complex internally. Performance with large amounts of output is also a concern.

Just do it. I doubt it will be hard to beat tmux performance, in my experience it's slow like molasses and I only use it if I must - remote persistency, screen sharing, etc.
There's statute of limitations. The bad house example, in CA, runs 10 years.

Don't know about children's toys, but I bet they lobbied to hard to protect the industry.

There's statue of limitations on everything except murder.
Show HN: Universal mobile client for devs. Join Private Beta
First day of my High School wood shop class (do they even have those anymore?), our instructor opened up a couple of packs of hot dogs and ran one through every machine in the shop. We didn't lose any fingers in that class ;-)
No, they're criticising tmux as a proffered alternative to a full-featured terminal emulator, which is often used by non-power user programmers who are not willing to learn (like me).
I will definitely try SC:FA. For some reason I skipped it after the SC fiasko and SC2's non-flow economy was a no-go for me. Thanks for the info!
Not a fan of rust, but why rain on parent's parade? What the hell's wrong with some genuine enthusiasm?
Actually, I might be wrong. I thought it required Hyper-V, since it ran an Ubuntu under the covers, and that assumption might incorrect.

Specifically, it's enabling Hyper-V which makes Windows incompatible with VMware. The incompatibility results in more issues than just those with the bash shell. The big one for me is Docker for Windows:

https://forums.docker.com/t/docker-for-windows-w-vmware-inst...

I think I will just try it out and revert back if there's an issue, since I can't find clear documentation about it being incompatible. So I assume I'm wrong.

I can let you know if you like.
Jump needs to happen on touch down, not on touch up :)
If a Lightning to USB-C cable (which has existed for a while now) is a dongle then what is the USB-A equivalent ? How do you think people have been charging their iPhones to date ? And you realise you still need a "dongle" if Apple used USB-C on the iPhone ?

And why does your girlfriend need two sets of headphones when there is an included 3.5mm adapter with the iPhone ?

So many questions. Because literally nothing you wrote seems to make much sense.
Interesting bits of analysis:

1. "DHS assesses that the types of systems Russian actors targeted or compromised were not involved in vote tallying."

2. "When it appeared to Moscow that Secretary Clinton was likely to win the election, the Russian influence campaign began to focus more on undermining her future presidency."

3. "Russia’s goals were to undermine public faith in the US democratic process, denigrate Secretary Clinton, and harm her electability and potential presidency."

4. "Moscow also saw the election of Presidentelect
Trump as a way to achieve an international counterterrorism coalition against the Islamic State in Iraq and the Levant (ISIL). "

5. "Pro-Kremlin bloggers had prepared a Twitter campaign, #DemocracyRIP, on election night in anticipation of Secretary Clinton’s victory, judging from their social media activity."

-- Full stop -- Do they mean Americans who are "Pro-Kremlin" like many progressives and conservatives that are anti-war? Or do they mean paid/covert bloggers? It seems to me they mean Americans? In which case how is that in the report at all?

6. "Disclosures through WikiLeaks did not contain any evident forgeries."

7. "RT and Sputnik—another government-funded outlet producing pro-Kremlin radio and online content in a variety of languages for international audiences—consistently cast president-elect Trump as the target of unfair coverage from traditional US media outlets that they claimed were subservient to a corrupt political establishment. "

-- I actually believe this to be true. I absolutely hate Trump and think he's a despicable man and unfit for the presidency. However, I thought that the media coverage of him was absolutely brutally skewed and over-the-top clearly politically aligned. Anyway I saw this kind of reporting across international media outlets and friends and family and other news media outlets in the US said the same thing.

8. "RT America TV, a Kremlin-financed channel operated from within the United States, has substantially expanded its repertoire of programming that highlights criticism of alleged US shortcomings in democracy and civil liberties."

-- I think these speak to me because American media will not cover civil rights abuses and curtailments in a non-apologetic fashion. It seems typical to me that state-propaganda criticizes their adversaries' civil liberty abuses, as the US does to Russia and China and as Russia and China do to the US.

The whole section on RT seemed to be completely off topic and distractionary. I only got half way through it.

I did not see any assessment that Podesta's emails were hacked by Russia or shared by Russia. I was hoping to see that because people keep grouping it into the DNC hacks.
The composition is very different from the integrated case. Alacritty with tmux is wildly different from Terminal.app.
Use or integration into your products?
Political philosopher and social critic, in the spirit of Taleb and Moldbug.

Our civilization desperately needs independent thinkers of this type. The problem is that the people who get paid to do this for a living are all hopelessly compromised by the institutional structures they inhabit (universities, newspapers, right-wing think tanks, etc)

One idea I would promote is geopolitical vacation as a third-path way to deal with refugee and immigrant crises. My claim is that geographically large countries like Canada, Australia, the US and Russia have no serious need whatsoever for the vast lands they have claimed. So they should take some of that land and vacate it to make room for refugees and immigrants. It doesn't need to be a lot of space: city-states like Hong Kong, Singapore and Dubai prove unquestionably that prosperous and wealthy societies can be built in physically small territories.
It's not a Node.js limitation either. The design was not thought out from the beginning.

It has happened to me before. I design something, then I run it in multiple CPUS and it doesn't make sense anymore...

Or realize that if try to scale the current design doesn't hold.

Node.js running in a single thread is a good thing if you know how to work with it. Or if you really need multiple threads, use another PL.

Or you could write it in C++ and bind it to Node.js. And run it as a background process. Or spin up a worker? there seems to be multiple solutions here...
>That's company policy

Yes.

I was just pointing out that regardless of modification/distribution/whatever, bigco policy is to not allow ANY AGPL code within a 10 mile radius of any computer owned by said company.

The author(s) are free to use AGPL, but there are significant downsides if they care about adoption.
Green Threads Are Like Garbage Collection
I think Ghostery stops this.
If you interpret that as $100k total rather than each, it's probably not terribly uncommon. I've got over $50k myself, so if I had a partner with similar, that's where we'd be. Median debt would be also be more useful than average, I think, or even just the top 25 percentile. Basically, anyone who paid for their education entirely with loans (say, while barely supporting themselves or even using excess loan dollars for food/rent) would be in this position.
I haven't tried, but I'm sure they would be quick to address a correction. Unfortunately I don't think the typical car buyer should be smacked with the choice between poor data and the opportunity of volunteering for the upkeep of a product they paid for. Personally I don't think it reflects well on the company. Traffic problem still remains.
Can you go into details about tmux vs tabs & a scrollbar?
> I respectfully disagree. Alacritty follows the Unix philosophy of doing one thing, and doing it well. I used to think that terminal scrollback and tabs were great ideas -- but switching to tmux changed my mind completely. Tmux is so much more capable for managing your session history. The terminal's tab and scrollback features can never match this. They're just bloat :p

This is the problem of Unix philosophy, because it applies differently for different people.

For example, I use i3, that is a tilling window manager, so I don't need tabs or split management for tmux. Actually, I removed tmux since I started to use i3 because using i3 features feels much more natural, since they apply to every window. However, there is only one thing that I can't have with i3 that is scrollback buffer, so while I don't need a terminal with tabs, I need support for scrollback buffer. Adding tmux just to get scrollback goes against Unix philosophy.
I don't know what's wrong with me but I gave Clojure 3 tries in the past and every time I try to actually build something (aside from 4clojure and solving hackerrank problems with it) I get lost in the tooling and just give up then fallback to familiar frameworks\languages.

It just doesn't click with me and the whole leinengen\ring\compojure just seems weird and backhanded.
Are you telling me that dongles aren't adequate? You must have native connectors? Then by all means replace that $3-10k worth of equipment.

That's what the forward march of progressing standards is about - you upgrade some, with adapters for legacy interfaces.