skysight-inc/HackerNews huggingface dataset:
Twice in the last few days I tried to use NextMuni and it gave me super wrong estimates, way more wrong than I've ever seen it. I wonder if this was why. I'm really grateful to have another option available.
I seem to remember a few other apps and scripts that do the same thing, but I also heard that they get out of date pretty quickly. Don't know if this is going to keep up with the updates, but it shows that this is an ongoing problem with Windows10.
OTOH, solving well-established hard problems sometime requires more true innovation than developing new ideas. I prefer to do both.
BFA with emphasis on interior design and studio art. I still paint and love it, but been doing Linux/Open Source stuff for over 20 years now. When I got into Linux it reminded me of when I was a kid on the old Apple ][, that's when I knew I was on to something. I don't regret anything, loved college and what I learned, and will paint for the rest of my life. Still joke about going back for a Master's in Art History one day, whenever I retire I want to travel more and see all the great art museums in the world.
> Always show up in court if you are being sued.

Even then it can be hit and miss, depending upon the judge's ability to understand the case. I have been court a couple of times where the judge used my exact argument to side with my opponent. I got both decisions reversed in appeals, but that didn't make the process any less frustrating.

Unfortunately, courtrooms are not always the bastions of justice we'd like to think they are.
In addition to that, there's no way the engineer waited until subsequent nights to try other flavors.
Right at the 0:46 mark (and again at 10 minutes) in the video you can see something that resembles a quad-copter with propellers on 4 sides of the flying object. Or am i just imagining things?
GigEconomy.io Launches Cartoon Blog Startup
Haha, this was indeed posted with that all-time great in mind.
> such as ligatures, small caps, proportional figures, mathematical equations

Out of those, I recognize "mathematical equations" as something I've ever tried, regardless of which software I've been using, and LibreOffice Math always fit my needs. The truth is, outside of programming, I don't use enough of the features of office software for it to make a difference which suite I use.

I'm not sure what you're trying to prove. That there are features in some Windows software that aren't in Linux software? Granted, but I don't see how that's relevant to my original comment.
What Does 'Middle Class' Even Mean?
It's not that far fetched though.

I had a an old motorcycle years ago that was the same way as this guy's car. If I stopped to grab a snack, my bike would not start again. If I stopped for lunch, then it would fire back up no problem. Sure enough the problem was vapor lock. However the time needed for the bike to cool enough was about 15-20 minutes, not the couple minutes mentioned in this story.
Ask HN: Are there better countries to start my SaaS company for tax reasons?
We are about to launch a sass product and I'm wondering if it's too imaginative to incorporate in another country for tax reasons. We're using stripe, based in the US and most of our clients will be in the US. Also it's a .com.
> > "A deeper realization came further on: there might be limitations in language itself and our ability to represent ideas and think about them that could preclude us from actually understanding the foundations of our situation.

I see this play out every day. As a result of the continued linguistic apartheid in my country, the languages are dead, and the people are stupid as dirt (on average), to be blunt. However, this is mostly Karma, the result of accumulations of centuries past, playing out as the complete decimation of histories; naturally, the education/media system is a propaganda op, with tons of shills at every corner. Those whom you'd wish to see break out of chains, appear to find comfort in them alone. New ideas can't touch them nor move them, because the "programming language" is so outdated, that such sentences will be treated as garbage.

I believe there are deep reasons why India could only think of independence through a class which was more British than Indian. India is but a grave for the civilization it once sustained, and we are but mere flies who wish for a phoenix.

Language does indeed governs our thoughts, and in that respect governs the world we create - it's what makes us human, far more than anything else. Take out the language, and what you get is a mere animal.
You could do what the Spitbol compiler (for the SNOBOL language) does, which is to statically link against musl libc.
I feel like if I hadn't written JS in 3 years and was dropped into some JS code today I wouldn't even be able to read it much less code review it adequately. There were a series of months relatively recently where every week I would look at a code review, and be like this is a thing? When did this happen? That said the changes were not exhausting at all. It was like being gifted a new tool, and you were just trying to find a new project to use it on. Now I find myself looking through the TC39 proposals window shopping.
That's really missing the point of the s/story/parable.
When you solve those kinds of problems, you have a new business, or maybe a new industry. You probably don't have a quick route to CEO of the fossilized company. That involves daggers in the back of your colleagues.
Why "without having to convert your document into TeX"? Is there something wrong with TeX?

Anyway, LibreOffice has been able to do all these things for a long time with Graphite fonts, and, since version 5.3, it can also do them with OpenType fonts.
Unhackable Servers
You mention users not being notified of failed payments -- while Stripe doesn't send emails when this happens, they do provide a webhook.
I vehemently disagree. Like the author, I've had to defend myself from a bully abusing the legal system to enrich himself. It's not about the money, it's a matter of principle. "Throwing good money after bad." This isn't some kind of bad investment, this is a personal attack. When you get attacked, you fight back. You don't sit there and take it. Enjoyment? Are you kidding me? There's only debilitating anxiety. You have no empathy.
So the computer won't know what to do and you're going to dump it on someone in a cubicle a thousand miles away? Here, make a decision in at most a second and a half or you crash? That's going to work ;<).

If the computer is confused I want to be the one to make the decision. I am perfectly happy having a system right now that works 95% of the time in good weather.

I think it will be at least 2025 before it can handle a Michigan winter, maybe longer. Still want a limited system ASAP.
Huh, wow, that's fantastic news! No need to toss the whole TV if the motherboard dies, then (or, really, any other component except the panel itself).

Where did you get the firmware from, by the way?
Nissan also released a car that's controllable over the internet with nothing more than the VIN[0]. I wouldn't necessarily trust what they say in terms of technology advancements.

[0] http://www.bbc.com/news/technology-35642749
Wealth Belongs to All of Us, Not Just the Rich – PopularResistance.Org
It's definitely a thing that can happen, just not in the time frames mentioned here. 5 minutes for a snack vs 30 minutes for dinner sounds plausible, 3 minutes for vanilla vs 4 minutes for chocolate does not.
A lot of people seem to use stdio even in C++.

Having comprehensible error messages is related to being a simple language, IMO. C++ compile-time errors are notorious for being unreadable. I'm not familiar with the output of what(), but I'd wager that the problem is a consequence of all the abstraction.
It's funny that everyone on here is pretty critical of this. To the maker, don't pay any attention, your users will give you much better feedback.
And Self-Driving cars teleoperation will open the door for remote hacking, it simply creates more problems than it solves.
Woah woah.. it's not very open minded of you to say that small town folks are dumb and closed minded!
I gave up on C++ right after I learned it. At the time, this was before the STL was part of the standard, it looked really cool but I could tell that it was easy to get into trouble and it would take years and years to be really good at it. When Java became popular, it looked like it solved a lot of the problems that I was afraid of with C++. But it was slow and really verbose compared to C++ and C. Recently, I heard someone say that today's C++ is not your grandfather's C++ and the speaker made some interesting comments about how much better it was. So I'm intrigued by it and definitely open to looking into the new C++.
Unfortunately, this is the reason for so many users that websites like this will never actually be worthwhile regardless of how "normal" or unavoidable they become.
Although I am impressed by the work, I dislike these writeups.

In similar bug bounty posts, a user will post all this brilliant setup code, these tools I never heard of to decompile binaries, view source, get through obfuscation, etc.

Then, when you get to the meat and bones, they just go "Ok and vulnurability is here, and you exploit it like this. Ta data."

It's very anti-climatic, and I don't learn much in the process. I would like to learn more about what your thought process is like after you get the code. How did you narrow your focus on ActiveRecord? Did you just know from seeing it? I would love to learn more. Do expert pen-testers have this checklist of exploits they try?

Sorry if it sounds like whiny, I would just love it if these had more meat in the actual finding of the exploit as they did the setup.
Hmm, if that were the case, wouldn't the time spent waiting be variable? That would mean that you'd sometimes get instant switches, when the I-frame was the next frame you received after the switch.
Also in terms of housing cost, the major players in building new apartment buildings are real estate developers. Their number people tell them exactly how to maximize profit per square footage and that goes into the design from the beginning.

I was having a thought the other day that, were I a developer, and could afford to, what would I do with a five-story building? Ground floor commercial, top floor market rate (or above?) and then floors 1-4 a percentage below market rate with maybe a set increase for each year. I guess it would work as long as I factor in paying back to the bank and making a certain profit (but not the max). I don't know, I'm not a developer, I don't even know how one becomes one without already having money to do so, but in my AEC office design decisions are one thing but at the end of the day it is 1) building as cheaply as possible while 2) maximizing profit per square foot.
You could help open source projects get their code into Coverity, a static analysis tool. It helps if they have a github repo, and it's even better if they use Travis-CI.
Using Coverity will help identify some security issues that can be mitigated right away.

Secondly, you can fuzz FLOSS software, using something like afl-fuzz, American Fuzzy Lop. The following tutorial has some pointers to get started, and obviously software written in C is easier to get started with. If you need help with something, feel free to ask on the afl-users mailing list.
You can fuzz on a CPU-heavy VM somewhere, like DigitalOcean, an Amazon spot instance, or a Google preemptible instance.

https://fuzzing-project.org/tutorials.html

In fuzzing, once you get the hang of it, you'll find that your keyboard time is the limiting factor. You'll set up a test case in 15-20 minutes, leave it fuzzing for a day, and come back to spend at least 1-2 hours working through crashes and reporting the bugs through their channels.

You may be saying "Wait I don't know anything about C," but honestly, I don't know anything about C either, and I've found hundreds of bugs with fuzzing. There are some crash dump investigation tools that give you an idea of the nature of the crash (gdb's exploitable.py) and that's usually enough to report to the maintainer. When the maintainer has a fix released, you can send an email to the oss-security mailing list detailing what you know about it. MITRE can assign a CVE on the mailing list if you describe the bug appropriately when you ask for one.
rofl that doesn't sound very logical. He didn't have ANY other instance of him starting the car fast enough that it triggered the vapor lock?

fun story though.
The GBP notes are an interesting set of designs, but I wish I could see versions that used the current colour scheme (the linked designs mistakenly(?) use green/blue tones for £10 and orange/brown tones for £5, which is the opposite way round to all existing notes. £20 and £50 more accurately match the current notes).
How applicable do you think it would be to PHP?
It's so bad that simply turning it on to HDMI 1 is painful? I have a "smart" tv that really is just a display for the much better AppleTV.
That's the deficiency of AI right now... pattern matching is only one aspect of intelligence that's fairly narrow and only moderately sophisticated.

It's still useful -- you can classify millions of pictures in a meaningful way much faster than before.
I thought the moral of the story would be "correlation does not prove causation."
Diety
Yep. The math works, you take 1m house and turn it into 8 new condos.
How much will that Dell be worth vs the MacBook in 3 years? While not a fan of the newest MacBook, I don't have to be because they -last-.
Hi
A friend of mine introduced me to a business that could yield me good profits. And when i thought of the benefits of it, it was a really good deal but i was told i had to put in some capital to start the business which i didnt have. So i began to meet family and friends to help me out with some money because i lost my job and was really in need of a new job to cater for my wife and kids. So i walked up to my cousin to help me out with some money. He asked me what i needed such amount of money for, so i explained everything to him. He then told me to be very careful of who i do business with because he believed there is no one to be trusted. I told him i had everything under control and also the person who introduced me to the business is a very good friend of mine. But he was still reluctant about the whole idea of the business. So he told me if he was going to lend me the money, there has to be prove that the business is real and legit because he was so cautious of me getting duped by anyone. So he gave me the idea to look for a professional hacker who could help me hack into my friends phone, facebook account, email and whatsapp, so that i could take my time to monitor all my friends activities to be on a safer side. I heeded to his advise and went online to search for a professional hacker i could find. Then i found spystealth.org@gmail.com. i read a lot of good reviews about him. So i contacted him and told him what i needed him to do for me. He helped me hack into my friends phone and other social media platform he was on at an affordable price. That was when i found out that the person i trusted and called a good friend was trying to dupe me by letting me put some money into a business that wasnt even real. i felt so heartbroken because we've been friends for quite a very long time and i didnt know he was such a mean and wicked person. No one is to be trusted this days which is why you should contact spystealth.org@gmail.com to know the truth.
Roger. I have seen no indication that facebook is anything other than Myspace with more capital.

Many can also make the argument that facebook is worse than Myspace, quite validly for a number of reasons.
Not to say it's right, but some tradesman do remove or undo their work:

https://www.youtube.com/watch?v=J-LqLU7CxeA
Ask HN: Can we solve device security without regulation?
We've seen an awful lot of stories about various IoT and Smart devices being
hacked and used to spread malware, DDoS, and more in the past year. We also
talk a lot about better languages and tooling to help prevent vulnerabilities.
There has been talk of legislation or regulation to address clear market
failures.

As someone whose own startup's devices took longer to develop and ultimately
failed in the market due in part to my deep concern for security and code
quality (there were lots of other reasons), I welcome some kind of change in
developer and manufacturer culture toward strong and effective security. But as
we all know, the legal system's past track record is very poor when it comes to
technology, and regulation or legislation can have unintended and burdensome
consequences that might make it impossible for independent developers,
contractors, or startups to enter the market ever again.

So now I have to ask, are there any behind-the-scenes efforts currently underway
to draft and propose regulation or legislation that would address all security
concerns and protect consumers, while keeping our industry as accessible to
newcomers as possible? How can we make sure that if/when governments finally
react to the security situation, it's done in a developer- as well as
consumer-friendly way? Is there some kind of industry association alternative
that could produce voluntary compliance with security best practices, without
turning those best practices into a meaningless and ineffective CYA liability
shield? Is there any way to make sure that attention is focused on the real
issues, instead of placebos meant to appear to be "doing something", or worse,
blanket ban all new classes of technology like IoT, cryptocurrencies, etc.?
HMD Global launches first Nokia Android smartphone
Yes. ConceptNet [1] and distributional word embeddings go really well together, and can compare word meanings better than either one alone. Here's the preprint of the AAAI 2017 paper [2].

[1] http://www.conceptnet.io/

[2] https://arxiv.org/pdf/1612.03975v1.pdf
If you include San Jose in SF, you're not really talking about SF. I've lived in SF on and off for many years and am very fond of the place. The notion it's a 'global city' in the same category as NYC or LA seems like quite a stretch.
Maybe we could create some voluntary logo program, like the old EnergyStar program, that
could show that a device meets basic UI/UX standards and has adequate security?
Like, all UI actions must respond or display a progress bar within 60ms, device
must boot within 5s for dumb display, 10s for smart features, device must not
use UPnP to open ports, device must not have default passwords, and so on?
I've done something similar with an old laptop LCD panel, using an LVDS controller that I bought on Ebay. I assume that's basically what noonespecial did, but hopefully with a board that has more TV-useful features (mine just takes HDMI, VGA, and RCA video input, if I'm remembering correctly).
I love the stripe API, and I like the documentation. But bear in mind you might want to avoid the subscriptions to cut down on fees.

Pretend you sell apples and oranges. If the user has 3 of each you might be tempted to bill the user for:

3 * Apple Subscriptions (/month).
3 * Orange Subscriptions (/month).

Do that and the user will be billed correctly, but you'll have to pay two fees. That really annoys me, as it seems like a money-grab to charge them separately not combine the two payments and then take out the fees.

(This contributed to me removing my discounted-pricing plans where you could spend £1 a month for DNS hosting, but then get additional domains at £0.50. Instead I kept everything at £1 so that I didn't have to have different subscription levels.)
Suggestr – A Facebook's messenger movie suggesting bot
Hi there guys,
I made a movie suggesting messenger bot! It suggests you movies and also remembers which you've seen! It can also suggest you movies based on their genre. Just ask it for them!

Message the page to get started!
https://www.facebook.com/movie.suggester/

It's also open sourced: https://github.com/candh/suggestr

Suggestions are very welcome!
A question regarding what to do about this problem: https://news.ycombinator.com/item?id=13348211
Good point. Things like that are great for people who understand them, we just want to make it easily accessible for the average consumer.
The top comment here should be the one about "correlation doesn't prove causation". Secondly, this makes me think of Cargo Cult[1] programming practices. Your practices might be right, but it's much more valuable to know why they're right. [ or often, unnecessary, as CC practices usually are ].

[1] https://en.wikipedia.org/wiki/Cargo_cult_science
See debdelta
If you're doing an internship, you already have a leg up on a lot of the people at top tier schools.
Zoning is also a big issue in LA and hasn't been updated since the 70s I believe.

If you look at a satellite view of the city, there are nodes of density with massive amounts of individual house spaces. But it's expensive all over. I don't think there's any real solution to that outside of another real estate collapse here (which only set things back for a few years and stopped some gentrification creep).
Credibility is part of judgment.

The claim was that he didn't fully hold up his end of the contract. This isn't a criminal case with forensics; this is small claims with a lot of he-said, she-sad.

Not dodging court lends credibility to your side.
You mention that invoicing is a problem that had to be solved manually. Have you looked at services like Recurly or Chargebee?
http://Cronitor.IO is a great service. Helps me sleep at night. Thank you for building it.
The OS and even the lower level libs are rarely the first target anymore unless there are some nice pre-packed pwns on msploit or whereever; sure -- there are exploitable bugs in such things but even getting to these hosts are hard now we're in the age of CDN's and ELBs and so on.. Also NX, ASLR, nonexec heap, tools like selinux etc etc have made pwning these as 0day a much harder thing.

So; the noobs have gone upstack. Why bother trying to break out of an ASLR'd JVM behind a CDN with selinux and etc just to get a shell on a box if your goal is to read a .properties so you can dump the db out? Instead you can probably pull the data one rq at a time with some bad form sanitation or whatever? The latter also means you're targetting code the actual target has written which is more likely to have easy to find issues as no one but the target is looking over it than say, openssl which has rather a few eyes on it..

There's a flipside to config mgt from security tho.. Tools like chef/puppet, while enabling you to maintain a _basic_ level of state actually tend to be great attack surfaces and so overall reduce your sec. How many ops teams out there would notice if you pwned one of their lappys and replaced some puppet handler code before they push it into CI and it gets run across their entire estate? Over-Using config mgt (like using it to orcestrate app deploys) with even mid skilled ops folks generally makes an attackers job much easier than say, rolling out immutable containers..

Most places I've seen without much thought have ended up with superpowerful CI boxes that by owning you get absolutely EVERYTHING and they'll happily give out keys to all the devs while not letting them near prod... >_<

If you have a shell account on a CI and the jenkins taskrunner user has access to ssh in anywhere you want to be, then you're just a commit away from having those rights too...

Just my $0.02

(edit: actually, if you just have commit rights to any ./script that is running on that jenkins, you can do everything that jenkins can do without even needing a shell...

Your jenkins builds the artefacts for your app and ALSO does the deploys? Bet you can get into prod with two lines of nc and push)...