skysight-inc/HackerNews huggingface dataset:
proving competency is more difficult in short order unless you end up an emergency situation and respond well, incompetency can be demonstrated in a day but at that level should be weeded up through a good interview process.

still I have seen developers gone in a weeks time, some voluntarily
I am not sure to fully understand the article, but does it only apply to cancers that appear on skin?
I strongly disagree, and feel the overall utility and usability of the internet has been negatively affected by advertisements.

Companies that can't survive by selling a product or service directly probably should go out of business, IMO.
sounds like 9/10ths of the story. the transgender person who left sounded very unstable and unprofessional. Not surprising the organization wanted to completely divorce themselves from someone who acts irrationally.
SS is not a money transfer from today's young to tomorrow's old--it's a transfer from today's young to today's old. Don't think of it as "savings" you're "contributing" toward.
There is only one thing in the world worse than being witty, and that is not being witty. I wish I hadn't said that.
Can't you just Firefox with the extension? And then browse Google from there
It's a bit of an odd one, but I can't recommend Bertrand Russell's 'History of Western Philosophy' enough here. It's engaging and well written, as Russell tends to be, and its focus around the philosophical development of the Western World is a useful 'road through history'. Obviously the picture is not comprehensive, but it is a very robust facet to examine, because of the role philosophy plays in so many aspects of human life, from day-to-day existence to the nature of society and politics to the methods and proto-methods of science and religion. Plus, as a compilation/review of a massive corpus of research and writing on history, there are plenty of excellent citations to dive on if you find any particular subject matter interesting.

And of course, there are the usual concerns about Eurocentrism and Great Man History. So follows the usual solutions. Don't make it the only thing you read, and don't stop meta-analyzing.
The Principle of Code Design That Rules Them All: Respect Levels of Abstraction
I'm a C# developer currently developing and maintaining projects using WebAPI, MVC and ASP.Net Core. My main application uses WebSockets as the primary communications channel.

From the README and a quick scan of the code, I have no idea what this project does. It uses unusual terminology in the description, and doesn't seem to even address what problem it's solving.

Presumably those upvoting the post understand and see the value. Can you please help me understand?
Thank you for the information, guess I didn't look thoroughly back when I was looking for a terminal based IRC client.
> it's unclear whether one can write a new browser engine from scratch without spending years reverse-engineering the competition

That's to Mozilla's advantage, given that no company in the world has more historical experience reverse-engineering browsers. :P

> how does that interact with things like the Grid Module?

Servo devs have definitely identified places in the HTML spec which, entirely by accident, require serial behavior. Having a pervasively-parallel browser will hopefully go a long way towards preventing such accidents in the future.
I don't disable VSync for FPS. I disable VSync because it reduces input lag.
It's baller, but I wish they would focus on the fact that a 105-year-old is doing what he's doing, not focusing on a "record" that's a 1/1 attempt. Add enough caveats and everyone's a record-holder in something.
The 217 bus would be perfect if it had a stop in between its San Vicente and Santa Monica stop. It would probably be another mile walk from there.

It ultimately does come down to convenience. :( Commuting by bus/Expo line means easily adding another 30 minutes to my commute if I happen to hit all the correct times at once.
I truly believe that whatever people think about social security not being around when they retire, that it will be around at some level. We will almost certainly reduce benefits and/or increase retirement age. What is the alternative?

There are far too many people who really can't save for retirement due to low wages for a significant part of the population. We aren't going to let these people live in abject poverty, and they aren't going to have any money to cough up to support themselves.

It's the same for Medicare. Paul Ryan wants a premium support system where seniors receive part of the cost of their insurance premium from the government and pay the rest on their own. For many people, the will absolutely not have the money to spend on this. If they can't afford it, they will go to the emergency room and receive care (they legally can't turn you away) once their condition becomes severe enough. We can either force the hospitals to care for these people (and jack up the prices for the rest of us to compensate) or we can have a sane system where we all pay a reasonable price and split the burden over a larger population.

I'm not arguing for some European style social welfare system. I think we ought to have a system that comports with the laws and norms we have in place now (norms/laws I understand: people can go to the ER and get care regardless of their ability to pay, elderly folks do not live in poverty).
The U2F device will not sign anything if the appId (that is the web origin/domain in most cases) is not already registered.
All due respect for Leah Rowe and her work on libreboot, but this kind of drama only hurts the OpenSource (regardless of the name you like to use) initiative.

Stallman did the right thing I guess.
I have a small Node.js hosting platform that gives you an SQLite DB for free (enough to run a ghost blog on). It's currently in private beta but a company is already paying me for the service and it gets me some beer money.

I'm working on polishing it up and eventually releasing it. Built on AWS and autoscales as demand requires, free tier and some paid upsells - Basically, all the standard PaaS stuff.
It's always interesting how strong of an opinion some people can have about issues that they aren't in a position to comment about...
That advert is amazing. It's as if they gave $200 to a couple of their staff and said "we need an advert by this afternoon!"
This. It's also really, really annoying that all the lights on an entire stretch of a street cycle at the same time. It really fucks up traffic. To make it even worse, people often try and race to the other side even on yellows and block up the intersection, which makes traffic even worse.
Dollarn faller mot euron
It could be a problem if, using your example, society is 3 times richer but that comes from 10% being a lot richer and 90% being somewhat poorer.

Inequality, it seems, is rising over time.
Who is going to be paying the taxes needed to pay off those bonds?
I don't think there's any "in-room elephants":

- Glimmer 2: Shipped

- Ember/CLI 3.x: Haven't heard anything, but there's not really any features that have been pushed to those versions that I know of. Glimmer 2 was the big roadblock for routable components, which is the feature we're most waiting for.

- Ember Redux: Was not particularly liked by a lot of the core team (from an API perspective), but the ideas it represented were. They're exploring ways to implement this in Ember.

- Ember Data: LinkedIn hired "runspired" and tasked him with improving Ember Data performance. His work will ship with the next version (last version had his initial work which revolved mostly around tooling)

- Flexi: Was never really a core Ember project, and I don't think it was widely adopted. It was a runspired thing, and I think he's being kept busy on other stuff (core projects and smoke & mirrors)

I don't use fastboot so I can't comment there, but I see new versions coming out regularly. I also don't know what "vr" refers to.
Can you explain how a smartphone-generated (or received via SMS) 2FA token is susceptible to pishing or other remote theft? I like the idea of the Yubikey but I just don't see how it's any different or better from receiving, say, a Google 2FA SMS on the smartphone that's always within reach.

I genuinely want to understand this so I'm hoping you or someone else can explain.
IRC client is useless without a certain degree of extensibility. Having a wide range of scripting language support is important IMO.
>I am yet to see such benefits in action.

Here you go:

https://morepypy.blogspot.com/2011/08/pypy-is-faster-than-c-...

https://morepypy.blogspot.com/2011/02/pypy-faster-than-c-on-...

For more examples, just search "pypy faster than c".

Also, here is an article from the Python wiki about why speed doesn't really matter a lot of the time:

https://wiki.python.org/moin/PythonSpeed

And, my own two cents:

Speed is relative. Does every piece of code need to be as performant as possible? No. I would argue that, in most cases, speed of development is far more important than speed of execution. This is, of course, not true for things like drivers or statistical analysis.

Writing a web application? Speed isn't that important as the whole process is i/o bound anyways.

Writing a machine learning algorithm? Depends.

Web scraping? I/O bound, speed not really important.

Image processing? Speed matters at least a little bit.

Writing networking glue for distributed systems? Speed probably doesn't matter.

It's all relative. If it needs to be fast, it needs to be fast. Most things don't really need to be fast. For the things that don't need to be fast, why build them with C/C++/Rust/Go when you could spend half the time building them in Python/Ruby/js/etc?
Problem with rich businessmen/women running for office is there are always a lot of consultants who tell them yes you have a good shot no matter the odds.
Rememeber Trump was an entertainer, they have a better track record.
Google Analytics code is still there, so I guess, no ad networks were harmed during the making of this blog post.
I'd love to hear your story from how you figured out how to produce all the way to bringing it to market.

It's amazing when people have a mission, they truly can do anything.
I concur with you that they bet too much on their content. The question then is: did the vicious cycle start from raising too much, or betting incorrectly?
The other answers are correct, but even before U2F the yubikey supported other methods as well. The have a classic HMAC based ChallengeResponse-Mode, a smartcard and PIV interface.
I've used Twiddla countless times throughout undergrad. Thanks! :)
I just can't consistently control the phone. A large percentage of taps or swipes do things I did not intend (how many I'm not sure -- 20%? 33%?) It's just completely crazy.

I'm an iPhone user since the 1st gen iPhone with 8GB.

the horrible inconsistencies in the way autocorrect works

The worst part of autocorrect is how it sometimes autocorrects at just the last moment when you hit send. It's like my iPhone wants to break me up from my girlfriend! (I was dating an aspergirl recently, so literal meanings had a bit more meaning. Now I'm dating a foreign born ex-college professor, and she's more insistent on correct grammar than anyone I've known.)
> selling a dollar for 99 cents

They are definitely not doing that. The sheer amount of profitable arbitrage proves that point. Ad networks remain one of the best business models around, this is what Facebook is. The main problem is that there are no real barriers to entry or oversight which leads to thousands of poorly run, unscrupulous, spam/malware infested networks which make an outsized impact on both the market and consumers.
Trump easily won the popular vote for the 48 states that aren't California and New York. Popular vote indeed. There's a very good reason the electoral college exists.
Please don't spread this absolute garbage.
Wow, great demonstration. I'd never thought about this being exploited. I wonder if the fix could be something as simple as the browser only allowing non-hidden [Edit: "not visible to the user", I should have said, as this does not appear to auto-fill <input type="hidden"> ] fields to be auto-filled. Otherwise, a warning about what auto-fill information (IE "Your name and credit card information are going to be submitted, continue?") has been filled in would be a nice touch. Maybe a browser extension could accomplish this?
> Do they just hire good JavaScript developers and train them for Ember?

There is really not a whole lot of Ember-specific training you need to go through. A good JavaScript developer would just have to read through the guides once to grasp its concepts.
It wasn't bad at all. I don't remember all the details. I do remember it was a tremendous amount of fun. The part I forgot to add was that every single board was wire-wrapped.

I also had to design and make various peripheral boards, such as: LED numeric display, DC motor drivers, analog and digital I/O, etc.

The entire computer was based on a 44 pin interconnecting bus. The CPU board could then address and talk to up to 16 cards, all memory mapped. No FPGA's or PAL's, all LS-TTL logic.

Sometimes I think it would be neat do put together a Kickstarter project for a kit and lesson plan to that would teach people to build a similar computer from scratch. Start with logic design, on through hand-building boards, bootstrapping in assembly, bringing-up FORTH, bring-up mass storage, writing a text editor and then some applications. Not sure how much interest there might be on such a thing these days. I know I would have been all over something like that way back then.
When Obama wouldn’t fight for science
A security token is an excellent concept, but usually fails when applied to 'typical' use-case scenarios.

Are you military personnel who is in charge of turning the key and launching the nukes? -Excellent reason to have a key that is impossible to forge.
-Also, "key discipline" is likely very high.

Are you a paranoid nerd that wants to make sure that you cannot be compromised?
-Excellent reason to have a key that is impossible to forge.
-But what happens when you lose that security token?

i.e. "Honey! I can't find the car keys, have you seen them?"

We desperately need _BETTER_ 2FA. Bio-metrics are not the answer. I would be in favor of an implantable RFID chip or whatever 'better' tech comes around.
Even as an experienced user it never crossed my mind that this might happen. Good catch
Medium should be an AI-first company. Instead of the suggestion above for "formula for how many people viewed their content each month" it should be investing its time into generating the best of humanity's thoughts and writings and ideas with the vision that AI content generation will be the future of publication.
The stated intent of blocking ads is not to cost the target money.
> It's literally less than a century

That's not how metaphors work. When you're the head of state, you have unique access and influence that others need. You become an unavoidable actor in the networks of power that manage the worlds resources. Your access will go deeper into those networks than by any other means.

> It's just going to get magnified too, as technologies dominate everything. The government can't keep up.

That's not how the world works. Technology is simply an extension of our will, we fashion it to govern us, but it can never replace us. The "private sector" is just another branch of governance and exists purely in legal forms. I do believe technology can be a liberating force and that we can design a system of incentives that reduces the need for human dependencies but it would be absolute terror to remove us from the instrumentation of the world.

edit- can't reply to you below so I'll reply here: AGI is just the latest fashion, it's still technology which means it still extends from our will. Technology is an ancient human practice, digging into the world with our understanding and forming tools to manage it. It's as old as clothing or written language. That we can replicate or automate our will doesn't negate that our will is being represented and that everything must conform to our needs or be taken as damage. It's fully possible to exterminate ourselves by removing our role from the universe but this isn't something I advocate.
One day the capsicum port to Linux might happen, but in the meantime FreeBSD does have it, so has file descriptors for processes.
Does anyone know why the yubikey 4 supports RSA 4096, but ECC only goes up to 384 and not 521? Sure 384 is likely "enough" but ECC 521 is both faster and smaller than RSA4096. I just can't seem to figure out why they would impose that limit.
Not sure why this has been downvoted. Neither party in the firing dispute with FSF has gone public, so drawing any conclusions based on the minimal amount of information we have right now is not wise.
Firefox Developer Edition for Flatpak
Wait, why is it the ideal to be inclusive of bootcamp-people in the profession, especially when it's typically people just seeing dev as a way to get more money from work?

Collaboration in engineering is hard enough without having to deal with someone that forces a git push, is comically overconfident in their solutions, or exhibits any number of traits I've found to be common from people coming from the "learn a trade in a hurry" programs.
Isn't this similar to investments or savings where you put in money expecting to receive something in the future? That money isn't static, it's actively being used in other ways. For example, money I deposit in my bank account today is going out into loans the bank is issuing today. I'm not taking a position on Social Security, just wondering if the analogy does much useful work.
> (Adsense does use mouse tracking and other techniques that will likely flag these clicks as suspect, requiring additional analysis). Therein lies the problem.

Actually, Google does track all of this stuff already:

http://adage.com/article/digital/inside-google-s-secret-war-...

Google could decide to just ignore IPs that host users that display this behavior pattern. But yeah, it's "easier" to just ban the offending Chrome extension.
Even as the HDMI consortium, being composed largely by manufacturers of home theater equipment, may not be thinking of this, I think you're absolutely right: 4K TVs are nearing, or past for many, the point of diminishing returns in terms of resolution. 8K is going to be a very tough sell next decade, but the future of VR will hinge on it.

Today's 2K VR headsets are the 480i of their nascent industry. They're good enough to kickstart a revolution. But the next generation of VR, with 4K displays, will be like the jump to HD – and the eventual adoption of 8K will be much more impactful than the TV world's move from 2K to 4K.
s/discrete/discreet/
Mircosoft is bringing just what you want
Do what https://hackernewsfilter.com/ does, use a Bloom filter. It's simple enough.
You need to change that attitude or your complacency will allow politicians to take it from you.

That's quite dismissive of his statement, and uncalled for. It's a pragmatic statement: politics aside, don't budget your retirement funds as if you'll still get the benefits promised to you as of today. Cram money in that 401K as if you won't be getting a dime of your money back from your SS contributions.

What you want to talk about is a different, and mostly unrelated, to what parent is talking about. Doesn't make it unimportant, just not relevant.
...I never said it wasn't? I was just objecting to calling North America an island.
And at the same time give these new young immigrants a basic income so that they don't need to work.
So how should we punish him for lying, polluting the net, wasting bandwidth,etc?
I've built a node.js version if Python is not your chosen stack: https://github.com/emilecantin/node-u2flib-server

Another choice that looks (sadly, for me) more popular: https://github.com/ashtuchkin/u2f
When you are worth few hundred million to a billion dollars. The only rate limiting condition is the time you have left, and the window of opportunity. From his perspective (and correctly) there isn't any point in bootstrapping.

Medium is not the first such example, you also have Path (where sadly one of the co-founder was not as rich), Quora, and as a counter example Uber.
I'm picturing a future where people get out a magnifying glass to see some detail on a digital screen.
Your Guide to a Secure '17
NIH: Give infants peanuts at 4-6 mos to avoid dangerous allergies
It's typical for a page to require 5-50 requests. For starter, one should understand the difference between HTTP requests, page views and unique users.

600k HTTP requests => 60k page views (if 10 requests per page).

Bots may generate lots of requests but won't hit GA.

60% of users (typical HN audience) will view pages but block GA (adblocks).

Your numbers are not surprising.
This is true outside of tech as well. Work at a midcorp with about 50-100 offices worldwide, we have 21 year old juniors who don't know shit (like me) follow templates and flowcharts to do bulk legal or accounting work, slightly more complex than data-entry, we charge clients $250 an hour. Most of the kids do have plenty of critical thinking competencies, but knowledge wise it's a few days of on the job training, it virtually doesn't matter if you majored in erotic dance or tax law, pretty much anyone can do the work... each of these kids generates close to half a million in revenue per year. And the costs are essentially salaries (averaging $25 including benefits and all) and an office (a fraction of that), profit margins are about 75%.

Those rates are utterly ridiculous because the work can be done from any location, a lot of these companies are in 2nd tier cities where the cost of living is very reasonable.

I won't even go into the opportunities of automating this stuff, but it's ridiculous...

But the hard part is selling it. I could easily run a team of 10 of these juniors who produce the same work (volume and quality) that generates $5m in revenue a year at the bigcorp, on a budget of 0.5m. Business wise it's almost free money, but without the big corp brand name, it's really hard to sell, even prices were cut by 50% or more and you put sales agents are ridiculous commissions. It's just crazy how important it is to clients to interface with a big brand name corp, despite the fact the actual people doing much of the work are on the level of interns. This is true for lots of finance/legal/consulting companies I find.
This vulnerability was published (another article) over a year ago. I'm surprised Chrome hasn't fixed it.

I think this means browsers will never fix this issue. I won't be using auto-fill on untrusted webaites.
if I understand this correctly, ipinfo is basically a lookup in a db?

What is the advantage of this over a local lookup, say with maxmind or similar?

edit: also, when I press the back button from this page: http://ipinfo.io/AS6830 all I get is a json
That's not how fraud works.
Black Hole at Galaxy's Heart Launches Planet-Size 'Spitballs'