skysight-inc/HackerNews huggingface dataset:
Show HN: Swift Development Environment Based on VS Code
App Development Tools Game Developers Should Use When Building an App
To stop being phished always check the domain name and for HTTPS before entering passwords.
Intrinsically, an ant, or a fly, wants to live just like pigs or dogs. It's ok to kill ants and flies because it is socially approved by the majority of humans around you. In some communities in china, it's ok to kill dogs for eating them, so a person would feel ok doing it. The animal doesn't matter at all, only the opinion of humans around you. As it happens, lighting dogs on fire is not widely accepted, and killing pigs for food is. It's the culture that matters.
I'd be really interested to see the increased success rate. Even if the most tech-savvy weren't fooled (I'm not so sure), I would be surprised not to see a vast increase from your average misspelled ecommerce phishing email. Shame those crooks don't practise open data.
You don't have to.

The reason to do so is to protect your user's privacy (i.e. so that their DNS server doesn't see what onion addresses they were trying to visit).
NIBYism trumps politics on all sides of the spectrum. "Lefties" are all for densification, just not here, because here is special and needs protecting. Densification over there on the other hand is a great idea.
For me what's quite unnerving about `extern crate` is that the `extern` keyword has another function, that is to declare foreign functions [0]. `extern crate` on the other hand, is not an extension of `extern` but serves a completely different purpose.

0: https://doc.rust-lang.org/book/ffi.html
It's the same in most of the eastern bloc, I've always been super surprised at how good the public transit is in Czech cities, and that's because of the high-rises.
https://en.wikipedia.org/wiki/Escalation_of_commitment
Yes I can agree with these.

I wonder if we'll have refactoring in Xcode for C++ now Lattner has gone. I wonder why they never added it.
use example.org, that's it.
I do have a thick double-layer case on the phone, but it's a very snug fit.

I just called the Skype echo test service to have a listen to what my mic actually outputs. It's pretty bad! The sound is very muffled and almost inaudible unless I cup my hand over the mic and speak clearly. Removing the case doesn't seem to make any difference.

Sony Xperia Z5 Compact, if anybody's wondering which phone not to buy for regular phone calls :) I don't really mind too much as I only make phone calls once in a blue moon, but it would be nice to be able to use voice assistant more.
Docker runc container escape
Developing a system that can handle a complex, variable, real-world environment like driving surely has applications in other domains. LLVM and Swift are great contributions, and make development easier. That said, I don't see them changing software development as significantly as the possibilities opened up by systems like Tesla's autopilot.
I always found those ideal.
8 Simple Steps to Install MongoDB with Authentication on EC2 AMI Linux
8 Simple steps to install MongoDB with authentication on EC2 AMI Linux

More: http://www.solutionanalysts.com/blog/8-simple-steps-to-install-mongodb-with-authentication-on-ec2-ami-linux/
App for Search Nearby Medical Facilities
Yeah, I see this type of confusion all the time.

When most non-mathematicians (yep, SWEs included) use the word "average" sometimes the concept they intend to convey is "mean", and sometimes it is "median" (because of a commonplace implicit assumption that the distribution, even if not normal, is at least roughly symmetrical).

So I try not to use the word "average" at all (unless defined), and to only use "median" and "mean".
> I often feel a bit bad about using Cloudflare for my blog, as it exposes users to a potential layer of tracking.

We're not tracking your users.
https://beta.golang.org/doc/go1.8#sort_slice
You don't suddenly wake up one day in a police state. The security services in the UK and USA are clearly out of control and at odds with basic democractic principles.

These anti-democratic 'forces' always exist, and they empower themselves at the cost of the people shifting power to themselves and the state, and there is always an excuse, a reason. A history and established culture of checks and balances and rule of law is supposed to keep them in check.

In this case things are going wrong over an extended period of time accompanied with increasingly hysterical propaganda with no counter forces in play to correct this anomaly. I think the smugness and lack of spine from our generation will cost others heavily and it is gross negligence to continue to pretend this is not happening.
depends on who u ask

some will say that a drop of oil can polute acres of sea

or a drop of semen can fertilize a country.

but those don't actually happen in real life.

so the answer to your question can be little to very polluting (a bag requires more than a drop of oil), depend on what you believe.
I get that the temperature increase is happening, but I don't get how this in turn increases the melting and thinning of ice. According to Wikipedia, summer temperatures in the warmest part of Antarctica still average below 0°C. Can someone explain?
What would you recommend instead?

C#? C++?

C++ has become incredibly great recently after languishing in the C++2003 period for too long.
> extern crate is like mod, but it declares an external crate dependency instead of a submodule.

Naive question: What the hell's the difference? Is a crate not a module? IMO, there shouldn't be a difference.

(EDIT for clarity)
> If you care about years, 1 light year is already a large distance.

Sir, honestly, this sentence of yours is just ridiculous.
The US is weird in its fixation on detached housing, for sure.

Is it really so weird not to want to hear your neighbors' every amorous evening? Or worry that your kids are bothering them when they run around, or that your work schedule will interfere with the sleep schedule of your neighbors (or vice versa)?
A Chromebook won't help anymore than Chrome for phishing.
Master these five concepts to master React
<a href="data:text/html,valid_looking_url <script src=data:text/html;base64,YWxlcnQoMTIzKQ==></script>">clickme</a>

Or if you want to reproduce it console:

a = document.createElement('a');
a.href = 'data:text/html,valid_looking_url <script src=data:text/html;base64,YWxlcnQoMTIzKQ==></script>';
a.textContent = 'clickme';
a.style.position = 'fixed';
a.style.left = 0;
a.style.top = 0;
a.style.zIndex = 9999;
document.body.appendChild(a);

The "valid_looking_url" will appear in document but it can be hidden from page by script or made transparent using css
You're missing out. Its got a learning curve just like the original but its easier for us who grew up with it. The game is as good as Elite was back then. And they keep adding stuff so there is a "story" element to it. Its incredible. Limit yourself friend, but still, go for it. The galaxy powers need you :)
ARC is not an algorithm, it a language-level feature that generates retain/release calls automatically so that the programmer does not have to. Unlike GC systems where the resulting program does run an algorithm (and wastes CPU on that), with ARC the generated program is no different as if retain/release were written manually and runs no extra code.
Mods, please change the title to "Show HN". It's outrageous in its current state.
The pages doesn't tell how it differs from other flexboxed based css frameworks?
postgresql has the jsonb column type which is just as powerful as mongo
I've mixed feelings about MMPR, mainly because it's subject to collusion via decoy lists, party splitting and the like, so it ends up devolving into parallel voting, which is susceptible to gerrymandering of constituencies. It works well in a lot of places (Germany, Scotland, NZ, &c.), but not so well in others (Venezuela, Hungary, &c.).

How would adding approval voting into the mix improve MMPR as you see it? It's an interesting idea for sure, especially as approval voting eliminates the spoiler factor in single seat elections you get in FPTP, and it's simpler than IRV.
And the equivalent here are the ones denying the scientific discoveries and the consensus.

The climate deniers are the ones like the Catholic Church
Microsoft drops a pay-as-you-go Azure cloud option
Baseimage-docker, fat containers and “treating containers as VMs”
I have an Osprey Metron 25, which is great for commuting by bicycle.

Their lifelong warranty is excellent. They sent me a new waist strap, free of charge, after I had lost the original one. They also sent me new buckles a couple of times. Of course quality could be better -- why do these buckles keep breaking? But communication with their repair shop was always excellent. The guy quickly managed to find fitting straps and buckles despite the backpack being out of production. Probably they discontinued the pack because of its flawed design that leads to broken buckles.
There is that wierd number 100000...0000 which is that extra negative number with no positive analog. I'm currently working with a noninteger value representation system that hijacks this value and assigns it as +/- infinity (negation is two's complement)
Locking doors and oxygen removal would have been just a fun story. Halogen gas, at a concentration needed to disrupt a fire, is only mildly dangerous and you don't need to remove the air when you are using halogen. The halogen does not work by displacement but actually disrupts the combustion process. No need to lock the doors.
3-5 years looking at the refresh cycle at AWS.
its fairly unfortunate that they are tied to mysql, because this is pretty much the usecase that postgresql jsonb was built for.

it has first class support in most ORM, and works quite well.
It's the manual, not marketing copy.
FYI, /s/bare/bear
Yes, Atom isn't the greatest across a number of performance metrics, but if my experience it irresplacable for:

1. markdown support is top notch

2. proto-repl[1] in clojure is amazing and only available on Atom.

[1] https://atom.io/packages/proto-repl
Don't trust HTTPS, any malicious site can get certificate very easily.
I once almost fell for a smart Airbnb phishing attack. At some point, I was directed to https://www.airbnb.com.eubook.net/en/instant/rooms/2685603?c... to complete my booking. Website had perfectly valid SSL cert (doesn't anymore) and more importantly, check out the domain name ! Almost missed the .eubook.net part!
Building a Serverless Application with Docker
> We're not tracking your users.

Which is why the parent poster said "potential". You're not tracking, but you could be.
Looks like a useful project. I note that it doesn't support Flow style type annotations.

(issue added to github)
I programmed UNISYS 1100's in 1980. Awesome beasts.
Usually data centers take hardware for "lease" from other companies which is usually 3-5 years.
I think it is time for you to buy more books.
Ask HN: News aggregrator sites for mechanical engineers
So HN has been invaluable as a source of news, blogs, guides and general tips relevant to our industry.

I have a mechanical engineering colleague and was wondering if there are similar sites like HN for mechanical engineering related news. I know HN itself is a pretty rare and high quality site, but you never know.

I am aware of the reddit groups /r/engineering and /r/MechanicalEngineering, but is there any other similar sites?
> On a side note, you always could.

Yes, with brand new sorter types for each different comparison. Knowing that Go had first-class functions from the beginning, it is actually quite surprising that a higher-order sort function didn't already exist.
Keep in mind that you'll also get hits from users with devices that completely lack automatic captive portal detection.
The only two things that I think could have prevented me from falling for this is: I don't have images loaded by default for unknown senders, and LastPass wouldn't match the domain and therefore wouldn't show the button to autocomplete on the password box.

Depending on how observant I'd be at the moment, I might check the URL bar and see something fishy. But I could fall for this, which is worrying.
Now I can use CSS like I was using tables 15 years ago.
That's scary. Would having 2FA enabled on your Gmail account protect you from this kind of attack?
Which was announced over a year ago and the project is still in alpha... Not to mention v3 is no longer officially supported.
I'm surprised that with Google's image detection technology that Gmail doesn't do image recognition on images with links where the image look like popular document attachment, and send them to spam. Or perhaps they do but the phishers are able to evade it.
Why would you need to sign in if you're already in your gmail? Not to say there's anything obviously wrong, one could easily go there.

It does point out a major problem. Email used to be text only. Then we added attachments that needed to be saved as a file and read with whatever app. Then we went to automatically displaying attached images and having live HTML links. All of these things we do for convenience make this sort of attack more possible.
I'm looking for serious recommendation on what to do right now in my life.

I'm currently 25 year old with roughly two year of industrial experience and looking for a career change. One thing I absolutely want to work out is by applying for Master's program from a US university and finding work after graduation which will require H1B visa.

Is this a wise option? I will be moving from a third world country and be mostly on self finance Masters. I know it will be expensive but I'm seeing it as an investment which will pay off.

The intended field is in the tech side although I have a degree in Mechanical Engineering. Did this new bill make it far more difficult to get work visa or will the lottery system work?

I have a lot to lose if I don't get a work VISA really which would force me to return to home country. Note: I'm not from India
I believe it's http://www.msftncsi.com/
I had a similar model and the zipper broke as well due to putting shoes in the main compartment. It was just barely too small. I did like the bag, but definitely only good if you intend to carry a few things around.
Sysadmin at a school: we use GMail for our students and faculty, and we got hit by this hard right before the holiday break. Three employees and a handful of students all got hit by the attack within a two hour period. It's the most sophisticated attack I've seen. The attackers log in to your account immediately once they get the credentials, and they use one of your actual attachments, along with one of your actual subject lines, and send it to people in your contact list.

For example, they went into one student's account, pulled an attachment with an athletic team practice schedule, generated the screenshot, and then paired that with a subject line that was tangentially related, and emailed it to the other members of the athletic team.

They were using bit.ly to obscure the address (in Russia). We had to take our whole mail system down for a few hours while we cleaned it up.
Try BetterTouchTool[https://www.boastr.net/]. I'm using it to customise my TouchBar for each app I use, and it's great. Touchbar version is an alpha - but I've found it mostly stable.
Why is this at the top of HN right now? It's still in alpha. It's a good alpha and I've been using it on some projects, but I think some people might be mislead that this is the final release with the "4.0" in the title.

The most recent version is alpha 6, and it sounds like they are shooting for their first beta version next: http://blog.getbootstrap.com/2017/01/06/bootstrap-4-alpha-6/
'use' statements are relative to the root of the crate, not the current module. To work around this, you can write 'use self::name' or 'use super::name' for relative imports. Annoying but no big deal.

I'm writing an application. Inside main.rs I can write

extern crate foo;
use foo::Bar;

If I create a module and use the same crate, I need to write:

extern crate foo;
use self::foo::Bar;

This always surprises me and I never found anything explicit written on the Book. To me, it looks like a nice papercut to fix.
Leaked memos allege Trump’s lawyer helped orchestrate Russian hacking
I understand your position, but I cannot see things change in your favor anytime soon. This leaves you only to web-based solutions, and most of those will invariably suck for a long time to come (if not forever).
Now I can use flex-box like I was using flex-box 3 years ago including on IE8. It's almost like living now but if now was then.
There are zero accountability clauses in this bill. If administrators can't be held accountable for providing complete, accurate, and parsable data then what the public could expect is cherry-picked, bottom of the barrel information that is of little to no value.
Lucky you. Even informatics students go further:

1. Type google.com into the address bar. They don't know that modern browsers can directly redirect search input to your favorite search engine.
2. Type the domain (including extension) to the google search input.
3. Click on the first link.

I honestly fear the future.
11 mistakes I made in these 2 years of Android app development
That is surprisingly close to what I'd expected.

I'd heard talk from one of the devs maintaining Hangouts for Android that there was a lot of technical debt in the project, which is part of the reason progress on improving it had slowed down to a crawl.

I guess my main problem is that the protocols are being tossed away and the continual rebranding. It doesn't exactly inspire confidence, even if the underlying tech is solid. It's one thing to have that probabilistic development going on underneath the surface, but once it bubbles up to a certain level, somebody has to have their eyes on the big picture, and there's little evidence of that, at least as far as messaging goes. I think that's what's missing here.
I am using bourbon.io for the flexbox grid system. My final css compressed is less than 4k for the whole site.
Apple still has the best CPU on mobile. But that does not count for those who cannot see past a headphone jack.
To be fair you've been able to do that with display: table-cell etc.

I do love seeing <div class="table"> around the place. Sigh.
Datacenters are power (heat) limited. If a device does half the work of a new one using the same power, it is probably on the way out. Certainly by the time it hits say 30% it's time to go unless it's a special device.
Absolutely and couldn't agree more. Definitely should be target driven to a standard as I believe the focus is on the quality of education for everyone, not some threshold where someone slips through and that's ok.
Ok looks good but what if I don't like to use Sass but want use Stylus?

(Serious question)
asphalt vs concrete roads are a good example. of course, if you want maintain stuff under the roads, concrete is a real bear.
REVL: London’s latest events discovery app
It would work for games like WOT and WOW World Of Tanks World of Warships to issue commands to the crew.
That is an implementation detail of how a reference counting algorithm can be implemented.
I guess it's an aims race, but I would guess there are a few potential ways to mitigate against this:

1. Watermark all images on the in-email preview.
2. You should be able to design a mail scanner which would detect images that look too much like gmail elements and flag them.
One might write their own grid system while waiting for bootstrap 4, a year now...
They aren't using popular attachments. They are using customized attachments from the actual compromised sender. I commented elsewhere in the thread, but once they gain your credentials, they will go into your account to get one of your attachments, and then email a screenshot of that to your contacts, some of whom may have already seen that attachment.
Yes. That is the point of 2FA. Require something more than login credentials, preferably something physical you possess for an actual login to be successful.
I think I saw my Android phone use http://gstatic.com/generate_204, though more recent phones might use something different.
Password managers really shine at times like these. It's especially helpful if when using complicated auto-generated passwords. That way you don't readily "know" your password so the first thing you do is look to autofill.

It's still a good idea to have an analog backup of really important passwords. Like if you use Gmail and it is the password reset email for everything else, print out the generated password and put it somewhere safe. Just incase your password manager becomes insolvent one day.
Must do surely. The attackers would have your email and password but wouldn't be able to login?
Solution http://marshallbrain.com/manna1.htm
Session timeout? I believe mail hosted by google/gmail for companies can have rules setup that logins are invalidated after some time. I have this with my company e-mail for example. One would be even easier tricked if that's the case.
Wheezy was my last one as well.

I fully migrated my personal laptop to FreeBSD (as TrueOS) a few weeks ago, after using it as my second OS at home.

And because I need Linux for work, I migrated to Devuan on my workstation, as I need to use Ansible and Docker in a stable way as part of my DevOps job.
See: https://theintercept.com/2014/02/24/jtrig-manipulation/
Which is the method governments use to fracture projects and communities.

It has been theorized that a state actor orchestrated an attack on Appelbaum to oust him from the Tor project (1) to discredit him as an authoritative journalistic source [1: Appelbaum was one of the individuals given access to the Snowden documents]; and (2) to gain more control of the Tor project to introduce vulnerabilities.

The events leading up to his ejection had a striking resemblance to the JTRIG manipulation tactics.

It's very possible that Appelbaum was a bad actor, exploiting his credibility, but it's also highly suspect that these accusations came to light so late into his life. It seems that, prior to the release of the accusations, someone would have at least suggested that he was sexually exploitative. Yet, there doesn't seem to exist even a peep of anything close to misconduct.

It's why these manipulation tactics are so surprisingly effective. Who should be believed? There's a strong moral dogma that suggests we should immediately assume that the accusations are truth,

[1] https://en.wikipedia.org/wiki/Jacob_Appelbaum#Journalism
You are toasted. It's like asking what if I like wordpress but I don't like PHP? Can I use wordpress with Ruby?
Material design is better. This project is not needed anymore.
Over the Counter: Self-prescribed news
My policy is to enter it myself, maybe with help from address bar autocomplete or Google. Perhaps I should make my own portal page instead.

(The exception is some sites like Amazon that prompt for a password on certain actions. I wonder if I should worry about something weird happening like a tab left alone a long time impersonating Amazon when I get back to it.)
Designers shouldn't code – they should study business
Dear Google,

Stripping metadata from images is _not_ optimization. Please stop recommending this.
I thought Bootstrap is about frontend being backend-agnostic or what do I miss?
I have known about this for a while, and it's so horrible. I've wanted to work in Japan for a while.
Dcode protocol for code sharing
I have a very good collection of CS books and papers about programming languages and compiler design...
How to make muscle reaction time faster?
To be fair: Versions up to 4 also had a grid system.
3D tool for music sketching and notes sharing
> I program a UNISYS 2200 mainframe at work.

This sounds awesome. I had no idea UNIVAC is still alive.