skysight-inc/HackerNews huggingface dataset:
Ask HN: Should we consider on-premise company IT?
Hello HN.

Our startup is developing a platform for drafting and distribution of financial documents and our target clients are large investment banks. We are about to start implementing a huge list of requirements for handling client data and the question of handling our own data came up.

There are mixed opinions in management about how we should handle our own data some of which insist on creating a firewalled corporate network with on-premise email and document servers. Most arguments I've heard so far go in the line of "we have to be a serious business", which is not convincing to me.

We are currently using G-Suite for documents and email, Slack for chat and Github as our repo. Our setup served us great so far and employees are not keen on switching. They mostly use linux or MacOS which rules out a Microsoft domain network as well.

I am trying to research the actual security benefits of on-premise infrastructure over cloud solutions like the ones we use so I'd be very grateful for any comments.
Ask HN: Do you conduct product/user research before writing code for a product?
When I have a new idea, I usually start hacking on it right away in order to develop a minimally viable first version and get it out the door. Doing so allows me to get feedback from potential users and also use it myself to intuitively gauge how it can be improved further.

I just started working with a friend on a new idea. He works as a product manager in his day job, and he insists that we need to create "personas", come up with a "lean canvas", conduct user studies and interviews etc. before we can determine a set of features and start coding. This feels like massive overkill but I haven't said anything in order to avoid coming across as close-minded.

So I wanted to ask you folks: when you have a new product idea, do you conduct product/user research first to flesh it out, or do you open your favorite code editor and start the development process right away? Or a mix of both?
Sure, but (unless I'm misreading your undertone) what's the problem then? When the police find a bloody knife on somebody's kitchen table and the blood matches that of the victim that bled out outside, they also have to prove that it's the owner's. Everybody in this thread is up in arms how there is no way to 'prove' the files were the owner's, like it's some sort of special case that no lawyer or judge ever had to consider before. There's nothing special about the 'evidence' angle of this issue.
Google plugs severe Android vulnerability that exposed devices to spying
The Most (and Least) Expensive Cities for Vacation Rentals
thank you :) those were very difficult to get created.
This looks like a great idea. There were a few times I got in trouble at work in high school because I didn't see updates my boss had made after I checked the schedule. This would avoid any of the he said/she said BS.

Can this be used for covering shifts. When I worked in a job like this, we were allowed to get shifts covered, as long as we found someone to cover it. It would be neat if this service could be used to text everyone that is eligible to cover a shift for the opportunity for extra time.

"Your coworker is looking for someone to cover their front desk shift, Fri 12/9 from 3:00 PM to 11:00 PM. Would you like to cover it?"
The Many-Moons Theory
Want to know what's actually inside your NGINX container?  a list
I am totally in favor of dtciminalisation. No jail, no active police force looking for it. Cost becomes close to 0. Problem solved. If a policeman finds someone actively selling on the street, take the stuff, write a ticket, and you are good to go.

I believe there is a massive difference between making something legal, and making it illegal, even if not penalized.

You make it sound as if there is no possible ground between (a) fully legal consume as much as you want, get it easily virtually everywhere or (b) invest millions of dollars to puts hundreds of people in jail.
Note that my arguments are pretty likely wrong in some fundamental ways but here it goes.

> OK, so how do you store your model? In analog or digital format?

This is a good question. Do you think that conversion back and forth would diminish the gains from analog computing?
Memory of Mankind: All of Human Knowledge Buried in a Salt Mine
As with any other classification, start with Borges' Celestial Emporium of Benevolent Knowledge.

https://en.wikipedia.org/wiki/Celestial_Emporium_of_Benevole...
The browsing workload should be partly cached content and mostly new, like in the real world. Otherwise, what are we doing here?
The Hacking Investigation Trump Wants Instead
Even if it were undefined behaviour, it would still only be conditionally undefined. A compiler can only eliminate a code path that unconditionally results in undefined behaviour.
Absolutely but I'm terrible at describing such things. However here are two examples.

Hair Metal: https://www.youtube.com/watch?v=0u8teXR8VE4

Power Metal: https://www.youtube.com/watch?v=eIZNb96EQJ8
I was sold with the opening sentence "I wrote my dissertation on this very topic..."

I don't read dissertations and I'm not even a huge metal fan, but the idea of a dissertation on metal subgenres just sounds interesting to me.
That was the first code snippet on the website that I saw.
rurban has been proselytizing against use of psuedorandom functions (such as SipHash) for hash tables for a while now. He appears to truly believe that using PRFs for this purpose is inappropriate.

Every argument I've seen from rurban is predicated upon the assumption that the seed will be leaked by the application, either by directly leaking the key's contents or by an algorithmic attack on the output of the algorithm. As you mention, the former would constitute a grave vulnerability in the application (the kernel, in this case). The latter would constitute a grave vulnerability in the algorithm.

As for assessing whether there are vulnerabilities in the algorithm, we have an academic field (cryptanalysis) that exists to inform us when such vulnerabilities exist. Cryptanalysts' efforts have given us substantial assurance that the algorithms we use everyday (e.g. AES, HMAC, ChaCha, GMAC) are both pseudo-random and adequately prevent disclosure of their keys. SipHash was explicitly designed to be resistant to cryptanalytic attack, by two well-regarded cryptographers (Bernstein and Aumasson). They designed it targeting a specific cryptographic strength/performance trade-off, and to my knowledge it is the best contender for building a flood resistant hash table.

zx2c4, I look forward to using your code. Thank you for making the Linux kernel more secure.
It is important that the caller provide some information for authentication purposes. Just because someone uses your phone (or spoofs the number) doesn't mean that they should be able to make changes to your account.

Lots of companies outsource their IVRs. And everything is all too often cobbled together in a just-make-it-work-right-now fashion.
Well, specifically removing the html5 offline application cache if you don't need offline functionality.

That it causes duplicate requests, and apparently more of them in chrome mobile than other browsers, is interesting though.
Heroin resurgence an 'unintended consequence' of attempt to curb OxyContin abuse
sorry - what do you mean ?
Hey! I am a product manager over at GitLab.

Thanks for bringing up this very relevant discussion. We definitely recognize the shortcomings and we are working hard to improve in these areas. GitLab started out as a software management tool, similar to what you describe. But we are definitely looking to expand in multiple directions. One of them is definitely to make it a tool that is useful beyond just engineers. One of our major thrusts in this area is issue boards. We are considering who the individuals are in a large enterprise that would be interested in issue boards. And we can't solve every use case right away. So we are starting with personas like engineering managers, product managers, and designers. These are folks that may not be very technical, but still are important in the product development flow in a large organization. See this as an example: https://gitlab.com/gitlab-org/gitlab-ce/issues/24686

We definitely have our eye to expand beyond these use cases. So we anticipate getting into areas like road mapping, Gantt charts / swim lanes, etc. But again, we work iteratively at GitLab, so our very first stab in this area is burn down charts to get feedback on how a software iteration is performing. And then we build on that to bigger scopes like roadmaps for business managers, etc. See https://gitlab.com/gitlab-org/gitlab-ee/issues/91 for burn down charts.

In addition, we recognize the rich nature of teams and the multi-faceted of different roles in an organization. For lack of better term, we've called it "team-centered collaboration" in this issue, we start the discussion that we want to go beyond just software-first projects:
https://gitlab.com/gitlab-org/gitlab-ee/issues/1295
Agreed. I should have said chronic stress can cause depression.
In California most lights have sensors, and the sensors themselves can break/not be properly calibrated. When you happen across this that means is certain lights will always be green, and others will always be red.

It's mostly a problem with motorcycles, and I've had to go through my fair share of red lights late at night when no one was around, but I've also (rarely) had a problem with a car.
I find it funny that Apple and its users are angry at the company who tested and reported results, not the company which coded and released a browser with bugs.

We should aspire to attain such loyalty.

I know when I release bugs, I get the blame!
I think developing taste is actually the hardest part. For example, most aspiring musicians start out enamored with a particular style because it impressed them in their early life. It takes years to make sense of things and find your unique personal concept of "good music". Many don't even reach the realization that it's a worthwhile goal. Similar with visual art, etc.
It's completely unreasonable to expect a small business located in one locality in one state to figure out the applicable sales taxes in 10,000 different tax jurisdictions across the nation, and then send out checks to every single different jurisdiction that his customers hail from.

Placing this burden on the merchant absolutely DOES amount to a "tax" on the merchant. Time isn't free. And using the legal system against merchants who refuse or who make mistakes with taxes supposedly due to some little town that the merchant has never ever visited amounts to a violation of interstate commerce.

If the locality can't get their citizens to remit their own taxes properly, that's their own problem and they need to more strongly enforce their laws on their own citizens.
Hunger After You’re Fed [Fiction]
> The fact that turning off caching triggered a browser bug is not consumer reports problem nor do they have an obligation to figure out why.

Agree. Unfortunately this makes the test flawed, since it tries to simulate real-world behavior, but they couldn't know that unless they knew there was a bug in the cache thing.

> The test is factual.

Only if the report mentioned their testing methodology, i.e. if it mentions that they turn off caching for all laptops to better simulate browsing patterns. I expected Techcrunch to mention this but they neglected to.
> The second you compile one package to get any of those boxes to work, for me, the pro-linux box argument is negated.

This seems a strange things to say considering everyone I know who uses a Mac for dev uses homebrew, which compiles as part of the install.
>However, depression is a disease independent of external factors.

Citation needed. The popular theory of depression being caused purely by a "chemical imbalance" independent of all other factors remains unproven, though it does make for a good and simple advertising ploy for big pharma in that it makes their consumers believe the only way to happiness is through their patented drugs.
Because of JSON and "web scale".
Ehh, that's still better than what used to happen when they had removable batteries. Back then it was 300 charge cycles and I constantly had batteries that would give service errors well below that, but because they were over a year old they were out of warranty. I'm glad to hear the 1000 cycle internal batteries are doing much, much better.
I will disagree because difficulty of dev env setup highly depends on dev stack and most of them are easier to configure on linux. First of all on Linux you have to know what you are doing. Linux is first and foremost a system build by sysadmins for sysadmins. Of course a lot of stuff was done by developers but to properly manage dev environment installed on linux you have to be at least partially sysadmin. If you are looking to install full dev stack as all in one package then look elsewhere
Thanks! When we built our V1, we started to investigate building in shift swaps. However, when we started doing the user studies, we had an "oh crap" moment when we realized that so few of our users had smart phones or even email addresses. P2P swaps wouldn't work with such low engagement.

We realized that we had to fix a communication problem before we could build swaps. So, we went back to the drawing board and released V2!

You're spot on with your message - now that we have higher engagement with the workforce, we hope to build in that feature :-)
The Architecture of Open Source Applications: LLVM
The big change is between levels 2 and 3. That changes who's responsible. At level 2, the driver is responsible for accidents; at level 3, the manufacturer is. California and Michigan have already enacted that into law, that's what NHTSA recommends, Volvo's CEO publicly endorses that, and the big US automakers accept it. Tesla finally accepts it. Uber is still whining, but that's Uber.

Volvo's is starting a 100 vehicle test in one city in Sweden. Automation is only available on some major roads. The driver is not required to pay attention in automatic mode. There's a progress bar - minutes until the end of automatic driving. There are previously located points at the end of automatic driving regions where the vehicle can pull over and stop, should the driver not take over when requested. So that's what entry level full autonomy looks like. That's a good level 3. Those go on the road any day now; the vehicles have been built and tested, and the first of the 100 drivers, who are car purchasers, not Volvo employees, have already been chosen.[1]

And yes, they work in snow. The test is in Gothenburg, Sweden; they have to work in snow.

[1] http://www.volvocars.com/intl/about/our-innovation-brands/in...
exactly. This isn't to replace real friendships / community, but to help you stay connected with those you can't speak with / visit regularly
And if I say 'slavery is wrong' - that's an opinion. I'm going to go ahead and call someone reasonable when they pen an anti-slavery piece.

You disagree with me about the viewpoint being reasonable - sure. I think you are horribly wrong. The viewpoint makes sense, and I have explained why I think that. She is explaining her struggle in dealing with explaining feminism and dealing with sexism to her future son, given she was never a young boy and doesn't know it. You haven't explained how you got to that being unreasonable except implying (but then denying) you think feminism is inherently bad.
Apple's first iPhone ad – Hello (2007) [video]
Journalist these days feel that every single title needs to be as shocking as possible because they are desperate for you to click.

I've learned to hate the words "baffled", "shocked", etc. because journalists basically spam them for clickbait.
Will Apple deliver AR glasses this year?
Hair metal is another term for glam metal; think Guns & Roses, Warrant, those kinds of 80s hard rock/ kind of metal bands.

Power Metal is like closer to speed metal; think of something like "Ramble On" played by Judas Priest or Iron Maiden.
Thank you for bringing up the invasive and crazy anti-privacy policies of Valve/Steam, it boggles my mind that so few people have problems with it.

Could you imagine if Facebook pushed a notification to all your friends when you visit a new page?

If Microsoft sent an email to your entire contact book every single time you opened a program?

And yet, that's precisely what Steam does. Insane.
Arguably, you a trading the chance to lose 800 with a guaranteed loss of around that much, just by paying the Apple premium.
Isn't that just a toll road?
Thrash Metal is basically "L.A style" high pitched voice , Death metal is more like "Tampa style" growly voice, Black Metal is more about the look than anything else and Heavy Metal, well any rock band can play heavy.
Amazon has third parties that sell feet with sticky stuff on it that can work ok. I contacted Apple support and they charged me less than $20 for a kit that included glue and new feet (I couldn't find that kit anywhere for sale publically).
Awesome! I am in the same boat, currently i am in India but I have been applying to European companies for the past few days , hoping for one of them to convert.

What countries do you think have a stable tech scene ? Also how did you find a job easily - was it by applying online or networking ? Also have a look at my profile and let me know if i stand a chance.
Driver jobs have been lost to autonomous container movers at shipping ports. Not expecting ML to have been integral to that, but driver jobs were indeed lost due to automation.
That makes sense and you're right, if all you're doing is a head-on stress test then just let the math do the talking.

I think testing heavy use is probably different than a straight up stress test in a number of ways that are more applicable to my daily use and more useful. It's good to know if Safari's caching strategy saves you battery, but as a non-Safari user that often does not refresh from cache I'm not sure I would appreciate buying a laptop advertising X battery and finding it to have changed significantly or be caveated by lots of required settings.
May I ask why having the waves deleted after a week is such a disappointment to you? (And if anyone else thinks the same?) I'd love to know your thoughts / reasonings behind this statement.
Ask HN: Recommend a command line tool to generate neat-looking graphs/charts?
I have used gnuplot for basic tasks in the past. This time I am trying to generate graphs that'll be sent to the customers and it's important that they look neat and aesthetically pleasant.

Spent last 3 hours on different ways to do that. Checked out some scripts etc to make gnuplot output nicer looking, but it just doesn't seem to compare with the output of some of the js libraries (D3/charts). I wonder if there is a command line way to generate slick graphs that are visually every bit as appealing as using libraries?

TL;DR: Anyone know a way to get stylish looking graphs generated from command line on linux?
Quite curious now, give us a hint!
I would pick a third option:
SojournBikeTours.com

-There would be a high likelihood of that domain name being available as opposed to buying the KEYWORD domain from a squatter for thousands.

-Having a brand or name would give it more authority and a feeling of a mom and pop store.

-It is still descriptive.

Not to mention that if you do decide to go through the KEYWORD domain route you will be competing with a lot of people that are scouting for KEYWORD domains to build spammy affiliate websites or if by any chance the website has some history and backlinks then you will be competing with people who want to snatch it to build PBNs.
Partitioning Trillion-Edge Graphs in Minutes (2016) [pdf]
I find metal is one of the more interestingly diverging genres. The range of sound that falls under 'metal' is shocking. You can go from slow, with clean vocals and a (fairly) relaxing sound, to something earshattering.

Also, you can very often tell that the musicians are putting all they can into it. The music is very emotional in a lot of the subgenres, particularly black metal, and post-metal.
Why do you feel they should dictate how content that has already been delivered should be rendered?
I used to enjoy The Sound of Perseverance, haven't heard it properly in a while, what was that instrumental track on that album with the harmonised guitars?
Homebrew tries to download a binary for pretty much every package, and only rarely compiles from source.
See http://mapofmetal.com
Two animals from totally different species found having sex by scientists
can a 'John' expect his money returned if he is dissatisfied with his service?

I think not being able to expect a return of your payment is because of the illegality of the exchange, not because the exchange is for something different altogether.
All of the problems with gerrymandering can be solved by eliminating districts and holding all elections at the national level.

As a thought experiment, assume a society that is ruled by a legislature of 29 people. Each year, society votes and elects a single individual, who then serves for 29 years. One person elected per year for 29 years gives you a legislature of 29 people. If all local, city, and regional voting districts are abolished (the districts still exist, but these are appointed positions, not elected) the public, and the media, are able to focus their energy on choosing the one best person each year. All elected leaders face a strict term limit of one term.

Advantages of the system:

1.) leaders serve long enough that they can enact meaningful reform. They can also carry out necessary, but unpopular, policies, without facing immediate backlash from the people.

2.) There are no districts, therefore there is no gerrymandering.

3.) There are no decisive elections. Unlike Germany in 1933 or the USA in 2016, there are no elections in which it feels like the entire regime has changed all at once. All change is gradual, and it happens at the same pace every year.

4.) Society finally gets the true benefits of the rule of law, which is freedom from arbitrary changes. No government made of mortal flesh can ever be ensured to be wise, so hoping for wisdom is not realistic, but the rule of law can offer us stability and freedom from arbitrary government.

Some of these ideas go back to Plato. His Council Of Wisdom was to be made of those leaders who would serve forever. Considering how much the West seems to admire Plato, it is odd that no Western nation has ever attempted to implement anything like his ideas.
Really what matters is rate of return. It doesn't surprise me that a company called 500 Startups gets a lot of Series A deals.
How do you feel about project management in Gitlab now that Atlassian has acquired Trello?
"When you can't make yourself do anything, do this thing that we recommend."
thanks for the positive feedback! Let me know if there is anything you think we should add as we start building 2.0 :)
While I'm not on the net team - I just mangle the UI and annoy Ben ;) - I can wager a good guess: The net team used TimeDelta because for any software project of Chromium's size strong types are crucial.

If they just returned an int, you'll sooner or later see it passed through five different places, and at the end location, nobody remembers if it's ms, time ticks, seconds, or even a unix time instead of a delta. TimeDelta removes that question.

It also does things that have subtle issues you might miss if you did it "by hand", like saturated adds, multiplying with an integer value while handling overflow correctly, etc.

These things might be overkill for smaller project, but once you have something with hundreds of contributors, every little bit helps keep the code base sane.

As for the division by 10 - look up at line 953 :)

Yes, it should be a named constant. And some of the comments could certainly be better. It's a work in progress. (And if you want to help with that work, we happily accept patches!)