skysight-inc/HackerNews huggingface dataset:
I avoid using even cruise control because I know I am a worse driver when it's engaged. I firmly believe I'd be a danger to myself and others for the first 30 seconds if a level 2 or 3 car had to hand control back to me.

Modulating my speed keeps me engaged with driving and I use it as the trigger to cycle through my responsibilities. I check ahead / speed, adjust throttle, check rearview mirror, check left mirror, check right mirror, repeat. When the throttle step is gone I find myself losing siutational focus very quickly. I've always thought it was because it was the only action that involved actual physical engagement, all the rest are just eye movement.

I just bought a new car that alerts when it's below 4 degrees C about the possible icy conditions, but it only does so after the car has been running for several minutes. By the time it goes off I'm already driving and I mistake it for an engine warning or other catastrophic failure. Every time. I live in Canada, of course it's icy in the winter. Toddlers could have told you that. This is an absurdly dangerous thing to have the car do, because when the beep goes off all my attention is on processing the alert, not about the pedestrian I'm about to run over. I have the same basic fear about getting control of a level 2 or 3 car. All my focus will be on why the car is handing me control, not on the actual task of driving.
> 2. You need to start selling before you have a product, it should influence your product, or help you avoid building something useless.

This is the best advice and to push it further I would say you need to have a customer ready to go and willing to work with you.

6. YOLO so go for it. You don't want to be 80 years old looking back and thinking I wish I would have.
Tone: I assume GitHub knows what they are doing, and I ask this question because I have a hole in my understanding that I have a professional interest in making sure is filled, not because I'm trying to "gotcha!" anybody or be critical. This article clearly demonstrates they are trying hard and not ignorant.

I don't understand why so much of this article is talking about dangling markup? While I highly recommend using the highest quality library you can get your hands on for this task, cleaning up user-supplied markup to at least be valid HTML is generally not that difficult. Cleaning up every last vector within that valid HTML is much harder and much more subtle; I have fought that fight myself, so I understand the bits about how awful the <plaintext> tag can be and so forth (and how how many other vectors there are for javascript, and how many vectors there are for loading content you didn't want loaded, and how many vectors there are for subtle leaks of information, etc., even within syntactically-valid HTML). But making syntactically-invalid HTML into syntactically-valid HTML that is at least not "dangling" is not that hard, and can be done reliably.

So I assume I'm missing some sort of context here about why they are having so much trouble with this? What's the context where they can't run this sort of syntax cleaner over the user input?
What's to trust exactly?

It blocks connections to domains/IPs you want it to, and allows others.

You can easily verify that it behaves correctly with common network tools.

This is not some deep cryptography shit...
The advanced mode panel in uBO works on FF for Android, though it's not as painless as on desktop.
Like most government "wars" on a problem it has turned out to be an expensive effort to make the problem worse. I agree with the theory that this is by design; if a government program actually solved a problem then the funding goes away.
the usual approach is a google form, stating what you are going to make.

then you presell it. meaning you sell something that does not yet exist. if X number of people buy, you build it. if too little people want it, you return their money and say sorry.

then you deliver the product in as little code as possible. if its just information, write an email instead of building a fully responsive javascript react native reflux multi tenant fully distributed app.

yes, its not called reflux. but thats what it induces in the developer.

edit: thats how you presell products that are sufficiently easy to make. if you are looking at bigger projects like, say, a fusion reactor - you dont presell your customers. you presell investors. you do that by saying "heres the paper weve written as postdocs in university, we think we have a decent shot at making this happen". then you take the money and build the first step of your roadmap. then you go back to raising and presell "see? weve built feature X successfully. now we need more money to build the next thing". and so on, until you have a product.

the process doesnt really change, just who you presell.
What about a second-hand Yoga 2 Pro? This should be in that price range now, roughly.

I've been using this for a couple of years now and was quite happy. It's a good trade-off between performance, weight and size in my opinion. Except some minor inconveniences[1], my Linux/Windows dualboot setup works quite well.

Heads-up: If you consider it's successor, the Yoga 900, make sure you don't get one of the series not supporting Linux (Google is your friend).

[1]: The biggest issue I've faced is inaccuracy of yellow colors on the display; they're dark and pale. Lenovo published a BIOS fix for Windows, but this doesn't work for Linux. However, if you don't plan to do any visual work like photo editing or designing color palettes, you should be fine.
> why not try and fix this?

In short? Because it's not a technical problem, it's a political problem; it involves dealing with people and their motivations, irrationalities, hangups, biases, etc.

It's a common stereotype that most engineers make terrible managers for the very same reason, and it's not an unreasonable stereotype. If we could break this down to a technical problem, it would be solved. It's not a technical problem, and most of us don't know how (or can't afford the massive time cost) to fix it on the larger scale.

So those who care do what we can do best: attempt to fix ourselves: we strive to overcome our internal hangups and biases, to act rationally, to not become part of the problem. And frankly, for most of us, that's the most we could hope to realistically do.
Please steal this idea and make a product; I'll be your first paying customer:

Data Loss Protection (DLP) for retail consumers.

DLP (see http://whatis.techtarget.com/definition/data-loss-prevention... for a definition) goes beyond what Little Snitch does and does packet inspection to ensure that credit card numbers (for example) are never sent out from your network / box. Ideally, you can add regular expressions to define other PII that shouldn't be allowed to be sent out (your name, address, etc;).

DLP products exist for corporate use, but I don't know of any lightweight + inexpensive one for personal use.

WireShark, Fiddler or Charles can incorporate this functionality, if I am not wrong. Not sure how one would MITM SSL with WireShark, though.
This is not super-conventional, but some of the standard library uses panics in a similar way.

I think as long as panics don't cross library boundaries you're fine. And panics can cross library functions if the function is called MustConnect(). (Which means it'd be neat to have a pre-processor that generated MustX from X if it wasn't already there...)
Ok, I get that.
Just tried replicating it in Firefox, and it seems that Chrome and Firefox accept different certificates for airbnb.com. Tried on three different platforms (Windows, Ubuntu and Android), same thing: Firefox uses a valid GlobalSign certificate, while Chrome uses an invalid DigiCert certificate.

Never seen the same website using different certs for two different browsers before.
Great work. Seriously. Keep it up.
> the ability to set a rule that would clear at reboot was a win

Little Snitch provides that: https://www.obdev.at/Images//littlesnitch/index/more_feature...

> limiting a lot of apps to loopback connections rather than full outgoing connectivity

and that
No, it's a commercial app (and an age old OS X staple, been using it for over a decade).
There are three things I've done that have personally helped me progress on my project.

First, I always took Sunday to work on it. Which is harder than it sounds because friends and family want that day. Eventually they'll pick up on it, be consistent.

Second, to help with the commute problem. I decided to dedicate an extra 30 to 60 min after work, before my commute to work on it. You're already at work, you're already forcing yourself to accomplish tasks, why not tick on task off for yourself before you hop on the road? I found that a lot of weeks this made me more productive than working Sundays as it was less likely to result in a few hours of web browsing. (I'm hungry and it's only supposed to be 30-60 min right?)

Third, if you dread waking up in the morning, that's usually the point where I will draw the line and get another job. It will seriously help you out if you're not stressed so much about your day to day work.

I get it, I feel your struggle man. I wish you the best either way, if you do quit, you owe us an update on how it panned out :)
not only are you being very liberal with your use of profanity, you are not very accurate. I am not sure what is your personal peeve on this that you had to use words which have no place in a technical conversation.

I linked to bugs and proposals that we are discussing on various sigs on slack. even aspects of load balancers and Service abstraction are insufficient and im part of some of the discussions. secrets management being insufficient is the reason why there are suitable number of distributions with their own flavors of these.

Your terming of Service Discovery proposal as a HA is laughable. HA in apiservers has been production ready for quite some time and well integrated in kops and kargo. Etcd recovery is still a hassle. You are mistaking documentation being marked as available with it being actually usable in lifecycle.

Are you aware that full tls in kubernetes is hard because some values are hardcoded? this causes etcd breakage in lifecycles.

kubernetes is not complete - im very bullish on its future, but I would recommend you stick to technical refutal more than personal ire.
Does it matter? They're liars. Whatever justification they used for their lie is irrelevant.

edit: I thought I commented on this story topic before and found this from over two years ago

https://news.ycombinator.com/item?id=8523104
Agree 100%. For instances, you have standard, high memory and high CPU and custom. Super easy to make sense of rather than crawling through webpages to understand what each type of instance mean. For example: AWS has r, t, m, g, p instance types. When you look at the whole platform, naming, gotchas etc AWS creates lot of cognitive overhead for developers. I find Google cloud far easier to use, partially due to things like these.
The issue with Tinywall is it won't alert you when it's blocking apps.

Since a lot of Windows apps are a conglomeration of EXEs just whitelisting the main app is often not enough.

Comodo is WAY more bloated than Tinywall but I use it because I can set it to alert me to everything that tries to access the internet, and choose to block it or not.
At around a billion records, you start getting into distributed/scale-out systems

Uhh, a billion-row table you can handle on a laptop easily. Probably in SQLite.
The Case Against Freemium – 3 Reasons Why Free Is a Wrong Price
If I would have to choose between the stress of 1.) building a MVP in the evenings or on weekends, while still having a day job or 2.) building a MVP fulltime and realizing that my business idea wasn't brilliant and I don't have enough resources left to pivot, then I would choose 1.) every time.
She should make use of the draconian UK laws under the Education Act 2010 around mobile phones in schools and just start seizing the phones.

https://wiki.openrightsgroup.org/wiki/Education_Act_2011

http://www.legislation.gov.uk/ukpga/2011/21/section/2/enacte...

(We haven't heard much about these laws. I don't think most people on HN, even the privacy conscious people in UK have heard much about them.)
Gottschalk uses a term I'm unfamiliar with: "race liberals". Does anyone know what the definition or typical usage pattern of this term is? Is it specific to some particular academic field or political clique? I'm not finding very good examples with Google (which thinks that "race, liberals" and "race. Liberals" are good matches).
It doesn't even have to be summer camp. Until I could get a job and drive myself, I had trouble even finding transportation to and from extracurriculars, which made my experience at my very good public high school quite a bit less than that of my peers. I also ended up dropping a zero hour AP class, because there was no bus service for classes that early.

Any time things like summer camp came up, I just tuned out, because I knew it wasn't going to happen for me. As an adult, I can see that, in some cases, I could have made something happen if I had really wanted it. But as a child, I had the mentality "that's not for me" and could not have even begun to figure out how to make it happen, because I wasn't just poor, but lacked any real support at home. (I was babysitting, but I fell into the poor person trap of spending money to feel better. All my cash went straight to comic books and soda.)
$33 / US driver... I'd say Uber came out on top here.
Little Snitch is a fantastic way for people to shoot themselves in the foot.

Most people using it have no clue what they are doing, block random things, and prevent software from working as expected. Not only this can make things less secure by breaking features such as automatic updates, it also makes developer's life miserable by having to provide support to people running their software in a half broken environment.
https://github.com/anvaka/common-words#how-was-the-data-coll...
Nice list. Any idea on the status of IronPython?
Is there any road map on getting it into Core?
That's an interesting anecdote. I'm curious to know though, did Haskell's advanced type system help out at all? Like the various not-quite-IO monads such as State, Reader, Writer? Or other instances of HKTs such as Functor or Applicative? Did it force you to think about the problem any differently? Or was the only real benefit just the assurance that you weren't accidentally doing IO/mutation unnecessarily?
Twitters analytics are either lossy or eventually consistent [1]. I'm sure they're resource intensive, but they're taking shortcuts that makes them very amenable to saving resources (unless it's just very buggy).

In terms of the broadcast problem, it's trivially handled by splitting large follower lists into trees, and introducing message reflectors. Twitters message counts is high for a public IM system, but it's not that high overall messaging volume for private/internal message flows. More importantly, despite the issue of large follower counts, if breaking large accounts into trees of reflectors, it decomposes neatly, and federating large message flows like this is a well understood problem:

I've half-jokingly in the past you could replace a lot of Twitters core transmission of tweets with mail servers and off the shelf mailing-list reflectors, and some code to create mailboxes for accounts an reflectors to break up large follower lists (no, it wouldn't be efficient, but the point is distributing message transfers including reflecting messages to large lists is a well understood problem), and based on the mail volumes I've handled with off the shelf servers I'll confidently say that 100's of millions of messages a day that way is not all that hard to handle with relatively modest server counts.

Fast delivery of tweets using reflectors to extreme accounts would be the one thing that could drive the server number up high, but on the other hand, there are also plenty of far more efficient ways of handling it (e.g. extensive caching + pulling rather than pushing for the most extreme accounts)

Note, I'm not saying Twitter doesn't have a legitimate need or the servers they use - their web app does a lot of expensive history/timeline generation on top of the core message exchange for example. And the number of servers does not say much about their chosen tradeoffs in terms of server size/cost vs. number of servers, but the core message exchange should not be where the complexity is unless they're doing something very weird.

[1] Taking snapshots of their analytics and the API follower/following count shows they don't agree, and the analytics numbers changes after the fact on a regular basis.
Why Introverts Are Better at Sales Than Extroverts
Great to see a more generic pure-.NET image processing library. When I was doing this 5 years ago we basically had AForge.NET which was focused more on correctness of algorithms than speed. I tried to leverage that, but instead ended up with a totally custom image processing pipeline instead -- oh the battles with the GC and unsafe code...

Out of curiosity what is your overall vision for the library? Are you looking for a System.Drawing high-level API or more of an OpenCV-like low-level API?
Thanks. It's difficult to maintain composure in the face of almost comical wrongness throughout the business world, and saying things like that tends to get you shunned. My fault, I need to improve my tact.

I wrote more about it here: https://news.ycombinator.com/item?id=13441946

Basically, the Pixar crew followed W. Edwards Deming's model of organizations, which is one fairly accurate and useful model. By doing that they were able to bring all the pieces together and lead. Heck, Catmull even wrote a book about it, detailing how he thought about managing and leading a company that works for creative minds. But I guess the important part is his integrity and hiring abilities. :)
I don't trust that it's not doing data collection of it's own.
The point is not that the criminal justice system is egalitarian, but that our attempts to brute force egalitarianism have often lead to longer sentences and higher incarceration rates.

>
Blacks in Minnesota are about eleven times more likely to be incarcerated than whites, giving Minnesota the country’s highest black-white disparity in imprisonment. But Minnesota also has one of the lowest incarceration rates in the country. So overall, African Americans are less likely to be sent to prison in Minnesota than in the South, which is a more equal opportunity incarcerator

He is not disputing that the war on drugs is a proximate cause of our higher incarceration rates. He is saying that attempts to solve the problem by releasing non violent drug offenders can't solve the issue alone.

> Unfortunately, the issue is getting framed in a way that’s too narrowly focused on the War on Drugs. In fact, if we released everyone now serving time in state prisons whose primary charge is a drug offense, we would reduce the state prison population by only 20 percent
Glasswire is fantastic but the most useful features cost $50, FYI
Are You Being Smart with Your Small Business Marketing?
Firejail might be worth a try.
Milk in the US is pasteurized as well, but to be shelf stable you need to use a different pasteurization processes called UHT (ultra high temp) and package it in special aseptic packaging. UHT milk is put in traditional containers and stored in the fridge as well.

You can buy self stable milk in the US but it's not very popular for some reason. Except for Yoo-hoo, that's a popular milk product that's usually sold in shelf stable "juice boxes"... and I think it tastes even better at room temperature.

When milk alternatives like soy milk, almound milk, coconut milk, etc., first came to market they were almost always sold shelf stable. I can only assume that's because refrigeration space in supermarkets is sparse and expensive (learned that from Shark Tank) and these were niche products at the time. Now that they are mainstream you can find them refrigerated right next to the dairy milk. I guess Americans prefer to buy milk that way.

Re: wine. Interestingly in the US, due to the fact liquor laws are regulated by the state, when you cross state lines your supermarket alcohol selection will vary drastically. Some states ban alcohol sales in supermarkets entirely. Some allow only beer and wine. Some allow only beer only. Some allow beer, wine, and liquor. I've never heard of a state that banned beer but allowed liquor but who knows, it's possible. It mind boggling just how many crazy (and different) regulations about silly stuff like this exists around alcohol in the US. Funny story, a friend of mine went to a supermarket outside of the state she lived in and was totally mystified she couldn't find Bacardi's. "I've never been to a grocery store that didn't have Bacardi's" She didn't know they weren't allowed to sell it there.

Personally, I'm in a "beer only" state and and wine coolers and malt liquor (colloquially known as "40s") are categorized as "beer."
Tangentially, I've always wondered why databases today still aren't capable of being self-tuning

All the mainstream commercial DBs will happily generate you a script with self-tuning advice, you just need to read it and if you agree, run it.
NHTSA reports that 94% of all auto accidents involve driver error. Autopilot is a feature that reduces the number of decisions drivers make. It would be improbable for the two not to be extremely related.
Uber does not create jobs. Drivers are freelancers and not employees. It's not job with all covered insurance, benefits, days out etc. Uber is exactly like Upwork for freelance programmers and designers.
That is an interesting approach. But the simplest encryption (e.g. a simple XOR) will go around this problem very easily.
Exactly! I found their description a bit inaccurate too. I am yet to see a true service offering on other platforms like service fabric. [Disclaimer: I work at MSFT]
And much of the monies won't even go to the drivers.
It would be interesting to compel companies to publish exhausting anonymous data regarding their contractors. Without such datasets, it's hard to assess reasonably on whether these shemes are used legitimately, or merely to bypass labour regulation.
Why all this tech effort when simple authority and transparency will do? Build a multi-compartment lucite / acrylic (clear) box, where each slot can hold 1 phone. Students enter and turn off phone notifications, put in a cubby, then take their seat. Retrieve phone at end of class.

In certain circumstances - pending family news perhaps - a student might ask and be permitted to keep their phone on their person. If there's other unexpected family emergencies, contact the school, not the student directly. The expectation of being able to bypass the school isn't a fair one to me.

As an occasional educator, I'm quite fond of the "beacuse I said so and I'm paid to tell you what to do" philosophy of having a little leeway with maintaining authority for a group of 10-30 pupils. Behavior doesn't always improve with age. Certain strategies exist for a reason.
Ask HN: Do you use an external keyboard? Which one?
I'm planning to buy a mechanical keyboard, probably with Cherry MX brown switches. I'd have preferred tenkeyless keyboard but there aren't a lot of options available in India, so I might buy Corsair Strafe (Corsair K65 is tenkeyless but only comes with Cherry MX Red). I use a Macbook, so I'll map the alt key to cmd which should do the job.

What's your current keyboard? Which one would you choose if you had to buy one today?
As the sibling said I would probably also pay a small amount. However, I could also see that corporate customers might by this.