skysight-inc/HackerNews huggingface dataset:
> Now that we know we don't need the up and down arrow keys, what about the left and right? Unfortunately, these keys are still needed for single character movements...

What? No. Use Ctrl-f and Ctrl-b. I use this probably more than any other readline shortcut.

Ctrl-h for backspace, Ctrl-d for delete. Half my keyboards don't even have arrow keys and I don't miss them.
> Now, if I send the message to that user, is this message received by other party with warning that is not encrypted or it is not delivered at all?

It's delivered and then you see the warning.

> Is there any guarantee that server cannot change settings on the client?

No. Prior to this story I would have assumed there would at least be some risk of being caught by security professionals, but I guess the security community would be falling over itself to explain how the backdoor was an accident or a legitimate usability choice.
PyTorch, Dynamic Computational Graphs and Modular Deep Learning
I really enjoyed the video linked in the article. I wasn't sure what to expect, I found the Voder "voice" slightly creepy. Sadly I could not find an emulator or tool online to input text and get a Voder audio output.
I think this is the biggest problem. US just has better opportunities.
I don't really disagree and a Facebook page is probably a lot better than nothing. I would note that SquareSpace seems to do a good business (assuming that's a reasonable conclusion to draw from the amount of advertising they do) so there does seem to be a market for simple template-driven websites.

(on the other hand, given they advertise a lot on podcasts and the like, they may not be targeting traditional local businesses.)
The article does specifically limit itself to ' ', '\n' and '\r' and does not say "all whitespace."
Fortunately, computers are fast enough that VM speed isn't the only thing to care about.
Logical replication in Postgresql master
>Google doesn't care about organic results any more. That's BS, frankly.

Do they care less than they used to, though? Their placement on the screen as opposed to KG, widgets, and ads..and how that's progressed over time, seems to imply it.
One area which I'm thinking about which entails drugs and non-consent is in a hospital after a wreck. Someone's on pain drip, and insurance goon one of shows up, asking for papers to be signed.

Signing those would be invalid. No informed consent was given, due to being in a mind-altered state due to pharmaceuticals. It's likely going to be a long court case, but there is precedent in having these types of coerced actions (signature) rescinded.

My argument was that drunk driving was made in a coerced state of mind. The journey to "drunk" is one thing, but there certainly is question about actual liability.
But they are not one-on-one. They are public. They are not anonymous.
A Bridging Model for Parallel Computation (1990) [pdf]
Ask HN: Replacing large legacy CRUD software with new frameworks – challenges?
Came across a proposal to replace a software which is atleast 10 years and 'not-so-good-looking' for 2017.

Current stack : ASP.NET, Ajax, JQuery and no automated tests.
Users : 30-50.

Most of backend design is in what they term as - 'flow' documents.
Front end is basic as in presenting information - mostly text and document uploads.

I am planning to use node and angular if we move ahead.

What are the challenges that I should be wary of ?
What are "all these languages?" This is the first one I've seen. This one doesn't even seem to be meant for practical use, rather a learning exercise by the author.
Early in my IT career, I did a lot of MS Access development, and MS Access gave me a huge advantage (at the start) of the company my cofounders and I started and sold. Although it certainly had it's limitations, MS Access did meet a lot of needs for SMBs, much as how you describe FoxPro did/does.

If you want something similar with respect to ease of development and deployment, check out Oracle Application Express, or APEX, which comes with the database as a no-cost option. A good quick summary of APEX can be found here: https://insum.ca/about-apex/ (Disclaimer - I work with Insum.)

Most on HN seem to really dislike Oracle, which is not completely unwarranted. However, a framework like APEX can enable you to stand up CRUD apps very quickly, and Oracle has a free version of the database (Oracle XE, which includes APEX), that will easily meet the needs of many SMBs. I've gone through a few different "Build an X clone" type tutorials online to learn both python and JavaScript frameworks, and in each case, building the same thing with Oracle APEX takes a much less time, and is way easier given the declarative interface.

APEX is not for everyone and won't solve all your problems, but for those looking to modernize MS Access and FoxPro apps, it's worth checking out.
I like the idea of the Paths series, though some of the points in this first article read like they could be written about most "emerging technologies". Anyway, I'm looking forward to the next one!

The two questions about the PhD's do feel a little bit misplaced for a startup audience. Who here stops and thinks "Am I supposed to have a PhD to do that?", when setting out to start something new? (<insert theranos reference here>)
I was just wondering that myself :)
Salesforce.com has a store, there is the AWS marketplace, all sorts of meat markets (elance), if you squint you might even see pluralsight as a market.
It still feels weird to have security experts characterize WhatsApp's choice as acceptable; it feels off to attribute its success around the rare occurence that a message could need to be resent.

I think the over-reaction to the stance of the security community is that it gives the vibe that the flaw is minimized. For the layman, every security flaw, every vulnerability is a totally obscure, incomprehensible jargon-filled techno mumbo-jumbo. Now we have the case that sometimes the experts go wild over the dangers of a flaw, sometimes they say "Ah, better than nothing". It gives the impression that WhatsApp is been let off the hook.

I think the argument would have been better framed by stating simply that WhatsApp's decision is a security flaw, that it should be fixed from a security POV, but it's still better than most alternatives and leave it at that.

That whole dance about it being an acceptable compromise would have been better off omitted. The letter commits the same error as the Guardian: in trying to be too comprehensive and precise, it muddies its point.
I agree, I automate generation of hundreds of spreadsheets a day.

I would like to see more scripting/automation features on email.
Somehow I need (as an Italian) to underline how the Monte dei Paschi di Siena was founded in 1472 (yes, that is 20 years before Columbus found America thinking to make a new route to India) and had prospered until the new economists/geniuses took over in the 90's.

In other words "how to make five centuries (500 years!) of experience go waste".
You would be surprised. Referring to any of the most common 8-bit encodings as "extended ASCII" or even just "ASCII" has been very common in my experience.
I knew the standardization was new-ish, but that's an excellent story. Right up there with building a bridge measured "above sea level", such that the two sides didn't match when they met in the middle.

http://www.bbc.com/news/magazine-27509559
Eons ago, I worked for Lotus Software (way before they belonged to IBM) on an exiting new product - their flagship Lotus 1-2-3 spreadsheet product, in those days the preeminent spreadsheet offering in the world, ported to the IBM mainframe.

I travelled around Europe as we sold this to large corporations who wanted the power of the spreadsheet, but multipled by a gazillion times and made multi-user.

Almost every customer was so receptive and excited, it was a fun and job and easy sell.

But later, we learnt that those customers were in fact the early adopters, and Lotus never did manage to cross the chasm with that product. Later Microsoft produced Excel and..well the rest is history.

My conclusion: the world doesn't need a better spreadsheet. Existing spreadsheet technologies are good enough for the hokey, half-baked things that people like to build with them.
> It still feels weird to have security experts characterize WhatsApp's choice as acceptable;

They're not acceptable in general.

They're acceptable within the context of the problem they are trying to solve, which isn't "make crypto nerds happy". Their users, by and large, know absolutely nothing about cryptography. Any attempt to add key verification will either:

- Spook them
- Intimidate them
- Confuse them
- Make them move to an insecure platform that their contacts
already use; i.e. SMS
- All of the above
A more nefarious interpretation (more nuanced and believable than the one presented in The Matrix) is the one proposed by the Hyperion cantos by Dan Simmons.
Most people don't want 'on demand' employment, they want stability. Because of outsourcing and automation, the economy doesn't need as many workers anymore. Uber's business model is entirely dependent on this phenomenon.

Do you see this phenomenon going away anytime soon? My grandparents' generation worked at a single company for life. My parents switched companies maybe 3 times in their careers. I have worked for 9 companies in the last 12 years. The trend has been toward shorter and shorter stints, with less and less benefits. My daughter's generation probably won't remember a time where people spent years working for companies, and it will seem natural to string together a series of gigs and odd jobs.
I researched deep learning for nlp for a year and compiled this list of papers and articles about some of the most interesting topics.

https://github.com/andrewt3000/DL4NLP/blob/master/README.md
I'd mostly agree, and the packages you've written (ExRM and Distillery) make releases super easy to build, start, and stop.

The main benefit of Go, I think, is that it can cross-compile builds. Erlang and Elixir don't have any way to do that, so if you develop on Mac and deploy on Linux you'll need to build your release in a VM or on a build server running Linux.
Actually, Android IS Optimized – Gary Explains
Score of past submissions on hn/reddit is a good signal.

For example to get sorted submissions by domain on reddit: https://www.reddit.com/domain/blog.codinghorror.com/top/?sor...

Similarly for HN (but not sorted): https://news.ycombinator.com/from?site=codinghorror.com

Maybe someone can automate this?
Introverts are better at hide and seek.
A non-autoscaling deployment is quite easy to accomplish. Build releases with Distillery[1], and deploy them with Edeliver[2]. You get zero-downtime upgrades and rollbacks for free, as well as nearly automatic server clustering. I gave a talk about this last year in New York[3].

A deployment that can autoscale is harder to accomplish, but still not impossible. AFAICT, most people doing this are building releases with Distillery, wrapping those releases in a Docker image, then using the deployment and orchestration tools of their choice. Monica Hirst gave a talk about doing this with AWS CodeDeploy last year at Empire City Elixir as well[4].

[1] https://github.com/bitwalker/distillery

[2] https://github.com/boldpoker/edeliver

[3] https://www.youtube.com/watch?v=H686MDn4Lo8

[4] https://www.youtube.com/watch?v=mRspOj_sRgo
Switching SIMs means switching accounts, because phone numbers are usernames, right? Why would the application hide this by default?

Also, why would the key change be hidden by default when the phone number doesn't change? This is the actual mechanism described by Tobias Boelter in his report: https://tobi.rocks/2016/04/whats-app-retransmission-vulnerab...

Is this done to facilitate the "same SIM, lost local storage" scenario? Then the phone number is not only username but also a password and anybody able to steal the phone (or just the number) can impersonate a WhatsApp user. Is this the level of security these experts are protecting?
> Most people don't want 'on demand' employment, they want stability.

Why can't they have both? Broadly speaking, the forces of supply and demand are quite stable. Right now it's difficult to find jobs for 10 hours per week or 80 hours per week, if you happen to want one.

While I appreciate the historic role of unions, labor laws are unfortunately the reason that Uber has not made drivers W2 employees. It's sad that one of the most innovative and promising startups has to exert so much effort to claim that its employees shouldn't meet the W2 definition and thus shouldn't be eligible for the protections it affords. If the protections were more reasonable, Uber (and all startups) would be much less likely to try to circumvent them.
Side Hustle School Podcast: Short Episodes Show You How
Because the author wrote this as a fun exercise in what seems to be one of his favourite languages for testing a library he wrote (libpy)?

Comments today....
The first question is: why? What do you hope to gain?

Edit: are you looking to transition off of a stack in which which you have less expertise to a stack you have more expertise in, or embark on a rewrite in an effort to reduce technical debt?

Why Node and Angular in particular? Which version of Angular? Given how you describe your application, do you intend to use server-side rendering?

For a CRUD app with limited user interactions that seems to be a good fit for server-side rendering, Node and Angular don't particularly confer any unique strengths that would benefit an app of this nature.
How to Explain Deep Learning Using Chaos and Complexity
Hmm, I'm not sure that I would say NOA got a bum deal in the Switch presentation. Miyamoto and Aonuma were both present with Reggie in New York.

That they'd send their two biggest internal figures there does say that Nintendo does care somewhat about the US market, just not enough to redesign their devices to sell well in it. Insomuch as that happens, it seems to be accidental. ;)
OP. I was actually thinking something similar. Do you mean the ability to send out emails with app data rather than code and orchestrate them yourself?
Even if the regex library compiled the expression down to the very simplest state machine possible, it would still be at most as efficient as the first handwritten code in the article, handling one byte at a time. I'm fairly sure no regex engine in existence is able to detect "simple enough" regexes and optimize them into code that handles 64 or 128 bit blocks at a time.
Or he could just buy it. It's well worth the price.
FCC to be led by Ajit Pai, staunch opponent of consumer protection rules
Thanks very much. It turns out the first one can be called with multiple args in the "expr" slot, so it has to be

(defmacro defsmac (name params &rest expr)
`(defmacro ,name ,params
`,(cons 'progn (sublis (mapcar 'cons ',params
(list ,@params)) ', expr))))

but your code got me un-stuck.
Yes! I was mainly trying to find some proxy for quality that could be easily automated, so these would be a much better start.
> [1] MIT (Computer Science & Artificial Intelligence Laboratory) / Harvard University (HLS, Berkman Center for Internet & Society) bearing this philosophy out in 2014.

The notion is far older than that.
The soft is coded in Java (source code available on the linked website). As for hardware, I had no choice other than using the S-video output of a clinical ultrasound machine (Sonosite-S) through a frame grabber card (http://www.hauppauge.fr/site/products/data_hvr1975.html). The signal processing was done on a standard laptop from 2010.

The problem in using a clinical machine is that we had no access to the internals, and the video output was an interlaced PAL signal, which translated to a raw 100Hz 180*144 px numerical matrix, so the spatial definition could be much improved by using a better machine. And of course, getting access to the machine internals would allow the use of an optimal software solution, which we couldn't implement in our case.
The issue is that the client software being open source (rather than closed source) would do nothing to change the risk profile, so it's not worth bringing up.

If the client is open source: What the server is doing is irrelevant as long as the client is secure.

If the client is closed source: What the server is doing is irrelevant as long as the client is secure.

If the server can compromise the client, whether or not the client is open source does not matter.

People who believe that open source is a prerequisite for security are disregarding the entire discipline of reverse engineering which is a large chunk of software security expertise.
I do not agree that it is a pain in the ass. It's not more or less complex than many other languages. Also, the tooling has improved a lot in the recent months and edeliver + distillery work great, even without much previous experience.
There's no mention of the DAC used. Build this with an high quality DAC/Amp combo, even as a more expensive option, and you will sell millions.
It depends on where you live to some extent, but it goes like this where I live (I know cause it happened just like this).

A (in this case well-meaning good) kid calls the police saying your kid is suicidal.

The police and paramedics show-up to your house.

You and your kid say all is fine, SI has passed but paramedics say a LCSW needs to make the call, police agree.

They strap your kid to a stretcher and go to hospital.

There you learn that a social worker cannot make the call unless your kid is sure to not be in an altered state (like say high on drugs), so you need for a nurse to draw blood and wait for results.

A doctor looks at the test results showing no substances and calls for the LCSW.

A social worker shows-up speaking to you and your kid separately.

The social worker now needs to consult a psychologist and the doctor on call.

The doctor on call discharges your kid from the ER.

Clearly this can be abused, but I'm happy it's the way it is.
The One Counterintuitive Way to Grow Your Writing Business
Maciej, I have tremendous respect for you. What follows is a long post, so please don't feel like I am beating up on you - I am responding to a few things in this thread.

---

This wasn't negligent disinformation (post-revision of the usage of 'backdoor') on the part of the Guardian. The reaction to the information presented on the part of the public - to switch to SMS in significant numbers - was irrational.

That said, there is a productive issue raised by the Guardian that has been smoked out into the open, namely the revelation of two contradictory assumptions underlying the decision, as discussed by Moxie in the previous HN thread, to defend against state level snooping.

The rationale goes a bit like this:
1 - People change keys in the regular course of using Whatsapp. It therefore needs to accept that without impeding usability.

2 - Most users do not care about security enough to prefer one service to another for the Whatsapp market segment - Those users use Signal or other offerings.

3 - Whatsapp's lack of 'post consent' resending is intentional, and designed to prevent the server from knowing who is monitoring the status of their keys.

4 - As such, Whatsapp effectively defends against dragnet surveillance! As security minded individuals will note inappropriate key changes once a MITM attack begins, confer, and determine they have been compromised at scale.

The key flaw here is that 2 and 3 mean that for targeted surveillance, powerful attackers are unlikely to be uncovered while exfiltrating specific communications, and likely don't see very much reputational or legal risk to potentially triggering a key change event.

So people are vulnerable to feasible, targeted message exfiltration, contrary to what they may have believed when E2E was rolled out. That's newsworthy.

The fact that the security community is striking back makes me feel like they are circling the wagons now that the Guardian has caught them with their pants down - They should have been the ones raising these issues and providing the appropriate framing to protect the public.
I think a better question would be: How much math do I need to approach NLP in a way that enables me to be among the best?

PhD is just an academic title and as such it is neither a necessary nor a sufficient prerequisite to approach NLP from a mathematical angle.
Snap has had some weird issues in the past! and it does leave behind files every now and then (especially if you look into your .config folder I think).
Doesn't help that editorial standards in general have taken a nose dive lately, with people spreading random anonymous rumors as "news." The first thing I do when I read a story any more is look for what sources of information they draw upon and whether or not they can be corroborated by any means.

If your list of sources is full of anonymous rumors and things that can't be fact checked, or other stories with poor sourcing, I ignore the entire article and its conclusions. It's an interesting exercise for how you consume news (and especially "news") and I recommend it to everyone.

That's part of what makes reading purely technical discussions so much more enjoyable. We're not talking about random internet rumors, we talk about code and anyone with a compiler, debugger, etc. can verify things directly. There's much less room for BS, because someone can call you on it and prove you wrong in ways that everyone can verify independently.
Top programming languages to learn in 2017
A salesperson helps you find what you want, and buy it from them. These people are useful occasionally, and only when they are actually knowledgeable about the products.

An advertiser tries to make you want something that you were not previously interested in. These people are the bane of my existence. I don't go shopping unless I already want something, and whatever that may be is extremely unlikely to match the thing that the advertiser is trying to push that day.

Combining the two is a guaranteed-certain way to make me leave immediately, and avoid walking in to your store forevermore.
That's right! Sorry for the late reply.
Speaking as someone who had DVT/PE there was this stage before experiencing the PE (to the lungs) in which the calf muscle was red/swollen/cramp - it's this period of time in which case I felt like (and still feel like) a device of some type (either low cost ultrasound w/ software) could determine if a blood thinner or something else is needed - and probably save your life. It's evident that between sitting long periods (either at your desk programming or after long flights) that checking the flow is what needs to be done to prevent DVT/PE in the first place (minus other factors of course). I applaud this work because it does sound like a great effort towards something like that.
As I very vaguely recall the initial iteration(s) of the Windows version of Lotus 1-2-3 weren't great. The real killer though was probably Microsoft's bundling into Microsoft Office. That cemented the use of the entire suite of Microsoft products even when, at a given point in time, they may not have been best in category.

As I recall, Lotus made some purchases to try to follow the same strategy but it was too late by then.

There were also the attempts at fully integrated products like Symphony and Framework (Ashton Tate) but the loose coupling really won the mass market.
Why would a person worth billions work for someone else?
Did you also get to work on Lotus Improv? What are your thoughts on that in comparison to traditional spreadsheets?
Show HN: Quiz API – An api for MCQ
Thanks. Didn't know about that library. We do a lot of matrix operations but have so far found System.Numerics.Vectors covers our immediate use cases.
That is more in depth than the posted article. Doesn't mention three things I would think would be needed though..

Live updating of document section numbers/names and references back to them. Lots of named clauses in legal docs.

Workflow and electronic signatures.

Support for rendering as word docs or PDF files.
Properly sync your sublime text configurations between multiple computers