skysight-inc/HackerNews huggingface dataset:
Memories Pizza. Google it.
Fascinating article - I focused my magic learning as an escape artist magician at 13. I remember going down long dark water slides in handcuffs trying to "pick them" before I reached the bottom.
Uber has actively fought against allowing its drivers to unionize. The drivers' inability to organize and participate in strikes (esp. on such short notice) is in large part because of these actions.
Let me share a sanitized C++ memory corruption story.

We were testing our application the night before a big demo for our client. Ours was a C++ OpenGL application with several "phases" the user could enter from a "main menu" type screen. Our demo explored these phases in a pre-planned order. All went well, until somebody decided to try doing the demo in a slightly different order. Once the tester visited a certain phase of the application, the thing crashed and burned. The stack trace was littered with some incomprehensible container-implementation-detail junk. Debuggers weren't pointing at an obvious sign, other than that something was dereferencing a garbage pointer.

We noticed that if we went back to the original canned order of operations (this was a demo, after all), the application didn't crash. But this still made us nervous. We found that we could sometimes swap a few phases early in the application's run with no ill effect.

Here's part of the class responsible for some of the higher layers of the stack trace, from one of the lower level libraries we build all of our applications on (this is important because, for hysterical raisins, we can't source-step debug those libraries in production). Can you spot the bug?

#include <map>
#include <string>
#include <vector>

struct Message;

class MessageCentral {
public:
void HandleMessages() {
// messages were collected somewhere and organized by their queue.
const std::vector<std::string> queues_with_new_messages;
for (const std::string &queue : queues_with_new_messages) {
const std::vector<Message> msgs; // = messages_for_queue(queue);
const auto &handlers = handlers_[queue];
for (auto &h : handlers) {
for (const auto &msg : msgs) {
h(msg);
}
}
}
}
void RegisterMessageHandler(const std::string &queue_name, std::function<void(Message)> handler) {
handlers_[queue_name].push_back(handler);
}
private:
std::map<std::string, std::vector<std::function<void(Message)>>> handlers_;
};

(Note: this is probably way easier to figure out with all of the other code needed to implement MessageCentral taken out! It took us three engineers working for about 2.5-3 hours each, with lots and lots of gdb and printf debugging, to nail this one down. This particular crash would have been impossible in Rust, because the compiler would have rejected the Rust equivalent of the above C++ code.)

(oh, by the way, we couldn't use runtime memory sanitizer tools like ASan or valgrind because the application linked to CEF. In retrospect, we could have dropped in a fake CEF that didn't interfere with ASan or valgrind, but that would have required build resources we didn't have available in the frenzied night before a big demo.)
Unbelievable, this fucking modern UI designs. How can you publish a page, where the back button is broken, and just call it a day.

It is freaking text and some images. We know how to do that, there is no magic, please do not use technology that breaks basic expectations of users.
Please strive to post more substantive comments. Petty tiresome digs at editors are tiresome.
Qué Redes Sociales Existen Y Para Qué Sirven – Listado 2016
It's not apparent from the headline, but this is an examination of why Mozilla Persona failed.

Most of the points raised here (e.g. needing third-party buy-in, popup UI built into browser, endpoint fragmentation, problems with communicating the use-case to users) have been overcome and solved by U2F, a technically distinct effort (for two-factor authentication) but one that users might perceive as having some overlap. So perhaps the question to ask is, what sorts of factors helped U2F that didn't/couldn't help Persona?
Thank you for the tips. :)

Actually the app is online since 1 month. It was necessary to integrate with AWS, test everything in prod and let people play with the product. I deploy new commits every day.

When I said "I'm polishing for the release", I was referring to:

- make a minimal website to present the product (right now I don't even have a white page but a "Could not resolve host")

- finish to integrate the payment system

- fix some bugs I don't want to have for the public release
My favourite modern day example: http://www.smithsonianmag.com/smart-news/this-japanese-shrin...
I'm glad Mozilla provides EME-free version of Firefox: https://ftp.mozilla.org/pub/firefox/releases/51.0/
Marketing yourself as a developer can just be blogging, creating videos/sreencaptures of you explaining some thing etc. You don't have to sell anything, just convince people that you're worth employing.

Just the other day my boss discussed some hiring decisions with me, and he said "the guy is too expensive. If he had a blog or an active github profile, I could justify 10% more" (above what we'd usually pay for the position).

So, having a public blog with some contents and visitors can increase your pay as a developer by 10% easily. If you're not comfortable with traditional marketing, that's all you need to do.

And if you're lucky, you can also sell some courses on pluralsight/udemy/whatever at some point, and make some extra cash on the side.
Apparently you have never sold to a fortune 500? Many require bug fixes only of your app for X years. They don't care about new versions. Nothing about faith but about their priority. Using the latest and greatest is not their priority.
There is. I just doubt it matters a lot in terms of NeverAgain pledge if the organizations they're concerned about still likely see the traffic anyway. Real concern should go further to make sure that's impossible with right choice of software and services like other organizations (esp Tor and EFF) promote. It all has to be encrypted, anonymized, and immune to FISA orders to be trusted. Leads to rational conclusion to not trust it.

Like I said, I'm currently evaluating better options that preserve Gmail's benefits without the surveillance aspects. I've seen a lot of inexpensive, private products (including email) disappear over time with trouble for their users. The recent DDOS attacks also factor into my decision where only the groups with the biggest pipes can take it. Hence, using one such provider as a temporary storage/relay for overall email process. I'm curious what providers you know of have long track record for great uptime, great privacy policies, low cost, and mitigate DDOS attacks we've seen recently. No startups because they disappear all the time.
TIL that Widevine DRM is the reason my HDMI monitor flashes whenever I start or stop viewing something on Netflix or Amazon Video.

Welp.
You can often get your employer to foot the bill too.
> this is not happening as much in Asia where labor and regulatory costs are lower.

Yet

It's still going to happen, it just isn't happening as fast. Even if you are paying a person $2 a day, a machine that costs $1 a day, and doesn't need breaks is cheaper.
Immigrants that I know about:

0 - I'm an immigrant.

1, 1 - Both my parents are immigrants.

4 - One of my great-great grand parents was an immigrant.

10-12+? - One of grand parents descended from immigrants in 17th century from England.
Does someone know why these systems - Stratus, Tandem/HP NonStop, etc. - appear to be relics of the past?

I can see how Google is better off spending money on software engineers than on hardware (thus, fault-tolerant distributed systems); but there's lots of systems that don't need Google-scale computer power, nor Google-style ultra-low-cost-per-operation hardware, but that really need to stay up - utilities, banks, every system at the center of a big enterprise.

Is the issue that modern software just isn't reliable enough to make hardware failures an important part of the downtime? Or is it just that systems like https://kb.vmware.com/selfservice/microsites/search.do?langu... are cheaper today? (I guess those actually work, right? The level of complexity involved is frightening...)
If you've scrolled too far, the HN page won't show up anymore even if you hold the back button.
>You said you weren't from America, so I can understand if most of your knowledge about America comes from the news, rather than a view of the facts over a timeframe longer than last week.

Surely that's a low blow or as Watson might phrase it, a wang bang and you know it.

I already said I'm not an American. I do however support Trump. I read many of his books right out of high school and I'm re-reading The Art of the deal.

I see a global shift to the right wing going forward. I mean can you believe that in France the Socialist party stands no chance because even the French, yes the French cannot stand what the left has done.

I'm glad people from all races have woken up and are saying no to unrestricted immigration, no to excessive taxes and regulation, no to welfare states, and no to egalitarianism. Luckily, this transcends racism. It is about reason as Ayn Rand would put it.
There isn't a technical reason it shouldn't be able to be implemented. Mostly it's a matter of getting the UI preference hooked up; it looks like they've already done something similar with the Flash plugin for users which wish to disable Flash, and this is a similar case.

The reality of the Flash situation is quite messy, with a ton of websites relying on nonstandard behavior and checks to see if Flash is even installed, and Google seems to have missed the use case for disabling the plugin entirely, rather than just blocking it. This seems like a similar oversight.

I'm torn here, as I see what Google is trying to accomplish with their settings spread. Mostly, the browser has chosen quite sensible defaults for the bulk of its users that needs the web to JustWork(tm) and they're hesitant to add extra checkboxes to avoid confusing folks. But with the politically charged nature of DRM, as well as the technical issues presented here (HDMI / HDCP is notoriously finnicky and the user should have more control over when it's enabled) I think a checkbox to disable the plugin entirely, similar to Flash, is the best solution.
"but the majority of the harms actually result from our treatment of the issue, not the issue itself."

Total nonsense.

Please tell me what 'harms' come from heroin treatments?

The primary 'treatment' for heroin addiction is to simply 'not do heroin'.

Stop doing it.

Ultimately, that's the only way out.

" I think we simply have to accept that people are going to want to use these substances, and make it as safe as possible for them to do so."

No - again false. Law of Supply and Demand: if we make it hard enough to get, and raise the barrier of supply, and also try to push back demand by teaching kids not to use it - then it becomes rare.

Enabling users lowers the 'difficulty of access', like lowering the cost curve - and creates more usage.

Anyhow who is caught in public, high on heroin, can be asked to go to a dry out clinic where they won't have access to it. They have to go through withdrawal.
Back in the 80s, a friend of mine had a text-to-speech program running on a Z80 machine (I think), which sounded a lot like this.
> Worked for Microsoft for Decades,

Even at their most dominant, Microsoft kept adding things customers wanted. AD was a big leap forward for customers, when Microsoft could have rested on the domain model. SQL Server kept adding capabilities, Exchange, etc.
Extensive discussion: https://news.ycombinator.com/item?id=13482082
Well, sometimes the lack of stability is purposeful - new features are added, old features are deprecated, etc. How do you deal with that?
He pre-breathes 100% oxygen for up to 30 minutes prior to the breathhold:
https://en.wikipedia.org/wiki/Static_apnea#With_pure_oxygen

World record without this trick is 11 min 54.
This + moving SSL certificate details dialog hidden away into devtools + no way to disable NaCl + chrome 56 auto-re-enabling flash and widevine on every launch (which shows a click-to-enable-flash everywhere chrome55 would just use a html5 video player) + the upcoming background tab throttling means I'll be seriously reconsidering firefox or safari before the next Chrome release :-/
Thanks! If you're going to bring up Memories Pizza, I think it's fair to compare this to Pizzagate.

https://en.wikipedia.org/wiki/Pizzagate_conspiracy_theory

The idea that we have no further recourse other than total war is very troubling. I don't think a lot of people are willing to give up trying to work together quite yet.
> They burned all bridges with engineers long ago

But those engineers retire, new ones without memory of Oracle's past take their place, and all will be forgotten.

Remember how Microsoft was the company many engineers hated when the Halloween Documents [1] came out? Yet, they have managed to patch up that relationship since 1998.

[1]: https://en.wikipedia.org/wiki/Halloween_documents
On-screen. Very cool, thanks for the hint - the problem is that I don't want that keyboard for all the other apps. Can I pin a specific keyboard to a specific app (i.e. Hacker's keyboard to sshdroid + XSDL, and Google Keyboard to the rest)?
So what? I don't think its entirely fair to criticise Uber for not participating in the strike when they never said they would. Busses and other transport operators still ran.

Sure, you can prefer that they did strike as well, but theres certainly no obligation for them to and the reaction was too much over the top.
Lingscars
re: EDW - Snowflake Computing? AWS RedShift? Google BigQuery?

https://gigaom.com/report/sector-roadmap-cloud-analytic-data...
The Al-Jazeera article is reasonably balanced for Arab media though I would advise people reading it to understand that it does present the Palestinian viewpoint. Listen to both sides and make up your own mind.

Some background on Silwan/Shiloach: https://en.wikipedia.org/wiki/Silwan

By the way, putting aside the conflict, if you get a chance to go visit the tunnel ( https://en.wikipedia.org/wiki/Siloam_tunnel ) I highly recommend it. It's an amazing feat of engineering going back thousands of years.
> From a foreigner's standpoint, that isn't notable at all.

It's a massive difference, and makes a massive difference in the lives of my foreign friends.

There are people who have been living here for decades affected by this order. They have their entire lives here.

There's a massive difference between preventing someone from establishing a new life here and destroying the life they've built here over years.
I think this falls into the "blind leading the blind" category. When 37signals tells people what to do there is self-interest involved, but they also have real insights to share. When people are in the business of giving advice be very skeptical.
Your suggestions are ideal in terms of training and compatibility with society. I just don't think that
they are practical (in the US) right now.

The dysfunctional approach between police and
citizens seems to be more manageable and cheaper
and makes candidates more numerous. My cynicism is
showing though.
Very bookmarked!
An interesting opinion; so Trump would be off a "bad start" in order to shed a better light on whatever does next.
What XSLT could or couldn't do was already discussed back in 1999 [1]. XSLT was then proven Turing-complete in 2001 [2].

As recently as 2008 (ahem), I implemented a website transforming XML into HTML/DOM using xsl-stylesheet instructions and it worked pretty well on IE6 and FF back then.

But XSLT's Turing-completeness, for me, kind of spelled the death for in-browser XSLT, as XSLT was becoming pointless when you already have JavaScript in the stack.

I don't even know if xsl-stylesheet still works in browsers (supposedly not when using HTML5). But XPath in the browser certainly isn't dead ([3]).

[1]: http://www.biglist.com/lists/lists.mulberrytech.com/xsl-list...

[2]: http://www.unidex.com/turing/utm.htm

[3]: http://www.xmlprague.cz/day2-2017/
yes! thankyou - all I got when I went to that link was a fuzzy image and a great white circle.
Principles are timeless.

It is sad you ethics and morality have a experation date, and the quote did not replace my personal opinion as I agree 100% with the quote, that is why I quoted it.

One does not have to reinvent the wheel every time an idea needs to be rebutted, People use quotes as a shortcut to highlight their personal opinions many times in more articulate ways then they could themselves or simply to save time which is what I have done here.

i am not going to write out a 5000 word essay on the problems with government in a HN comment that about 3 people will read
I tried to explain just this to a friend who is a chronic conspiracy theorist. My suggestion to him was that his brain was detecting signal even where there was none, and seeing patterns in random events - which everyone is prone to do from time to time - though in his case the sensitivity is dialled way, way up.
Houdini performed at the Paramount theater in downtown Austin over 100 years ago. If you visit that beautifully restored theater today for any performance (I've seen Sheryl Crow and Penn and Teller there amongst others), look for a hole in the decorated ceiling on the left side in the front.
It is claimed that Houdini put it there for a levitation illusion.
I am very concerned that feature toggles add unnecessary complexity to the code.

With Lisp Macros, for example, that would actually be quite elegant but in a language like JavaScript, we'd end up with a bunch of if'a here and there, wouldn't we? One might simplify it a bit with a different architecture, though.
So US should probably not take any immigrants, because 99 per cent is cheap worker. You are probably the cheap labor compared to some of these h1b googler.
Robert Shiller (who authored this review) has an excellent Coursera course called "Financial Markets" [0]. It gives a broad overview of many important facets of the economy.

[0] https://www.coursera.org/learn/financial-markets
No, you just need to have some compensating control. For example: there is a very limited number of ways that I can get files to the ec2, I can audit how this happens and also there is no browser running there.

So to put it another way: can you set and enforce a policy as to how files get to your aws instance, set and enforce a policy as to how (that is with what programs) those files are accessed. And that there is a way to audit that such a policy is in place and enforced.

As an example Azure its own self is ISO 27001 (and a metric ton of other certs) and they don't run AV on their stuff. But you can be sure that they can tell you everything about each of the components that make up Azure itself up to the hypervisor level. I would presume that the same thing is true for AWS.

So now you put your stuff on top of this base service. If you can assure the auditors that you have somehow controlled that particular risk, then you won't need AV.

Also, of the 114 controls in ISO 27001, not all of the controls are relevant for the scope that you choose. You could say that "since we have total control of the character and nature files that land on each of our VMs, we don't need to have that control". Often you may need only 50 of the controls.

The thing about ISO 27001 is about understanding the risk that your systems in scope are subject to (e.g., loss of PCI-protected data, fire, downtime), building policies and procedures addressing those risks, and repeatedly auditing that those policies and procedures are in place and adjusting them when they are not.

Pro-Tip: don't take the approach of telling the auditors that AV is a fundamental risk. That conversation is not likely to be productive. Just demonstrate your control over the environment.

ISO 27001 is not that far removed from common-sense security.
Worked at a big co switching off tandem. Went from giant tandem machine that cost 2 million dollars per year to rent to about 6 off the shelf Dell servers for 6k each one time fee. Performance at the end was about 3x the old system. Was a glorified billing system. If one node went down, who cares, the other 5 did the job.

Most people don't value 99.999 vs 99.9999 reliability as worth millions of dollars per system per year. Space shuttles may disagree, but not billing platforms.
> It affects green card holders, who are legally allowed to travel to the US.

This is understating the case. Green card holders aren't just "allowed to travel to the US" - that's true of any visa holder. Green card holders live in the US and aren't allowed to come home.
That's a skillful evasion of facts you just executed, going from your previous claim that the protest occurred before the inauguration to just that it was planned before then. Well played.

Your dubious claim about the motivations of large groups of individuals is not at all "overwhelmingly obvious."

Get over yourself.
I always figured you could get the vast majority of XSLT's benefits without its (numerous) drawbacks by implementing the core match/transform idea in an actual general-purpose expression-oriented language like Haskell or Clojure or Ruby or whatever.
ACLU and ACLUF are different organizations. ACLU can lobby and donate to politicians, which is what makes them not tax deductible. ACLUF puts restrictions on where the money can go but has tax deductible donations.
How is it unrelated? The comment I was replying to said, "How about other people that were not part of the protest and were trying to get home/get to the airport?" Implying that Uber shouldn't be condemned for scabbing and helping them get to the airport because the protests were disruptive and they were just providing a public service by making them less disruptive.
Yes -- for a career change.

However: I got a second B.Sc. in Computer Science (first Bachelor's was in the arts), and that worked just as well, for a career change, and at less cost.

Check out your options. I found that getting a B.Sc. in CS was very doable, and would take less time the Master's.

It all depends on your situation. For me, I only had to take CS classes (and some math/stats). Everything I did the first time through transferred. I'm guessing your situation may be similar. If in doubt, you can always email the college and ask for specifics. They're selling a product (education), and generally very willing to help.
I was asked to look at something on a Debian box the other day and logged in to discover over 2 years have passed since a reboot. A bit dangerous, but also wonderful to think about all that data flowing through without issue.
"That data has to be normalized for the surge in fentanyl use"

I agree.

"I don't think anybody claims that safe injecting alone can prevent all opioid deaths,"

'Safe injecting' is not saving any lives and is not doing any 'harm reduction' is my point.

The only evidence provided that 'it's working' is the sites data where they say 'we prevented x number of ODs' - but this is not quite valid - just because they think they prevented an OD, does not mean they did. Someone who takes too much on the street can still get an ambulance and emergency services. Someone on the street who does 'way too much' is gong to die one way or another.

There's no evidence that the sites actually 'get more people into programs' than otherwise.

I believe that more directly interventionist programs might work: if you are caught, high on heroin in public - then you don't go to jail, but you go to a facility of sorts. This facility is basically a 'dry out hotel'. The only thing about this facility is you have zero access to heroin - you have to go through withdrawal and be clean for 30 day.

Withdrawal is the unavoidable 'first step' to getting off heroin. There is absolutely no other way, and it must be done.

Then programs to help people stay off of it.