skysight-inc/HackerNews huggingface dataset:
All the complaints rest on the Immigration and Nationalization Bill of 1965 (https://en.wikipedia.org/wiki/Immigration_and_Nationality_Ac...), which from a high level makes it pretty clear that you cannot discriminate by nation of origin/birth.
Got the Skull Canyon one: https://www.amazon.com/gp/aw/d/B01DJ9XS52/ref=ox_sc_act_imag...
Hey,

Currently, upgrading an existing GKE cluster from Kubernetes version 1.4.x to 1.5.x is available only through the CLI (gcloud command), and not through the web console. Does anybody know what is the reason for that?

I remember upgrading from 1.3.x to 1.4.x was easier through the web UI. It just makes me wonder and worry that it may be not safe enough...

Maybe @TheIronYuppie or other insiders may have the answer. ;)

Thanks,
Show HN: Find PRs updated after the review
that's a great question. please post here when you find the answer!
I've found that even QA people casually write "X feature doesn't work" in bug reports, when they could give 10x more information, like: "the page stalls and shows the spinner continuously", "the button is grayed out and I can't click it", "the output is garbage letters", "the result is not the expected value", etc.
CBE only applies to specific courses. Not upper level.

" For students interested in gaining credit for more advanced (upper division) courses, most of our academic departments offer a limited number of exams in their academic area. Interested students should contact the individual departments and learn about the availability of tests and procedures for being tested. Once the academic department has approved a request for a departmental examination, the student may be referred to the Counseling Center to complete forms."

For CBE we would just give the students the tests in CS100. It doesn't work the same for upper.

Another problem is they want you to parrot back some things that they say. For instance in our OS class we had to learn about Solaris and memorize some commands for Solaris. We had to learn things like what is "JCL". These were not for the operating systems side. This was because the professor did that at his place of work before coming to NJIT. Naturally since he did it, it has to be good for all of us.

The courses are thrown together so CBE is near impossible. I'd say you need to know less about how something actually works and more about what the professor thinks is important.
Ask HN: What would be requirements for the ideal SSO implementation?
There are currently Facebook SSO, Google+ SSO, and others. You can choose to "Sign in with Facebook" for example. Skipping essentially the email verification step during registration on a website.

But this then links your social media profile with whatever website you are using, which may not be ideal. Often they superfluously gain access to your contacts, likes, or other personal information.

Yet SSO is still popular so how ca we build a better one, what would a "good" SSO solution look like?

Likely all you want is a centralized place where password resets can be performed. Account management such as username, would be handled by the application you are accessing.

In order to prevent applications from harvesting your email address and password the login form would be loaded on a separate page. With your application's service key as a query parameter. Where a redirect back to the application is performed upon successful login.

The host application would need to query an API upon loading of that url to ensure you are logged in, and if so thus perhaps setting a cookie for the user? So session management would also be performed at that point by the application.

I suppose the email address of the user would optionally be offered to the application upon successful login so that things such as email notifications would be possible. Trying to get a grasp of how simple SSO could be and the minimum possible set of implementation details. No flash or dazzle, a single centralized account and authentication.

I've performed some searching online about this topic but it's bogged down with countless articles about how to implement one of the existing solutions.

This is intended to be a thought exercise and not directly a call for yet another SSO implementation (although maybe it could be).

https://xkcd.com/927/
Ah so it's only ok for the ignorant to stay in academia. Sounds reasonable. Those dolts shouldn't be expected of anything anyway.
Usually, you would limit the contactless transactions and ask for a PIN for higher amounts. E.g. you could ride the subway trying to scan people's cards, but if you have the skills to do that, you'd probably be better off doing something else.
Just because a lot of people "felt" something doesn't make it true.
Or less with some tools: https://wiki.postgresql.org/wiki/Oracle_to_Postgres_Conversi...
Two issues:

Regarding the specific cases currently making the news, I believe there's a competing argument that people should have the assurance that their personal relation with the government is governed by a set of predictable rules and not subject to sudden and dramatic changes. That would include that any administration is in some way bound by the commitments of their predecessors. To use a less controversial example: If I painted the walls in the white house, finishing 10 minutes before Trump was sworn in, should the new administration be required to pay me?

Secondly, there are limits to the power of the majority, even in a democracy: "Democracy isn't two wolves and a sheep voting on what's for dinner". These limits are defined by the constitution. The bill of rights for individual rights, and much of the rest for the mechanisms of government. That's why Trump won't be God-Emperor His Trumpitrump the First, even though he could probably get the electoral college votes for it.

That may seem somewhat unconstitutional, and it requires a definition of "democracy" that is far more complicated than majority-rule, which is sometimes called "the tyranny of the majority".
It fits the "trust me I'm lying" criteria for a planted story.
I just started porting an application using corrode on a C library at work. This was more of a POC, to show the team. Based on that, I think this book is missing a section on incremental conversion.

You don't want to convert entire applications at once, you want to do it a source file or module at a time. This means incorporating the Rust toolchain into the build of the C/C++ project Makefile, or etc., system.

It is not difficult, and will increase confidence in the final product. This can even be used to test incremental conversions in production, rather than having any doubt about the entire conversion.

This is an awesome start for a great manual on the area. I'm very inspired by the experience I had in doing this, and hope that we do more.
What help are refugees getting from AirBnB? The only details are:

"Stayed tuned for more info"
The point is that the executive is constrained within the laws passed by Congress, and there is a law (https://en.wikipedia.org/wiki/Immigration_and_Nationality_Ac...) that clearly makes this not ok to do.

If the supreme court starts upholding executive orders over standing law, I'd be terrified.
In retrospect, Toronto might have been the better choice. He didn't mention Waterloo (Canada), but that would be up there, too.
Apples and oranges? Let's do some math. Refugees in 2015: 69,920. Asylum in 2015: 26,124. That gives you a total of 1,147,075... yes still less then illegal immiration. Adding naturalization (730,259) gives you 1,877,334, except naturalization is irrelevant in this because it includes people born outside of the states to American citizens & includes people that still live outside of the country (think children of military or expats) or people who have been permanent resident (living in the US already) for 3 years. Please do tell me all the other subset of legal immigrants. Maybe you're including the whopping 85,000 H1B visas or other temporary work visas for NON-immigrants?

Feel free to continue to ignoring evidence.
Startup humor
Or maybe they're trying to get more community support for it?
The original is here: https://github.com/Mhyles/DonaldTrumpStockMonitor. This submission is pointing to an (outdated) fork.
It's interesting how the autonomous car evolution is to a very large extent a result from the private sector. Companies could have been asking the federal government to install sensors in all stop signs, and under the street to support this evolution. Rather, they look at the cities as they are and build something that works with it. Sometimes I wonder if government should take a more active role and ease the adoption by adapting cities to autonomus vehicle (rather than the other way around as it is today).
Regarding the accusation of FUD regarding the security of new namespaces:

https://lwn.net/Articles/671641/
https://lwn.net/Articles/543273/

This blurb from the first article is apt:

All of the myriad interactions between various kernel
subsystems (capabilities, namespaces, security modules,
filesystems, /proc, and so on), especially given the "no
regressions for user space" policy, make these kinds of bugs
pretty much inevitable. One could imagine tossing out a
bunch of currently expected behavior to simplify the
complexity of those interactions, but that is not going to
happen, so these types of problems will crop up from time to
time.

That succinctly explains the crux of the issue. More flexible namespacing solutions (which is what containers are--a collection of advanced namespacing features) is fundamentally at odds with what's needed for improved security--simpler code and simpler semantics.

Containers provide lots of flexibility for users and developers. And with that flexibility you can devise some interesting and clever privilege separation solutions. But they're fundamentally relying on a foundation that was made significantly more complex and more bug-prone for the sake of providing that flexibility.

That flexibility exists--it must exist--for the benefit of solving system administration and provisioning chores. And that's why I argue containers aren't fundamentally a security solution, they're a DevOps solution. A powerful and effective one. But it's simply not in the same league as a chroot jail, pledge, seccomp, or Capsicum. None of those things provide any additional privileges nor design flexibility. They're _strictly_ mechanisms for taking away privilege and flexibility. And they're strictly intended to reduce the code interface surface between user processes on the one hand, and kernel and privileged processes on the other. That's their sole function, which means they can, at least theoretically, be kept simple and easy to maintain in the kernel.

EDIT: Technically Capsicum does provide new design flexibility with the introduction of file descriptors as handles to processes. I don't think any _stock_ system implements all of Capsicum, but both Linux and FreeBSD now support process descriptors. Lack of process descriptors was always a huge oversight in the Unix API model, and it's ridiculous it took so long to get them, and still only for Linux and FreeBSD at this point.
Maven in a Google Style Monorepo
Trunk-Based Development
People gave Google a lot of shit for their supposedly naive or hypocritical mantra of "don't be evil". Turns out it's genuine and not so naive after all.

I strongly disagree. Google, like other companies, is very opportunistic and 100% calculating. Standing up for refugees and against Trump is a no-brainer move in Silicon Valley culture, especially when 1000s of others are doing the same and the majority of the media is on your side. There's only upside and no downside for Google and its employees in doing so.

Sergey could have easily used his connections to get a 1:1 conversation with the president. That would have been 1000x more effective than joining a demo at SFO. He still chose the latter because he knew the effect it would have on social media.

Google could use their resources and power to help with other causes and problems whose negative footprint on American society outclasses the refugee problem by orders of magnitude. But why waste any resources on that, since it's not a hot topic in the media and Google's hiring plans aren't affected? Nothing to gain there...

Meanwhile they're getting close and cuddly with Trump's party to secure their political backing [1].

I'm not pro-Trump, in fact I think his refugee ban is beyond crazy, however I'm very deeply suspicious of people / organizations who tout themselves as the good guys ("don't be evil!") and then only stick their head out of their comfort zone when the cause is no-risk and it's ensured that the world is watching.

[1] https://news.ycombinator.com/item?id=13502627
In all but the most pedantic of senses, yes, it is bricked.

Even if there were an alternative OS, I'd say it's still pretty well bricked, since installing alternative OSes is outside the skill level and/or comfort zone of most consumers.
You were complaining about having to take non-CS classes, many of which sounded like lower level general education classes, so I offered a potential solution: weed out some of those classes with CLEP exams.

I didn't see that your problem was related to your upper level CS coursework. If you aren't even interested in that, then you really should consider taking a break from school before you burn out. Maybe become a TripleByte candidate or something and get a software engineering job at a startup, or look for a local business that needs someone skilled to help them out.
Maybe. It's also so crucial to so many careers that you need to be in a pretty special place to pull that off constantly, along with all the money it takes to entertain yourself sans internet.
Easy. Just prop it open.
What exactly is "good faith" is hard to tell here, so no, I don't want to distinguish between something which only sounds good and something which does not even pretend to sound good. Is it making good to people of another country? Or making good just to people of America and let the world burn in fire? Or making good for the party agenda, so that some politicians will be reelected in next cycle?

How did Obama make that decision not to follow his promise on crossing "red line" by Assad? What were the pros and cons for that decision? How can we be sure that it were not purely U.S. internal politics arguments for giving up? Questions like that do not allow us to forgive mistakes: they force us to hold the governments to account.
Rubbish.

Conversate with whom exactly? Trump? Bannon? When have these idiots ever given any indication that they're willing to listen to someone who contradicts them? Are there any examples of them actually having listened to someone, taken their advice, and done it all with an even temper? And how exactly is TK "protesting from within" the system? What concrete steps is he likely to take over the next four years that will impact the opinions of the petulant child Americans are forced to call their president?

It's a mistake to not think of this current presidency as unprecedented in it's potential for terror. The path of civilized conduct works with people who are willing to meet you halfway by behaving in a civil manner themselves. Trump just isn't.

Also, I'm more than a little tired of SV CEOs walking around with this transparent facade of integrity and paying lip service to doing the right thign. They care about one thing, and one thing only: protecting their company at all cost, country be damned. It's no use them saying "If we don't do it, someone else will" because that isn't enough of an exoneration of their own conduct. They aren't machines designed with the single purpose of working for a company. They are humans who are expected to have a moral core.
This sounds fascinating but I have no idea what it means. Could you point me someplace where I could learn more about it?
Doomsday Clock is now 2.5 minutes to midnight
Yeah, my new boss laughed when we complained about Oracle. He adamantly insists it was the best database in the world. He also knows only one database.
Importance of Internet of Things
No way, this is not the answer. Should the CEO of a bank be prosecuted every time one of their branches is robbed because they didn't hire enough security guards?
When managers start a new project, they don't want to think twice. They want to grab the ass of someone else in the company who's already done the same thing and leverage their expertise to reduce the cost of the project.

My company is still stuck using CVS because when a new project starts up, they want to use the people who are already locked into the old tech and so they end up going with what people already know. Even teams that started with git have downgraded to CVS once the managers starting looking for ways reuse resources.
Fasting: What Popular Beliefs Were (Not) True for Me
> Also this guy's code is crazy slow compared to what you'd write in the real world, but hey, it is a tutorial.

I read pandaman's comment to mean this, actually. Not that nobody wrote their own handcrafted rasterizer/poly engine whatnots.

It's that the article is both not showing what GPU's do internally, but it also doesn't quite show what a reasonable "artisanal" poly rasterizer gfx engine would look like for a system with no GPU. On the one hand, sure, it's a tutorial, so it just shows an overview of the steps a proper engine would need to complete, but it's done with an almost pseudocode-level of inefficiency. Sadly (just a little), it'll run fast enough on a modern computer that I am sure that some people will just take this example and use it as the core of an engine to build something crazy cool around :) And frankly, more power to them. Analogously if someone had told me 17 years ago that Javascript would one day associated with the term "web assembly", that it would be used as a low-level target for compilers, and for many purposes the first choice in application (even graphical) development ... I never expected the future to be anything less than weirder than I could possibly imagine, so let's just write code! hahaha :-)

(actually edited that from 15 to 17 years ago, because I remember in 2002 there were already some possible inklings of hints of what could be done in JS, XHR was on the glimpse of becoming mainstream accessible, the possibilities were all but not quite crystallised)
The original theories of free speech included basically no censorship on the theory that the marketplace of ideas (along with backlash for non-anonymous awful statements) would lead us in the direction of the truth, or at least stability.

It appears that the anonymity of the Internet combined with the echo chamber effect has pretty much completely ruined that.
> It's very difficult to use the concept
> of "virtue signaling" as a rhetorical
> weapon without conceding a whole lot
> of personal credibility.

It's telling that you drop three paragraphs in response to a throwaway comment. You're seizing the opportunity to take the weakest example of a 'virtue-signalling' comment so you can argue against it as if it is an exemplar.

You're unfortunately wrong. Virtue signalling is literally about credibility [0].

And there is nothing new under the sun here. It's been seen as virtuous for a long time to do good deeds with no ulterior motives. To give money to charity but not to proclaim to everybody that you are charitable, etc.

The reality is that people who have low credibility are those that feel they need to stop others from looking twice at anything. While it might not exist here, fraud is a real problem - and we need to be able to name it when we see it.

___

[0] Admittedly the Right have misunderstood and abused the concept even worse than you have: https://news.ycombinator.com/item?id=13514437
Playing with time-series data and MongoDB
Those things help but it's still possible to return a pointer to an inner part of an allocation(say an element in a vector) and then have the vector go out of scope.

Rust is much more robust about catching those cases and verifying that you don't have objects outliving their references.
How to hack your biology and be in the zone every single day [video] (2014)
Using PlantUML.
http://plantuml.com/
Show HN: Wozle – a simple social word game for iOS
Hello guys,

I create a simple social word game called Wozle (https://wozle.net), it has been a project that was meant to be completed 5 years ago, but I never had the motivation and the confidence to release it. For this reason I decided to put a goal for the 2017 and release it. It's pretty simple, it was inspired by a game of a former colleague called "Hello Words".

The reasons behind releasing the game are essentially 2:

* I have a similar puzzle game in mind but for maths, which I think has a great potential, but I feel uncomfortable to invest time and money on it without knowing the space.
* I wanted to understand if the social gaming space is viable for a single dev (or small) team with limited budget or if it's a market that has too much competition for a newcomers.

I am not expecting to be the next "Ruzzle", "Words With Friends" or "Letterpress". I hope to perform averagely and at least cover the costs of the server, in the meantime learning on my mistakes and sharing what I am doing hoping people can also learn something interesting.

I wrote the first post with more details about the project:
https://sideeffects.xyz/2017/a-journey-into-the-mobile-indie-games-space-part-1/

If you have any recommendation or question I would be happy to listen/reply.
Me and three upvotes in however many minutes. Plus all the old ladies at the supermarket who can enter a product code into the terminal without even looking at the screen, because the rules for what element is focused are so simple.
The cost of false negatives in this area is so painfully high too.
1. Minor 'typo': Mix and match charts types and maps to tell beautiful data with your data.

2. I'm not sure what 'story' means in this context. While it sounds good, it makes me uncertain about what Vizbi is and the landing page doesn't really help pin it down. For example 'with or without code' doesn't clarify it.

3. Don't misunderstand me, I love creative prose and the turn of the phrase. But when I look at a tool, I want to know what it does and why I should care.

4. I hit the Vizbi page and the headline is two statements which are not clear about what it does and why I should care. Most of my screen is wasted on a picture of hands and a laptop on a desk: it's completely irrelevant to my interests.

5. Don't misunderstand me, I love graphic design. But here it seems to exist for it's own sake. Just tell me about the product.

6. Since Vizbi tells stories, tell me the story with Vizbi...this is showing me what it does. http://weblog.raganwald.com/2008/05/show-dont-tell.html

Good luck.
I think the bigger issues is that these kinds of DIY maker tools are marketed as in-home. You wouldn't put a band saw in your spare bedroom-why do people use these kinds of tools in a normal house/apartment? Though two engineers living in Berkeley are probably not going to have a garage, alas.
Surfingkeys – A better alternative for vimium or cVim
What to do when you don't know what to do next for your business
It's like a recovering alcoholic taking a job at a liquor store. Not a good plan.