skysight-inc/HackerNews huggingface dataset:
Very few websites, maybe 1 out of 100, most offenders are just rendering content in the browser for some reason. Although even bigger offenders are not individuals, but companies, outright blocking access to client's websites without javascript. So far it's mostly Cloudflare, I think most people using the web without javascript hate them the most, hopefully the trend won't continue.
SparkFun’s Former CEO Nathan Seidle Starts “SPARK X”
If they were good sports they could've gotten their revenge in the fictional realm. Or the DM could've intervened. As explained, there was an unspoken rule broken, and the response was to escalate to complete silent treatment and ostracization.

What bugs me most is the idea that OP demonstrated untrustworthiness and therefor the reaction outside the game is justified. The complete opposite is true: the clique demonstrated an inability to separate fiction from reality. If this is how they react, what do you think would happen if something actually goes wrong at work? Do you think they would suddenly drop the backstabby attitude, examine things without pointing fingers, and communicate openly about what needs doing?

I've been down that road before. Complete shitshow. Resentment only builds, and saving face takes priority over putting out fires. If the company starts having 2-3 hour vision meetings in times of trouble instead of making action plans, run away, the cancer has gotten to the brain and is fatal.
The good news is that there might be some Streisand Effect going on here: I'd never heard of AdNauseam. Now I've added it to Firefox: https://addons.mozilla.org/en-US/firefox/addon/adnauseam/.
Show HN: Huge list of awesome articles to make you a better product manager
You can cast from char* to uint32_t* and start using it. I forget the exact standardese, but there is an execption for char*.
Do all of this and you'll be fingerprinted as being in the fringe minority of privacy-craving web users, so for this effort to succeed, it might help for there to be some form of orchestration/automation and education to achieve all of these together with a wide population of people.

That'd be a startup or nonprofit project, not necessarily anything any of us can individually do and not stick out like a sore thumb unless somebody capitalizes on anti-privacy revelations which can galvanize the population in favor of self-education on privacy hygiene.

Paraphrasing (probably inaccurately) Bruce Schneier's answer to a question of mine on this topic at DEF CON: the best privacy solutions are the ones embraced by many people.
Seems like you should just deduct health insurance, business operating expenses, workspace costs, and Social Security / Medicare taxes.

As to what you should tell employers -- don't answer questions regarding salary expectations! It reduces your negotiating leverage. Say something generic like "It depends on the position, but I'm curious what you're seeing as the salary range for this position."
I consider most things critical. I treat my dating profile or my HN credentials the same way I treat me main email account's credentials.
Spin up time of WebAPI is shown here, but returning hard coded values isn't much more than a proof of concept. Once you connect to data, you have to look at spin up time of something like EF and context/model generation over and over. What happens when you get 20 controllers with many function and routing actually has to do some work.

Lambda also prevents any long running optimization such as output cacheing.
Sports fields?
But you specifically said its array syntax is annoying.

What is "annoying" about:

["foo", $bar, BAZ, 1, 2, 3]
Bingo. The best "DE" or WM is the one that you virtually forget is there.

The sad part is that the DE boys keep thinking that more eyecandy and bling will bring in the users and thus the third party software (apps? bah!) devs.

But as JWZ put it, Gnome (and most of the XDG related stuff) is beset with CADT. They fail to see that the one thing that has kept Windows where it is right now is that some company can still run their bespoke business code that was written back in the Windows 3.11 days.

Damn it, they can't even manage to do minor updates to glib and related without introducing subtle breakages.

And no, Flatpak and related is not a fix. That will just bring the specter of DLL hell to Linux.
There's a pretty wide gap between "no security" and "government-adversary security". Most attacks happen on the lower levels of sophistication, a.k.a. by script kiddies. HTTPS fixes that pretty efficiently. Also, big companies have root certs - but trusted outside their perimeter? I think not.

Edit: Also, you won't, but what about other users? The label was there to warn them "this is not secure, be aware of it". You took that away Because It Looks Ugly (I still don't see another reason for that) and make the browser pretend that it's not insecure.
Ive had this discuss with drill a instructor. He asked, barring hypothermia, how far a competative swimmer could go before drowning. My estimate is something like 100km. Swimming slowly, say 0.5m/second, is easier than walking for such people. They would be dead of dehydration before they drown.
Probably just started saving them. The value on doing so was high enough that even if it was 10's of millions it would be worth doing. It's not particularly expensive (other than time) to do so.
Ad SDK's have tons of methods.
I wrote this story and am happy to answer any questions you guys might have. Lots of information I ended up not using because the article was already incredibly long or I couldn't corroborate it (but believe it to be true from various interviews), etc.
Microservices, FaaS and the future where all applications will run on the Cloud
Canon I-SENSYS MF4410 Driver Download
How does this compare to git?
> I'm OK with the trade off, since I'd much rather improve the experience for those who pay through their nose for mobile bandwidth.

I know that your heart is in the right place, but I believe that you're making the wrong decision. I suppose it's one thing if each image is also a link to the high-res source (although I wonder why suitably-scaled images can't be served to everyone), and if the images are irrelevant to your text. But particularly if there is no way for clients without JavaScript to see images, then I think you're breaking the web.

I think that JavaScript disabling will become more and more common as advertising and tracking becomes more and more intrusive. A client who enables JavaScript disables security, disables privacy and disables performance.
Just scrape.. store the captchas, use Amazon Turk, have them store the image + word in a database to recognize automatically later, and then realize the database never seems to increase in size.
It sounds like a ridiculous number of methods until you realize just importing Guava brings in 20k methods, using half the Amazon SDKs would probably bring another 20k-40k, Apache's main utils bring about 10-20k, etc.
> The scourge of ticket bots and the immorality of the shady ticket scalpers using them is conventional wisdom

I very much disagree.

If I am willing to pay the asking price for tickets, I should be able to buy them. If you're offering them so cheaply that I will happily buy all of the tickets then you're offering them too cheap and you can't really complain if I buy them.

If it weren't for ticket-scalpers, die-hard fans who are willing to pay extra to secure a place would have no option. Thanks to ticket-scalpers, it is possible for die-hard fans to ensure they can get one even if the tickets are "sold out" by just offering more money.

This is a classic case of an inefficient market being made more efficient.

Without ticket scalping: the original seller sells all the tickets. Some fans get to watch the gig, and others don't, and the availability of tickets bears no relation to how much you're willing to pay to get hold of one, only to how quickly you decide to book one.

With ticket scalping: the original seller sells all their tickets more quickly. The fans who want to see the gig the most get to see it, with less chance of tickets being made unavailable by people who don't want to see it as badly (i.e. don't want to pay as much money), and the ticket scalper makes a profit. Everyone's a winner.
Free market doesn't mean you have to go with the cheapest solution. It means you have choice. Preferring local firms is ok because they're competing in a free market; they aren't being given contracts because they're local, it's just local firms will be opening up to supply the demand.
I agree. See for example achievement 'Astronomically Low Odds' from Faster Than Light: http://ftl.wikia.com/wiki/Achievements

"Fail to evade 5 shots in a row with a full powered and upgraded engine."

It's almost pure luck. Wiki mentions ways that you can increase odds for you but still it's mainly luck.
A Signal Double-Ratchet Implementation in Common Lisp
Amazon's options for local, high speed SSDs aren't very compelling either. You're limited to the I2 instances and have to increase the instance size in order to increase storage performance

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/storage-...

Compare this to Google Cloud, where you can attach a local SSD to any instance type and you can increase the storage performance by increasing the volume size.

https://cloud.google.com/compute/docs/disks/performance
https://news.ycombinator.com/item?id=13643944
Work from Home – Or Anywhere – With a Remote IT Job
I don't know, maybe massive pwnage?

I'm sure you know that and are just being difficult. Its because OpenGL/DirectX drivers run a large compiler in the kernel and then send the compiled code to the GPU. None of that code is inspectable. Drivers routinely have special hacks to tweak the performance of particular games or matching patterns of use that tweak special paths, making thorough testing particularly hard.

https://medium.com/@afd_icl/hey-a-web-page-just-restarted-my...
https://twitter.com/alexstamos/status/829124727289544704
So you're suggesting that a city government should continue to support and basically aid and abet the monopoly that Microsoft has in wordprocessing and spreadsheets? That sounds like you don't like the free market.
It was the first touch-first mobile OS built from the ground up to accommodate gestures. At the time, the limited touch screen phones available had an awkward stylus. Then they packed in GPS with Google Maps, accelerometer, double-sided camera, iTunes access, unlimited data, visual voicemail, etc. And Apple's app store was the first one that didn't suck. The few that had app stores did not have robust SDKs with tooling for building apps, you had to use Java VM and go through an arduous submission process to get your app on any other phone. Apple streamlined it, made it simple, and completely dominated the industry for a reason. The iPhone was clearly revolutionary, and a 10X improvement over any other phone on the market to that point.
This isn't about being invisible. 99.9% of the people can't, including most of the HN crowd. It has become literally almost impossible. This is about making a statement for what you believe and fighting for digital world we want.

You can always use techniques such as blending in if you really must, tools such as Tails or QubesOS.

If they want to put a red pin on me with the words activist and "conscious of us", let them while and if they can.

Edit: changed the word "secure" to "invisible" because they are different things entangled in this scenario.
I think you are talking about the top right not the button?
Introduction to Chef on Windows: How to Write a Simple Cookbook
So "Don't be evil" must apply only to paying customers.
Yes indeed. The current landscape (at least as I glean from the Core Boot people) is that AMD is at least as bad if not worse than Intel.
I don't really think VB6 has any chance at "another lease on life". It's missing way too many things that are a modern expectation today, and I think it's unlikely that open source contribution would build enough in to make it viable. (Especially if Microsoft didn't accept PRs, so there was no "official" open source project around updating it.)

But for people who have to support VB6 regardless of whether or not Microsoft open sources it, I'm sure it'd be pretty helpful.

We still have stuff out there that runs on COBOL, I have a feeling there will still be some life-dependent VB6 code out there somewhere in 2050.
He might've tried to write a computer vision solution to solve TicketMaster captchas.

In order to test your solution, you need a bank of images to test from. So you download the first, say, 50k. And realize that you're getting a whole lot of repeats.

30k is still really annoying to get around without computer vision. But OpenCV is really, really fun and easy to use.
GDS, HMRC and Verify: so much for cross-government digital collaboration
There are plenty of startups that have $50k or $500k of funding. Most of them are going to be frugal, but it is very realistic to sell them $2000 to $20,000 worth of something.
Aging Transformation
Powerful interview tricks
Not the OP, but in my experience a "Data analyst" is mostly responsible for writing analytical SQL queries and generating reports. So they don't require a strong math background or programming skills (other than SQL).
undefined behavior has always been undefined behavior. Optimizing the compiler doesn't change that fact.
Is this a joke? Heavy lifters and bodybuilders don't live a healthier or longer life—they generally die younger and have more health problems.

The scientific consensus is that endurance exercise like walking or running is much better for you than lifting (in terms of longevity, cardiovascular and health benefits).
Pay somebody to do it. Not a joke - your setup seems like a reasonable match for plenty of PaaS offerings. You'll get way more ROI from working on your product than fiddling with reverse-proxy settings etc.
I was afraid you were going to say that
This is one of the reasons I disable JavaScript.

The web is an interlinked web of documents called pages. It's not a distributed application platform: although it can be twisted into that, it turns out that no-one actually carefully considered all the potential security, privacy & performance implications of doing that — and it's no surprise that the security, privacy & performance of the single-page app web is abominably atrocious.
Came here to post that - it's not experimental at all - it's dead.
Are you using the built-in encryption?
I'm still trying to understand why they don't just auction tickets.
There is a middle ground of letting legitimate buyers purchase tickets and then selling them on the secondary market if they are unable to attend.

Automated bots/teams of people buying many tickets purely for the sake of profit doesn't benefit anyone other than the scalpers.
What fraud attack do those industries share which is prevented by fingerprinting?

To address your question, the technique is novel and more accurate.
Looks useful for managing account on GitHub.
This extension made no sense anyway!

Clicking every single ad is bound to get you so many tracking cookies and give up so much metadata about your browsing that you're working against your own privacy by using it (see also "cookieless fingerprinting": https://news.ycombinator.com/item?id=13644139).

Not to mention that it's actively disruptive to the websites you visit (which presumably you like since you are visiting them) by generating so many extraneous and unnecessary network requests. You will slow down your browsing and get your favorite websites banned from the ad networks they use (see: https://news.ycombinator.com/item?id=13644226).

If you don't like ads, just block them. This plugin is a silly pipedream thought up by lawyers and artists without any relevant consultation from technologists or ad industry experts. It's harmful to everyone that uses it.

Btw, if you're using this plugin on Firefox, enjoy the exploits that your browser downloads and runs in the background by clicking every ad! :-D
Yes. Not that I disagree with the other way of paying, but it needs to be handled differently:

* The 'pay someone to do X, which has Y value for us in return' is a very simple value proposition for even the most luddite of finance/legal folks to grok. The details are different, but you're essentially hiring a contractor.

* On the other hand, it's much less clear to those people what the value proposition is for paying for 'past work' or some amphorphus future work that it's difficult to quantify will have any value to the organization.

* That's why the above is much better framed as 'sponsorship' and put under PR/dev relations/talent/HR. They're the ones who can best track value from concepts like community engagement and enhancement, improved standing of the company etc
Good work, looks great!

I have the following comments, hope you find them useful:
* I find counter intuitive that the animation goes up, i think it should go down, but that probably just me.
* Would recommend using something different than fruit which is probably one of the last things that comes to mind when thinking of ordered sets, also the picture keeps getting in the way of me sorting lexicographically in my mind.
* A per step mode would also come in handy.
You said, "200,000 pages per year comes to 550 pages per day." For the average "human" I think 1/5 that number is more reasonable in terms of page visits per day.
What's happy about it? 2 developers still can't work on the same project at the same time. We still have shit cross platform support and JavaFX sadly beats WPF.
I'm more familiar with MySQL, but if PostgreSQL does not use threads, I'd eat my hat.

They're just too useful in helping to spread the load of all the IO required to return even one result.
On the Security of 27% of the Websites on the Internet
> Everyone's a winner.

Except perhaps those die-hard fans who do not have the extra money available to see what may be a once-in-a-lifetime show.

Perhaps a more correct ending would be "Everyone who has enough disposable income is a winner."
A new website for Parliament – first public steps
Worth the read if only for the meme of the dog at the end.
Hopefully they release "workable pijul" soon (they said on January 10th that they were almost there) [0], they haven't updated the source in the darcs repository June 1st.

[0] https://pijul.org/2017/01/10/first-working-pijul.html
Is it, though? To the best of my knowledge, macros don't execute by default, silently, and in so doing facilitate my being tracked by people wanting to sell me generic brand pharmaceuticals.
Would love to see more explanation (with diagrams) of their patching model. Right now I'm not convinced it has any intuitive advantage.
The Tor client is the software which runs the 'onion routing' part. This provides a local network port which is your wormhole into the network; this is called a SOCKS proxy.

The TBB has the Tor client and a browser (a slightly tweaked Firefox) configured to connect via the Tor SOCKS proxy rather than via the standard network.

I was disappointed last time I booted up TBB to see they had security by default set to 'Low', which enabled lots of unnecessary stuff, like javascript on for every site by default. Too many content parsers trying to do stuff with untrusted data. Its pretty poor.
Okay, that makes sense, wasn't completely clear from the video.

Still, they would need to somehow verify it's the right conference call, and not one set up by a phisher.
Do you have anything to back up these claims?

This all seems like baseless armchair psychology to me.
> The Java specification is actually a fairly good specification and also covers a great deal of the runtime (of which Scala gets a free ride).

but isn't the java spec split in two: the java language specification and the java virtual machine specification? (honest question)
Sad but true... The problem with Vala is that it has never escaped from Gnome orbit...

Maybe Zig[1] would be a good replacement for Vala usecases, one day?

[1] http://ziglang.org/
>emerging consensus among experts

Citation needed.

>at best you're attempting to tunnel encrypted messaging over an unencrypted transport

Like every encryption scheme ever.

>A protocol that leaks metadata

They all do? At best you get to choose which provider sees it, and even then timing attacks usually make short work.

>browser clients that can't meaningfully implement crypto

>search that can only be delivered efficiently at scale by databases of plaintext (most likely at centralized servers).

Technically, nobody uses browser clients; browsers can't talk SMTP. They use browser interfaces to cloud clients, over encrypted connections. The centralization is the main problem - you cede both security and control. Plaintext search is a weird example. That can trivially be done on a mobile phone.

Why bother? Because email isn't going away. Any encryption is a strict improvement. And it's federated! No network, federated or no, comes close to email's ubiquity.

Again, the main problem is the centralization to large providers. It makes it very hard to add encryption support as a protocol addon - you have to convince every provider that it's worth their while. The One True Solution is for people to start running their own mailboxes - which seems daunting, but plenty of once-sophisticated tech setups have been productized.

By analogy, I use SilenceIM for encrypted text messages. This is a very similar scenario to email - federated, plethora of unencrypted clients, no handshaking. The difference is the message gets delivered straight to me instead of a server somewhere, and I am free to install a new program that knows how to handle it. Mobile phones have actually provoked a once-unexpected shift back towards native clients for things (there was a time when people were predicting that web would completely eat desktop - thankfully they've piped down now).
One thing that I like about Scala is that we can use Java Mission Control to analyze how our code (to the 'method' level,) perform in production. Not just deploy and pray that our code will hold strong enough to handle the load.
I only see this feature in Scala and Java --not that we wanna compare in this case,
Brought to you by Ayan Rand
I'd rather Steam get back to the core business of selling games, rather than trying to be some sort of oddball social network.

Drop the achievements (do a large number of players actually pay attention to that?), drop the trading cards (I still don't know WTF those are for). Drop everything that isn't about selling a game to a player. Then hire some competent UI people to simplify and clean up that abhorrent interface that tries to do too much.

In fact, separate Steam from Valve entirely. Let Valve focus on producing games and let Steam focus on selling them, but put a wall between them.
This is excellent, too bad I had to increase the volume size on our prod stack two weeks ago.
>Automated bots/teams of people buying many tickets purely for the sake of profit doesn't benefit anyone other than the scalpers.

He just told you - it benefits people who want to pay more but would otherwise have to rely on luck to buy the tickets - this is the entire reason the system works.
> Haha, good one, but joking aside, I would rather prefer that the dishes can never get dirty, no matter what.

Using JavaScript to deploy content-focused websites is like a restaurant which uses its cookpots for urinals: sure, it can be done hygienically, but it's Just Wrong.
Want to Be More Productive? Sit Next to Someone Who Is
If they're too cheap, then it would be everyone with enough disposable time to sit in queue and grab them before they sell out.
Bottom of slinky hoovers in mid air after release (Steve Strogatz, mp3)
Disney severs ties with YouTube star PewDiePie over antisemitic videos