skysight-inc/HackerNews huggingface dataset:
They're also a very savvy company that has their own store. They didn't have to do any work other than turn off the App Store listing.

Smaller developers may have to go through considerable pain and anguish in setting up their own store, or they can suffer through even more angusih and pain when the store they entrusted to do their sales goes down in flames, as with Kagi. https://tidbits.com/article/16665

Being self-hosted is obviously better if you can swing it, but it's more work and it's not for everyone.
C's variable definition rules are different from C++'s. gcc happily compiles those two lines, g++ exits with the "redefinition" error.
> cool, I'll be able to charge people to read my content on Medium

You know, I never thought of it that way but the more I think about it, the more I think your idea is a great one. Let writers paywall their work and take 30% (similar to the app store model). Let me buy $0.99 articles and I probably would. I've bought $1 Kindle singles before and this sounds like it could be similar.
Show HN: Mr.Node – A JavaScript Library for Node.js Functions – Now on Npm
People that live in houses sometimes have to dust.
From the paper: "The traps were baited with ~100 g of mackerel that was enclosed in a mesh bag to allow the development of an odour plume, but prevent the amphipods consuming any of the bait that might otherwise affect POP levels in downstream assays."

So even if the mackerel did contain the pollutants, they weren't transferred to the amphipods.
I disagree that these aren't intrinsict to any messaging system. Those are intrinsic problems of any electronic data storage and transfer system. Data tends to deleted or public, as Quinn Norton says.

I've been thinking this problem through for a while, and I'm starting to think we simply need to have a different mindset for thinking of electronic data as for hardcopy. I'm leaning toward "data physics", in the sense that there are different "rules of physics" which apply -- a metaphor, though close enough to the truth:

* Data have effectivley no inertia. They can move anywhere at the speed of light.

* Data violate the principle of location. Information can be in two (or more) places at the same time.

* Data can be exfiltrated without awareness of the subject. Most especially when held on third-party systems.

* Encryption isn't a safe. If you lose a safe key (or combination), you can drill it out. If you lose an encryption key, an entire corpus is no longer accessible. This has absolutely massive implications from a user-support standpoint, as such key loss will be an everyday (or, at global scale, every second) occurrance. Which means some sort of reliable, useful, but still sufficiently safe, and cheap key recovery system.

Essentially: you can be compromised at any time, by any number of actors, without notice. There may be some ways to address this, but throwing more crypto at the problem may not be it. "Canaries" or fictitious entries and sentries (URLs, emails or phone numbers which should never be contacted, but which if they are, you know you've been had), might be part of that.

Another realisation I had a while back was that as much as this hits the ordinary citizen, it's as much a concern for those in or near power (finance, politics, military, journalism, business, etc.) as well. See open speculation that the White House has been compromised, quite possibly by multiple intelligence operators from multiple nation-state, and possibly other, actors. Including those of the United States itself.

Which is to say: media change the societies in which they operate, and always have. Elizabeth Eisenstein made hay with this in her 1979 book The Printing Press as an Agent of Change, though I'm finding her 1968 paper prefacing that work a more concise and sufficient summary of the principles: "Some Conjectures about the Impact of Printing on Western Society and Thought: A Preliminary Report"

http://www.journals.uchicago.edu/doi/pdfplus/10.1086/240164
There's no compiler writers throwing out

if(undefined_behavior) {
ruin_developers_day();
}

It tends to be the effects of valid by the spec optimizations making assumptions that would only not be true during undefined behavior.
Ask HN: Your first Front End job experiences?
Hi,

I am working as freelance developer for almost a year, mostly building web pages (JS, CSS, HTML, WP, learning Angular and Vue) for small businesses, and now I want to go higher level and apply for job as front end developer.

What are your experiences on first job, what is the first thing you had to do, what was your background when you applied?

I am little insecure because I never worked in team, never had opportunity to work in corporate world.

Could you please share your experiences, and give a few advices?

I know this is maybe funny question, but do things work in real world; for example if you don't know how to do something, do you use google or se, how does other developers treat you?

I hope you understand my English, because its not my native language. Thank you.
Indeed, it could be argued that speech - with some exceptions - is generally discouraged.

This is inline with the absolution of the self... If Buddhism believes that the self doesn't exist it's hard to use language that directly engages with the idea of self (subject).
> Desktop app stores never really took off with steam being the only exception. And steam isn't for apps.

Mobile app stores aren't for apps (or at least paid apps) either. If you filter out all the games, the frontends for external services and all the other free apps, how much is left? How significant is it?
I'm actually inclined to take this fairly seriously.

I personally run a 36U rack of servers in my basement for learning and hosting for my business. It gets toasty enough that the basement temperature hovers around 30-35C.

On cold days we open the door to the basement and the warm air rises into the ground floor, giving a bit of warmth.

On warm days I have a temperature controlled fan which vents the air to the outside.

My house has central heating but if it had central air I'm pretty sure an exhaust from the top of the rack to the central air unit would be do-able (not sure what HVAC building codes I'd be compromising though).

Puget Systems did a great blog post titled 'Space Heater vs Gaming PC'. They basically found they were tied in the efficiency of heat output from both devices.

Source:
https://www.pugetsystems.com/labs/articles/Gaming-PC-vs-Spac...
The Future of H4 EAD Visas Under Trump Administration
PHP First
Well now there's Signal https://itunes.apple.com/au/app/signal-private-messenger/id8... and Keybase Chat https://keybase.io/blog/keybase-chat

Why do we still need PGP email?
I'm not sure what you mean by optimizing functions. I understand quoting isn't the best thing going vs true macros, but fsharp has full metaprogramming capabilities and operator overload plus custom operators produce some nice DSL's.

Anyway, I don't think to be "attractive" it needs to match Phoenix/elixir macros. Nice frameworks can be made in fsharp, and its type system and tooling blows type specs and dialyzer out of the water.

Really it needs to be:

* (x-platform && easy to use) which is why I'm so keen for the official 4.1 fsharp release. The ecosystem around fsharp and dotnet core needs all the sharp edges ground down.

* Smooth OOTB experience

* Community momentum

* Excellent plug/middleware solution(building on top of asp.net core might be the right approach)

Then just let fsharp shine on its own merits.
I hit the device limit constantly on iTunes and have to declare "bakruptcy" (unuauthorize all devices) to reset it. This is what happens when you have a laptop, a desktop and work and home, a gaming computer, and things like a media centre computer.

I have never once hit it on apps.
Currently, yes.
https://truestats.com - this actually scores all your visitors on how likely they are bots.
It's worth noting that for example #12, the assert will only fire for debug builds (i.e. the macro NDEBUG is not defined). So, depending on how the source is compiled, it may be able to invoke the div function with b == 0.
Fuck paywall
It's been good enough to support their Kindle Fire ecosystem without using Google Play (I don't think anyone else has succeeded with something like that outside China), but they're still propping it up on non-Amazon devices by tying Amazon Video to it, so...
It seems to be working again. Sorry about the snafu. I've been exchanging emails with the team on the hosting side, but I don't yet have info on what happened.
Office 2011 for Mac dmg: https://go.microsoft.com/fwlink/?linkid=273962
Can't the same quants go make more money helping to train the bots?
Any device that doesn't support SNI wouldnt be modern enough to support secure cyphers since weaknesses hav e been found in most of the older ones. Plus anything below TLS1.0 shouldn't be supported either (nor even TLS1.0 if you're running something where security really does matter). So you're better off dropping support for the aforementioned devices regardless of whether you choose to use SNI or not.
Related : Cloudron.io has made some huge progress in making it trivial to set up a mail server.
What I've found people really want when they say "serverless" in this context is, "direct file upload without a proxy server", which is basically what BaaS' like Firebase and Parse do...

<pitch>

Firebase Storage (https://firebase.google.com/docs/storage/) provides clients that perform secure, serverless uploads and downloads. Instead of doing the dance with a server minting signed URLs, it uses a rules engine that lets developers specify declarative rules to authorize client operations. You can write rules to match object prefixes, restrict access to particular user or set of users, check the contents of the file metadata (size, content type, other headers), or check a current file with the prefix to not overwrite it.

If HackerNews formatting were more forgiving of code snippets, I'd post one here, but instead have to link to the docs (https://firebase.google.com/docs/storage/security/secure-fil...).

We've found that this model is more performant and less expensive (no need for a proxy server), as well as lower cognitive load on developers, as they think about what they want the end result to be, rather than how they need to build up the end result.

And since I know people will bring it up: there are definitely limitations in flexibility (you're using a DSL), and a steeper learning curve for the very complicated use cases. The goal here is make it trivial for 90% of use cases and possible for 9%; rather than making it possible for 100% and equally difficult for everyone. Tradeoffs...

</pitch>

And if you want other examples, Parse did a similar thing with role based access control to a Parse File, allowing direct client upload and access by only a set of users. S3 and GCS can do this as well, assuming their (relatively coarse) IAM models are granular enough for you (and you're a authorized principle in their systems, which is often the harder thing).

Bringing this full circle, "serverless" typically involves a switch from writing code (imperative) to writing config (declarative). You're not validating JWTs signing URLs, or writing middleware, you're letting services know how to configure those primitives for you. In some ways the Serverless framework does abstract this for you (hey look, I didn't provision a VM), and in some ways it doesn't (you still wrote code to generate a signed URL).

Disclosure: I built Firebase Storage
What's the deal with stats delayed over 24 hours? Man, I hate that.
Now sites can fingerprint you online even when you use multiple browsers
Yeah...I got hit by a regression in a bug fix in RH's GCC back in the 4.1.2 era. The revision/build number only moved by a dozen or 2, but they completely broke C++ anonymous namespaces at global scope (caused an ICE). Glad I didn't let Ops upgrade all of my boxes at the same time like they wanted...
You said: "If Bitcoin were to implement xthin (or an alternative proposal such as compact blocks) it would be much better to release outside of the block increase."

Fact: Both xthin and compact blocks are different implementations of the same idea. Both have already been implemented and released and are in active production.
Isnt it that like 95 % of startups fail, but sure lets justbe as optimistic as the hedge fund manager or whatever
Infosys Founder: 'America First' Could Turn into 'India First'
Like other content on this site, it's just ripped from the original publisher and author, with the author credit cut out. The title is the same on the original:

https://www.kth.se/en/forskning/artiklar/new-theory-explains...
Can we see a chart that shows how Leica or Sony or Fujifilm cameras have "thrived" since the introduction of smartphones?
Blogspam of:

https://www.kth.se/en/forskning/artiklar/new-theory-explains...
Exactly, I played Numerai many months, now it is full of cheating robots.
You are being a bit over-sensitive probably due to overexposure of this type of stuff, but in the case of the site, it's likely it was just part of a package. I'm thinking you're referring to jQueryUI that is loaded up, and it looks like it's a "nuke for an anthill" situation, where there's likely something in the set of scripts that works for them.

It's annoying, but it's probably nothing to get worked up over - they saw something they needed and went for it.
> couldn't you create all the elements in parallel and collect them at the end?

Determining the bounding box of SVG text is not easy even with a monospace font since you're at the mercy of the final rendering system as to which font is actually used and how the metrics are processed. It is safer to do each line as a <text> element with colors added by <tspan> segments inside. That guarantees you only have to align the left edge at the same X coordinate. You could also do multi-line text in a single <text> element but that isn't guaranteed to work in SVG 1.1.
Servers don't generate dust, they collect it. Add a Hepa filter you have your spin.
I had the same reaction! I've known* her since she was an early contributor to and then the first paid employee at Metafilter.com.

* - via electronic means only
Said every C programmer ever!
Awesome. IMHO to really "take off" fsharp is going to need a super smooth .net core story including .net core ionide support. It's not a sure thing, but I can't stress enough my belief in these two things:

* Seemless x-platform with dotnet core

* ionide working with dotnet core(and ideally on par with at least xamarin fsharp support)
Article doesnt load
Sales Traction in a Startup–Complex, Challenging and a Different Game of Its Own
But is the problem email, PGP, encryption, the idea of secure online communications, or what?

The installed base of clients could be pinned on the failure of vendors to support encryption on email: Microsoft, Google, Apple, Yahoo, and others.

The protocol issues are indeed serious, and are a prime reason I argue for SMTP itself to be retired, as it should have been 20 years ago. The problem has been in coming up with an alternative protocol.

Browser clients can all be addressed through the browser (Google, Microsoft, Apple, and Mozilla being ~98%) and apps (Facebook, and a handful of other sites).

You don't mention mobile, but that's the platform of the future, with 3 - 7 billion users, and two vendors (Apple and Google) could address the situation there for 99%+ of all users.

Message archival will continue to be an issue regardless, though there may be ways around this.

The problem with the email alternatives is that none seems to be both open and a sufficiently flexible tool that it can address a sufficiently broad set of emails uses.

I'd really like to see discussion of specific properties any replacement protocol ought have.

I'll start:

1. Encryption-default-enabled.

2. Open standards, open source, free software. (BSD/MIT license as a standards-fostering implementation.)

3. Metadata protection.

4. Federated at client, server, and directory (e.g., addressing) layers.
Show HN: rest-hapi, a RESTful API generator plugin for hapi
What's the opinion of Project Gutenberg, these days? Works that are out of copyright, but there are many of those that are pertinent to a broad, lifelong education.

Although I see now that they, too, are blocking access via VPN. Sigh...

https://www.gutenberg.org/
Why would this necessarily mean they're getting rid of all legal immunity? I think we have plenty of examples outside of the digital world where legal immunity is maintained.

The digital world currently has an excessively powerful version of this -- even when they're not neutral, they're still immune, which definitely needs to be fixed.
I'm curious, how do the robots cheat?
I think there's fair room for critiques on this implementation and their methodology for selecting priority.

If more than a small number of protesters brought up these kinds of rational arguments, I think many on the right would be far more receptive to seriously listening.

Instead, you hear about a "Muslim ban" and people calling Trump literally Hitler and most people on the right are sick and tired of these kinds of arguments and aren't going to be receptive.
I think I'm willing to bite that bullet
Israel’s huge binary options fraud
Yay! Yep, it's back up. Thanks again!

In case it's useful, some of the page resources were 503ing/404ing before:
http://i.imgur.com/5JUyphf.png (the intermixed connection_refused errors are from my /etc/hosts blocking)
Damnit. My initial thought is that I didn't take into account air pressure. Now I feel like an idiot, time to research...
I remember finding KCNA back in high school. Indeed very dull headlines. "NK Ambassador to obscure country presented with flowers" sort of thing.

Had wondered what happened to it. An interesting tidbit from this article is that it's now inaccessible outside Japan. I was able to confirm access by using a VPN.

Here's the URL: http://www.kcna.co.jp/index-e.htm
Robotic clamp on a rope. Grab dog by the scruff of his neck and hoist.
I really wish people would stop using the term serverless, it's not useful and it's highly misleading.
Sell things?
It's a tough call, especially if your revenue model is ad based. They ad networks only trust 3rd party analytics.
Intrigued but skeptical. There's really a taste difference? How do you account for that? Isn't butter just fat and water? I eat lots of butter, but I've never shopped around. The only label comparison I ever did was when I saw Plugra on the shelves and I went to check if it had a different butterfat content from store-brand butter. (As the name would imply.) It didn't, and I bought store-brand.
Why restrict yourself to one compiler if you can write portable code?

Clang and gcc provide flags that enable nonstandard behavior, and you can use static and dynamic (asan, ubsan) tools to detect errors in your code, it does not have to be hard to write correct code.
valve has tried with various creative tools like 3d modelers etc, but few seem to care.
Yes. You can run your entire business without managing any servers using only SaaS products.
Training bots is now for suckers.

It's all about training bots to train bots. Choo choo
Lawsuit alleges Magic Leap is a hostile working environment for women
Hackers hack computers and networks, Crackers crack software. There is a clear difference between those two words.
Multiprotocol Label Switching
i'm guessing they're submarine'ing, maybe hired a PR firm
Also, plugging Caddy: https://caddyserver.com/

I used to be a huge fan of nginx and I haven't touched it in a year now. I don't miss it, Caddy is fantastic and handles the Let's Encrypt stuff for me.
I would recommend avocado oil for cooking, and olive oil for salads etc. Avocado oil has a much higher smoke point, so it makes for easier cooking and fewer carcinogens.
This article leaves out the most important task before renting on Craigslist: make sure the party you're giving money to actually has standing to rent the property!

There is a LOT of fraud with people "renting" properties on CL that are utter frauds and vanish as soon as they get the deposit.
In the main, people seem to be unfamiliar with what lies underneath C, so they never seem to really get this idea that you might be able to (or want to) expect any behaviour other than that imposed by its own definition.
You do need a server to create a token from your access key and secret. However, this doesn't really go very far in protecting your bucket, as somebody could just grab that token and upload whatever they want.

So an additional layer of security is creating an upload bucket with a policy where all objects over 24h old are deleted. When somebody finishes uploading a file, you ping your server and move the file from the upload bucket to the real bucket.

Another trick is putting Cloudfront in front of that bucket. You can then upload to any Cloudfront server, which will then put the file in your bucket -- the reduced latency to a Cloudfront (vs S3) will increase the speed at which you upload by quite a bit.
I'm not sure the study had much to do with butter. It mentions butter just once but leaves it very unclear how much butter was actually involved (versus "shortening").

The study talks extensively about "shortening" which is primarily a vegetable-based product now AFAIK. FWIW, the Wikipedia article tells us "the term "shortening" seldom refers to butter, but is more closely related to margarine."
Thanks for the shout out. We're not ready for public consumption yet though, still working on it. We always need more developers and "skilled" testers though!
They were renting their home. They would have been fine if they were actually sharing their home.
I'll be honest, I didn't find any of these to be particularly surprising. If you've been using C and are familiar with strict-aliasing and common UB issues I wouldn't expect any of these questions to seriously trip you up. Number 2 is probably the one most people are unlikely to guess, but that example has also been beaten to death so much since it started happening that I think lots of people (Or at least, the people likely to read this) have already seen it before.

I'd also add that there are ways to 'get around' some of these issues if necessary - for example, gcc has a flag for disabling strict-aliasing, and a flag for 2's complement signed-integer wrapping.
Not mentioned in the OP but there was also news out today that hedge funds are buying up Mt.Gox creditor claims.

https://www.cryptocoinsnews.com/report-hedge-funds-buying-cu...
We use the nanos heavily at my workplace. I've seen people make a chain out of paperclips when their nearest USB port is too far away (and they can't be bothered to grab an extension cable).
How does that make sense? In an AI competition you expect robots to compete to the best of their ability.
Lol nice job not mentioning rent
Go grab the latest release of Arachnophilia and have at it...

http://arachnoid.com/arachnophilia/index.php

(Pleasantly surprised to see this is still going strong after 20+ years.)
Butter isn't a chemical mixture. It's a food made from a living animal. As with all things in nature, it will vary depending on the animal and its health. This kind of reductionist and industrial attitude towards food is detrimental to nutrition and overall. In our aim to standardize everything, we've forgotten the animals and the farmers and our connection to food. In an agricultural society you would have been laughed at if you said "isn't all butter the same?"
If you're having to support devices that old then I'd be more worried about how you're going to take payment details on your e-commerce website over a "secure" connection that would fail most PCI DSS vulnerability scans.

The security of TLS has come a long long way since XP and so has research into breaking XP-era ciphers.
(With hesitance, that I'm just piling on the negatives: I actually tend to ignore people who say things in an authoritative way but make no effort to substantiate their claims, because more often than not they're just wrong. I would assume likewise here).
Lurpak is another good option.