skysight-inc/HackerNews huggingface dataset:
Can you name one open source project, where I can commit a change the maintainer doesn't agree with?
It is customer fault.

However it should be pretty easy for them to set up a script to search github for this kind of stuff and automatically invalidate keys
To me a typical web developer uses HTML, CSS and simple javascript limited to basic dom manipulation, maybe a sprinkle of ajax. All of which can degrade gracefully for the non-js browsing user (lite javascript maybe?)

Then again, seeing what's trending and the topics of many bootcamp courses, I see that is moving towards SPAs which are all just JS (non-lite javascript)

As a web developer I can see that introducing a painful troubleshooting process, lots of confused jira tickets (explaining caching is bad enough).

It would be nice to simply have websites that can function within the scope of light javascript functin without it at all. For those that have the complex JS, well they get a bren experience but a browser notice that informs them why. Chrome does part of this with a whitelist JS feature. Now if only it were as noticeable as the click to play flash feature is.
Yep. This is completely against how modern society deals with problems. We don't assume criminals are guilty until proven innocent, it's the other way around. The way a lot of these types want people to believe stuff with no evidence behind it because it's 'the right thing to do' is rather scary to be honest.

It's also a worrying symbol of a world where accusations seems to be more and more seen as evidence of guilt by the accused party. Where trial by media or court of public opinion seems to be valued more than the actual truth.

So no, we shouldn't automatically assume they're true. Investigate them sure, but treat it like any other crime or misbehaviour.
Try The Economist. There is a $12 for $12 week introductory rate.
This is true, but the problem I have with bundling is that it creates a distorted market. If I like, say, Firefly, I want to essentially vote with my wallet and encourage the creation of more like that. If I'm paying for a bundle, the networks get to churn out whatever garbage they want and I'm either locked in or locked out. While I can elect to just not watch what I don't like, I can't prevent my money being used to make more of it.

With the old networks, a lot of the decisions about what to make are based on advertising. For now, Netflix can decide what to make based on accurate viewing stats and their only motivation is to increase and retain subscriptions. As long as things stay that way, they are motivated to prioritise good content, which is a step in the right direction.

I do worry however, that they still need to serve a lowest common denominator mass market, so bundling leads us back to where we started, with a few high quality exclusives per channel (e.g., Stanger Things, Game of Thrones, Mr Robot), but ultimately we're still paying for a lot of unwanted garbage.

With this model, the "channels" aren't incentivised to do what IMO they should be: curating high quality content to specific demographics (anime fan, sci-fi fans, romcom fans, etc). Instead, they will just do the minimum needed to retain each of them, while not really doing a very good job for any of them.
Privy: Password-protected secrets made easy
It's strange, isn't it?

I wouldn't discount the possibility of people simply failing to think it through and tribally repeating statements ("get your government hands off my medicare"). But historically there's been a faction that very preferred local law enforcement to Federal law enforcement, because of a particular set of interventions made about 50 years ago by the Feds in response to popular protests in the South.
Easy tutorial for deep-learning with k8s on AWS
I didn't know of the developer compiler, when that reaches production I won't have any real citicism of Dart.

For now Js fallback is the only realistic option for running code on the web. Even if we get native typescript or dart support tomorrow we will still need to put up with JavaScript for like 7-10 years. For this reason a readable JS fallback seems like a vital feature to me at least. It's depressing but reality for the majority of web projects.

Does dart have a pluggable compiler framework similar to Roslyn or Antlr AST's? That would make it a lot easier to write your own conversions.

One more point in Typescipt's favor though... It would be a lot easier to modify the JS VM in browsers to support native typescript than dart. In my mind it's a lot more likely to happen because of this(less work)
> I don't see the problem here. Afterwards cleaners come and clean the square, streets, whatever. It's part of the game.

You think this is a game??
Cost of production is completely irrelevant to eventual pricing in this kind of thing, it's all down to market power and supply&demand.
WorkHeld | Vienna, Austria | Front-end Developer (Web, AngularJS, Typescript) | On-site - Full-time |

We are SaaS Startup in construction-tech, developing a SaaS field management solution. We are looking for a web front-end developer for a new product.

More details (in German): http://www.tabletsolutions.at/job/web-developer-mw-3/

To apply please send us a message to jobs@tabletsolutions.at at put [HN] in the subject. You will then have an interview with one of our developers.

You can always also send me a direct email if you have questions: bs[@]tabletsolutions.at
For AWS look at "reserved instances"

I'm not sure about Linode
If you want the diff caused by bringing a topic branch into master (i.e. its unmerged parts), you can also do

git diff master...topic

with three dots instead of two.
It’s Easy to Make Enemies of People We Only Read About
> fasting 2 days a week.

I don't know about you guys, but if I don't eat breakfast and lunch, I get a headache in the afternoon, and have serious problems concentrating, and very little energy. My conclusion is that either I am doing something wrong, or intermittent fasting only works if one stays in bed the whole day.
Can you define remarkably low?
The intermittency issues can be fixed but I agree that the dependency on web app providers and their fickle business models is scary.

The way it works is to funnel all the profits into a few huge conglomerates that benefit from exclusive access to all personal data and train users to never depend on anything that isn't a core product of one of these conglomerates.

Using their 80% margins they can afford to at least give us some time before scrapping software that doesn't look it's ever going to reach 4bn consumers.

The result is stability. Until they all get toppled by the next technology revolution. Years later, regulators will crack down hard on some of the side issues of their former dominance and once again miss the currently relevant issues :)
1) Search for common pattern where the key can be stored

2) Search if found keys are actual valid keys

3) Expire key, send explanatory email, issue new key

(I think that's what AWS does)
I met that guy.

I was working for Tandy, repairing TRS-80 Model I circuit boards when he and his partner, Paul came to Tandy Apparatus with some engineers from Tandy R&D. They had the first masked ROMs for Level II BASIC. They put them on a board and tried it and it didn't work.

I took the board I had just repaired and went to them and told them that they were in a repair area and all of the boards were in need of repair. I offered the board I had repaired and told them that it should be able to run their ROMs.

They moved the ROMs to that board and powered it up. It came up with a MEMORY SIZE? prompt and William said to press enter. I did and it gave a READY prompt. I typed in a one-line program to print numbers and it started scrolling numbers down the screen.

William was so happy that he offered me a job at his company. He said that he had about a dozen employees. For personal reasons I was unwilling to locate outside Texas and turned down his job offer.
I am currently working on deep learning as well as generating custom programming languages. Maybe you could consider updating yourself? ;-)
> He acted as though he did not know or care

So maybe he did not know?

> revealed a troubling character attribute to his coworkers

You mean his, personal, character?
> Bump it to 3-4 years then

My smartphone's getting on for 9 years old; I don't think I'm a key demographic ;)
Researchers pinpoint watery past on Mars
Because Git totally needs more obscure command line options. /s
is it no longer used by banks for mTAN transaction verification?
Then .gitignore and .env are your best friends :)
Heroku's official Python template include `.env` in the repo: https://github.com/heroku/python-getting-started https://github.com/heroku/heroku-django-template (Although, to be fair, they do include `.env` in the `.gitignore` file.)
This is a good example of the increased risks from doing your development out in the open, any mistakes are exposed to a much wider group of potential adversaries.

On an internal VCS, this would still be a problem, but a bit less visible/exploitable...
US Saudi aggression fighter jets launching strikes
If you found a similar mistake in your repository, you can delete commit from history using: `git rebase --onto <commit-id>^ <commit-id>`. Or if you want actually rewrite it, see git rebase -i` documentation.
My Nokia N900 is 8 years old and still working good.
Since a lot of it is free SW there are still some bugfixies made. Workarounds for quirks are well known and tested. A community is still there.

Just spent it a new battery very easily for 7 € for the years coming.
" If you want to train the system to recognize a cat, for example, show it 10,000 pictures over and over again of every possible variation of what a cat looks like. But don't show it a dog, because then the AI will get really confused."

Umm, that's not how machine learning (or human learning) works. You can't learn to recognise something after seeing only positive examples.
That's begging the question: git-upload-pack takes a ref and a commit ID, and returns a pack of objects to the requester to do as they like. I wouldn't call it a merge, but a set of operational transformation actions to be added to the requester's repo. It may not even examine the DAG at all, since it's possible to save those packs as 'bundles'!

My point is, if you focus on the implementation differences, my understanding won't increase because we don't have the same mental model of how git works under the hood.
It would be cool to know how to regenerate one's plasma very fast in order to be able to donate plasma more often. But even if those methods exist, they probably cost money too thus decreasing overall profit.
Very cool from technical perspective, but sad for web security. Takeaway for user:

"Q: How can I protect myself as a user against the AnC attack?

A: You unfortunately cannot as AnC exploits the fundamental properties of your processor. You can however stop untrusted JavaScript code from being executed on your browser using a plugin such as NoScript."

Here's a source code (not linked in paper): https://github.com/vusec/revanc
Let's just hope that this is implemented in an ordered way. We all remember what happened to Delhi in the last Diwali celebration even after having so much of law against firecrackers.
Some of my earlier notes are in this thread (it is more about the day-to-day feature I actually use and like, and less about the fine details of the type system)
https://news.ycombinator.com/item?id=13371009

Personally I don't get the hype around union types: at the point where you need to check which type you are working with, you may as well use a generic object (and maybe an assert if you are pedantic).

Intersection types may be a nice subtlety in an API, but I haven't encountered any need for it yet. Definitely not a game-changer.

I longed for non-nullable types, but as soon as Dart had the Elvis-operator (e.g. a?.b?.c evaluates null if any of them is null), it is easy to work with nulls. Also, there is a lot of talk about them (either as an annotation for the dart analyzer or as a language feature), so it may happen.

Mapped types are interesting indeed. In certain cases it really helps if you are operating with immutable objects, and mapping helps with that (although does not entirely solves it, because the underlying runtimes does allow changes to the object).
OS/360 was not the first OS. Quite a number of operating systems came before it.

Examples of earlier operating systems include SHARE Operating System (SOS), first version in 1959, for the IBM 709 mainframe; which in turn was itself was based on an earlier operating system, GM-NAA I/O, first version in 1956.

A very notable pre-OS/360 operating system was MIT's CTSS operating system, the first timesharing OS, first version in 1961 for the IBM 7094. The first versions of OS/360, by contrast, notably lacked timesharing – that was initially provided by alternative IBM operating systems (TSS/360 was the official answer and CP/CMS, which later became VM/CMS, the principal unofficial one); OS/360 only gained timesharing support itself when TSO was released in 1971.
I think the ship of "easily analzed password dumps" has already sailed e.g. https://xato.net/today-i-am-releasing-ten-million-passwords-... <-- 10 million passwords
Could you elaborate? Coming from Lua I always found the nesting of anonymous functions messy and wondered why they weren't done as in the article.
Goldman Sachs lays off 600 traders and hires 200 programmers
Doesn't that requires a force push? Force pushes are acceptable for private repositories with a single user, but typically not in larger projects.

Just revoke the password/secret/whatever.
How do you guys, handle this problem?

I use either `git-crypt` [1] or `ansible-vault` [2].

1: https://github.com/AGWA/git-crypt

2: http://docs.ansible.com/ansible/playbooks_vault.html
>The OEMs ought to send these upstream, but don't want to.

Isn't this a rampant GPL violation? Why do we put up with this?

We are about to lose the war for general purpose computing due to insufficient GPL enforcement.
Kind of off-topic, but serious question: How long are shipping times in the US if you're not on Prime? I'm in Germany, where basically any domestic mail and parcel arrives within one day of sending it off (unless you're on Helgoland or something). Amazon still wants me to enroll in Prime to get next day shipping, but I don't and still get the item the next day anyway.
Long, but worth the read. It is disheartening how much of life is mindless ritual.
You're assuming they would run as Democrats.
> considering how much more inefficient using HTML/CSS/JS is compared to Java applets. Or is the latter not the case (honest question)?

It's a really interesting question actually because it's so hard to compare the two. On any objective measure, today's web apps are much better than applets in terms of responsiveness, etc. But then again, an applet could run on machines with 16MB of RAM total. I think you'd be hard pressed to get plain html page in a modern browser to run on a machine like that. Either way, in both cases we had a much better solution in native apps.

> 2. I was never bothered so much by the UI of a java applet looking different. What bothered me was that even very fundamental stuff like input fields and scrolling felt both alien and shittier than native.

Modern web apps can score better here, but quite often they don't. The more complex the become the less native they get, scrolling, text input, etc are generally OK (unless your an arshole that overrides scroll behaviour), but html still doesn't have an equivalent for native table views and the goodies (navigation, resizing, performance) that comes with them.

For me the skinning does matter though, I have a beautiful, consistent desktop that browsers (not even electron apps) shit all over. When something doesn't look quite right from the second you open it it magnifies all the other differences.
As trade screws tighten, Mexico recruits U.S. tech
MySQL on Docker: Composing the Stack
Searching filename:id_rsa also yield a rather interesting result. Alongside with "BEGIN OPENSSH PRIVATE KEY". I wonder how much of these also contains ssh_config.
ENV variables. I use `dotenv` in Ruby projects.
Down the line when you go to reintegrate/remerge the
branches between the original branch and the cherry picked
branch, git doesn't see the same commit/change and its merge
can (in my experience, will) see conflicts in the exact same
change made in different contexts.

Finally I see some common ground: by tracking changes separately to commits, users won't see merge conflicts when the commits get moved.

Sadly, git also recognises this on the user's behalf, so likely your experience was due to some other delightful quirk of the git UI.

edit: I'd also recommend not calling trees 'tree snapshots', because that will confuse people familiar with trees. Same for 'cherry-picking a commit', since from your description darcs seems to use 'cherry-picking' to mean 'fetch a set of changes from someone else', which maps to 'fetch a branch' in git-land. 'git cherry-pick' means, 'copy a single change from one local branch to another', so has almost no overlap.
Yeah, indeed. I guess we can expect password schemes to change over time, so it's still a good idea to prevent it. Not sure in which proportion it helps, though.
No. I'm not saying terribly designed, lazily coded enterprise apps are ok, I'm saying if Java can be fast on a $200 mobile phone, it can be fast on a desktop.
Is there anyone at all who provides this service on a debit basis? I deliberately don't carry revolving credit lines, and do not wish to start, but it seems like the only option if I also want virtual cards.
JavaScript’s “automatic semicolon insertion” rule
I had no idea about the below found at [1],
very interesting, I've always wondered why JavaScript is so much worse than other languages,
and this finally explains what they got wrong that all other languages got right.

Ask HN: Is there any other language that does the same?

[1] Quote from http://www.craftinginterpreters.com/scanning.html :

JavaScript’s “automatic semicolon insertion” rule is the odd one. Where other languages assume most newlines are meaningful and only a few should be ignored in multi-line statements, JS assumes the opposite. It treats all of your newlines as meaningless whitespace unless it encounters a parse error. If it does, it goes back and tries turning the previous newline into a semicolon to get something grammatically valid.
That's BSD-license though, which doesn't force companies to respect your freedoms. Parent was talking exactly about GPL being dropped in favour of licenses that allow vendor lock-in. It means a philosophical departure from user-first towards corporation-first and the Free Software world the FSF envisioned getting trampled.

The zeitgeist is moving towards conservatism in general, so it doesn't surprise me, but it's still sad.
I think the only thing that can prevent the US from spiraling into a dictatorship is a successful Netflix show about US spiraling into a dictatorship. Maybe it is too late for that too.
Yea going really low calories and working out is really nasty - you visibly start shaking during practice and start feeling really strange - I'm guessing from lack of blood sugar. Will not be doing that in the future.

I'm trying something along those lines this month - I eat maintenance calories and work out over the week (~3000) and then I eat ~1000 on the weekend (mostly from coffe/milk/protein shake), but I want to do side projects on the weekend - sometimes I can get in the zone and food doesn't even get on my mind, other times I just feel like doing nothing when I haven't eaten.
How-To Setup Self-Hosted EDMS
> Undefined behavior is the result of a design decision: the refusal to systematically trap program errors at one particular level of a system.

Huh? This is quite a bit of a false dichotomy... Illegal operations could also result in unspecified behaviour (e.g. it's not specified what result an integer overflow gives, but the rest of the program must continue normally).

> unsafety of machine code

In what way is the machine code unsafe? AFAIK the CPU will always try to execute the code, the worst that can happen is some kind of a trap.
> but he is far from a brilliant businessman.

I'm not claiming he is a brilliant businessman. I'm only disputing the assertion that he "lacks intelligence", which is what started this side-thread.

> How do you lose a billion dollars?

Many different ways. For example, Hillary spent over a billion dollars on her losing campaign, but I don't assume that Hillary lacks intelligence because of this.

> Could his relative success be explained by survivorship bias?

It could well be, and again I'm not ascribing any sort of "special intelligence" to Trump, just that I don't agree that he "lacks intelligence".
Well, I do expect the availability of applications has been checked before moving to Linux. If not, ... bad management (not impossible that the move was planned badly though).

But if you know exactly what you need, you can also develop software or extend functionality of available software. That's one of the advantages of the Unix processing philosophy and open source software.
Textografo: Generate Diagrams and Flowcharts with a Simple Textual Syntax
Promises and, more recently, Observables.

Simply put: A promise resolves to a single value asynchronously, an observable resolves to (or emits) multiple values asynchronously (over time).

Taken from here:
http://stackoverflow.com/questions/36064303/what-are-the-dif...
Haha de-turding is a great way to put it. I just don't think a new language is a reasonable option. There's what maybe... 50,000 different versions of the ~500 web browsers from different eras still running out there somewhere?

If having code work almost everywhere is important for a project, that project will be using vanilla ES3-5 JavaScript for the next 10+ years. Maybe not the latest startups but all sorts of enterprisey ancient stuff that needs to run needs some path forward. If typescript can provide that it will become the lowest common denominator at any company that ships both new and legacy codebases.

Typescript to JS transpilation is extremely similar to the strategy that produced C++ from C. We know it will work, and it's been done before to great success. C++ isn't perfect but I think everyone agrees it's definitely a lot nicer to work with than C, and that's exactly how I describe Typescript as well
> ... Short of having a jvm always running on your machine ...

This is basically how Dalvik/Zygote worked on actual Android.
From what I know, Chrome too uses always-running background processes even if you don't have a browser window open (for mainentance work and to improve startup times).

So I'd assume the project would do exactly that.
Yes, Dart has similar constructs (kernel for low-level parts, and AST and analyzer for high-level parts).