skysight-inc/HackerNews huggingface dataset:
The problem with it as a compilation target in my experience is that interacting with other libraries becomes challenging - the JS ecosystem is now huge, but if you want to use many of those libraries from a wrapping language, it's possible but might present many challenges.

Like Typescript definition files. Producing them on a massive libraries is near impossible for a single individual to undertake. I've seen some people try to process them from docstrings, but the result was really kludgey.
Implementing Web Push Notifications
I fully agree. I sometimes wonder, why so many people jump to fancy frameworks like WPF where you need to create the markup yourself. I can spit out interfaces for desktop apps in no time with good old winforms but struggle to write data-bindings, triggers and what not in other frameworks. And it even looks consistent and the tools are generally easy to adjust and extend.
But what if your codebase is used in thousands of places that you don't control? You can't always change it.

The real lesson is - don't put passwords in your code.
That's time you could be spending on adding a new feature or fixing a bug :) Just change the secret and be done with it!
Curry On 2017 - Sun 18 - Fri 23 June 2017 Barcelona, Spain
co-located with PLDI'17 and ECOOP'17

http://conf.researchr.org/home/curryon-2017
Enemies of the Internet – Era of the digital mercenaries
Completely agree. There are forks, mirrors and crawlers on GitHub, even you rewrite the commit and force push to GitHub server, the original commit data still exists in the forks and mirrors, and in fact anyone can even view the original commit in your own repo if they know its commit hash.
For puppet users: https://github.com/TomPoulton/hiera-eyaml

Advantage of this approach is it encrypts the values individually instead of per file. This way the secrets files are git/review friendly.
Alas the BBC's bias towards supporting the government's position on various issues (thanks in no small part to staffing the upper echelons of the organisation with Tory party members) has become increasingly pronounced in recent years to the extent that I simply can't trust BBC coverage of important issues anymore.
Show HN: High Performance and Large Scale K-means and K-nn on Nvidia  GPU/CUDA
It doesn't make GUI's for OSX just yet, and I'll be interested to see if it stays that small once OSX and Linux support are added.

EDIT: The version on their download page doesn't make GUI's for OSX yet, but there seem to be other versions that do.
Yes, your calls would be traveling over an encrypted tunnel to the carrier instead of the (simulated) cell tower, thus preventing the Stingray/site-simulator from carrying and listening in on your call.

However, it would not stop someone from listening to the call at any point over the rest of the path since the call itself is not encrypted, only the transport between the carrier and your phone.
- protected $password = '12root34';
+ protected $password = '';

"I'm a bit disappointed now that putting 'protected' in front of the password doesn't protect it ;)"
They also have a pretty bad reputation among U of T students.
Starting a WebVR game
It wouldn't surprise me. ExHell makes it incredible easy to make the shoddiest of plots.
A while ago I discovered similarly that there are several searches which lead you to active database logins.

https://github.com/search?&q=mysqli_connect+http&type=Code

https://github.com/search?q="rds.amazonaws.com"&type=Code

etc...
This story has a bunch of internal hyperlinks, but none pointing at the actual product. To save a Google: https://tophat.com

An aside: why is news on the web still so bad at this? Presumably because sites are incentivised to not let people leave through an external link? Is there a way to incentivise better linking?
Show HN: Export Google Analytics data into SQL tables for analysis
Well, I did trust/allow domains in NoScript. But I gather that NoScript does other stuff by default. And there's also the fact that I'm blocking WebRTC.

Mostly I was just worried that Privacy Badger was failing.
when I read comments on the internet like this, where people wish for a single influential person to run the country like, i begin to wonder how many Americans are out there who believe in and long for a "philosopher-king" system without any of the check and balances that the Federal Government has in place...

a country like Singapore, with the benevolent dictator Lee Kuan Yew, perhaps? Whose single-mindedness and ability to execute has made the country one of the most successful (by several measures) in the world?

Perhaps the US will benefit from blowing up the existing structure, whose rigidity was supposed to prevent demagoguery but appeared to have failed in the new era, and so we're left with is all the bureaucracy and no benefits.
It's not just that the language is bad, it's also that the ecosystem encourages bloat and terrible implementations with layers of fixes glued on top of each other.

My current main work laptop (a pre-TouchBar generation MBP) can only barely run a "heavy" JS-application like Slack and something like IntelliJ at the same time.

Migrating Slack into an IRC client reduces the CPU & memory footprint of _sending, receiving and displaying text_ by over 90%.

Something went seriously wrong somewhere and we're only going deeper into the hole.
I'd recommend Polyconf http://polyconf.com/ 2017 will be probably in Paris
Various websites in a server, Is bad for SEO?
I stopped using bookmarks in 2005. Google totally fixed my boorkmarking needs.
Firefox's 'Reader View' makes it readable.
Creating a cheap and scalable landing page on Amazon
this result has brought the attack surface from impractically small to maybe hard but definitely reasonable; disabling ASLR altogether means reasonable becomes easy.
You're on the right track. Other options:

Leonardo. Giancarlo. Fernando. Emilio. Alonzo. Ezio. Jethro. Galileo. DeNiro. Neo.
I heard AWS has a crawler for that specifically. Not sure if it's true, but makes sense based on the anecdata.
Nice job man!
I called them out on this in one of the Who's Hiring posts they always comment on. This seems like a reallllyyyy obvious problem for them...
kylix came out in 2001.
That's verging on medieval :)
How to Build Your First Slack Bot in 5 Minutes Using PHP
> In philosophy and rhetoric, the principle of charity requires interpreting a speaker's statements to be rational and, in the case of any argument, considering its best, strongest possible interpretation. [0]

Although it seems super rare in internet conversation, a good way to practice is to keep in mind all the ways the Other Team misrepresents My Team and generalize this when the Other Team says something dreadful on the surface.

But in the absence of the charity, concise, effective communication becomes all the more crucial.

[0]- https://en.wikipedia.org/wiki/Principle_of_charity
the solution is to store the password and any other sensitive information in a text file that you read when your program starts up. And don't forget to add that file's name to .gitignore so git will ignore it. As simple as that. :)

If you leaked the password in the git repository, change it as @jvehent just commented.
This. However, it would only work with secure passwords. Setting the entropy count too low would result in a bunch of false positives.
Outliers Podcast:Naval Ravikant of AngelList on Life and Entrepreneurship
> Can't it all be abstracted under a procedural layer and let the OS worry about not blocking anything?

No. There's no way around understanding that some of your code will run now, and some will run later. It's imperative to understand this in places where you mix sync and async code. It's not possible to avoid mixing them, after all, the async functions have to be called by something.

You could hide all async in a procedural layer if you accepted the constraint that once an async call starts, none of your own code will run until it returns. It wouldn't block the browser or OS, but it would block you. That's the only way to abstract async away, but that's a constraint I think most people would not be willing to accept.

> ...people still kind of want to write code that does one thing after another

I have no choice in the matter. I can't make use of the result of a REST call until I actually have the result.

But, you're right at a fundamental level as well; people do want strict ordering and simple to understand execution with predictable results. The ideal is being able to read a piece of code and see & understand everything about it based on the function you're looking at, and not a bunch of context outside that function. It's the reason functional programming paradigms are favored by so many.
After a lot of digging I found this which worked for me. It's definitely not for non-tech people but in a pinch it can be done.

https://github.com/WhisperSystems/Signal-Android/issues/4577...

https://github.com/WhisperSystems/Signal-Android/issues/4577...
especially with the acquisition of jet.com
> I sometimes describe that as the difference between being "remote" and being "distributed."

I've seen it described as the difference between "remote friendly" and "remote first".
With this in mind have people been gaming the system?

A building on its own is a liability, its only worth something if it has occupants (or property prices are rising)
I'm into hand tool woodworking, and for YouTube specifically, I follow The Renaissance Woodworker, Rob Cosman, and Paul Sellers.

I also wrote up a short article aimed at beginners like myself that points to other kinds of resources: http://www.smokingonabike.com/2017/01/01/hand-tools-for-a-ne...
The end of your quote is:

> Instead, it is expected that users of Alacritty make use of a terminal multiplexer such as tmux.

Alacritty does one thing well. If you're using a terminal multiplexer or tiling window manager anyway, you're probably not using tabs; instead hoping there's a way to hide the 'tab bar' if only one is open. If you're using tmux, it has scrollback.

I've been using Alacritty without tmux or any other way of achieving scrollback, and I like it. The few times I've thought 'damn, I need to scroll back to that thing' it's because I should have done it differently anyway.
Bangalore did this 3-4 years back. I had trouble getting disposable bags even in rural KA.
I haven't tried the new versions, so I don't know how easy it is, but Delphi claims to do easy cross-platform now, too, for Windows, OSX, iOS, and Android.
http://travenluc.com
Sure, but the group that runs the festival doesn't want to raise ticket prices.
The reason is that the industry in which we work is complicated and full of regulations, and the owner believes that if we really understand our customers we can, as developers, better tend to their needs.
yeah i remember reading about kylix in a paper magazine.
Using the same password in thounsands of places isn't good either. Use unique random passwords.
Never change, Torvalds, never change.
"Worst popular computer language in history." That's a bit strong, isn't it? It certainly has its faults, but so did VB6 (and other BASIC variants, for that matter). PHP gets widely slagged off as well. Does it deserve it? Possibly, to some extent, but people still manage to successfully build useful software with it.

With JavaScript, the problem isn't so much the language (though there are many ways to use and misuse it) as its ubiquity and ease of entry. Because it's so popular it attracts many novice programmers who write terrible code (but that's how we all start). If we're going to have any good, experienced engineers in future then we need those novices now.

If C++, Haskell, Ruby, or Scala were as popular as JavaScript - particularly if one of them were the standard for client-side web programming - there'd be just as much terrible code written in those languages; it would just be differently terrible.
Very much this.

The first thing you should be doing is making the password useless by changing it. Doing anything else is entirely irresponsible. Sure, remove the file in question after that... but you can't treat the old password as anything other than public knowledge at that point.
I'd also think "It's $1400 cheaper than Delphi" would be a good selling point.

I started using Turbo Pascal in college when it was $49. Given that Embarcadero Delphi is competing with a lot of stuff that is free and high-quality, I doubt it's got anywhere to go but down from here.
1) Finances - understand where every dime is going, slash your expenses now.

2 ) Get your War Room ready - purge junk/clutter/distractions at your home work space.

3) Physcical Health - do keep up a daily work-out routine, get out of the house, keep moving...

4) Limit job boards surfing to 5 minutes a week, low hit rate here, huge energy drain.

5) Amp-UP Strategic Networking-- make a goal of connecting (live conversations) with 5 senior level executives/managers daily. That's 100 a month! This requires an unusual amount of focus and energy. Ultimately this process yields the best opportunities.

6) Food for Thought- Using Design Theory To Build A Better Life > http://dianerehm.org/shows/2016-10-03/using-design-theory-to...
The question is: how many are left in the wild?
Opening links in a new tab with the target="_blank" attribute in your <a> html tag? Keeps the user on the main site in a different tab, and when they close out the new tabs page, they are kicked back into the original site.
It's Google services. It's a huge library that's only growing larger.
Every programming language has it's warts. JavaScript is in a unique position in terms of the level of backwards compatibility it is required to maintain. It integrates some powerful features with it's lisp-y functional style and closures. It's implementation of prototypal inheritence isn't the greatest I've seen, but it's by far the most successful prototype based language and that is something I personally wouldn't mind seeing become more mainstream.

Despite thinking JavaScript itself has some really great qualities; I generally don't think Electron is a great solution for desktop applications. Executables are too large and slow compared to a good old fashioned native application.
Rule 30
Economically, the issues I see are related to the fungibility of money and its time value. My $100 and your $100 are interchangeable. Our workproducts, probably not. If I authorize a payment to a company through Stripe it happens immediately (barring charge backs) and imposes minimal logistic overhead beyond counting the money and delivering the product on the company. If I commit to ten hours of work, due to the nature of time, it is a promise not 'cash' in hand. Moreover, there is the burden of coordinating that work. Maybe it's six months until the company needs an office design and that slips to a year and in the interim I'm busy and so it's fifteen months until it happens.

Busy people tend to trade money for time. Not so busy people are often not so busy for a reason. Moreover, professionally competent people tend to have no shortage of opportunities to work for free.

Anyway, it is an interesting idea. I think the key bits are building an economic community and creating trust.

Good luck.
Wow. People would really store production passwords on GitHub for everyone to see?

I wonder if GitHub blocked those searches "We could not perform this search
Must include at least one user, organization, or repository"

Edit: If I click on PHP for the language in the sidebar they show up. But hmm, I wonder if maybe GitHub tries to block leaks like that from being searched.
It's not more insecure than it has been for the past 20 years. Actually it's more secure and the script kiddies can only hack it if your password is in their dictionary.

I'm not concerned with script kiddies, I'm concerned with google and co + governments. In that context this is actually more secure. Yes, large companies and governments have root certs that are in your browser right now.
UAE to build first city on Mars by 2117
I didn't like tophat because it brought computers into the classroom where they don't belong.

But anything that attacks person is honestly probably a good thing, they seem to be actively hostile to students.
Money is easy to qualify, quantify, and enforce. Whatever your platform allows users to pledge isn't.

This is not going to work.
No, I mean David Simon.
So the title of the article is technically true, but they had 4 people in their company that tried doing remote work and decided they didn't like it. Not everyone will prefer remote work, and those 4 people apparently did not.

It doesn't seem too notable to me that, for a grand total of four people, they ended up preferring not working remotely. Meanwhile the article suggests that it's at least a decent sized company that tried this and something catastrophic happened as a result of it, which is what I was expecting going in.
I wouldn't be averse to an amendment establishing the maximum age of eligibility for any elected federal office to be 130 years old on election day.

I figure that if we ever get people to routinely outlive that mark, we may have a problem getting the elder generations to voluntarily yield power to the younger.
I siti web possono già identificare un utente,anche se si usano diversi browser
What about China then ? Its Confucianism when it works.
I haven't heard great things about working there over the years.
Awesome tutorial mate - love what you've done with the Bolstat landing page.

I think being able to get a landing page out there as fast as possible is very important if you want to test some ideas and looking at your workflow is inspiring.
Yeah, I just started getting those too. But adding "&p=2" to the URL shows results for the next page...

shrug
This is pretty much what happened. We spent a few months working with Mr. Stenn, and ultimately he did not agree to pursue strategies to correct the underlying problems that caused NTP's security and stability issues. Simply patching known vulns and moving on would have been a temporary solution: more vulns were lurking. NTPSec was born to give the code base another chance, to evolve with a different strategy. In the end, I tend to feel that this is a strength of OSS: different groups are free to do things different ways, and if people are paying attention, software quality should win out.

Since Eric and the rest of my team started working on the NTP code base in early 2015, we've eliminated over 50% of its vulnerabilities before they were disclosed simply by applying good software engineering practice where it hadn't been. In the year before my O'Reilly presentation, it was more like 80 or 85 percent. Everything we hadn't eliminated by disclosure or discovery time was fixed promptly.

There are other NTP protocol implementations besides NTP classic or NTPSec that are worth considering for some users. However, we felt that refactoring the reference implementation was necessary due to its use in many less-mainstream, but often highly-critical (in a life-critical or economically-critical or critical-to-scientific-research sense) applications. The non-NTP-related implementations don't always do what high speed trading houses need, or scientific installations built on aging but extremely precise equipment need, or controls system interfaces need, and on and on and on. We just didn't have a drop-in replacement available for all of the things that weren't web servers, workstations, and other commodity applications.

The "rift" article is now subscriber-only, so I can't respond there to its many inaccuracies (I was passed a PDF by someone who cached it, this is the only way I was able to read it). I was never contacted about it by the author, and I don't feel it was a fair treatment of the subject. That's okay. I learned a long time ago that fixing a mess will make some people thank you and some people angry with you. It wouldn't have become a mess by the time I found it if there weren't a cost to fixing it. People who fear controversy will have a hard time making a difference in the world.

I'm at work, but I'll do my best to answer any questions fired at me today on this thread. If there's something you want to know, ask!
Toronto seriously needs better tech employers :'(
However, those times are rare and 98% of a remote team's communication needs are best done in text only asynchronous mode.

I'm unconvinced.

I'm far from an advocate for pair-programming, but nevertheless I have seen how well it can work. It seems to me that that "shared brain" deep and rapid communication is extremely synchronous.

I wouldn't argue that it is required 98% of the time, but I also think that it being unnecessary 98% of the time is a exaggeration (if we measure based on the team's overall output somehow. Measuring it is of course impossible, but as a though experiment..)
I warmly recommend Joy of Coding this June in Rotterdam, the Netherlands.

It's volunteer organised (so affordable) and it only attracts programmers who are passionate about their jobs. No recruiters, no businesspeople (who don't also code), etc. No company booths. It's very un-enterprisey and has a great atmosphere because of that.

http://joyofcoding.org/

No specific software stack, albeit rather web focused in practice. Central theme is (surprise) the Joy of Coding, so there's space for new cool tech, for meta-level stuff about how to enjoy your work/hobby better, and for in-depth workshops.
Dupe: https://news.ycombinator.com/item?id=13635713
Serious question: what is considered async?

From the site, I get that add(1+1) doesn't require a callback,
whereas
downloadFile(url) does.

What about somethingHarderThanAddition(noExternalDependency)?

My question is, what is the threshold that I can assume that my code will run sync, and when it cant?
This is such a warped point of view to me.
I used Top Hat last semester at Iowa State University and the mobile app was excellent. Unfortunately, many of our projectors' are still 1280x1024 which resulted in some of the UI and text of the professor's web-app being cut off.

Still worlds better than anything else I've used and very moderately priced.
You just search that some token was uploaded by your people, not specifically yours.
Threat Hunting Using Forensic State Analysis
Reading long lines is also difficult.

To me some parts of FE development kind of require deep nesting, e.g. css, but in javascript if you are 4/5 levels deep in the nest (with the "long lines symptom"), then you should do as proposed in the article: split into modules and functions.

And sometimes (often?) long lines comes from the bad habit to do 3/4 things in one statement. To me good code does exactly one thing per statement, and except for config or urls, is should not be long.
The Century of the Self
I don't know about Europe generally but in the UK the number and size of bins in crowded public places is limited because the IRA used to use them for hiding bombs. Seems quaint these days though!
Fosdem

34C3
Gamesys Is Hiring Front End Developers in London
This post defines forensic state analysis through the DFIR lens for threat hunting and differentiates it from behavior analysis.

Background: I work for Infocyte (we are a cybersecurity startup). One of the challenges has been clearly communicating how we do things differently than everyone else. I'm looking for feedback on clarity of messaging or any questions on our approach. Thanks is advance!

Sharif
That's a fair point and something we're working on. We are using 1-hour blocks for pledges. People have been quantifying and qualifying work in 1-hour blocks for a while and are used it we think. But we will continue to refine that. Thank you.
It is! The doves actually tweet!