skysight-inc/HackerNews huggingface dataset:
"The main threat model that reproducible builds are meant to guard against is simple: an attacker, who has write access to a binary distribution of some piece of software, uploads a malicious binary rather than the true output of compiling the corresponding source."

This isn't the only attack reproducible builds are about. They started as part of Wheeler's Countering Trusting Trust paper on how to beat the Karger attack of modifying compilers to backdoor themselves. So, there's a MITM problem and compiler subversion problem they're about in most places doing them. Most of the threads on the topic (including this one) also have people brining up stuff in Thompson paper or Wheeler's technique. That threat model requires more security, esp against compiler vulnerabilities or malicious source.

My other argument was that users are trusting an image of their OS from a repo that comes in binary. If they trust that, then why not trust the binary of the compiler or other apps in that repo? If they don't trust the repo, they shouldn't be downloading privileged software from it that runs in kernel mode. Bit of a contradiction. One counter is that it might be compromised later on. Well, do they not do software updates either then? Benefits of reproducible binaries over source-based distribution and updates from secure repo are slim to none outside saving compilation time.
Saying only 90% fail is being too generous.
Even better than that in my opinion is the snowpeak collapsible pour over [0]. It's metal, sturdy and packable. I bring it in my carry on on all trips I go on plus backpacking. Pair with a hand grinder and you're set.

0: https://snowpeak.com/collections/gifts-under-100-dollars/pro...
Specifically I was referring to Briefmetrics:

briefmetrics.com

S3Stat (who another commenter mentioned) is also a great example.
The biggest problem I have with the WSL is that it is intrinsically tied to stable Windows releases; there is no way to get incremental updates for Bash on Windows unless you subscribe to the Windows Insider program, which is a way of running prerelease versions of Windows.

So in order to get Linux features like inotify working you have to sacrifice the stability of your operating system.

This looks like it'll be true till the end of time. Does your dev work depend on bug fixes or certain syscall implementations? Well, either run an OS that may or may not work at any given time or wait several months for the next release.

A couple weeks back I tried to give WSL a try but everything was broken. Inotify prevents hot reloading, which really makes my life just dandy, so I tried to transition to the insider program in order to get my fix. To my chagrin, this caused Node to up and break on me. Like, full stop doesn't work anymore.

I ended up going back to Linux. I really hope that developing on Windows becomes something other than 'awful' - for me at least - but I don't think it's quite there yet.
Show HN: Take the administrative hassle out of managing your tasks
I understand: It's curated and opinionated and there should only be three big players on the list. I strongly feel that hosting is not a commodity. There are big differences between PaaS and VPS hosting in service level.

Shameless plug: We run [PHP as a Service](https://www.fortrabbit.com) which is a managed stack with pre-installed Git push to deploy, Composer and Let's Encrypt certs for all domains.
It's been a lot of years, so my memory is vague, but on Wipeout (one of early ones, probably the first one) either on PSX disc or PC one (more probably the PC one). Psygnosis shipped norton commander makefile (equivalent) shortcuts and random dev stuff on it. I regularly poked around game distributions like that as a kid to see if there's anything of interest. I think that was the only jackpot I came around. Poor jackpot, but exciting!
7 Most Popular Mobile App Analytics Services
The only 40 in my second link is from 17 days before the article. Recent?

I don't know where 41 came from exactly but I know that at that same time, Rasmussen was reporting 53% approval. How did Politifact choose?

As for Florida:

> They’re having problems like they never thought possible.

He said problems, not attacks.

And the Politifact article was written after (and even mentioned) Trump said he was referring to a Fox News report [1] about problems in Sweden, which isn't about terrorism.

1: https://www.youtube.com/watch?v=OSzjfAMk-RI
Climate is one possible reason (as well as coal deposits) for the rise of the wealth and importance of Manchester, UK in the 1800s. There is a damp atmosphere that makes it great for processing cotton.

It's also the where a fairly large printing company has it's central printing facility. Inside the main warehouse over tons of paper a fine mist if intermittently created, keeping the paper malleable. In a less damp environment this misting process might have to be intensified.
FreeCodeCamp Open Source codebase and curriculum.Learn to code and help nonprofits
IIRC WSL is still in beta.
Hosting was the most tricky part to describe - first of all, because there are so many companies and I wanted to keep the list short (otherwise it's not helpful).
The second reason is that everyone has different opinions on the hosting companies - for example, one person can have a great experience with Godaddy and someone else will have a very bad one. So I decided to go for the DigitalOcean and Linode as they have a rather good reputation among developers and AWS, as they are popular among many developers (+ they come with a huge amount of other services that you can use). Plus Heroku with their free plan.
Deploy the Voting App on a Docker Swarm Using Compose Version 3
Their entire fact check is about terrorist attacks, omitting crime or other "problems" (the word Trump used).

http://www.politifact.com/truth-o-meter/statements/2017/feb/...

And the Fox News report (which is mentioned by Politifact) Trump later referred to is about crime.

https://www.youtube.com/watch?v=OSzjfAMk-RI
I contend that my question was slightly snarky. As someone who moves from computer to computer a lot, having a unified client is quite critical. With IRC and Bitleebee, I can combine a lot of protocols in one client, keep it running in a screen, and access it via SSH.

I realise my setup is hardly common, and I contend that the main issues with IRC are the clients and the account systems. However, both those issues (among other issues) could be resolved with the IRC protocol, allowing people preferring other clients to continue to user their clients.

Message logging and account management can be done server-side (e.g. closing connections on users if they don't log in), and with a dedicated client to this server, the logging in-part could be done rather seamlessly, even if posing slightly more 'troubles' for other IRC clients.

But as implied in the other replies to my post, but is there any money in that? Maybe licencing the servers? I dunno. I'd love to do something like that, but it would be a full time effort, I fear.
"Not worth arguing over" was in reference to my misguided attempt to distinguish between 'having racist beliefs' and 'acting racist to be edgy'. I feel I went down the wrong path arguing over that. Sorry if I wasn't clear on that.

So, to be clear: I absolutely agree that these issues are worth arguing over, and that we shouldn't ignore them, and it was good that you challenged me on that.
China's Gold Rush in the Hills of Appalachia for Wild American Ginseng
"If I can go from trusting every binary packager working for the distro to trusting only the binary packagers of packages in build-essential, that's a huge win."

This is true unless the repo you're using can be accessed by malicious parties or contain code from them. As in, if you're avoiding packages from person A but not B and both have write access to the repo, its server, or its network then your security is unchanged. If different source/binaries are completely isolated by different people, then your choice might reduce your risk in event one becomes malicious.
I just deployed a corporate site last week using Jekyll, hosted on S3 with CloudFront using a free AWS certificate. Content management is provided by forestry.io which has been mentioned a couple times on HN and is a compelling alternative for the CMS functionality and a necessity for the client. When I think Website, this is the best 'stack' I've deployed with.
I remember coding for atmega at university and we had to use these super shitty windows tools.

This is awesome!
Science Is Not Always “Self-Correcting”: Fact-Value Conflation and Intelligence [pdf]
Heritability and causal reasoning [pdf]
Hm. Well, that made me a bit concerned to start, as I'm working on a Slack-based hack-and-slash RPG [1] that I'm planning on running entirely on their free tier, but I'm pretty sure that their use cases differ from mine significantly. I'm not worried about message archives (as it's just game history), and I have @here/@all locked down significantly.

The "max user size" thing is a bit worrisome, but MMOs have a history of sharding to solve that problem anyway, so hopefully that shouldn't be a problem either. (Players will be able to chat together in a shared Discourse forum, so sharding shouldn't really hurt community-building.)

I wonder if any progress has been made since then to support larger teams, though? It's been quite a while, and Slack's engineering team has been cranking out a lot of great features and improvements lately.

[1] http://www.slackandslash.com
Dat Desktop
10 Predictions for the Future of IoT
PostgreSQL Internals (1) for PostgreSQL 9.6
Does your trail camera capture video or image sequence? You probably only need to analyse 1 frame every few seconds or less if you just want to get deer alerts.

I would go with a DIY solution, since Rekognition will get expensive quick ($1/1000 images). If you did 1fps running continuously, you'd pay $87/day.

Nearly any ML framework with an ImageNet pre-trained model will work. Accuracy will be better if augmented with more labeled deer images (ImageNet probably only has frontal poses) but should be alright straight out of the box.

You could run the whole thing locally on a cheap android phone for free instead of AWS cloud pricing, 1fps will be fine with TensorFlow or MXNet on Android. Then just setup email alerts.
An extension to multiple dimensions is mentioned. This would be exactly geometric algebra, wouldn't it?
SVG path morphing animation editor
Missing: http://surge.sh/, also might be worth noting you can host a static site for free on GitHub.
Show HN: Vue Carousel 3d – 3D Carousel for Vue.js
Interesting facts about technology help in education
Video is dead; why did you submit this?
Well then I guess they expect the word "team" should be self explanatory... Maybe it's not.
Sounds like you're a source of fake news, or a victim of conservative media lies.

The media nowadays covers a very wide spectrum from honest mainstream media (NYT, WP, BBC etc) to partizan sources that include a high proportion of lies (Fox News) to the totally dishonest and unreliable (Breitbart, Infowars etc).

Mainstream media reporting based on trained journalists and subeditors, fact checkers and ombudsmen (who publish corrections) is not "fundamentally dishonest and deceptive", despite the efforts of liars like Trump to undermine it.

The American tragedy is that a large proportion of the electorate has been corrupted by alt-right media lies to the point where people deny things that are provably, factually true.

For an informed account of the problem, see: http://uk.businessinsider.com/conservative-media-trump-drudg...
I'll second this - it's a surprisingly quick read. I read through the first part in a weekend; the later have took me a bit longer.
I'll chime in with also highly recommending the Two Scoops book! It was nice to see their design philosophy. I worked with several older releases of Django and found their thoughts on CBV helpful in deciding when/when not to use them. Also, it was nice to see their thoughts on layout. I stepped away from Django development for awhile and a lot has changed from 1.6 to 1.10! I just wish that they had decided to also offer an electronic version! Any idea if they are planning an electronic release this time?
NB - I'm based in London
Actually, archive.org has a copyright exemption from the Library of Congress for certain stuff (of which I think this falls into). http://archive.org/about/dmca.php
Good tutorial.
Thanks for the advice, I didn't know about Sentry.
I will definitely check it out!
Check out http://www.hnreplies.com by 'dangrossman
I have no expertise in this area, however looking at some data from Wolfram Alpha: (http://www.wolframalpha.com/input/?i=poverty+thailand) it seems to be able to break out many relevant statistics and metrics.
I've long thought I should have gone into medicine instead of tech. But not necessarily as a doctor, but rather some other medical technician position.

The pay wouldn't be that high, but that's OK: the job security in tech is the pits, and the high-paying jobs in tech are located in extremely high-cost-of-living locales like Silicon Valley. Making $60-70k as a medical tech in a low cost-of-living city would easily make up for that. And I wouldn't have to worry about unpaid overtime either, unlike tech.
Unless I open up the device, there's nothing to attach ground wire to. The device is constructed primarily of plastic. Grounding the dish wouldn't do anything, would it?
Does anyone know the roadmap for WSL? My guess is that WSL itself is still unstable right now and later on it won't really need a lot of updates.

On top of it, the Ubuntu userland should be freely upgradable - I think.
We see this in plastic extrusion: ambient temperature and humidity play a measurable role in the product that comes off the line, and the process that gets it there.

Shift in humidity = adjustment in drying of raw material & tweak to drying time as the product comes off the line = variability in total production time, for example.

Surprisingly, as referenced in the Bombardier example, adjusting to ambient environment is often manual/overlooked: it’s trial and error on the manufacturer’s part to make the adjustments necessary.
25-30% swings seem a little excessive for a barometer when most of that volatility is market noise rather than real sentiment. If there was a 30% Market crash on Wall Street there would be blood in the streets. Seems like this index needs some work to capture real sentiment.
I've tried it, it's pretty good, gets expensive quick but you don't have to manage your own servers I guess. Plenty of options if you do want to do this on your own server too - hit me up if you want some help
Encryption will only solve a portion of the problem. Google knows how old I am. They know my sex. That can be fairly accurately derived by browsing habits alone. I receive targeted ads for common health problems for people of my sex in my age group. If I ever click on one of those ads, they now 'know' that I have that condition... and consequently, now my data is worth more at the time of sale. Same for Amazon. Same for Facebook.

It's not an easily solved problem. The best solution I've seen is Tor, but then, using that will put you on several watch lists. If that is to ever change, we need something like Tor built into a browser as incognito mode to make it widely accessible.
I think "bash on Windows" is not a valid way of describing what it is.

Cygwin, which allows you to run bash among many things, has been available for TWENTY TWO YEARS now. However it required such software to be ported and recompiled specifically for its use with Cygwin.

The difference this time is being able to run unmodified Linux software on Windows, through an application binary interface called Windows Subsystem for Linux or WSL.

"Bash on Windows" is the least tech-savvy way to describe what is going on.
Design is nice, content is shamefully incomplete. Best case is honest bias, worst case is author has been compensated.
Hasn't been my experience but I suppose it depends on your clientele.
> Of course, it's an uphill battle, especially when you consider that the official name for Mexico is Estados Unidos Mexicanos.

I think in Mexico they call Americans norteamericanos — but of course both they & Canadians are North Americans.

I don't think there's any reason not to call Americans Americans.
I really struggled to get through it. There's something about the rich guy from England now living in SF who went to Columbia using phrases like "oh snap" and quoting Public Enemy that just feels fake and obnoxious.
Yep, this would be in the US. I had hope that there would be, at a minimum, some exclusion for infrastructure on private property, but it appears that isn't the case. Thank you very much for pointing me in the right direction.
To me predicting the future is about the implications of abstract ideas carried out in the world.

I take the idea that we are capable of doing a lot of damage with our technology. I reason that once we discover the damage we are doing, we usually do something about it. However, that process of fixing our mistakes is much slower. So I reason that over time we will do more and more damage, because our technology is progressing at faster and faster rates. And the fixes will be implemented slowly. Damage will eventually accumulate and be catastrophic. After some major catastrophe, say a few hundred million people dead, we will then slow down introducing technology into the system and be much more precautious about it. However, even then there will be economists which will argue their way out of it, saying the damage caused by not growing the economy is much worse than any sort of damage caused to the environment.
Even if they are infected it would be with an ancient DOS virus. I guess it could infect your DOSBox install?
Really nice, I liked the bonus area!

I would increase the area allowed for puzzle manipulation, it feels a bit crowded.
I'd rather say it's a story with some magical handwaving, not necessarily a bad one. (Yes, magical handwaving is a blemish, but not necessarily a catastrophic one.)
Not sure it means the internet is broken, but would mean SSL is broken.
Robots Aren’t Killing the American Dream
The Freespace developers released the source code to Freespace 2 (a game from 1999) in 2002 when they were bought by another studio. That game has since become the gold standard (imo) of space flight simulators and the engine and graphics have been improved every since as Freespace Open so it still to this day feels like a AAA title. http://scp.indiegames.us/
Using dual numbers and modern C++ you can write a library that can do this:

auto lambda =
[](auto x, auto y)
{
// The Rosenbrock function.
auto d0 = y[0] - x[0]*x[0];
auto d1 = 1 - x[0];
return 100 * d0*d0 + d1*d1;
};

// The lambda function will be copied and
// automatically differentiated. The derivatives
// are computed using templates, not numerically.
//
// No need to derive or compute derivatives
// manually!
auto func = make_differentiable<1, 1>(lambda);

"func" now has code for first-order, second-order derivatives all generated and heavily optimized at compile-time.
This is one reason C++ is so good for (mathematical) optimization.
There aren't even that many women in tech who could tell such stories. Your argument is really quite worthless because it could be used to prove anything.

In any case, as I mentioned in another comment, a collection of stories is not a good way to gauge the problem. You need to put it into context - number of women in total, and also, what happens to men. Stories like this suggest that only women ever have bad experiences at companies. But you can find lots of male reports of being unhappy at a company, too. Why isn't that reason for men to quit in droves? Presumably the Uber-woman is happy with her new job at Stripe, too.
Living in the UK here. Never heard of such a crazy idea as putting bread/eggs in the fridge. I don't entirely think this discussion is without merit
Of course he is compensated... there are affiliate links all over the place.

Not that I think that is inherently bad, but you must be careful of bias and understand lots of good options may not be presented.
4chan is back that way, friend
Wireless point-to-point links are comparatively cheap, but require clear line of sight, uncontested spectrum and power. Sometimes you have none of those. Wireless also scales poorly past 1 Gbps.

Fiber is more expensive up front, but cheaper in the long run if your bandwidth requirements grow. Fiber also does not become obsolete, like wireless equipment.
> If I ever click on one of those ads, they now 'know' that I have that condition... and consequently, now my data is worth more at the time of sale. Same for Amazon. Same for Facebook.
>It's not an easily solved problem.

If everyone clicked on stuff they aren't interested in that helps solve the problem.

Also try getting children to use your computer and click ads - that really confuses them. :)
On a tangential note, there's another quality that struck me as (paradoxically) expected and surprising.

In my prior role, I worked as an analyst on a sales desk at a large investment bank -- a group in which "talking with confidence" really was 90% of the job.

The head of the desk had been one of the best salesman in the industry, and had (fairly) received compensation to reward that. However, that didn't quite translate into leadership skills (in my opinion), and I felt our team suffered heavily for that.

It's a split take on "one ends up at the job one is least qualified for", but a result I presume must happen when the culture at an organization such as a large bank promotes a top individual producer to management solely on the basis of his/her individual production.
So is it wrongheaded to think all women are a bit of a chimera, then? It would seem females would benefit for the most part from this chromosomal arrangement healthwise than males, more diversity.
Looks like the YouTube account was taken down.
Well, then you're not using IRC anymore, but some service which by chance uses IRC as Backend
You appear to have not read the article. The very first complaint is about the 10k message limit warnings. The author then complains "Slack would aggressively archive messages, sometimes only minutes after they were sent." He's lucky the messages even went through. He asked Slack for guarantees, after the fact, on the free plan with no intention of paying Slack's rates. Even the user limit problem is silly. It's called a team and marketed for internal use, not as something you 're-sell' or offer customers. It's obvious that putting your users on a single Slack team is not going to scale to tens of thousands of people, as soon as you start using Slack. My point here is that the author did not do his homework before he moved his thousands of users to Slack, and your point falls squarely under this lack of effort.
Yeah, it is confusing. At first I thought he was arguing against an interpretation involving (actual, non-precognitive) time travel, which seemed so obviously right that I found it hard to believe that anyone could ever have claimed that interpretation. Then when I realised he was actually talking about precognition as time travel, he seemed obviously wrong.
True, though this is not the same thin as a notification; Stack Exchange does something like this when you're logged in.