skysight-inc/HackerNews huggingface dataset:
Android development has regressed heavily

I've been building Android software since about 1.5, and these days I can't even create an empty project that builds with Google's toolkit

-> create an empty project, hit build, get weird gradle error messages, .so issues, compilation problems, internal IDE errors, UI previewer doesn't work due to some old .jar that gradle has pulled down, and so on.

and pressing "build" takes 60 seconds on an empty project!

vs. the old ant system that seemed to work out of the box, and would build under a second

(and I pay the Jetbrains subscription for IntelliJ for my non-Android work! and love IntelliJ!)
It is evidence that NRA has fought research which is what you asked. Thus you have now seen evidence even if you don't agree with the conclusion.
Verizon giving AOL its email customers
No, this rightfully deserves to be ripped apart. (Not specifically the Tools > Android thing.) This isn't a small company struggling to put something out. This is Google. There is no excuse for the defects and faults that Android Studio has.
Ask any divorce attorney what happens if you refuse to turn over assets in a foreign account.

The judge may not have jurisdiction over property in another country, but she does have the power to toss you in jail for contempt.
It's either Uber, a local driver, or a translator. Without one of those three, I literally am unable to go anywhere in locales that don't commonly see english speakers. I'm not sure how much more fundamental than "I'm unable to travel".
a) We can re-encode your images, to whatever format
we need to make the website work.
b) We are allowed to display the pictures online.
If something happens and the internet stops existing,
we'll still be allowed to show people pictures where
we go after the web. We are also allowed to display
pictures not only by themselves but also as part of
a gallery. E.g. in search results.
c) We're allowed to resize, convert to grayscale, etc
so that galleries, search results, etc, all work
the way a modern website is expected to.

You need all those rights to be able to operate DeviantArt. You really don't want the licence to become the limiting factor when you implement a new feature on the website, so you need to be quite broad.
"Toxic" seems to be the wrong word for this tool. Another commenter used the word "polished". I think we can agree that the sentence you quoted is "polished"?
You've become uncivil and made personal attacks on HN many times. That's not allowed here, even if your cause is 100% right and all of your views are correct. We ban accounts that do this, so please stop doing this.

You've also been using HN primarily for political and ideological battle. That's another abuse of this site, and we ban accounts that do that as well. HN can't both gratify intellectual curiosity and be a battlefield, so please use the site as intended.
I'm really excited to see projects like make containerized applications more available. There's a lot of awesome new projects in this space and I'm hoping that we as a community can come together and adopt a standard API for compatibility across all tools. CNR[0] is the name of the effort that is essentially extending OCI[1] to support apps (Helm, KPM, Kubernetes, Docker Compose, Docker DAB).

[0]: https://github.com/cn-app-registry/

[1]: https://github.com/opencontainers/image-spec
Can you please tell more about your hardware? CPU, GPS, RAM and motherboard? I am genuinely interested. Would like to know the configuration which makes Android development pleasant.
Agree; put another way, sometimes you really do need a M2M relationship.
If you can do a first-preimage attack, then just keep doing it until you get a distinct document. I'm not sure what sort of first-preimage attack you have in mind that is only capable of producing a single preimage for any hash.
Personally, I have only a few very close friends, and I only open FB once or twice a week to see what their kids are doing. so no, for myself it isn't.
So you are saying that all default settings are unusable in production, to the point docker might not start at all, and the only cure is series of 5 obscure advanced system setup/configuration that are almost impossible to figure out by oneself and not documented, yet they should be totally obvious to anyone using Docker, right?

FYI: It's because of this sort of bullshit that there are articles called "Docker in Production: An history of failure".
The root of this question is: how do you handle M2M relationships in your API?
Could this be addressed by referencing a standard mouse handling document, something similar to:

Pre-experiment mouse handling procedures as outlined in section M.1.2 and M.2.4 of the Mouse Handling Procedure Standards Body Publication of 2014

Which document could have any number of sections detailing the finer points variable control for the relevant experiment.
Runescape's economy was largely based on bots and the economy crashed when Jagex finally purged them all.
... And of course they speak English in Singapore. And the Taxis are awesome unless you are trying to find one during rush hour/shift change.
I don't know, but I honestly don't see companies refusing to hire people on the basis of sex or gender, because it doesn't make finansiel sense.
> Gmail's search and spam-filtering are both very good, trained and tuned on datasets no self-hosted product could ever match (and harnessing parallel algorithms across large clusters that'd be quite costly on one machine)

As someone who self hosts, this is clearly not true. With gmail I was receiving a lot of spam from various email marketing companies like mailchimp, easymail, etc. There's a lot of these companies and they are mostly country specific, some less, some more shady.

With self hosting it is easy to block their servers en masse and forget about them. Some companies spam the DNS namespace with predictable, but extremely numerous domain names, which are easy to block using a few regular expressions. Try to make filters in gmail for that, if you don't know from which of the 100 domains the next email will come.

Email from hacked servers is also easy to block. It's mostly PHP servers and all you need to look for is mention of eval() in the headers as nobody sane hopefully evals PHP code to send email.

It just took me a month of spending a few minutes every other day analyzing headers of odd email or two which passes through some generic checks like checking if sending IP address has a domain name and figuring out how to block the sender entirely if possible.

Now I don't get any legitimately looking spam at all and what I get is easily filtered with bayes filter in thunderbird.

Anyway, with spam the hard job is checking the spam folder and that's annoying as hell with gmail, because it's always full of crap, and it's not easy to see occasional false positive. Now I only get 1 spam every two to three days and that's easy to check. Legitimate people who get blocked get bounce message immediately and have chance to re-send according to instructions in the bounce, instead of falling into spam folder and feeling ignored.

Much better experience overall.
It is because solving a non-problem here creates very real ones. And your analogy is backwards.

The reason why it is a non-problem is that there is an established procedure for this that works quite well. Take the warrant from a US court to a court in the other country, cite the appropriate international treaty we have with them, and then access the information in that other country in accord with local law.

This is how we have to go about getting access to foreign bank accounts. Or getting your personal papers searched if you lie abroad. The same standard should apply to emails.

But US courts wish to apply US law to emails and people who do not live in the USA. Why should US law apply to them? What are the limits of a government of one place applying its laws elsewhere? Do you wish France to be able to access your emails? How about Iran?

Furthermore complying with US decisions like this puts Google in conflict with foreign laws about data privacy. This issue is already costing them a lot of lost business. What penalties are appropriate for their violations of local law?
But to say a collection is 'all I possess' and then expect your audience to come to your work with the knowledge that we all possess intangibles beyond the scope of the things the artist is saying are the only things the artist possesses muddles the piece

Perhaps some abstract objects could have been standins for abstract concepts: this apple represents the love of knowledge I possess; but in their finitude we'd still have the editorialised issue

It is a stated art installation which to me begs to be discussed and so I was discussing what thoughts the installation caused me to have through exposure

My opinions apply to this curated list of items stead some ad hominem of the artist

The items and their aesthetic homogeneity suggests to me a lack of intellectual curiosity but the artist may yet possess more than what is being displayed in this installation
> Due to the pidgeonhole principle, there will always be a second preimage

It's trivial to construct a hash function where this isn't true. However, it should be true for any cryptographically secure hash.
This ^

Quick examples: Minneapolis, Boston, Nashville, and Cincinnati all have much higher percentages of non-Hispanic whites than Los Angeles and New York.

Even if we look at black or Hispanic/Latino percentages:

* Minneapolis: 18.6% black, 10.5% Hispanic/Latino

* New York: 25.1% black, 27.5% Hispanic/Latino

* Los Angeles: 9.6% black, 48.5% Hispanic/Latino

I wouldn't go so far as to say that the data is "all over the place," but I would definitely not say there's a correlation with race.
If the author is a spoiled new-school dev, then you are a grumpy and bitter old-school programmer.

I don't see any devs, old or new, using HTML table tags to build grid systems just because "Hey, I'm so smart that I have the mental tools needed to reason about complex TR, TH and TD tags". It's 2017, if the author is asking for a more competent dev environment then he has the right to his opinion.
> given the two different prefixes (with the different colors) they have to craft two sequences of bits that will put the SHA1 state machine in the same internal state once processed.

No, this is an identical-prefix attack.
I agree with all of these points, but I think we might need some other tool to solve them.

Getting students up and running with Android Studio seems similar to trying to teach HTML+CSS+JS, by having students start with Grunt/Gulp + WebPack/NPM + Ember + Bootstrap and more.

We don't usually do that, because it's a crazy amount of complexity for someone just starting out. Most students begin with something like "edit a single HTML file to learn basic HTML+CSS+JS", and get gracefully introduced to the rest as they learn.

I imagine we need an equivalent of that for Android. I don't know what specifically that would be, but it's probably not Android Studio.
> None of those programs ever have bugs in them, right?

On that note: I am currently enrolled in and working thru the Udacity Self-Driving Car Engineer nanodegree.

We recently had a lesson with a coding quiz, in which the writeup stated that the output we would get might vary between one of two values; this output (for the code involved) should have been consistent, not fluctuating (as far as I could see). But there was this one small bug (?)...

IIRC, it was something in Numpy or Scikit-Learn - now, that was for one small part of this class. Nothing critical - but imagine it was for something important...
SHA-1 and Mercurial security: why you shouldn't panic yet
I thought DeviantArt would be worth more than $36M.
It's just one step removed for paying a journalist to write an article for your brand/product. A practice which is now common place ...

http://www.nytimes.com/2013/04/08/business/media/sponsors-no...
My feeling on swap is this:

1) If you're ok with one machine dropping out of your system, you don't need swap.

2) You should never build a system where losing a single machine is a problem.

3) Therefore, you should never need swap

4) Perhaps there is an exception for a desktop machine, since it's doesn't fit rule 2.
That seems rather weak. The info is still available, you just have to put together your own summary.

I'd wager there's a good chance this summary was removed for more mundane reasons, too. That 2010 table they link to only counts two possible victim races, white and black, and the only options for the offender are white, black, other, and unknown. That's awfully limited given the wide spectrum of humanity we actually have, and maybe they just didn't want to build a gigantic and unreadable table accounting for all the various possibilities.
There is zero reason to believe that software less capable than artificial general intelligence will provide any non trivial software.
My PhD work is trying to address this by developing better ways for scientists to record and communicate their methods/protocols. Methods sections are NOT about providing the information needed to reproduce the work, often even the supplemental information is insufficient. They are a best guess at what needs to be done, and the methods section is often massively condensed due to editor demands and cites other papers that also don't contain the relevant information because some aspect of the method changed between papers. (I could go on and on about this.)

I spent 7 years doing experimental biology (from bacteria to monkeys) and trying to replicate someone else's techniques from their papers was always a complete nightmare. Every experimentalist I talk to about this relates the same experience -- sometimes unprompted. Senior faculty tell a slightly different story, that they can't interpret data of someone who has left the lab, but it is the same issue. We must address this, we have no choice, we cannot continue has we have for the past 70+ years, the apprenticeship system does not scale for producing communicable/replicable results (though it is still the best way to train someone to actually do something).

EDIT: An addendum. This stuff is hard even when you assume that all science is done in good faith. That said, malicious or fraudulent behaviour is much harder to hide when you have symbolic documentation/specification of what you claim you are doing, especially if they are integrated with data acquisition systems that sign their outputs. Still many ways around this, but post hoc tampering is hard if you publish a stream of git commit hashes publicly.
> "...an individual who resided in the United States and was a target of an investigation pertaining to the theft of trade secrets from a corporation located in the United States..."

Google turns over data like this all the time. In fact, ever thing seems reasonable about the warrant, so why are they fighting this? It's right there.

I suspect somewhere within either the Google corporate structure or structures of one of their trusted partners are individuals that have done some thing that could potentially put Google in hot water. It's just a theory, but I think it's plausible.
Unless someone can prove that consumption is harmful for the whole body, what's wrong with that to optimize the renal system at least?
This 'Hitler uses Docker' video seems to be a pretty similar viewpoint on Docker and the world.

https://www.youtube.com/watch?v=PivpCKEiQOQ
Ask HN: What are good resources for understanding data privacy as server admin
The situation is this: I created (creating) and own a web service and have complete (and exclusive) access to the data and code.

Obviously, people who use this service input data which is saved. I have access to the data as the owner and maintainer of the web app, and the user has access to their own data.

Ethically speaking, what rights do I have over the data (I assume few to none)? And legally speaking, what rights do I have over the data?

I know this is not a small topic, so I was wondering what resources you guys could recommend to better understand the scope and intricacies of this.

Thanks
World Stock Markets 1899 vs. 2016
Watch the Rise of Photography in This Video of Every NY Times Front Page
Byzantine Laments
South African Billionaire to Buy 10% Stake in Mobile Money Company TYME
I don't agree. I see it as evidence that the NRA has fought against the CDC conducting policy advocacy. The CDC was advocating gun-control, so people got upset and cut their funding. Then a law was put on the books saying they weren't allowed to use funds for that sort of advocacy, and their funding was restored. I don't see any evidence that the research itself has ever been the target.

The CDC currently has both the funding and legal ability to perform gun violence research, but choose not to. In my mind, if you want more research on this topic, you should be pressuring the CDC to resume it.
I spent 2 years trying to get them to understand that alerts from my credit card company were not spam before finally giving up and moving off Gmail. I am very happy to be done with their spam-filtering.
RTFA

"Some other experts have speculated that differences in shooting death rates could be tied to differences in emergency medical care: Gunshot victims are more likely to survive if they arrive quickly to a high-quality trauma center. By that logic, however, Baltimore should be one of the least lethal cities in the country. Dr. Sahael Stapleton, a surgeon who previously conducted research at Johns Hopkins Hospital in Baltimore, points out that Baltimore gun violence takes place in relatively concentrated areas near the city’s state-of-the-art trauma center."

The general takeaway is that data collection is too incomplete and too inconsistent across jurisdictions to test lots of hypotheses well.
Perhaps I'm just out of touch, but I'm not familiar with any of the alternative tools they mentioned. If we retire PGP (and its GNU clone), what widely available tool should we use in its stead?
You're effectively creating a new hashing algorithm, which is twice as long and twice as slow, and is built using constructs known to be weak.
I usually take two bottles of water with me on a 25 mile bike ride. It's actually pretty common that I don't take a sip of water for the whole ride, because I never got thirsty. I suffer no ill effects, nor decrease in performance. And this is in line with all of the actual science. No one has yet to identify that drinking, or not drinking, a certain amount of fluid causes any ill effects or decrease in performance outside of just drinking when you're thirsty.
Not for my use-case. There's basically nobody self-hosting email that I want to receive emails from. It turns out the egalitarian "Everyone is an Internet admin" solution favored the spammers heavily over the technocrats or common users; letting Google build a system that defaults to trust-off for self-hosting proved to be valuable for a lot of people.

(Because if a tech-savvy user really wants to email me, they know how to make a throwaway email account and sign the correspondence with a verifiable PGP key).
It's entirely possible that "dangerous" PDFs are simply ones with a dead chunk containing image data in in the middle of it, and if there's no dead chunks, or if the dead chunks don't allow for arbitrary garbage data, then it's "safe".
What's the point of funding something that won't help anyone because the author won't tell you how they did it? How is any conclusion that they've come to useful if nobody can verify if it's correct?
Adah Sharma Commando 2 Live Talk
This attack is applicable to SSL certs. Not most CAs as they have deployed counter-measures (such as using a long, random serial number) after the publication of the colliding MD5 rogue CA (https://www.win.tue.nl/hashclash/rogue-ca/) but I'm sure there are tons of companies with IT department and internal CAs who don't follow best practices and could be attacked with SHA1 collisions.
Top Java Logging Method on GitHub? String Concatenation vs. Parameterized Logging
Txt.fyi
Definitely 401k especially if they offer any sort of matching. Roth's are a good additional option, especially if you just starting out in a low tax break and expect to eventually be in a higher tax bracket as you advance through your career. Roths however have a relatively low limit so many of us cannot use them once we reach a certainly income level in the 100ks.
The Continued Existence of the Emacs IPython Notebook
How to Protect Yourself from Creepy, Phone Snooping Spyware
Thanks a lot for the Healthcare Triage link!
Pretty sensationalized headline by the Guardian - he didn't say that it's better to be atheist than a hypothetical Catholic, he was quoting a phrase other people use when referring to hypocritical Catholics.
I think I understand what you mean, but I find it problematic. Do I understand you to mean unless a company refuses to hire based on sex/gender across the board, there's no discrimination?
A few years ago every Wix site was Flash. So...progress, and apparently profit.
This is why I always liked the idea of Unikernels, they let us reset our abstractions without giving up all we've learned in the last couple decades.
Reading the article, he said “How many times have we all heard people say ‘if that person is a Catholic, it is better to be an atheist’”. It is not clear from the article if he actually is in full agreement with this statement, so to attribute the saying to the Pope, as in the title of this article, is not accurate.
Can you put some numbers on it? This is the second comment mentioning race and I just don't see the supposed link.
What Makes Churn Modeling So Valuable for Business?
I had this problem self hosting but was able to remediate it by making sure my server was doing all the smart modern things like dmarc etc... there are some good resources on HN from others who've set up all the right things.

Of course, this all happened after I got bitten during a job search and had most of my applications hit spam folders ಠ_ಠ
7 Easy Ways to Avoid Identity Theft
Although I admit the distinction is exceedingly fine, I don't think that is what he actually said:

How many times have we heard -- all of us, around the neighbourhood and elsewhere -- "but to be a Catholic like that, it's better to be an atheist."

http://en.radiovaticana.va/news/2017/02/23/pope_dont_put_off...
> Add and Subtract From Left to Right

This one's my favorite, and I like to combine it with doing all borrows/carries in a separate pass, which means intermediate "digits" are sometimes no longer 0..9.

For example: 78 + 89 = 7+8|8+9 = 15|17 = 1|6|7 = 167
I agree. Personally if I'm hacking away at something I tend to forget about the world for hours, and it is frustrating to later realise that I couldn't do the least for my health ie : drinking sufficient water.
I don't think this is age dependent. I prefer books to videos for learning programming stuff and I'm in my late 20s. The book/ebook gives me time to review/parse/think about what the code is doing. I can also proceed at my own pace, skimming over stuff thats irrelevant and spending more time on parts I need to think about. Doing any of that is difficult with a video.
Physicists Uncover Geometric ‘Theory Space’
No, that's not what I'm saying. I'm saying that Ubuntu Server 16.04 LTS comes out of the box without AUFS and Device Mapper, and that you either need to enable one or the other before installing Docker or prevent Docker from starting automatically at install time. It sucks, yes, but your description of the problem and its solution is beyond hyperbolic. Googling "docker ubuntu install hang" takes you right to the GitHub issue with the solution at the bottom. And I think it's fixed in Docker 1.13 (it will prefer OverlayFS if AUFS and Device Mapper are not available), although I have not tested it.
This is a rather ridiculous article to write. Android Studio/IntelliJ/JetBrains IDEs have better linting and code completion than XCode. Not to mention optimizing/auto-imports rather than typing them out in XCode.
This decision is basically saying that the Microsoft decision was wrong, setting up the possibility of resolution by the Supreme Court.