skysight-inc/HackerNews huggingface dataset:
Yes, I was referring to the development platform: the platform which runs the tooling for development, cross compilation, downloading, debugging etc..

In my experience the decent vendor provided setups that actually work are all on Windows. STMCube and Keil for ST, Atmel Studio, Code Composer Studio for TI.

Yes you can absolutely compile on *Nix using GCC, but none of the vendors target their tooling for anything other than Windows.
Make sure to use an HPA and set up resource constraints on that ingress controller pod. Unbounded resource utilization may bite you in the a$$.

https://kubernetes.io/docs/user-guide/horizontal-pod-autosca...

Also, you may have redacted it but you don't appear to be adding a service with a static IP:

spec:
loadBalancerIP: 1.2.3.4

Not having a global static IP for publicly accessible resources seems risky for uptime.

We've gone away from using ingress controllers and using services with static IPs + HPAs on nginx pods for this reason. Having to add a service + ingress controller adds complexity and doesn't really add value (IMO) since you can easily add nginx.conf as a ConfgMap and get the same ease of configuration as an ingress controller. Your mileage may vary with let's encrypt integrations.
Setting the language makes Google Earth click (on Linux)
Oh absolutely. There's a few linux distros starting to ship python3 by default, which is great. It's happening far too slowly.

Speaking of speed, I hear 3.7 should finally be able to beat 2.7 for most benchmarks, which is pretty sweet.
> I guess I just really like movies about hiking, even when they're kinda boring.

As someone who is willing to tolerate utter dreck as long as it's In Spaaaaaaace, this made me smile. I think it's just the fact that the setting is so compelling and romantic for me, and I can ignore the flaws and enjoy the little redeeming value that is in there.
The syntax is trying to look friendly and familiar, but ultimately it's an abuse of a standard mathematical notation that has meant something else for hundreds of years. The original meaning, an equality relation, is still being taught to high-school children today, typically before python is forced upon them.
Jack Barsky: The KGB spy who lived the American dream
We have broken SHA-1 in practice
Driving user engagement by leveraging Disqus in Symfony-based web apps
This made my morning. I mean, sure, Skynet, but drones with flamethrowers! The 13-year-old kid in me rejoices.
You could also argue that a civilization has not succeeded until it is able to completely sever ties with its home planet and venture out into the galaxy on its own. Leaving the nest, so to speak.
In time you will come to know that obsessive internet race cheat sleuthing is the greatest form of entertainment in the world. You get your Sherlock Holmes fix, you get insane psychologies to study, and you do good for the world, putting honest racers back on the podium.

There is a new crazy story every year or so, tune in next year, it is going to be great!
They achieved it by making a lot of guesses, based on a huge amount of explicit and implicit knowledge about humans, computers and the world in general.

The brute-force approach described in the article, where you just randomly try lines of code without any other knowledge, won't make for a very competent programmer.
don't have sympathy, these people are always awful.
Automation is always a good thing. Should we stop progress to allow humans to do some inefficient work?
Society will have to change so that work is something done by machines, not humans.
When these journalists discover how compilers work, they will stop thinking that computers writing code is something uncommon.
Conda people really understand how to distribute code. It is great except that it doesn't always come with the latest package versions. Some packages are a few years old, which sometimes troubles.
I think things like psychology/psychiatry, social work, child protective services, and other jobs that rely on a lot of interpersonal communication will be around longer than development; at least at any scale worth talking about.
Here's my 2 cents on why software developers will never be at the risk of automation: https://medium.com/@kapv89/code-will-always-be-written-207d3...
How does a Recommender System works, learn by doing your own in Python
Show HN: Corbie – Random daily lessons on general knowledge delivered via email
I know job posts where having a Stack Overflow account with a certain amount of reputation was a must-have. Surprised to see the article not mention that :)
If anyone is reading this, I found Isso pretty easy to set up on localhost. (1) Installing Isso was a breeze; their documentation is top-notch -- https://posativ.org/isso/docs/install/ (2) I then updated my Hugo theme to support Isso -- https://gitlab.com/kaushalmodi/hugo-theme-refined. I use this setup for my work-blog where I serve the blog+comments from my work machine. Now I only need to get a hosting server so that I can do the comment serving for my public blog.
What a wonderful bubble author must be living in. I work in game development, and most of the tools I use are close sourced - and outsourcing anything of our own code is almost always out of the question.

Please, please stop assuming that "software development" is a thing that you personally are inside of.
This may help you https://github.com/lukasz-madon/awesome-remote-job
I removed this comment from here, and posted it here:

https://news.ycombinator.com/item?id=13713557
I do not feel competent to say exactly why is it so. The information is available on Wikipedia, probably based on Scott Aaronson survey mentioned in other comment.
There's also ...

if(Math.round(Math.random()) === 1) {
export let foo = bar; // have fun debugging!
}

I think it would also be fine to execute modules to see what's in module.exports, while some modules might have side effects like writing to /etc/passwd without calling any method, it's not the norm.
So send file streams the file from disk out to the browser? FileStreamResult???
So good timing to have just started working on a sha3 version of git I guess...
Matplotlib's main API is pretty terrible. But it's just fine for the simple plots that scientists and engineers are often needing (e.g., just plot y vs. x). It's also pretty straightforward to get publication-quality plots. Bokeh can handle simple plotting and more complex visualizations, but it is aimed mostly at interactive visualizations rather than plotting for publication. For now, matplolib is the only real option for that in the Python world.

Matplotlib inherits most of its baggage from originally being meant to mimic Matlab plotting that many were then familiar with. As an aside, I find the pandas interface to plotting with matplotlib to generally be much easier to work with.
Update to self.. nope, it works! -- https://news.ycombinator.com/item?id=13713507
I learnt BBC Basic before my high-school algebra and was certainly confused by the different meanings. Don't concern yourself with tail recursion if you are still learning FP, it's just an optimisation, nothing to do with semantics. Python doesn't have it and few people care. What do you want to do with the numbers 1..100? A for loop doesn't give me any hints, which is part of its problem.
I've used both extensively in IntelliJ IDEA Ultimate. It's slightly harder to setup than TS, and it feels less mature - but it's very hard to explain why with concrete examples.

I did have to turn off code completion based on flow, because it slowed down the IDE noticeable (they do warn of this next to the setting...), but I hope that support will improve in the next versions, as flow gets more mature.
I was able to set it up successfully. Details -- https://news.ycombinator.com/item?id=13713507
Tesla will finalize locations of Gigafactory 3 and 4 this year
> none of the vendors target their tooling for anything other than Windows.

Atmel [0] absolutely does.

ST [1] does.

TI [2] does.

You want to run that one by me again?

[0] http://www.atmel.com/tools/atmelavrtoolchainforlinux.aspx

[1] http://www.st.com/en/development-tools/stm32cubemx.html

[2] http://www.ti.com/tool/LINUXEZSDK-SITARA
No I don't think so ... it's standard cab pricing. Pay by duration. I don't really have an issue with that. Nor do the drivers probably.

At busy times it will cost you more, though not too different at the end of the day from Uber's "surge pricing" though.
Show HN: Guess the Emoji Quiz Online
As noted by another comment in Swedish, that appears to be your project[1]. I don't see anything in the HN guidelines specifically[2], but I think it's customary to include a disclaimer when recommending one's own project. Just might bear that in mind for next time.

[1] http://agevik.se/about

[2] https://news.ycombinator.com/newsguidelines.html
How efficiently does Morse code encode letters?
Boffins exfiltrate data by blinking hard drives' LEDs
I'm not making an argument that it is bad by any means, im only countering a common thread in development circles that 'development will never be at risk of automation'

for an example, see kapv89's response to my comment. Its a seemingly very prevalent view that somehow development will not suffer job losses from the efficiency gains innovation is able to create.
You bet it is. I'm pretty sure that european providers are watching very closely and are trying to figure out how to make something similar work over here. It's always easier to argue if there's a precedent.
Show HN: Price comparision for Uber and Lyft with scip (iOS)
To give another example, Ubuntu is moving towards Python 3 by default, the plan is to have it as the only pre-installed Python version by 18.04 LTS, which is only a year away.

https://wiki.ubuntu.com/Python
I think it's worse for the reader. Experience gives you "undocumented" knowledge - for example, knowledge of how system behaves under real load and what bottlenecks are and what are other limitations of particular architecture.
How to Use Shadows and Blur Effects in Modern UI Design
How I found a startup partner when I had no clue where to look
Sri Lanka 'hunting' refugees who sheltered Snowden in Hong Kong
Ethereum Creator Vitalik Buterin Reflects on Lessons from the DAO
The last 3 jobs of mine have been in a large part influenced by my OSS projects (one of them was ENTIRELY due to one of my projects).

But I've always made a point of writing OSS code the same way I write closed projects: Well structured, documented code, proper tests, user guides and API documentation, architectural diagrams if necessary, and a professional attitude when dealing with users. Every major repository or sourceforge or sunsite tarball is a public statement to how I write real products that people use.

Over the past 20 years I've written close to 500KLOC of finished OSS code. It's honed my skills, kept me sharp, helped others, and gotten me jobs.
50% of all Internet traffic is now encrypted
Doesn't TDD basically provide a spec? Write a test, then let the AI generate a program that passes the test. If the program is still buggy, you didn't write sufficient tests.
Could a subtle tweak to Metro’s map fix overcrowding on the Blue Line?
Hey man, the internet is not something you just dump something on. It's not a big truck. It's a series of tubes...

But on a more serious note, given this new environment if one were say, developing/bootstrapping a B2B SaaS would it make sense to prioritize developing/selling a self-hosted(e.g., "enterprise") version of the product over a "cloud-based" offering?

Or, perhaps the major cloud-based IaaS/PaaS providers like AWS might negotiate with all of the bridge trolls themselves (on behalf of their customers), and just pass down the costs via higher rates to all of their subscribers?
You type in 'sudo apt-get install build-essentials' and you have it. I don't what the process on Windows these days but you used to have to find visual studio install media, install it, and reboot two or three times.
A lot of things require you to specify the Java namespace like the "swing" demo. Iterating through a folder was similar. There are several Clojure books explaining FP concepts, but not much in the realm of here is how you do basic task "x". This isn't perfect in any language, but I've never had trouble with Perl, Python, C#, Java, Fortran...etc.
SHAttered
Anyone have back of the envelope calculations for the cost of the CPU and GPU time?
Yes. In Germany for example. Deutsche Telekom openly advocates against net neutrality, https://www.telekom.com/en/company/management-unplugged/deta..., and already practiced (don't know whether they still do that) zero rating to boost their offerings, and some partners like Spotify. Politicians wanted to end net neutrality, see http://www.dw.com/en/german-parliamentarians-tackle-net-neut....

The last EU regulations protect net neutrality, but afaik there still are loopholes.
Wikipedia says "Today ZFC is the standard form of axiomatic set theory and as such is the most common foundation of mathematics."

What my parenthetical comment that you quoted meant to say (for anyone that was not familiar with it) is thaz ZFC is not some joke, or obscure set of axioms or something irrelevant. Without this remark I thought my comment read that way.

I hope you will agree that ZFC is simply "standard math" - even if its axioms are not referenced explicitly by many working mathematicians.

If this statement requires further refinement let me know. Obviously I'm not a mathematician!
If you don't poop it out, why were my poops 2-3x as voluminous when I was on a weight loss regime?
It was bound to happen. Next up, are robots people?
Here's a good blog about how SHA-1 works:

http://www.metamorphosite.com/one-way-hash-encryption-sha1-d....

The biggest risk I see with this is how torrents are affected:

https://en.wikipedia.org/wiki/Torrent_poisoning

There's also a problem with git, but I don't see it being that as susceptible as torrents:

http://stackoverflow.com/a/34599081/6448137
> Hailo doesn't do anything to make travel more affordable.

That is a fair point.

With regards to drivers having to have "the knowledge" I consider that more a feature than a bug. I've gotten a few taxis in the last while with drivers relying solely on GPS - including a couple of Hailo drivers - who ended up taking hopelessly circuitous routes, or even got lost altogether.

Agree that the artificial limit of taxis and cost of licence is an issue. You should try getting a taxi in Dublin where there was wholesale deregulation about 15 years ago. You can get a taxi in minutes! Sucked for the drivers at the time though.

I believe in London you also have the option of the "minicab" (here they're called "hackey" cabs) - which is what the Uber business model really augments. All it takes is for those guys to catch up with technology and Uber becomes irrelevant once more. I'd be fairly sure they're up-to-date on the dubious labour practices though /s
I applied for a community role at Digital Ocean and got a generic "background doesn't match" response. Would be great to chat to a real person about if I might fit another role better or what I should focus on if I want to apply again in the future :)
If you could make about 50 more of these snippets...I'd be using F# everyday :)
if you want to dominate the self-driving business you have to control the hardware, Uber doesn't have the cash, the brand or expertise to do it.
An epidemic of unnecessary and unhelpful medical treatments
On the shattered webpage:

This attack required over 9,223,372,036,854,775,808 SHA1 computations. This took the equivalent processing power as 6,500 years of single-CPU computations and 110 years of single-GPU computations.
>...That means Git and unknown number of other widely used services that rely on SHA1 have THREE MONTHS to wean themselves and their users off the insecure function

https://arstechnica.com/security/2017/02/at-deaths-door-for-...
Why are people so excited about planet which is 39 light years away, when we are living in a society where 8 hours of slavery is required to survive. This is not listed focal.
Show HN: Jsdoc-rtd, a readthedocs-style jsdoc3 template
An Alternative Way to Automate Sysadmin Jobs with PHP
I know my personal views about sexuality and proclivity, expressed on my personal web site, cost me at least one possible job, and maybe a couple others as well, over the years. If my views on these issues were to be discovered on the internet, either on a personal site, or some social network, by someone in the HR department of the Fortune 150 I work for, I would probably be summarily dismissed. So, the "chilling effect" has already happened, and it's only working against one side of the ideological spectrum. Oh, sure, we still have "freedom of speech" in the US, but only if it's politically correct. Otherwise, you'll also be exercising your "freedom to be out of work."
I don't think this has been true for at least a couple of years. There are wheels posted back to 2014 and maybe farther (didn't check beyond 1.4.1).

https://pypi.python.org/pypi/matplotlib
VSCode is a lightweight IDE, despite them branding it as an editor, it understands project structure, has integrated debugging, task runners, GIT integration.

Honestly if I could get TFS integration on the level of GIT (for work, although ideally we would migrate to GIT) I would dump VS - it's bloated, when stuff fails you have no clue why or hope of fixing it, VSCode mostly wraps CLI tools so if the default integration fails you can work your way through it, unlike fucking TFS magic VS integrated tracking failing or whatever.

VS is still the only choice for .NET proper, but for .NET Core VSCode is usable enough and improving.

TS integration is the best I've seen, they are the first to support new TS features
What's the impact to something like git that makes extensive use of SHA-1?

In their example they've created two PDFs with the same SHA-1. Could I replace the blob in a git repo with the "bad" version of a file if it matches the SHA-1?
We have a system like this in Sweden, it is called Swish and works wonderful. The way you recieve money is my connecting your mobile phone number to the app and connect it to one of your back accounts in your banks web interface. Then to send money to me you enter my phone number and "swish" the money and you will have it on your bank account within seconds.
Good thing I use MD5 for everything... no, but as with everything else companies are really slow with upgrading their security, and many that I've seen are still using both MD5 and SHA1 for both certificates, file-hashing and "storage" of passwords. I am probably stating the obvious though...
When I looked at the image[1] illustrating size/mass/orbit periods of TRAPPIST-1, I was fascinated by the orbit period:

6.10 days, for example, for planet e! Suppose we were to be able to stand on that planet and stargaze outwards, won't that be extremely dizzy? :)

So what are the immediate (strange) properties brought forward by median of 6 days of orbit period?

[1] http://www.space.com/images/i/000/062/962/original/trappist-...
> Here are some numbers that give a sense of how large scale this computation was:

Nine quintillion (9,223,372,036,854,775,808) SHA1 computations in total
6,500 years of CPU computation to complete the attack first phase
110 years of GPU computation to complete the second phase

So no need to panic or urgently switch, but time to slowly transition
These are not experts.
The recent explosion of partisan news sites
Do you have a paypal account. in case if you have you can add an extra 650 a week in your pay only working on the internet two hours per day. look at this link... http://bit.ly/2atnA1a
Google launches robo-tool to flag hate speech online
> When the subsidies run out we will all be fine, drivers included.

If Lyft is still subsidised they'll replace Uber, sure. What happens when the VC subsidy moves away from the category entirely though?
Fast growing startups seem to prove you wrong, just like the fact that Linux concurred the Server market or that Microsoft and IBM lost a lot of market share to Apple which in turn lost market share to Google. I think these are examples of fair competition: A large company grows stale or is aware of a trend to late and someone else jumps into a market hole they missed. This is a natural stop for monopolies (ok, the ISP situation in the US is something else, I agree, the cost to enter that market is extreme and you don't "share the copper/fiber" with multiple companies as other countries do).

The lobbying problem however pertains to companies such as Bechtel, Halliburton (construction), Raytheon (weapons manufacturer) and Monsanto (Genetically engineered crops) and many other operating at a level known in "Confessions of an economic hitman" as the Corporatocracy. In general these are companies further removed from the voters, and politicians serve as their proxies in order to obtains funds to be an influential politician in the first place.
Great question... Can anyone answer this? Seems ripe for exploitation.
8 Marketing Automation Mistakes You Might Be Making and What to Do About It
It's depressing how often I hear this sentiment. So I'll just repeat: Those are far from the only two options available.

Advertising makes up about 20% of the US economy. Is it really so hard to believe that there are rewarding, ethical jobs available in that other 80%?
Smart people getting rich with WordPress
StackOverflow post explaining how Git would handle a SHA-1 collision

http://stackoverflow.com/questions/9392365/how-would-git-han...
That attitude is why you are subjecting yourself to 8 hours of slavery!
>Nine quintillion computations; 6,500 years of CPU; 110 years of GPU

Is there a rough calculation in terms of today's $$$ cost to implement the attack?
It's probably doable, but your commit will be huge with a lot of comments or dummy files to make the collision possible.
> If you use Chrome, you will be automatically protected from insecure TLS/SSL certificates, and Firefox has this feature planned for early 2017.

No need to wait. The option to reject SHA-1 certificates on Firefox is `security.pki.sha1_enforcement_level` with value `1`.

https://blog.mozilla.org/security/2016/01/06/man-in-the-midd...

Other configs worth doing:

`security.ssl.treat_unsafe_negotiation_as_broken` to `true` and `security.ssl.require_safe_negotiation` to `true` also. Refusing insecure algorithms (`security.ssl3.<alg>`) might also be smart.
Chaka Salt Lake,The Best Hike in China
The shattered site explicitly singles out git as at risk.
Funny, just yesterday I thought about what would be necessary to change and deploy this. Apparently the SHA1 hash wasn't designed as a security feature, but I would not be surprised if it is being abused as one today.
It's been time to slowly transition for the better part of a decade. Still, if you need to start now, it's better late than never.
This is not a pre-image attack, so you can't create a file that matches an existing SHA1. It's a collision attack, so you can create two files whose SHA1 is the same.

So what I could potentially do (given a multi-million dollar budget) is create from scratch two git repositories with different content, whose HEAD is the same. This would allow me to serve different repositories to different users.

What is currently still not feasible is to create a custom git repository whose HEAD matches that of the Linux kernel.

See also: http://crypto.stackexchange.com/questions/1173/what-are-prei...
How much is that in AWS dollars?
There's a good explanation here:

http://stackoverflow.com/a/34599081/6448137
It is, but most cases of "price gouging" are the same. Uber's great innovation (if that's the word) was a willingness to actually vary their prices in this way.
I knew Google "knew something" about SHA-1 being vulnerable to collisions when it announced the aggressive timeline for deprecating SHA-1 support.

They got a lot of flak for trying to deprecate it "so early". It's nice to see them proving everyone wrong on this.
This osund like all the promise of JavaBeans many years ago, just drag and drop and let the components write themselves.

Writing code isn't the difficult part about building most software.