skysight-inc/HackerNews huggingface dataset:
Can't agree more. The problem might not be Android studio, it might be the state of development and needing to understand a dozen tools before you can even click "run", but either way you could spend all year teaching the students how to use the tool and still never make anything. Ironically FRC tooling is easier to use than FTC. We ending up using the browser based blocky tools and it has been great. Students don't need anything installed on their computers and can just start building.
Actually what is hardest to filter is bounces from gmail servers. I'm not really sure how spammers generate them. They are not in response to anything that I send. It seems like google ignores my SPF records, even though it indicates that it found that the sender forged the From header and sends me the bounce with attached spam that is targeted at me anyway. Quite annoying.

EDIT: I guess I can just reject the gmail bounce if it contains the "Received-SPF: fail (google.com:". Ah!
I'm naively surprised at the amount of torque and power required to spin the magnet heads. Those are huge motors.

It would require some serious refinement to have benefits over air cushions, but I can certainly see a practical use for moving heavy loads slowly.
> I don't really understand why one would actually want to work at Uber.

Believe it or not, what makes a company attractive to work for can vary from one person to another! Culture may be important, or it may not be. Interesting and impactful work may be important, or it may not be. Money may be important, or it may not be.

In fact, I'd love an example of a company that is struggling to find employees due to a toxic environment or a perception of toxicity. For every engineer who says "Yeeech, I'd NEVER work for Company Abc" there are ten who would LOVE the opportunity.
Use cgroups or `ulimit -m`.
Is that $500/h freelancer/contractor fee? Because that seems absurdly high for someone on a payroll no matter how much of a rockstar they are.

If so, then you have to factor in all the non-billable hours you spend getting clients/contracts, advertising, and general housekeeping required to run a company. Then stuff like health care, car, phone, computer, electricity, office and other expenses.

Just saying that you can't just say: "my time is worth $500/hr" if that's what you bill for 4 hours a day for a client for few weeks.
Socket API thoughts
I built this script, and I'm 17. Gained over 20 pounds since I started programming all day.
A health-care change that could prove catastrophic
Amazon refusing to hand over data on whether Alexa overheard a murder
I can't tell you how many times I tried (unsuccessfully) to replicate a procedure using the methods section in a research article.

Then I contact the author and they send me a protocol that is a 'distant cousin' to what I read in the published article.

This caused me to assiduously report methods when I wrote papers.
It was estimated they took 14 years to build.
It's not like they're running Seti@home on your phone. Presumably you're on Facebook for your own value. The micro energy cost st the individual user will be a rounding error but for Facebook and it's infrastructure it could be a huge savings and should deliver better user experience. Seems smart to me.
Bitcoin is within 0.4% of its all-time high (http://www.coindesk.com/price/ - peaked at $1165.89 in 2013). ATH breakout could and probably is going to happen any minute now... In fact many exchanges have already reached their ATH in the previous hours.
That's mentioned near the end of the article, near the call for better data:

> Some other experts have speculated that differences in shooting death rates could be tied to differences in emergency medical care: Gunshot victims are more likely to survive if they arrive quickly to a high-quality trauma center. By that logic, however, Baltimore should be one of the least lethal cities in the country. Dr. Sahael Stapleton, a surgeon who previously conducted research at Johns Hopkins Hospital in Baltimore, points out that Baltimore gun violence takes place in relatively concentrated areas near the city’s state-of-the-art trauma center.

> There may be dozens or hundreds of other factors — the placement of ambulances or the amount of street lighting, for example — that may help explain why shootings in certain cities are more lethal than those in others. Without further research, however, it’s impossible to say for sure what drives these differences.
Also, they used a chosen-prefix attack for creating colliding certificates.

The SHA-1 attack is identical-prefix, which gives you much less flexibility.
"There are huge monetary incentives to pushing this agenda"

I couldn't agree with you more.

I also do not buy into the "it's all your/my fault" marketing, b/c it is using guilt and fear to distract focus from the financially incentivized policy makers to the easily swayed mob... one group has the power to effect change, the other has been deluded to believe it can(rare exceptions occur, often over-embellished by Hollywood). Follow the money.

I also see the brown cloud every day over the city I live near. I know from education and experience the only unchecked growth of an organism/group in the natural order is cancerous and parasitoidal in nature; ie: it ultimately kills the host element. The world is full of Thomas Midgely Jr's who would have me believe the exact opposite of what they also know is true, how to find the truth? I don't. I edify myself, I take personal responsibility for my actions and I try to stay away from these MSM and online discussions... try being the operative word.
Show HN: HN Slack Bot :)
... at which point you might get to rot in jail for contempt until you fork over the decryption key.

I don't have a convenient link to the xkcd comic right now that talks about the difference between theoretical and practical security. ;)
Social Media Are Driving Americans Insane
Might this be solvable if high profile journals began to only publish _reproduced_ results (by independent teams)?
$20/month? Seriously? No thanks.
Shot placement? That and getting a .22LR in the hand is a little different than getting a 12ga slug to the head
Everyone stop implementing programming languages, right now It's been solved
Sea of Nodes (Compiler Technique)
One statistic I would like to see is the % of homicides that are solved. So many urban killings end up becoming cold cases because of the lack of witnesses.
What Is Your Burnout Telling You?
Exporting assets from Sketch while keeping the bounds intact
To OP: You site shouldn't tell me I'm "searching too much" when I zoom the map. :)

I did a search for "Cupertino, CA" and it said there was nothing, so I started zooming in on Cupertino from the world map. After I got to the city level it blocked me.

Otherwise, it looks cool. I like the idea of using an app to get some real time data.
Ha! Sorry, you don't get my joke. It's not "part" but "all"!
They finally found something more obnoxious than downloading 2 megs of JS with another three seconds to parse/compile/preprocess css so that they can render two paragraphs of text.

Honestly outdoing that level of unnecessary client pushing nonsense is really an achievement.
How do you plan out an automobile collision homicide?
Now you can send money abroad on Facebook
Recent open source hardware trends, from SBCs to servers
I work on the security engineering team at Dropbox, and help manage our open source programmes.

Note that we aren't doing ``.format()`` or ``%``, but passing the fill text as the second parameter to ``.execute()`` — this is the correct way to protect against SQLi using MySQLdb.

I actually mistakenly thought this was SQLi when I was reviewing this code for release. Unfortunately, the MySQLdb documentation doesn't make that obvious.

See http://stackoverflow.com/a/7929438
And it is result of stable growth over past year...
> The SEC will decide by March 11 whether to approve one filed almost four years ago by Cameron and Tyler Winklevoss. If approved, it would be the first bitcoin ETF issued and regulated by a U.S. entity.

This would combine the ridiculous volatility of bitcoin with the all-day tradeability of an ETF. What could go wrong?
Why does that feel like too much? Just curious how you're thinking about the pricing.
Yes, but is anyone looking?
API Design: Think First, Code Later
How to sleep better with orgasms
Put cursor on the method. Tap the icon of a 2x2 grid for the file. Tap the callers menu item.
The "signing" usually doesn't involve any cryptography. You just express your agreement, which can be as trivial as typing your initials in a box.

It's purely a legal, not technical thing, so if you cleverly forge the document using collisions, you'll be shouting "but the SHA-1 matched!" from behind the bars.
Don't cry, you can run bash on Windows 10 now!
There's very few completely linear relationships in all of economics. Economies of scale, especially, are often at least polynomial.

I'd say a website with 100 million members is worth far more than 4x as much as a site with 26.
Another all time high (or so):

Over 100k transactions in mempool (waiting to be confirmed)

https://jochen-hoenicke.de/queue/all.html
> So if two files are identical except for one block, and those differing blocks generates the same SHA-1, then the whole files will generate the same SHA-1.

Is it really that simple? If that were the case, then you could take the two colliding blocks from Google's PDF and trivially use them to create an arbitrary number of colliding files. I would be really surprised if it was that easy.
Hey, the terminal is Hyper and the theme is spaceship (by Denys Dovhan), you could find it on github here : https://github.com/denysdovhan/spaceship-zsh-theme. It is a theme for oh-my-zsh. There exists a standard oh-my-zsh theme named spaceship too, so don't get confused.
It's done.

We are not native English speakers so we tend to write convoluted sentences that are difficult to parse.

Thanks again.
hey yebyen- i was one of the very first beta users of ECS, and I now work for AWS. first off, sounds like maybe we're not doing the best job we can be with educating users on ECS- that's on us, and we'll focus on improving. to dig into your actual question: when ECS launched, the goal was to do a smaller number of things really well, and then listen to the community on what _they_ wanted to see from a container management platform, and grow accordingly. I've seen a number of significant improvements over the last year or so. Off the top of my head: ECR (thanks @coding123), task placement policies and strategies to give developers more control over how they place tasks and use resources, IAM roles for tasks, event stream for cloudwatch events, service level autoscaling, ALB support, and a number of smaller configuration changes, like multiple network modes, and out-of-the-box support for and awslogs driver. also discovered while writing a workshop the other day that there is a pretty sweet first-run wizard for users just trying out ECS for the first time. in any case, a couple of main takeaways here: i'm seeing a focus on adding features and services that reduce the operational work for developers- let AWS worry about scaling and managing your cluster infrastructure, and you can focus on building cool stuff. beyond that, though, developers have asked for more control, flexibility, and extensibility, and i think ECS is working on delivering that: the cloudwatch event stream can be consumed by other services, the blox open source project (and the already opensourced ecs-agent) let you build custom schedulers/functionality on top of what AWS offers, placement policies let you customize how ECS consumes your cluster resources. would love to know where you get your news and why you haven't heard much about ECS, so we can make sure we fix it. if you want to talk more, you can also DM me
Jabber here too. Works decently well, except they run URLDecode four times on all messages. Makes chatting about URL encoding errors very difficult.
Learn all about the lactation fetish
Is it eventually going to run rkt/cri-o/lmctfy?
Females in tech in front-line positions roughly match the number of those graduating with relevant education.

It'd rather seem that the primary argument to 'diversity' should be 'getting more women to study the relevant things'.

Though: surveys show that women in tech see the #1 issue is 'lack of role models' - ergo - a degree of feedback here, but really ... I firmly believe that if 50% of Comp Sci grads were women, that roughly 50% of Google Engs would be female.

Caveat: in management positions there is a totally separate spate of issues.

Also - similar issues apply to ethnicity. Tech is about 30% Asian, and very few African Americans or Latinos, which is again commensurate with the pool of graduating talent. Again there are clearly feedback issues - nevertheless - one cannot ignore this white elephant.
The linked decision, if you read it, discusses this. Google has in the past responded to similar requests but after the Microsoft decision they responded differently.
Is headless Chrome working yet?

https://chromium.googlesource.com/chromium/src/+/lkgr/headle...
There is zero reason to believe it will not.

look i too can make baseless assertions.
I have been using various operating systems for a while.

I feel like Linux has, in general, from a UX point of view, the worst behaviour when swapping and the worst behaviour in general under memory pressure.

I feel like it has gotten worse over time, which might not be just the kernel but the general desktop ecosystem. If you require much more memory to move the mouse or show the task manager equivalent, then the system will be much less responsive when it thrashes itself.

Honestly, I'ld much rather have Linux just crash and reboot, that'd be faster than it's thrashing-tantrums.

Luckily, there's earlyoom, which just rampages the town quickly if memory pressure approaches. Like a reboot (ie. damage was done), just faster.

In any case, it makes me sad (in a bad way) to see how bad the state of things is when it comes to the basics of computing, like managing memory.
The problem seems, to me, to be one of jurisdiction and international legal privacy differences.

US corps like Google want to be able to provide services to people all around the world. If they can be compelled by a judge in any country to provide data on any user, that could cause a lot of problems.

for example say a user in Germany makes a deal with a user in the USA which then goes bad and the case is heard in the US. In Germany the privacy laws are different and could prevent the data from being used in the case. Can a US judge require that data to be produced?

Next step in the chain, a russian user and a US user have a deal, which goes bad, and a russian court requires the data from the US user to be provided. Should it?

Now the obvious argument here is one of american exceptionalism, that google is a US company and therefore needs only concern itself with US law. Unfortunately that leads down the line of companies in other countries not making use of Google's services as they can't legally allow data they process to be subject to US laws...
I think the title is a little inflammatory. The conclusion does not say we should stop using PGP but consider the weakness inherent in its operating model and assumptions when evaluating future replacement. I think it is fair to say that the world is still waiting for said replacement, and until that arrives, PGP still has a number of valuable properties, one of which being it exists.
"toilet humour" is ... golden
Signal? Some paid services seem to be blossoming, see https://protonmail.com
Is a Roth 401k an option through your employer? With a Roth 401k you pay post-tax so you won't reduce you're taxable income but it will grow and be tax free when you pull it in retirement. It also allows you to contribute up to $17,500 per year, $12,000 more than a regular Roth IRA.

Edit: https://en.wikipedia.org/wiki/Roth_401(k)

Edit 2: With my employer, I can elect my contributions to go into a Roth 401k instead of the regular 401k. They still do a company match, however their funds I believe have to go into the 401k plan and they need to do some extra math to determine the correct match amount due to how taxes affect the amounts.

Edit 3: Because most HNer's have high incomes, it might make more sense to contribute to a regular 401k and reduce your taxable income today. If you plan on saving lots of money and remaining in the same or going up in tax bracket in the future then Roth 401k might make more sense. The question is, do you think, generally, taxes and tax brackets will go up, down, or stay the same and how much money do you plan or hope to withdraw from your accounts in retirement?

Edit 4: I split my and my employer contributions about 50/50 between regular 401k and Roth 401k.
For that to be the case, in real hash functions, it would require you to be constrained to a certain number of possible preimages, not too many more than the number of possible hashes, so that it's likely that H^-1(H(x)) = x but there can still be a distinct y such that H(y) = H(x).

So I concede that this could be the case under very specific circumstances, but I doubt it makes much difference in the real world.
From your lips to god's ears, man. Having a tight development feedback loop is truly a blessing. They've been working on it little by little, but compiled languages just kinda hurt in that regard.

That said, native is one of those places where you just have to have a lot of compiled code. Those lil phones try hard, but battery life being what it is, performance is a factor. Javascript can only go so far. Especially for consumer development, when you are going to get taken to the woodshed if somebody's piece of junk twenty dollar android special can't hold it together.
60 ETFs are more volatile than Bitcoin: https://www.bloomberg.com/view/articles/2016-11-01/five-reas...
There's a lot of conferences that overlap.

The biggest ML conferences are ICML and NIPS. ICLR is a new one focused on deep learning that is also very good, but smaller. AAAI seems to be the big general AI conference, but I haven't really seen much talk about it. KDD seems semi-popular, but not a top-tier conference.

There are also application-specific conferences like ACL & EMNLP for language & CVPR for computer vision.

I'm not an academic, but I went to ICML last year since it was in NYC, and it was definitely worth it.

This wikipedia page has a list of some others: https://en.wikipedia.org/wiki/List_of_computer_science_confe...
Let me just say that I hate minutes-old HN accounts partaking in these discussions (which I believe to be off-topic for HN).

However, I think you make a good point that adds to the discussion; I just wish you'd use your normal account.
This technology (Halbach Arrays) has also been used to create passive electromagnetic bearings (a couple of windings of wire sent any field imbalance to the opposite side of the array).
Qrlogin – Like whatsapp (express/socket.io/firebase)
My emulator runs great although I still have a HDD(vs SSD) which bottlenecks emulation once in a while. My setup is a Core i7 3770K, 32GB of DDR3 RAM, and Windows 7 Enterprise. My emulator is currently consuming 2.7GB of RAM.
>bad for Tech workers in the US as storage providers move their facilities over-seas

Great for the rest of the world's rights though!
Well yes, of cause there could be issues with the people doing the hiring discriminating, due to personal opinions. In the case from the article, with Facebook only hiring one black women, it's not really relevant, when we don't know how many black women applicants they had. Ignoring everything else they should have hired 30 black women, assuming California demographics. Honestly I think it's more to do with women picking other careers and more black people being poor and not having the resource to acquire the skills Facebook seek (which of cause it a problem in it self).
> (1) old, unfocused open-source platforms which are tired and broken, or (2) new, amazing publishing systems which are completely proprietary and closed

Nothing against Ghost, but I've spent about a decade in the area of content management and publishing and don't recognise 1 or 2. The proprietary market leader is AEM which is atrocious to actually implement once you get past their sales demos, and in open source you have Drupal which is a well proven solution for large and small scale publishing, particularly relevant with Drupal 8 and its publishing focused distro Thunder (both particularly adept at services and deployment, tricky areas in publishing)
What Is Wrong with Flipkart and Snapdeal – Startup Woes
At least you know what happened. With google and such, you wouldn't even know you're under threat.
Not the above, but it runs great for me on both my desktop (Intel i5-6600K, 32GB RAM, SSD, some random ASUS ROG mobo), my old desktop setup (Intel i5-2500K, 16GB RAM, HDD) and my laptop (Intel i7-4760HQ, 16GB RAM, SSD).

It certainly runs far better than Xcode, since that won't even start on any of those!
I'm happy the post helped you :)
Don't get confused by the label "non profit". Not for profit hospitals still make a lot of profit for their management. Their incentives are similar to for profit hospitals. The money just God to different people.
I hadn't heard of FTC before this thread and I did some Googling. The first link I found was the FIRST Tech Challenge. Is this the FTC that you're speaking about??

http://www.firstinspires.org/robotics/ftc

If so, what a seriously amazing group....if not, I'll update the link!
> Will performance improve across the board

Speaking very generally, I've never seen a major architecture change that led to a performance improvement across the board. In particular in JS which has so many corners. There are always going to be some things that improve, some that regress, and some that stay the same. You can see examples of all three here (compare lines with TurboFan+Ignition vs v8):

http://arewefastyet.com/#machine=29&view=breakdown&suite=oct...
While not actually a real-life browser, Phantom 2.5 is _much_ closer to a real-life browser engine than it was previously.
Saat-tarzi.com
My main complaints are - 1) The updates for GPS versions have been quite bad recently. 2) Can't run VirtualBox and Haxm on the same machine.
To quote Spivak higher up in the comment chain:

> It's not perfect, but at least you would know you're being investigated.
Isn't it obvious? Use the one for your language. If you write in Java,
JavaDoc, for C or C++ there's Doxygen, Erlang has its EDoc, Perl commonly uses
POD, Python usually is documented with its native docstrings extracted by
Sphinx. This way your API and documentation sources for it resides in the same
place.

Also, much depends on what you expect from the tool, as there are approaches
that decouple documentation from code.
If you're looking for feedback, then happy to provide. Do not take this the wrong way, but instead take this as valid feedback: I don't find this to be useful at all. The data is very limited, there are many other sources of info, the UI is clunky, and in general I think this problem has been solved many times. If you want the feedback, that's what I'm providing.

If you want kudos for the work done, then good job for putting something together.
Even root CAs have been known to not comply with the randomized serial number requirement occasionally, see [1] for a recent example, with the most recent (SHA-1) certificate being issued in August of last year.

[1]: https://bugzilla.mozilla.org/show_bug.cgi?id=1267332#c5
Just type

sudo swapoff -a
sudo swapon -a
With all respect, that segment did nothing to further rational discussion. I do not see how yelling hateful things from across the isle is a 'great piece'. The way forward is finding common ground.
Snapchat’s Future