skysight-inc/HackerNews huggingface dataset:
Ask HN: How do you switch frameworks when you have a large codebase?
I recently got a job at a company that has a very large Angular codebase. The company has a great engineering team and is trying to work on improving the design and structure of the code. The general opinion seems to be that Angular isn't ideal for how we want to work but we're so invested in it at this point that any move away would be painful and could be very costly. Stopping progress for a full-scale re-write would never be an option but I'm struggling to see how we can make gradual changes.

Has anyone had any experiences of transitioning a large clientside application to use a significantly different framework or design? How did you handle it?
The thing i don't get: this seems like a useful but rarely used tech.

Even if there are patents involved , i'm sure it's not patented everywhere around the globe, and it's just software, so why isn't there no real competition ? something like a reasonably prices SAAS service ?
In this scenario, the reasoning usually is: since both sha1 and md5 are vulnerable, it is possible to construct a document in which both the sha1 and md5 match. I don't know the feasibility of this, nor do I know how much compute time it would add. But that is a typical argument against those type of "combine two hashes" approach
The DoD CIO actually has a FAQ regarding open source: http://dodcio.defense.gov/Open-Source-Software-FAQ/

It's very useful when arguing with IA staff regarding open source software.
We detached this subthread from https://news.ycombinator.com/item?id=13723358 and marked it off-topic.
For datacenter operators there is no difference between "performance is so crippled that the TCO doesn't pencil out" and "does not work." No difference at all.
> I don't understand why there's such a drive for taxing high earners

Because for decades we've allowed capital accumulation to grow faster than salary accumulation. That's yielded us a class of ultra wealthy. The desire is to reverse the bias from capital to salary, so that the working class can benefit from increased productivity, because so far the benefits of productivity gains has gone largely to the wealthy via their capital gains.

> we should be encouraging people to improve their skills

That would help, but the game is still against you since we've structured our economy over the last few decades to grow capital faster than salary. So, improving your skills and getting paid more still means you are getting farther behind.
Is that something for phone or computer? Because I was talking about my phone.

Would prefer if keepass2android had some autotype feature built in for android :D
>Doesn't North Korea has ICBM missiles capable of reaching Italy or Washington DC?

No[0]. The missile Iran recently tested was thought to be a Musudan[1]

[0]https://en.wikipedia.org/wiki/North_Korea_and_weapons_of_mas...

[1]https://warisboring.com/was-irans-new-missile-born-in-north-...
Announcing Prophet: A tool that provides accurate, reliable forecasting
Oh, so now I can't voice my opinion until I've been "in the business" for x amount of years? Yeah, nice try.

Another commenter already brought that issue up, but thanks for pointing it out again. I still think that it's quite silly to claim that Ryzen Rev. A may end up being a paperweight based on a mistake that took place a decade ago. Whatever floats your boat, I guess.

And from what I read, it seems like it was an extreme edge case, so the TLB error was triggered only during specific workloads. Sucks to be AMD back then.
In an email from Cloudflare sent out this morning they said:

> In our review of these third party caches, we discovered data that had been exposed from approximately 150 of Cloudflare's customers across our Free, Pro, Business, and Enterprise plans. We have reached out to these customers directly to provide them with a copy of the data that was exposed, help them understand its impact, and help them mitigate that impact.

Does this jive at all with the Google or Cloudflare disclosures? They are claiming that across all caches they only found and wiped data from ~150 domains, can that be true?
> Not sure why employers care about developers being able to write utility functions from scratch, when that is not (typically) the job developers are hired for.

Because of the reasons you listed in your next paragraph:

> poor naming, unfamiliarity with their language's data structures, etc. Those are issues that will come up. Especially naming.

No one actually wants a candidate to write "flatten". They want the candidate to demonstrate that they can work through a small problem and write something sane and functional. Utility functions tend to be small and reasonable to put together in about an hour.

With that said, I think this is a mediocre question because no one would create this list of lists-or-ints in Java. If presented well, the problem might be decent. If presented poorly, a lot of junior candidates would likely fail even if they're good candidates.
45?
New SaaS service: Repository SHA-1 collision detection
They were directly committed to the SVN repository, apparently breaking SVN's tooling even after the commit had been deleted. The git-to-SVN mirror script was the first place where a failure was noticed and was initially thought to be the only broken bit.
HN: Looking for a Cofounder YC17 – Smart Fridge
I'm looking to partner with a hardware engineer or someone who has experience building hardware products. The piece of hardware I'm referring to would have to handle cold temperatures and connect to wireless (or bluetooth).

Idea = Imagine a world without grocery shopping. That's what I'm working on. It involves your fridge and a very cool product. I'm at the early stage of the project.

About myself, based in San Francisco, I'm a full stack software engineer (mobile/web/backend). I'd like to apply for YC 17 in March and I'm looking for a cofounder who could build or outsource the hardware piece. I'll handle the rest (software, etc.)

Interested? Send me a quick intro via email cofounderYC17@gmail.com

Thanks and I look forward to chatting with you!
Apple can't afford bad press like that - everyone is paranoid after the Samsung Note 7 debacle...
Looks like Oracle is starting to "lose the hearts and minds" even of the faithful:

http://www.vesterli.com/2017/02/14/losing-hearts-and-minds/

key quote: "If you are an Oracle developer with more than 10 years until retirement, I advise you to start planning for your time after Oracle."

It's too bad, I really like Oracle APEX, (the rapid web and mobile development framework that is included with the DB) since you can build and deploy highly functional/rich apps very quickly, which is the big thing end users care about. (i.e. the same reason foxpro and MS Access were so popular).

Anecdotally, I've been hearing from my consulting peers that companies are actively looking to move off Oracle as they don't like being "bullied onto the cloud", and are starting to look at the migration tools in EDB Postgres. That might be a good source of consulting revenues going forward...
My dad and my uncle are in their 60's. They said they were told one of the things that showed people behind the Iron Curtain weren't free is that they had to carry papers/ID with them at all time. My uncle is super conservative, but he is still totally against voter ID laws because at one point it was a point of pride that American's didn't have to carry papers.

The same people who held that as a point of pride in the 50's and 60's are now the people who are fighting for mandatory voter ID laws. I honestly believe that if anybody is committing voter fraud, it isn't the people that the republicans are targeting with these voter ID laws.
Like most ticklish philosophical problems, I think it becomes less obvious the deeper in to the problem you look.

There are a number of considerations at play here, and a long history of violently disagreeing about them.

Is language tied to grammar? Or is grammar tied to language[1]? There has been a lot of work seeking to examine the common underpinnings of languages that seem otherwise disparate, and a somewhat flexible core grammatical structure has been proposed as one of these unifying components. The speculative step some take next (including people like Chomsky) is that the reason that all of these common patterns appear is that the brain has evolved some specific hardware that serves as the basis for a set of communication protocols that we call natural languages, and all natural languages instantiate this basic hardware in different ways[2].

If you think this kind of hardwiring is possible, then another obvious-but-not-obvious question follows. Can language really be learned[3]? Can you take a clean slate of neurons (some arbitrary configuration of connections) and, given enough input data, end up with a system that understands language (to frame it as a machine learning problem, which it may or may not be)? Or is it closer to a game of connect-the-dots; the bare framework is there, built into the way the brain arranges itself over the course of millions of years. Input data is just required to figure out exactly what the final arrangement of the picture is, whether it looks like English or Russian or Mandarin.

The current mood in cognitive neuroscience academic circles seems to be the former case, that you can 'simply' throw enough data at a general-purpose learning model and get a language-speaker out. Partly due to the success to deep learning approaches in what were previously very difficult problems in NLP. But I don't think it's fair to say there's nothing worthy of debate here.

---

[1] Or is this a false dichotomy and there's some even weirder relationship between the two.

[2] For a primitive example, languages with SVO ordering vs. SOV ordering. Different instantiations of the same triple with subjects, objects, and verbs. Ray Jackendoff took this another step with formulations like XBar grammar, which was trying to demonstrate how a universal, parameterized grammar might look.

[3] Grice had a fun theory that the observable signal of language is _so_ noisy that it's impossible to learn outright, regardless of the number of examples you're exposed to. And thus, everyone speaks a slightly different language, and some sets of these idiolects are, roughly, mutually compatible. I don't think he ever did any math to demonstrate this though.
We're actively working on building a FIPS-compliant libcrypto with s2n. There are some quirks to the libcrypto API when FIPS mode is enabled. If this is something you would be interested in, feel free to fire up an issue for tracking: https://github.com/awslabs/s2n/issues
Inside the Minds of the Ultrawealthy
Oracle losing hearts and minds
I meant similar in the context of generally trimming support.

But yeah, in terms of apple not having a system for latest GPUs it is different.
No this is not obvious. Throughout human history and even today algebra, writing and reading are hard skills for humans which require years of training to master.

Ability to speak however comes very naturally without special training. Human societies independently developed isomorphic grammar. For example Navajo Indians helped American soldiers translate their messages into Navajo and back so Germans wont understand it.

This sort of evidence lead scholars like Chomsky to believe that human brain might have some in-built ability aided by evolution to parse some basic grammatical rules.
Is there a "standard" in the works for changing a password? Stuff like this is happening rather too frequently for my taste. I need a tool I can use to update all my passwords everywhere automatically and store the new ones in my password manager.
Interesting. Have you thought about any practical applications for something like this?
My whole philosophy is to be nice/considerate AND careful/calculated.

In a nutshell, I see salary negotiation and interviewing as a collaboration, not a competition. Working to get a good result for everyone involved is the best way to approach it.

Glad to hear you're looking out for yourself - you're always going to be your own best advocate!

Thanks for the kind words!
Or just using a single better hash would solve it (some variant of SHA-2). For the foreseeable future at least.

Edit: Mitigate it rather, not solve it.
How to pass the Node.js interview of ElemeFE
It could be made to work on Git, but you'd need to make a collision that included the git blob header. The resulting files would not have the same SHA-1 hash until the header was added though, so they wouldn't be useful except for testing Git itself.

My guess is that Git wouldn't be 'hosed' like SVN, since it currently doesn't have a secondary hash to detect the corruption. It would simply restore the wrong file without noticing anything was amiss.
I think that's the key to Linux on the Desktop. It generally ranges from very limited to terrible for your average end user. Your video professional might fare slightly better, but realistically is only going to use Linux if they're working at a company that's invested in Linux for their video production stack.

Where the Linux desktop is truly unparalleled is for a developer. As a developer I'm comfortable enough with the technical details to handle the quirks (like doing things from the command line), and the strengths of Linux truly shine (again, the commandline, as well as choices in DE, software, etc). One great example is Arch. On Arch I can install any developer tool directly from the command line with very little effort. Anywhere else and you have to click through endless menus.
Gov.uk and other websites have usability requirements beyond most people's worst nightmares because unlike the social media platform du jour, people do not have the option of just not using the website. Even if you want to file your tax return using a paper form or over the form, you need to request the form or find out the phone number somehow, which means visiting the site. And for many, the web is the most accessible way to do what they need to do.

So this means not supporting IE8 flat-out isn't an option. Not supporting blind users is not an option. Not supporting 95-year-old users is not an option. Bells and whistles, distractingly flashy designs, any use of JavaScript without a fallback.

Weirdly, the result is a very clean, professional, usable website. It's amazing!
That statement must have given Cloudfare's lawyer an aneurysm.

Seems to me that management's attempt to downplay the problem exposes the company to as much risk as the original technical mistake.
Right, that would be a good argument IF we were talking about a bunch of random people whose rank is completely unknown, and in fact this sort of heuristic is the usual, common sense one that leads to the situation we're describing (and that can be exploited).

The KEY information here is that they're at the same rank. That means the slob has had to overcome people using the heuristic you've just described in order to reach the same rank, probably through being an objectively better surgeon.
Thank you. As a parent of a toddler my first thought was the same as the op's but after reading your post I get why it might require more examination.
Heartbeat – The Missing “Listen With” Spotify Feature
CEO of Storj here. You can sign up to use Storj and get the tools working to upload/download your files in 60 seconds. Last time I tried to use S3 it was 12 steps, and a phone call. Its faster, more secure, 50% cheaper than traditional cloud storage.

Basics are data stored for each. Storj: ~1400 TB, Sia: ~100 TB, Filecoin: Not Functional, Maidsafe: Not Functional.
We need users to comment civilly and substantively, especially on controversial subjects. This just doesn't pass muster.

https://news.ycombinator.com/newsguidelines.html
Given how many Intel/AMD/etc. CPU releases there have been, I would still refer to such glaring implementation bugs as outliers.
Why is it important to offer Intel Skylake on cloud platforms? Is there some specific processor extensions present in Skylake that make them particularly compelling in a cloud environment for a particular industry or a particular set of needs?
Good note - I've seen this sort of legislation getting a lot of traction lately. I'm not sure how it affects asking for "desired salary" or "salary requirements", so that's something else to look out for.

Thanks for sharing!
Couldn't find a practical description of who is affected anywhere. Is it just the customers who have Cloudflare HTTPS proxy service being affected, or anyone using Cloudflare DNS is affected?
Working clickable links:

https://sia.tech/ https://storj.io/ https://maidsafe.net/
I remember this coming up in the Wire, and interestingly Baltimore has one of the highest rates of fatalities from shootings. I wonder if Baltimore police actually are juking their stats like they were on the show.
Any plans on doing that in the future?
This is from our own internal workloads, including things related to Search. If you run say specint_rate2006 (as Intel did for Haswell to Broadwell [1]), you'll see even higher results. We just wanted to call out that even for our own internal benchmarks, these things are seriously great (and we don't make much use of vectorization!).

Disclosure: I work on Google Cloud.

[1] http://www.intel.com/content/www/us/en/benchmarks/server/xeo...
I'm not an expert of SHA-1 collisions, but I'd take Linus word for it. :)
Couldn't find docs for installing Hasura on own infrastructure?
Dashlane has that. Doesn't work with all sites though. But all major ones should work. See:

https://www.dashlane.com/features/password-changer

https://csdashlane.zendesk.com/hc/en-us/articles/202699281-H...

Supported sites: https://www.dashlane.com/en/password-changer-list
at connection time a client submits the class files reqired to execute its lambdas. We hold a classloader per client connection.
I think it goes without saying that a social media site with millions of users and place 23 on the Alexa rankings is an interesting advertising platform, and that it happens on a regular basis and a large distributed scale across the platform.

The far more important problem in my opinion in this situation is to be able to differentiate a "normal" user submitted post from an advertisiement, a skill that is missing in 80% of today's youth:

http://fortune.com/2016/11/23/stanford-fake-news/
The security system the article mentions uses facial recognition to identify the people coming in and out.
Oracle is not just the DB though, they have a lot of applications across several industries, such as utilities, health care, etc. And, there is also Oracle E-Business suite, which is a big competitor to SAP in the financial management system space.

So, they have other sources of revenue as well, and can likely build a large revenue stream of subscription services for business applications. (i.e. running PeopleSoft, EBS, etc. in the cloud).
Managed Kubernetes.
And Ryzen isn't AMD's server product.
OS already zeroes out pages, obviously. But malloc doesn't usually request memory to the OS but takes a chunk from the already allocated heap.
>The belief that Church defined computation rigorously when he solved the Entschidungsproblem using the lambda calculus rather than just made an imprecise conjecture is a common mistake and historical revisionism.

Ok I'm out, you do you man.
A good comparison article would include costs and the difficulty of obtaining that info... feels fuzzy for most of these, and that's a big problem for adoption.
A 256-bit hash, even a bad one, is usually more secure than a 128-bit hash, even a good one. But a 256-bit hash designed to be used as a 256-bit hash is probably going to be better than trying to come up with your own one ad-hoc by combining two 128-bit hashes. E.g. many hash functions have parts in common, so you might not get 256 independent bits that way.
And I wonder which discussion forum isn't... the closer any site gets to money (example: stock discussions), the more is at worth with manipulative conversations.
Okay, here you go -

(1) Your President - "the mexicans are rapists, drug dealers, ... some are good people" "bad hombres/bad dudes"

(2) Bannon at CPAC yesterday - "we are a nation with a culture not based on economy or borders"

(3) What can I write about targeting Muslims - the muslim ban, Bannon saying that we need a war to unite the country and next war will be the war against Islam in which (he believes) Russia can help.

(4) Shouting everyday that the WH is implementing and will implement all the hateful rheotric they campaigned on

And you say "you would not put Bannon anywhere near the government" -- Seriously? He is a member of National Security Council and chief strategist to your President.

Let us know what will it take for you to accept that the current WH has racists in powerful positions? Should Trump post a tweet proclaiming that he is a racist?

Also please have a response better than "but Mexicans/Islam are not a race, that is a country/religion".
That's great. In fact I submitted it here at https://news.ycombinator.com/item?id=13724295
RCS, Google’s answer to iMessage, expands to 27 more carriers and OEMs
> But "adjusting" for things is usually a way for people to get the result they want with the numbers. The government does this all the time with "seasonal adjustments" to housing and employment data. There never appears to be any rhyme or reason to the adjustments other than getting a better/desired number.

While "adjusting" may be used for misleading purposes, government seasonal adjustments generally used a disclosed-in-advamce methodology with a clear purpose; they only seem to have no rhyme or reason if you don't bother to do even the most basic checking.

An overview of seasonal adjustment at the Bureau of Labor Statistics is available at [0], and more detailed information about the specific methodology and factors used in particular series are readily available.

[0] https://www.bls.gov/cpi/cpisahoma.htm
> If you take a dollar for every four dollars of corporate profits, corporations (meaning the compacts created between shareholders) will have less money to invest with

Arguably that's not the case. If a company invests their excess cash then that money is spent and is no longer profit and no longer taxed. So, by increasing the tax rate you are encouraging a company to accumulate less profit, they can achieve that in any number of ways.

A company may invest into their business to increase profits later (e.g. Amazon's growth model), they may forego company profit by increasing dividends. Or, I could see a CEO try to bump up their decreased profit by reducing expenses elsewhere and cutting jobs or something equivalent. This is the area that economists focus on, but it strikes me as naive to think all businesses will choose this option whenever a corporate tax increase occurs.
The performance gap between Apple's latest today and the industries latest is not nearly as great as in the late PPC era.
I don't understand why "financial services" are called out in the headline. They're being manipulated by shady digital marketing companies who have some financial clients among many others.
Israel assassinated The Engineer via exploding cellphone.
In a way, it's the deepest and most perennial controversy in linguistics.

https://en.wikipedia.org/wiki/Universal_grammar

https://en.wikipedia.org/wiki/Poverty_of_the_stimulus

But it's hard to present the context of the argument when describing an individual research paper, so maybe the research summary ends up sounding at first like "when they're little, children learn how to speak their languages!", which definitely sounds like "wait, why does someone even bother publishing a paper about that?".
Currently installation on cloud providers (that you own) happens through hasura.io. Register at https://beta.hasura.io and you can create a project.

If you want to install on your own, we will be releasing docs over the next 2 weeks.
That's almost the exact same code as I thought, but it's an extension on c# and uses 'is Enumerable'. Which language is this?