skysight-inc/HackerNews huggingface dataset:
Changelog:

deps:
update V8 to 5.5 (Michaël Zasso) #11029
upgrade libuv to 1.11.0 (cjihrig) #11094
add node-inspect 1.10.4 (Jan Krems) #10187
upgrade zlib to 1.2.11 (Sam Roberts) #10980
lib: build node inspect into node (Anna Henningsen) #10187
crypto: Remove expired certs from CNNIC whitelist (Shigeki Ohtsu) #9469
inspector: add --inspect-brk (Josh Gavant) #11149
fs: allow WHATWG URL objects as paths (James M Snell) #10739
src: support UTF-8 in compiled-in JS source files (Ben Noordhuis) #11129
url: extend url.format to support WHATWG URL (James M Snell) #10857
Facebook seems bent on taking the wind out of Snapchat's sales before their IPO, even if it means adding bloat to their apps. At the moment, Snap is their only serious competitor.
Has anyone read Pinker's book?(better angels..) Thoughts?
Lots of people seem to be bemoaning 2016 as The Worst Year Evarrr or something.

I am not in that camp and I have my objections to it. But, in this case, I think the sentiment is reasonable wrt the topic at hand, basically.
How does it compare to Jenkins?
They've done it before with t-shirts, for example for the [Total War Bundle](1) and [Paradox Bundle](2).

[1](https://support.humblebundle.com/hc/en-us/articles/209635507...)

[2](https://support.humblebundle.com/hc/en-us/articles/206061607...)
from the ECMA-335 standard (which is not the latest reference, but is easily accessible):

"A conforming CLI shall guarantee that read and write access to properly aligned memory locations no larger than the native word size (the size of type native int) is atomic (see §I.12.6.2) when all the write accesses to a location are the same size."

Since references are the native word size, the CLR will ensure that there is no tearing.

Note that it is possible to produce a torn read variables that are larger than a native-int, even of native types such as decimal[1].

[0] - http://www.ecma-international.org/publications/files/ECMA-ST... section I.12.6.6, page 102

[1] - http://stackoverflow.com/questions/23262513/reproduce-torn-r...
Browsing your website does not mean I want your spam (2016)
> This is a useful post. I'm going to nerd out at you though and point out that disabling LKMs doesn't really do anything to disable kernel-resident rootkits; ...

I really hate to question you but... are you sure?

The particular case that I'm thinking of was probably ~15 years ago. There was some 0-day or worm or something (details are a little vague now, obviously) that would install a kernel module and then loaded it to hide itself.

I can recall a discussion at the time and this was a recommendation. It wasn't just disabling individual modules -- it was actually disabling support for loading kernel modules. That is, whatever the kernel itself needed in order to support dynamic loading of modules at run-time was needed; the kernel was not able to load a module.

Like I said, it's been probably 15 years ago and I'm sure I'm not remembering everything 100% correctly so you may very well be correct... but I'm almost certain you could entirely disable loading of kernel modules (the kernel itself didn't support loading them).

Googling "amodload" now, thanks for the pointer...
Ah yes, I'd confused you with @JoeAltmaier.
Good takeaway :)
It's only necessary for older servers (e.g. Ubuntu 12.04 and 14.04) where people haven't done this already.
<agent presses button that fires up their gps signal jammer and turns on some wifi networks impersonating the Starbucks at Grand Central Station>

(I suspect there's companies already trying to sell them that technology...)
California protects those rights by default to the extent that they do not infringe on anything that your employer is working on. Not knowing that your employer was working on it does not protect you.

The bigger your employer, the less of a protection California's default is.
In fact, the border case is just an edge case. You also want your accounts protected if you lose your unlocked phone, have it stolen, have your password stolen, log in on a dodgy public computer, plug in an infected USB stick, or leave your laptop unattended in the wrong hotel room.
> Beautiful, but super, super, boring

Let's just say that it's definitely an art-house film. Some find that sort of thing boring, but not everyone.
The fastest mobile internet by country, Nov 2016-Jan 2017
One observation from watching Go and Rust gain popularity is that having an online code evaluation tool like https://play.rust-lang.org/ or https://play.golang.org/ can do wonders for adoption.

One of the things Go does right is the download-hello-world-compile-run experience. Especially now, since they now default GOPATH. One of the things that Go does wrong for popularity is the opinionated directory structure based environment mechanism. It has some advantages for large programming projects, but the way it runs counter to many programmer's expectations is seen by many as a wat!?

If Go had some way of mitigating that and the lack of generics, then the Hello World experience would be better for more people. (For admittedly shallow reasons, IMHO. I think that Go is pretty good the way it is. I haven't yet felt a need for generics yet in my MMO project.)
Not going to work well, save for small drones capable of ridiculous payloads; a big one with more powerful engines and stronger props would seriously damage or kill the bird. To me the best way to neutralize a drone is by shooting it with a thin but strong steel net from another smaller and faster one: instant stop + faraday cage effect that probably also severs its connection with the launch base instantly.
One thing about Facebook culture is that the employees there see themselves as fanatical guardians of privacy. It's a very strange belief system, but it's real.
I just got one of these exact same emails. It may not be illegal in the U.S., but it makes me extremely dislike the company using the tactic.
Seriously? I'm pretty sure they have a better grasp on who their userbase is, and what they want than a random internet commenter.
Native async functions are nice for the better debugging support (chrome will give you full stack traces that are as nice as ones from synchronous code).
And in the US, almost all of those terrorists are white male American citizens.
How are paper microscopes and centrifuges used?
Average life expectancy set to increase by 2030
Err, how?
The original title "How to save 51 billion lives for 68 cents with simple engineering" feels like clickbait, which I why I chose this one.

This tech (paper microscopes and paper centrifuges) have been discussed on HN, but this video gives very easy to understand information about how they work.
Read this as "even if <your favorite political candidate> had won the US election"
PySyncObj: A library for replicating your python class between multiple servers
I couldn't have said it better. The truth is, all my life, I wanted a Linux desktop that looks beautiful and just works. Simply, stupid, works. No magic involved. I work with Linux remotely almost everyday. I love to tinker, I love to learn - but it must be my choice what to tinker with and what I am going to learn next. I want to play with things that make me happy and give me satisfaction. And constantly maintaining my system and googling around for solution is not one of them. I tried... Crom help me, I've really tried. After yet another failure I just felt extremely disappointed and moved back to Windows at home. At work I am using MacBook Pro (previous one) and I am very happy about it - like it better than Windows. Honestly, OS X desktop is the best what happened to me so far. My last Linux desktop adventure happened few years ago, though, so maybe, just maybe, it got better recently... I still have hope, maybe there is some windows manager out there, but I'd need to thoroughly evaluate it on some spare machine before moving forward with it as my main desktop system.
I'm of the view that boring a tunnel is part of his bootstrap plan for bringing the same tech to Mars. It's likely that we will have to dig living spaces underground on Mars and bootstrapping better digging tech by finding a good use for it here on earth first is a great bootstrapping strategy.
The way stripe does the idempotency keys has always reminded me of two phase commit but I know that the two things are quite different. I wonder what in the distributed systems literature inspired this technique.
A library for replicating your python class between multiple servers, based on raft protocol
It's a bit of an investment if you're still a student, but if you're working full time as a programmer, the JetBrains IDEs are the highest bang for your buck.

Beyond the basic functionality working, the paid versions have a lot of cross-langauge support (PyCharm gets a huge chunk of the JetStorm functionality) which means that autocomplete "just works".

Like when I'm writing Angular templates, it looks up my custom directives and provides autocomplete on that. It is able to give autocomplete inside Angular expressions (down to looking up the controller and providing type information if you're using Typescript) inside my Django templates.

It's a lot of fuzzy searching but they have very good heuristics.

I think it would be near-impossible to get this cross-language support in Atom/Emacs, if only because it requires the I in IDE. Totally worth it.
> If Go had some way of mitigating that and the lack of generics, then the Hello World experience would be better for more people.

Does the lack of generics really impact the experience of "Hello World"? I don't think I've ever seen generics used in a "Hello World" example even in languages that have them.
is "wrong" one of those levels
Whois and resolving is not the same concept. Resolving require a name server and a record in a root name server that leads to them, while whois is a free text business record that may or may not exist, and all icann can do is to try enforce policies over registrars so they update and maintain correct records.

I doubt lets encrypt has whois records. Automatic retrieval of such records is general disliked/forbidden, a major pain to parse (free text), and its not part of any current LE authentication mechanism. They could however include the resolve data of the domain in the public logs, which would include name servers names and their ip-addresses.
Nope. Progress will come through a thousand people solving a thousand unimportant problems.

No one built a better ship to build a better ship. They built it so that they could go buy more black pepper and then more nutmeg and mace. Flavouring the food of the comfortably off is what built modern trade and civilisation. Nobody set out to build a trade network that would lift millions into prosperity. All they set out to do is get a little coffee.

Silly problems are what drive society. Your desire to watch crappy TV will launch a satellite.

I don't use a single one of these so-called mom startups. Let me tell you, though. The day any society chooses to have its neurosurgeons go grocery shopping instead of neurosurgery solely so that they're not using mom startups is the day that it starts to fail.
That sounds like a fun simulation to run
Why can't we have (FOSS) nice things that are e2e encrypted and not conglomerate owned...
I've done quite a few very strenuous, multi-week races on bike, including riding the Colorado Trail in 7 days [0], and riding to, then summiting all the Colorado 14ers in 34 [1] - as well as participating in the Tour Divide [2] twice.

I would call my fitness before these races as "peak", but I wouldn't call myself anything but near, "onset of over training syndrome" afterwards. The only thing I experienced similar to the author's was a slight bit of fat loss. Every other part of my body was wrecked, which took months to recover from.

One thing that stuck out with me is that they only hiked for 8 hours/day. That seems like a light day! compared to these races, where 5 hours of sleep is spoiling oneself. I guess the moral of the story before doing a, "thru hike for fitness" is to not to overdo it. It also seems like the author was in pretty alright shape to start out, with a fairly low pulse and overall bodyweight.

[0] http://www.climbingdreams.net/ctr/
[1] http://longranger.justinsimoni.com/tour14er/
[2] http://tourdivide.org/
> It's just never been clear to me what HATEOAS is really supposed to be good for.

Have you ever used a web browser? You know how the browser uses media-type to determine how to handle content referenced by a URI? That's what HATEOAS is supposed to be useful for: links identify and locate resources, resource type information tells you what kind of resource it is. The only out-of-band information you should need for an idealized REST API is information on the protocol used (e.g., HTTP) and information on the resource types (media types for HTTP) of the resources used.

(Really, if you want to understand any component of REST, its probably easiest to ask "what is this used to accomplish in the HTTP-based web", since REST is essentially a generalization of an idealized version of the HTTP-based web.)
Can you set up Facebook to require 2FA when you log in from a mysterious new device? And configure 2FA so it'll fail to reach you while you're traveling?

Edit: Actually, a sufficiently robust Suck Mode would make 2FA impossible. And I think all you have to do to get there is configure your cell network settings wrong, set Boingo Wireless as the top Wi-Fi SSID to connect to, and not pay for Boingo.
Very sensible design decisions and it's hard not to get excited about Rob Pike's involvement. I think Dat confers significant advantage by being hostless, but with Google's name behind it, you never know where Upspin could go. We have plans for secure key-distribution via Dat that's similar to Key Transparency, but it'll take us a couple months to a year to implement it. I feel bad for the Keybase team right now, that's for sure.
Quite plausible indeed. Very much Musk to cross pollinate ideas (solar panel, chargers, tiles, batteries, cars)
You live in a completely different world than I do yet insist on generalizing everything. You are quite fascinating.

Let me ask you this then. Have you ever tipped the person who cooked your food?
An interesting design question arrises around nested resources. Google in this doc buys into deep nested structures, e.g. `//calendar.googleapis.com/users/john smith/events/123` (from [1]).

I think this pattern is unambiguously sensible when the child objects are strictly scoped under the parent.

But it's less clear how to represent resources that are shared between multiple parents; for example, what if event 123 can be referenced under another user's API resource as well? If we permit `//calendar.googleapis.com/users/bob/events/123`, now we have multiple URLs referring to the same object, and things can get quite tricky in the implementation.

Django Rest Framework strongly discourages (and makes it quite hard to implement) nested resources, FWIW.

I've found that a policy of only permitting one level of nesting seems to be a good balance for shared objects, e.g.

`//calendar.googleapis.com/users/john smith/events/` returns:

```
[
{ url: "/events/123"},
...
]
```

Interested to know how others have solved this problem.

[1]: https://cloud.google.com/apis/design/resource_names
You would think, I've been in the industry 25 years and my side projects are still my biggest sales tools when it comes to changing jobs or joining projects. Makes a huge difference to be able to show that I stay constantly on top of the latest changes and best practices and apis even when my current day job may be using an outdated stack.
I'm not sure I agree it's a weak comparison, mostly because I think we've made a whole bunch of bad decisions in how we handle things on a PC.. The PC was born in a different era to the smartphone, and it's treated as such.

Example: CVV numbers, these are needed for "Card not present" transactions are must not be saved (e.g. no browser will save them). Using your phone for an NFC payment on the other hand does not need this number.

Yes, this is a tiny detail. But this detail entirely changes the share of responsibility between the consumer/merchant/payment processor/bank.. This is usually reflected in the different fees that are charged for different types of transactions, card swipe vs card not present vs Chip+PIN vs NFC.

Assuming that just because a CC number + errata stored on a PC can be stolen an abused, that the banks etc should just let me do that on e.g. Android Pay is just wrong..

Nobody is stopping you from creating a text file on your phone with the card and CVV numbers, but don't expect to be able to use that text file as a NFC payment method!

Edit: in case I wasn't clear (I know I wasn't, because I kinda forgot to say it ;)), once your phone is untrusted - as in untrusted by the bank etc - everything stored on it may as well be that plain text file as far as they are concerned.
To be fair, Pax Romana worked the same way right?
Twitter currently says: "Sorry, that page doesn’t exist!" if you follow the link.
Secrets to fitness revealed!

1: Stand up
2: Go outside
3: Walk around a lot
I think the other way to look at it is trying to gradually engineer scenarios where you do have that flexibility to walk / take another offer.

Everyone is going to have at least one point in their life where they need to take job X because Y. But you can do things to make that the exception rather than the rule, even if you don't feel you're a wunderkind.

Continual job searching, self marketing, networking, skill refresh towards emerging areas. These all give you better odds to be on the right side of that discussion than the wrong one.
The kernel has function pointers and dynamic memory. You can "build" a module if you need to.
How to Build a Time Machine – Temporal SqlAlchemy
Who are the "grey edge grinders?"
We use it as an initial screen, if it exists. If it does not, no problem. We fall back to more traditional means.
I'm willing to bet money that the single determining factor that led you to different results was the amount of sleep. 5 hours is not even enough for a sedentary person, much less someone riding a bike all day. The more you work out the more sleep you need. I'm guessing the author got at least 8 hours a night, or however much was enough to fully recover.
They didn't mention one very important thing - querying only required data and making connections between resources. For example, you need to download some git commits with user profiles. User is a different resource than git repo. How we can request such data in one single request? Then you will need also to load referenced issues (if present) that is implemented as different resource.

GraphQL solve this problems in a very nice and flexible way.
The allwinner CPUs have atrocious thermal properties and are iffy on power usage.

The raspberries (other than zero) run on anything, but too little power and they corrupt your sd card.

The pi-zero runs on a potato and is a great ad-blocking DNS server for my home network.
What about storing the dat link in a TEXT dns record?
The worlds in Firefly were explicitly described as having been terraformed to be Earth-like (masses aside).
It requires no read permissions at all to the channels. It receives commands eg /littlebirdie help - and posts to a channel of your choice via webhook.
Gigafactory 3: Europe

Gigafactory 4: Asia

Gigafactory 5: Where? Another one in the US?
We see this a lot. "Please look at my github". Ok, so all I see are a bunch of forks with at best some trivial commit. Now what?
They actually have a history of this. They did it with Athlon too.
his cars are tank secured for instance, not crass profit

What is "tank secured?"
As someone who's played for quite a while I can tell you SSBM is one of the most complex games I've ever come across.
I think he meant when TSLA was at $190 to $200 at the time of the merge and the uncertainty of the model 3 production.
> Were the only people who were fighting for a moral cause the white northerners who had nothing to gain?

Presumably the logic you are critiquing would also include any white southerners who stood to lose but still supported desegregation.
This is by design. If you want to make "another attempt", you should use a new idempotency key. Think of it as "one attempt/transaction/request" == "one idempotency key".
Couldn't US CBP defeat that norm for non-citizens, just by announcing "don't enable travel lock until after you clear customs, or you may not be allowed in" in the same way that they eg. tell you not to bring your codeine with you?

Citizens are probably OK, at least until they bring in Exit Visas...
David Bowie's list of books he loved in his life
Plans are 10% of actually building something, at that level. Materials aren't legos, each product needs to be qualified and have its idiosyncrasies addressed

Something often forgotten when companies offshore production.
I think the key is limiting the reaction-time to best-human standards. If you have frame-perfect reaction time, then there's really no point in playing an AI. It should be limited to the capabilities (physically) of a human.

It's about boiling it down to strategy. With chess, you don't have to beat Deep Blue in 5 minutes. You are given ample time; analogously, one shouldn't play a computer with frame-perfect reactions but rather one that is comparable APM of a top-ten player.
> it becomes a human rights nightmare to trap newborns in a ship for their entire life and the lives of their descendants.

Which is exactly why we should get some people off this ship, and colonizing others!

Oh, you meant the generation ship, not the Earth; nevermind.
So facebook has both Instagram and WhatsApp doing similar things?
That's not far off from what we're thinking.
You live in a part of the US where waiters don't typically receive tips from the vast majority of patrons?
2FA, for services that support it, with the second factor being a device that isn't with you when cross the border would be a solution that would be near absolute in prevention of logging in at the border, whether from your own device or a CBP-controlled device (of course, it wouldn't prevent you from any consequences CBP applies to not logging in.)

Of course, there's a question of the risk to that device, which somehow has to cross the border separate from you, which creates its own ream of problems (you could protect the access to that device with 2FA that uses the device you do keep with you, which mitigates the security risk of loss, but you still risk losing access to the services it protects if it is lost in transit; obviously, you want to make sure your 2FA has a recovery process and one that isn't usable from arbitrary locations or the device you carry across the border, but will be usable by you when you get home, at least.)
Things do tend to be needlessly complicated, don't they?

But the data provided in the article is a nice contribution.
What does gravity have to do with climate change?
We did that originally, but there's no authentication so it would be trivial to MITM
Of course it is. That's why it's published now and any evidence is cited from 2004[1] and 2016[2].

[1] http://www.nature.com/news/2004/041129/full/news041129-4.htm...

[2] https://www.theguardian.com/society/2016/nov/02/a-decade-of-...
While the AI might be cheating by taking salient features from RAM rather than from pixel values, this is still an incredible feat. Just a few years ago we did not have generic algorithms that could take even salient features and self-learn policies to near this level this quickly.
Thanks Chris, that's very kind of you all!
By making a lot more now than I used to
What's the default behavior now? This greatly annoyed me when I first started with Go.
I can see facebook trying to turn it into the west's wechat.
> But if you have hundreds of initial applicants to sift through, the one having some open-source contributions would surely standout.

If you have hundreds of candidates to sift through then you don't have enough time to look through their github history in enough detail to be worthwhile.
Has been down for more than a week.

Link to previous submission: https://news.ycombinator.com/item?id=13646712