skysight-inc/HackerNews huggingface dataset:
> We are planning to reimplement the current featureset in a more robust language.

I saw on your projects list that you plan to port it from shell to Rust. Nice choice. I had a great experience using Rust for git-series (https://github.com/git-series/git-series/ ); the git2-rs binding is a joy to use.

If you run into any issues along the way, or want some help with git2-rs, I'd be happy to chat about it. (And, of course, feel free to borrow anything from git-series; if you find something useful and non-trivial that you'd like to share, let me know and I can extract it into a crate.)
"Some years, the gains in underlying earning power we achieve will be minor; very occasionally, the cash register will ring loud. Charlie and I have no magic plan to add earnings except to dream big and to be prepared mentally and financially to act fast when opportunities present themselves. Every decade or so, dark clouds will fill the economic skies, and they will briefly rain gold. When downpours of that sort occur, it’s imperative that we rush outdoors carrying washtubs, not teaspoons. And that we will do."
It's unfortunate that github doesn't support rendering manpages the way it supports rendering READMEs written in markdown and various other languages.
I actually really like it. It's a fun aspect of the ecosystem. It's also not explicitly explained anywhere - you just sort of have to figure it out.

I occasionally go to a Go meetup in NYC and hear this a lot:

"Do you play online?"

"Yeah, KGS."
>too late.

If you are severely lacking in test coverage. Otherwise no, it's not too late.

Slow compilers that take ~2-10 minutes in statically typed languages give slower feedback than test suites that take seconds in dynamically typed languages. This inhibits development speed.
5 Amazing  Inventions You Need to Buy ▶2
one was reported vomiting.
I'll second the call to donating:

https://www.iwantprepnow.co.uk/about-us-donate

> “I’m thinking, ‘You don’t know I have to walk sometimes because I can’t afford my Oyster [the London bus and tube pass]. You don’t know that I’m literally eating once a day because I’m so broke, and I’m sleeping on someone’s sofa because no one is going to pay me to do this,’” he says. “I am no different to how I was when I was a sex worker.”
I'm not advocating prohibition of any drugs. I can be against that, and still see the folly in desperate edge-seeking behavior.
EDIT: I realized you were asking about "design your protocols against length extension", not "what is length extension". Sorry. Ignore this, but I'll leave the response for anyone else who is curious

---

SHA-{1,2} are vulnerable to length extension attacks, because of the way their Merkle-Damgard construction works. Basically, if you have the result HASH(X), you can calculate HASH(X+P), knowing only 'HASH(X)', without knowing 'X' itself. This is problematic because it means you can effectively "extend" some cryptographically hashed data with an arbitrary suffix.

You can immunize SHA-2 in one of two ways to a length extension attack:

- Truncate the hash value. For example, use SHA-512, but truncate the result to 256 bits (this is called "SHA-512/256"). This works because the output of your HASH function which is 256-bits, cannot be reused as the initial starting state for a new round of HASH (e.g. SHA-512 needs a 512-bit starting value, but the output is only 256, so this makes it impossible)

- Although it is not standard SHA-2 anymore, you can use a trick from Neils Ferguson and John Kelsey (from 2001!) to immunize it -- simply XOR a constant into the final block round before running the final compression function. Unfortunately this suggestion was not adopted for SHA-2: http://www.cs.utsa.edu/~wagner/CS4363/SHS/dfips-180-2-commen...

Alternatively just use a modern hash design like BLAKE2, SHA-3, or a number of others -- these avoid the entire problem. I'd suggest just sticking to one of those two.
Do all of these servers not implement a standard protocol? I've had similar frustration with OGS on mobile, and at one point I toyed with the idea of learning iOS by building a Go client that worked with all of these servers.
You're not wrong, but the pork is only a small part of dietary laws. Additionally, you can eat other animals that might be dangerous (birds, for instance, but not birds of prey). And restrictions like "only cloven hoofed animals that chew their cud" are just "let's make this obscure enough to prove you really care."
Online.net currently uses the 8-core Intel C2750 Atoms for some of their dirt cheap dedicated servers. I hope to see them offer some affordable 16-core Atom servers soon.

Minecraft makes use of many cores and my kids are complaining about server lag :-)
I don't think you could cause more division than the current administration has.
That's awesome to hear
Makes sense in theory and to be honest is intriguing.

Provided the quality and dosage was strictly controlled and adjusted to fit the user. Discipline also needed to avoid too much too often. Doesn't help that it's illegal.

You wouldn't want to be doing it to fix a "normal problem" that could be addressed by eating nutritious food and getting more sleep for example.

Psychedelics aren't suited to capitalist agendas either. The idea is to use psychedelics away from the office for perspective and focus shift. I suppose that's normal dosages though, and the idea here is micro-dosages which would be more like a good strong coffee but a clearer more mental buzz.

An extra hit above the micro-dose might make you shut down your PC and head to the park for the rest of the day. Risk.

Let's face it, we're not all building things that are making the world a better place. Psychedelics tend to expose anything trivial that's masquerading as important. Your ability to discriminate genuine from fake is sharper. At normal dosages at least, you feel attracted to these insights and will follow them out the door if that's where they lead.
I like the keep it simple approach, what would be the added value compared to keeping org-mode issue tracking files with commit and issue tags in git like having an issues.org file where time estimates, schedules, person assigned and 'date done' can be documented with tags and properties?

* TODO [#A] :f3abe64:31415: FIX bottom row space

* TODO [#B] :d4aae31:31410: BUG add miligram property

* PENDING [#A] :f4efe20:31410: FEAT implement counter

* DONE [#B] :e4bae20:31410: FEAT implement back button

with some archival function to an issues_done.org file
You're right in that those things happened, and I even agree with the sentiment of labeling the treatment of the natives as genocide. But saying that these things are responsible for America's economic dominance shows a fundemental lack of understanding of history. In fact it could be easily argued that slavery was a significant setback after we progressed beyond the very early days of the colonies, when there was simply not enough labor of any kind.
$40K is low for entry level programming jobs in the tri-state area (NY/NJ/CT). If you have 2+ years of experience, you should definitely ask for more but I of course don't know your current situation.

If you are having trouble getting hired, look at your experience so far and focus on being a "specialist" of some sort. For example, don't apply to any random programming job. Pick a couple of areas which could either include specific languages/frameworks (node etc) OR a domain (finance, retail etc). You need to be good at one of those areas.
Nothing is as easy as both of us wish it was :)

http://www4.ncsu.edu/~jwilson/files/mathsigns.pdf
Can't recommend David Sylvester's interviews with Francis Bacon enough. Brilliant book, even if you're not a fan of the painter.
Well, not really something a still barely shaving high school student would relate to or appreciate.

Give it 20 years though, and...
So is networked messaging the same thing as "email"?

Shiva:

"What Tomlinson and the ARPANET (a predecessor of the Internet designed for the military) folks invented was a rudimentary form of text messaging at best. But I created EMAIL , the entire system replicating all the functions of the interoffice mail system (Inbox, Outbox, Folders, Attachments, Memo, etc.) -the email, we all know and experience today. Never did I use any component of the ARPANET to create this system." http://economictimes.indiatimes.com/magazines/panache/ray-to...

Smithsonian:

"Exchanging messages through computer systems, what most people call “email,” predates the work of Ayyadurai.
...
Many innovations are conceived independently in different settings. Historians who have documented the early history of electronic messaging have largely focused on the use of large networked computers, especially those linked to the ARPANET in the early 1970s. Ayyadurai’s story reveals a contrasting approach, focusing on communicating via linked computer terminals in an ordinary office situation. The system was localized, linking only three campuses rather than multiple large institutions. It was a small enterprise, rather than a big enterprise story." http://americanhistory.si.edu/press/releases/statement-natio...
Single point of failure is mitigated by proper backups.
Clipboard attacks are mitigated by your password manager clearing your clipboard after paste (either by event or by time).
I've been doing a lot of rust lately and I have to say it blows c/c++ out of the water. Sure, c/c++ has more libs, but almost every other feature in rust is fantastic, and wrapping a clib via ffi is really easy in rust. My only (minor) complaint with rust is that they aren't pushing no_std enough IMHO, but I'm biased since all my code is no_std :) so obviously I'd like to see a lot less work in the stdlib and more on stabilizing low-level stuff and creating better apis there for doing things that are currently kind of annoying like creating your own data structs, and doing bit manipualations in fast math libs, etc.

Anyway rust is awesome, especially cargo (finally sane build/package management/versioning for a systems language). I will never code in c++ again if I can help it.
This is awesome! I'm working on something similar for JavaScript. Definitely will be using yours for reference. Thanks, dude!
The bug happened in September of last year. Since then we can assume they've been leaking 100k-120k of requests per day, unless CloudFlare makes a statement with hard evidence to the contrary. And that assumes no attacker noticed the bug and mined them for private data.
It's possible, but you have to be disciplined. I try to get up an hour or two early every day at least for a week per month to put some quality time into the studies/projects. Other times it's 10 minute chunks that you squeeze in throughout the day which aren't productive.
How to get LSD? I bet is quite hard to produce it yourself. How I know if the dose is right and the quality of LSD is good.
Course: Linux Terminal for beginners
AWS isn't cheap or expensive. It's a bundle of services and you're free to use any combination of them. Route53 can be used independently and yes it's very cheap.
Well, typing less is not necessarily always the most important thing - though it certainly appears to be useful when writing small examples for pedagogical purposes.
That article alleges poor controls around customer data, not coordinated action. It seems unrelated to what we were discussing, which was likelihood of Uber to - reusing my earlier phrasing - try to discredit, disparage, or defame Susan Fowler.
There's b for Mercurial:

http://www.digitalgemstones.com/projects/b/

It's not very active, but it's the same idea. Distributed bug tracking has been around for a long time. I think Fossil also does it and probably has the tightest integration, since it's Fossil.
Almost nobody has SHA-3 capable hardware though, and "getting it" is a lot of work (either pay money or work on an FPGA I guess). I'd argue SHA-3 being efficient in hardware is almost completely irrelevant for 99% of all users of cryptographic software. For the vast majority of people, I think fast software implementations are way more important -- especially as systems like NFV and SDN come into play at large scale (people want bog-standard x86 boxes for this stuff).

I almost wish SHA-3 had been a dual pick between a fast software hash and a fast hardware hash. As it stands, Keccak being so slow in software is majorly limiting IMO. The more interesting aspect of SHA-3 is the sponge, so you can really turn Keccak into an entire swiss-army knife of crypto tools, if you know what you're doing.

But as it stands, if I have to pick a modern hash, I almost always pick BLAKE2 instead of SHA-3, primarily because I rarely need the sponge design and also because it's dramatically faster in software. Stuff like this is really important on my Cortex-M4...
Now I'm wondering how one of the 16-core chips would handle VyOS...
No commits since November, 162 open PRs. :-/
>It not "appears", it is generic. As generic as it could be

Only in the sense that accepting arguments that it shouldn't accept and it'll crash with, is part of the general description of the filtering operation -- which is not.

If you prefer, it's "more generic" than it should be. It's not a generic description of the "filter" operation, but a generic description of the "process_input_and_produce_output" operation.

>The dynamic languages, notably Lisps, Erlang, Python and Ruby are proved to be superior for quick prototyping and so-called exploratory programming

Where is that proof published? And what methodology did it follow? Since, you know, we are computer SCIENTISTS and all...
Example -> use of Monoids in the design and implementation in the Diagram Library from composition of primitives to caching
I don't know about microdosing, but 300ug kept me 40+ hours awake and caused anxiety/insomnia for 6 months afterwards. So be careful.
Take a look at Kolab Now (https://kolabnow.com). They are based in Switzerland and are only using open source software. You can also use your custom domain with them.
>> I believe that truly high-quality engineering actually looks like average engineering delivered at incredible speed

As somebody who's building new product off a ~20 year old perl codebase, I strongly disagree. No matter how easy the problem the system you're building to solve is, architecting and implementing a complex system that will stand the test of time is itself a hard problem. And if it doesn't need to be maintained, I would argue that you're not engineering, you're hacking. Nothing wrong with hacking, but it's a completely different approach to development optimizing for different attributes (time to market vs quality).

Now, that's not to say that they don't both have their place within a given project. Hacking together a MVP and then applying more rigorous engineering practices after it's been "proven in battle" seems to be a good balance. I'd highly recommend checking out David Black's work if you aren't already familiar, he has a lot to say on the subject! https://www.amazon.com/Wartime-Software-Building-Matters-Bet...
Wow, you're right. Sorry about that. Yeah, clearly not original. I do agree.

I'm British - I will apologise if you bump into me.
Happened to me many times.

And every time it is a great learning experience.
OpenStack Ocata Delivering Updates in Less Time
Let's formulate a skill-in-demand forecast based on Wordpress ubiquity, but sceptical.

I start:

- Static CMS Advocate - someone who explains that setup for a landing page with contact form doesn't need to consist of Nginx, Varnish, Apache, mariadb and redis.
This reminds me of Richard Feynman's quote "I am not responsible for the world I live in" from his first autobiographical book.
I say it all the time after seeing it is the code that I wrote.
Blog for self-improvement resources
It's still a single point of failure if the password manager is compromised.
Really, it was a joke example, but few people actually self-proclaim expertise they don't have - tough even being tired of such people being wrong isn't at odds with the comment I was replying to about anti-intellectualism.
For some reason I thought they were abandoning the 3000 line. The specs certainly make for a great NAS device, 16 SATA ports is a healthy amount of storage behind dual parity RAID. 64GB of ECC RAM that works, and presumably you can peel off a PCIe x4 lane for boot media in an M.2 slot. I could see replacing my current FreeNAS box with that if it continued to be as quiet.
If you see ten dollars on the ground, is there harm in picking it up?
Pretty much all transport vehicles in Pakistan do this; taking on more passengers than there are seats.
The unborn don't complain about not being concived.

However, while you tied yourself in a not trying to justify some death I already said some deaths are viewed as a good thing. But, for death to be good then all death including preteen cancer patients must be good, or your not saying death is good your saying something related to death is good.
I haven't read this book but I listened to a podcast (Knowledge @ Wharton) where the author was being interviewed. It seems like it might be worth a read.

https://www.amazon.com/gp/aw/d/1119081459/ref=ox_sc_act_imag...
There have been some studies on the effect of psychedelics on creativity. A particularly relevant study by Oscar Janiger has been documented in LSD, Spirituality, and the Creative Process.[1] Other studies (including ones on microdosing) are discussed in The Psychedelic Explorer's Guide by James Fadiman.[2]

That said, this is a wide open field that could greatly benefit from more research. I am hopeful that such research will once again become acceptable to the scientific establishment before too long, as a number of studies on other effects of psychedelics have recently been completed with much success.

[1] - https://www.amazon.com/LSD-Spirituality-Creative-Process-Gro...

[2] - https://www.amazon.com/Psychedelic-Explorers-Guide-Therapeut...
Get Unlocked-Business like never before
Not about stoicism, but you might also enjoy

"The Tao is Silent" by Raymond Smullyan
Every single damn time :/
I don't know if this is actually true, but I read recently that in the case of a crash the seatbelt isn't there to stop you dying, its to keep your body attached to your assigned seat so that you can be identified afterwards.
Isn't the captain responsible for checking the count of people onboard the aircraft before takeoff?
Honestly BugsEverywhere is a better approach IMO.

Tying an issue tracker to a single specific VCS is unnecessary.
Same thing with managing people -- be hard on the problem, soft on the person.
Checklist to find out how aggravating is your grantmaking process
In a large part, he also birthed the modern idea of having a whole level of other artists underneath him, that did the majority of his paintings, screen prints, films, magazines - you name it. His name was much like a trademark for a product. He produced works en-mass, often as cheaply as possible.

His art studio was named, "The Factory" after all...

This is well and good - artists employing people to do much of the actual work dates to at least the Renaissance, but Warhol isn't known to exactly treat these people well - you could even call him exploitative. His nickname was, "Drella" (Dracula + Cinderella)

How many people, for example, who hung out to The Factory in its hey-day, or worked with Warhol, then had their lives destroyed by severe drug addictions - perhaps even while being a part of a film he was shooting? His public indifference to some of these deaths is astounding - perhaps because he himself was severely addicted to drugs (amphetamines).

Take a walk on the Wild Side.
I generally only say things like that if I'm pretty sure that it's "my fault" because I was the original author, or lately maybe because it was a junior I specifically told to cut corners.

Usually it's more, yeah this code sucks, there were these constraints during development that made it a good idea at the time.
Often these are conflicting goals too. If that guy hadn't shipped the kludge 10 years ago perhaps the company and project wouldn't exist today.

On some occasions the company folding would've been a better outcome for everybody involved in the medium term.
You're asking a great deal of a single neuron (or even a small set of brain-spanning neurons) if you expect it/them to be you. Functionally speaking, a neuron is a bag of sodium and potassium ions that fills and empties itself via various molecular valves, perturbing other little valve bags in the process. That billions of these can instantiate a human personality is fantastic enough in and of itself; the claim that personal identity can be reduced down to some particular little valve bag is utter nonsense.
Hmm I downloaded it just to try yesterday and I was not able to access it from uGuest. Not sure if it's Uber or blind blocking it though.
Yes, you use already available network packages like igraph and network (where you can import dot files) and then use the declarative API of ggraph to specify your plot
Not if RHEL8 supports Arm
"It's not a problem. We'll just rewrite it for Jenga2." is something else programmers should probably never say.
cf. 1st law of cartoon physics

http://www.dgp.toronto.edu/~karan/courses/csc2529/cartoonlaw...
Other than this, the author has some great writing and you can read a recent interview with her over at The Daily Stoic: https://dailystoic.com/elif-batuman-interview/
I'm in talk with the plotly devs regarding ggraph support — once that materialises it should cover most interaction
> There's a tendency in discourse to make generalizations across large groups of people, which degrades our ability

> It's well known that our perceptions are often wrong

Is these not generalizations across large groups of people?
Hi there. We try to make a tool that's as simple to use as possible (given the constraints of a volunteer-run project such as Tabula). What technical background do you think is required to use it? (disclaimer: I'm the main author of Tabula)
Why badmouth code at all? If it's in a code review, give feedback and wait for the change. If it's much later, on production, just rewrite it. If it's neither, why the hell aren't you doing code reviews?
Is there any way to globally disable clipboard access in my browser? Jeez, this sounds horrifying!
sci-kit learn is excellent, but their implementations are a bit to complicated to learn from.

this is for people who don't just want to tune parameters but build the whole thing from scratch

I can buy buy a pie all the fix-ins from a bakery, or I can buy the ingredients myself, and make it to exactly my liking. it may not be a professional.
I wish we could petition y-combinator to allow them to allow a member to delete their Hacker News account and comments.

This year for spring cleaning. I deleted facebook, twitter, disqus, and thousands of comments I left on websites from over a decade ago. No archiving, just permanent deletion. It was the the most beautiful feeling. I felt free. Like a new person. Like there wasn't a part of me roaming around on the internet building up dust anymore.

I know space is cheap and startups love data but we should study what all that does to a person emotionally.

IF {Google Glass was suppose to keep us connected /BUT/ Google glass failed because we felt too connected /BECAUSE OF/ a human emotional desire to be left alone and let the mind relax.}

THEN {Permanently archiving all your content is suppose to be a feature /BUT/ people are deleting their content /BECAUSE OF/ a human emotional desire to start over, clean up, and not leave things strewn about}

That being said I really wish the Hacker News team would add a "DELETE ACCOUNT and all comments" feature. It's ironic that Y-Combinator's hacker news team stands up for so many positive internet movements yet feel that they can permanently keep all the content I generated. It is MY content after all. Do they own the copyright to MY words? The excuse has always been "it's a part of the public dialog". Everything is. Facebook, Twitter, & Disqus are also part of the public dialog. And they let me delete myself off of their services.