skysight-inc/HackerNews huggingface dataset:
Side question: are these extensions available in the desktop (i7) parts? Wanting to test out some optimisations for some code I have.
LastPass has auto-password change: https://blog.lastpass.com/2015/05/auto-password-change-now-a...
If you were designing Reddit today what would you do to prevent this kind of stuff?
Ask HN: Value of a custom slash-menu service for Slack?
I built a customizable, context-sensitive menu module in another Slack project, and I'm thinking of spinning it out into a separate app. Essentially, it would let any team set up a custom internal menu (help, docs, contact info, onboarding), callable via '/menu', without having to build or host their own bot. The menus are multi-level (use IM buttons to navigate paths like main menu -> help -> contacts) and can be set to serve different content to different roles/groups.

The question is whether menus are a problem anyone needs solved? We have menus in Slack apps to help with app-specific stuff, but would teams get use out of having team-specific menus?

I'm trying to decide if it's worth spinning the module out into a separate service (Menus-as-a-Service - we can make MaaS a thing!), or if this would just turn into Slackstore clutter.
I did read it, but on a second look, I see I missed that "Monzo.com [the web portal] does not process any sensitive information". Thanks for pointing that out.
The Red Sneakers Effect: Inferring Status and Competence from Signals of Nonconformity: http://www.hbs.edu/faculty/Pages/item.aspx?num=45809
What I Learned from One Year of Relentless HARO Pitching
Would a tutorial like this really be worse if it used realistic situations?
8 Principles of Leadership
Another explanation is that people who "look the part" do so as a way to signal that they take good care of themselves, and by extension anyone that they might be entangled with.
To provide a counter anecdote, my company has used SVN for 10 years across hundreds of thousands of commits for a repo that is now 1.2TB in size and not once have we needed to restore from backups.

The bugs you can expect from software that assumed no hash collions are going to be pretty arbitrary. There was that stack overflow post about what happens with Git with collisions and it didn't seem great either, it's just that what gets hashed happens not to collide in this case.
You're right! On AWS and Google we use VPC. But on Digital Ocean we create single-node clusters only. We do not encourage multi-node clusters on Digital Ocean. Hopefully DO will address this soon!
Interestingly, Gmail labeled PDFs generated through that tool as viruses. Anyone happen to know the mechanism behind that?
> Is it a very difficult technical problem to switch, or just a problem of backward compatibility for existing repos (i.e., it would be expensive to change everything over)?

A bit of both. Git has an ongoing effort to replace everywhere in the source code that passes around SHA1s as fixed-size arrays of bytes with a data structure. That'll make it possible to replace the hash. But even with that work, git will still need to support reading and writing repositories in the existing format, and numerous interoperability measures.
My eyes started to glaze over this piece, but dating a surgeon really opened my eyes to their very exclusive profession.

First of all - forget about the tech industry, surgeons are overwhelmingly male. It's obviously a tough path to get there, and takes a huge toll on you when you get there (eg., their divorce rate is pretty high). This made me realize simply the scenario of Gray's Anatomy - some hospital with like eight female surgeons - is ridiculous.

Now, all doctors have a God complex, but the surgeons take the cake. They deal with tons of death and save countless lives. My gf fiercely defended this - her point was you want a surgeon who doesn't think twice about huge terrible bloody trauma, people freaking out and intense pressure. You want a surgeon who will be bold, roll the dice and do what needs to be done. I've helped build pretty important systems that affect many lives, but certainly nothing close to that kind of immediacy.

Finally, and this is going totally off topic now, but I also saw how terribly confusing the state of American health costs are. We lived in a big city, and doctors did rotations among the hospitals in the area. The same doctors would be doing the same procedures and patients in different hospitals would be billed hugely different amounts. Of course that has many secondary impacts; maybe you get a nicer facility, a room to yourself, certainly (and maybe as importantly) the demeanor of the nurses attending you would be much nicer.
Well that'll do it.
By Ethereum's own documentation, their code is the contract and the contract is the code.

Yes, it sucks that they did not write tighter code and allowed a gotcha.... But when that happens in the legal world, people do pay for it.

Instead, because one of founders put up a lot of ETH, they changed the rules of the game. Now, the question is, "How close to the CEO of ConsenSys do you need to be to roll out bad contracts?".

That's what makes it worthless.
Not too much you can do in that situation, unfortunately. I usually approach that as a "focus on getting a raise"-type strategy, which is a little different than negotiating starting salary. You did the right thing in your situation and just got unlucky :(
No, the ones I consider to be "important" have 2FA.

When I log into the Woodworking Forums, I have to use a password. If someone steals my Woodworking Forums authentication and posts as me there, um....Oh well. Sucks, and I'll clean up the mess.

Glancing through my password vault (kept in KeePass, for those wondering) I have some in there that I literally haven't used since before Cloudfare was founded, like the Creative Labs developer site.
Makes sense to me. Looks like discrimination against women.
This piece by Upton Sinclair is interesting: http://apache2.pum.edu.pl/~fasting/upton.pdf

He (obviously) was an author, not a nutritionist or medial professional. But he was a "fasting practitioner" and has an interesting perspective on this topic.
Uber’s Leather Boys
I'm working on a tool suite at the moment that will automate a lot of the current pain of web development. It's actually quite easy to build once you have the patterns figured out.
cause people don't like them, and it's fun to read bad things happening to bad people.
Prophet – Forecasting at scale in R and Python
Filecoin whitepaper came out a few months before the Storj one. Filecoin however is not functional, while Storj has been functional for about 8 months.
It should work in python 3.3+, provided you make a method isIterable to detect whether something is an iterator or not. For lower versions of python you can't use the phrase 'yield from', so you need to iterate over flatten(y) manually and yield each element.
Success rates are themselves a flawed metric. Doctors who take on more difficult cases will have lower success rates, but their experience will be more valuable.
I agree. It's almost self parody: what appears to be a thoughtful and thorough exploration of the topic is really just a long winded restatement of that wisdom.

That said, maybe people can reconsider buying that next pair of hipster glasses[1].

1. https://www.google.com/search?q=hipster+glasses&espv=2&biw=1...
So that's why all my NSFW subreddits have started looking weird!
Umm, no. Look at Godel's Incompleteness Theorem. You can prove that you will always be able to make a paradox in any formalized system of logic; at least, under our current understanding of logic. Expanding that (Godel, Escher, Bach by Hoffseader goes into it well) you then can say that any theory of the universe must have holes in it and any machine or system that attempts to formalize the observations will always come up with paradoxes. You are right, you can formalize everything (maybe, jury is still out on that, but I think so), but at the risk of then making paradoxes in the system.
Oddly enough it sometimes helps to go further up the IA chain- the program/acquisition IA guys are usually retired prior who just want to get a check, but if you can reach higher level service branch or OSD IA oversight staff they are usually more motivated and tech savvy, and more willing to help/give suggestions rather than just say 'no, try again'.
Philadelphia just passed a very similar law, which goes into effect in a month or two I believe.
As a total neophyte on these kinds of things, the article seems to be talking about Google's SHA vulnerability as if it's a preimage attack rather than a collision one. Anyone more knowledgeable care to chime in?
I mean, by the nature of being an army they gotta do controlled violence, but they're the largest organization in America with single-payer health care (Tricare), so I don't know about calling them not socialist

(really flat top/bottom pay ratio too: private E1 gets paid $19k/yr top generals max out at $180k base - I've heard of grads fresh out of master's getting more than that at Google)
I have found that almost any decently sized company uses some sort of online form as part of the application/interview process.

These forms usually have a current or desired salary field and often has fairly strong validations on it (e.g., must be filled in, must be a number between x and y, no non-numeric characters allowed).

So you either have to fill it in or not submit the application form at all (the rest of which is usually perfectly reasonable), which is not going to impress anyone.

I suppose you could also hack their javascript and take out their validations and hope they don't have server side validations as well. That should impress them :).

edit for sense/grammar
Well of course. You're giving us two identical (for this purpose) people and then saying one has something more desirable. Naturally, all else being equal, that person has a slight edge.
Can you link to a single instance of a voter affecting the outcome of an election?
No, that's "baklava", the tasty honey-and-phillo-dough desert from Greece/middle east (its exact origins are disputed).
Hm... seems we're wildly agreeing?! By taxing capital (dividends), as opposed to high income (salary), we'd reduce inequality and improve the working/middle-class.
How recent is recently? Windows 7 was the first windows version I didn't dread using for years, Windows 8 was a small refinement on that, and Windows 10 is a vast improvement on that.

Windows 10 feels like it just wants to get out of my way, which is really nice, since for me the gold standard is a customized FVWM config I refined over a decade to be minimalist and extremely usable for work.

If you haven't used Windows 10, it's probably worth at least a look (as long as you don't mind or have ways to mitigate the privacy concerns).
I didn't find it all that difficult to get started with webpack after a few tutorials and samples

Neither did I until one day I tried to do something slightly outside those tutorials and the whole thing kind of stopped working for reasons I could never fully understand.

That being said I'm still using webpack, but it's not really an enjoyable experience.
If you're going to do this, you should leave out X. The larger the differential between X and Y, the higher the unconscious (or perhaps even conscious) bias will be against you. "This guy wants a 40% raise to come work for us" vs. "This guy wants $Y to come work for us."
Hi Hugh -- thank you for sharing this. Fantastic idea, and there is definitely legs to it. In fact, I think I have searched for something similar in the past in the UK, but couldn't find it.

This is perfect for me, and I love the idea. It's definitely a service that I would use. However, for some reason, I didn't end up signing. That got me thinking about the consumer psychology of my behaviour. I half entered by credit card details, then thought "Hmm. Do I really need this?"

I'm sure I'll eventually come back and sign up, but I thought it would be useful to take you through my thought process. Of course, consumer behaviour isn't always rationale, and I may be diagnosing my behaviour wrong, but I thought it would be useful to you -- and, perhaps, other people in any case. It's also useful for me to analyse my behaviour, and see if I can learn something from it.

There is a critical moment when people, for whatever reason, decide to buy a product. Something coalesces -- and we make a decision about buying. I'm sure it's a complicated tangle of (mainly) emotional but also rational reasons. I've always believed that understanding that moment is a key to online business success. How do you create a webpage that is conducive to bringing about a buying decision? Gives the consumer the psychology security to commit? Inches them over the line?

I thought my behaviour on your website was interesting because all the rationale cues were there -- I wanted the service, I like reading business books, I like the ideas of getting one delivered to my door every month. I liked the FEATURES. But the emotional side left me cold. Or I think that's what it was.

Here's my after-the-fact rationalisation:

The website only sells the functional features of the product. It doesn't talk to the type of person that I want to be and identify as.

After half entering my details, I thought... "Is this payment worth the service?" I ended up saying to myself "Actually, I can just go around the corner and picking up a business book myself."

Instead, if I have viewed the buying decision as affirmation of my identity, then I think I would have gone through with the purchase. I wouldn't have viewed the purchase as an monetary exchange for the functional features that you are selling (book delivery), but as a statement of my identity (I am the type of person who reads business books, is ahead of peers on business theory, and is looking to always learn and improve himself).

So, what changes might that analysis suggest...

+ probably the introduction of some messaging around "A bookclub for CEOs, founders, and other ambitious entrepreneurs";

+ probably a testimonial from someone I would like to identify with;

+ I would go bigger on the monthly newsletter. It is not only a newsletter, but the membership of secret UK community of entrepreneurs, and other people who are trying to build and scale businesses.

Anyways. Sorry to hijack your post with a 1,000-word self-interested stream of conscious post. -J
Can humans thrive in the bot economy?
Whoa, thank you for the tip! Those do look very nice :D
How do I change some part of controller function of a DB table ? i.e can I change generated code (what language is the code?) or is it like hook functions available in cloud ?
Very, very long article. TL;DR: "I don't want to tell you, make me an offer instead" is the suggested answer.
> "Our developer API does sit behind Cloudflare with all of its traffic proxied through their service." .. "Data sent to and from our developer API may contain the following information:" .. "Customers’ personally identifiable information"
I've used this technique to great effect for almost 20 years. The problem I have now is that my salary is so high that, without presenting a desired salary, there aren't any easy filter questions left to determine whether a potential employer is remotely interested in acquired somebody of my "caliber".

It is reasonable to expect a company to stretch their budget by 20%. However, it generally isn't reasonable to ask for double their budget. The faster we can get to no, the faster we can talk to other folks.
I believe so as I've filled out some on the train ride in.
Notwithstanding Zed, or any particular feature, the reason to move to Python 3 is that 2 is EOL in 2020. http://legacy.python.org/dev/peps/pep-0373/

Unless any fork actually gains traction, Python 3 will be Python in 2020.
Objection! Claim that /r/the_donald is the main "Republican" subreddit assumes facts not in evidence.
Yes - fixed, sorry new to HN, so still figuring out things.
Can a machine be taught to flag spam automatically?
Is it just me, or is this typical HN elitism?
Sounds like someone who has never worked in this industry or talked to any woman working in this industry. These people are not "evil" even though their behaviors are extremely harmful and reprehensible. What is happening here are extremely privileged and ignorant people (generally white, straight men) operating within a context where there are no consequences for bad behavior.

Your reaction here is also a part of the problem—these kinds of behavior have been extensively documented inside and outside this industry for nearly a hundred years now. You deny and belittle these people's lived experiences with no data of your own to back it up besides banal theories and "cartoonish" ideas of how people operate in the world.

Another thing for you to think about before you respond to this with your poorly researched screed is that there are literally no upsides to Susan for reporting this stuff. All the data we have show that women who report these kinds of behavior get blacklisted from the industry, shunned by their peers, and perhaps face legal action. This doesn't even count the tidal wave of harassment, death threats and worse that comes along with exposing men in power for doing bad things (depression, suicide, paranoia, etc). Think about how awful your own situation would need to be to open yourself up to that sort of thing. No one does this lightly and without cause, and yes this stuff happens all the time and even worse.

Another good read to improve your ignorance of the matter: https://www.nytimes.com/2017/02/22/technology/uber-workplace...
> Downloading the PDFs [1] and comparing their sizes takes less than a minute.

shattered-1.pdf and shattered-2.pdf have the same size and sha-1 hash, but git is still able to recognize that those are two different files and creates two different commit hashes for them. So clearly just having the same size and sha-1 hash is not enough to fool git.
I could never imagine Women getting better toilet paper in the bathroom, but they do.
Tiered subreddits. You would need to earn credibility in open discussions, and earn your way up into more serious discussions. So there would end up being multiple layers of credibility, with only vetted accounts participating in the highest levels.
> Why hasn't Git switched to SHA-2? People have been warning that SHA-1 is vulnerable for over a decade

Back then Linus shot this down in his typical abrasive fashion:

http://www.gelato.unsw.edu.au/archives/git/0504/0885.html
3. 2 is officially End of Life in 2020. http://legacy.python.org/dev/peps/pep-0373/
And yet- as much as I'd like to be wrong, as much as I wish it were different, their investors don't care (except one wrote a medium.com post), their board doesn't care, and their business will most likely survive this short blip and continue as before. In 6 months, will this dustup matter?
It's not a particularly interesting email, I don't think it's bringing anything new on the table. The title also doesn't have anything to do with the contents (I understand that might be because of HN submission rules but it's very misleading in this case).

It's a bit hard to take the author seriously when he complains about "headless chickens" "considerably exaggerat[ing]" then goes on to say that you need "a nation-state's worth of resources" to find collisions. If anything this shattered proof of concept showed that it was actually a lot easier than that, giving an estimate of around 110k$ IIRC.

I'm also sure that SHA-1 remains pervasive in many codebases, although as long as pre-image are impractical it might be hard to exploit those vulnerabilities.
Thanks, that means a lot! Totally agree about boilerplate. I quickly tired of the copying and staleness of boilerplates, but I think the contributors of create-react-app make some valid points.

Working with the configuration needs of many loaders and concerns is difficult. Webpack configuration is not well-suited for keeping these separate and merging them back together later. This is a big reason why Neutrino abandoned using raw Webpack-based configurations merging across presets, favoring a single configuration API that all presets interact with. It takes a lot of the difficulty away from keeping things separate and abstract.
We've never tried on OpenShift, but it works on vanilla Kubernetes cluster.
This behavior is telling you (maybe not intentionally or consciously), that you need to look outside the company for a large pay bump. Unfortunately, many companies do this.

And honestly, there is a middle ground that a company needs to walk, otherwise on the far side, they can be a ship full of very well paid employees on a trip where a few thin years could sink it.

But to be clear, it's absolutely not in your personal interest to receive low pay for the benefit of the firm - especially in an entry level position.
Yes, 100% this kind of thing happens all the time. I think the split is in attributing it to "masculine evil", what I've seen firsthand is more like simple neglect or thoughtlessness.

I attended a small local conference a couple years ago that had forgotten/didn't bother to order any women's t-shirts. It wasn't like the organizers had a meeting and said: "lets exclude women" - they just kind of assumed that everybody could wear the same mens cut of shirt and it would be fine.

To their credit, they were fairly mortified when it was pointed out.
1Password's feature list, when using an account, includes: "Access your data on the web at 1Password.com."

Is it possible to opt out of that while still using their sync? I'm uneasy with anything that does the decryption on their end, which that seems to qualify as.

EDIT: Supposedly the crypto is done in-browser. Still feel uneasy about that.
Peter suggests that everyone using SHA-1 should move to SHA-256. That's a reasonable suggestion, but I say as long as you're making hashing changes why not move to SHA-512.

Remember, it's also in the FIPS SHA-2 standard and faster on 64bit CPUs then SHA-256. It's only 64 bytes long, surly that's not too much to handle.

Edit: Goggle also suggests SHA-256, so perhaps Peter was simply seconding the recommendation. I suggest SHA-512 is the better recommendation.
Progressive Web App starter
I want automatic updates. I think this is a good thing. Chrome automatically updates whenever I restart it. This is great.

I don't want updates when I am in the middle of something full screen like a game, forcing a restart of the machine on me. This is madness.

I don't want ads for office 365, Cortana or edge on my desktop. I don't want to learn how to block them. I don't want to use an OS that feels like it is being milked for all it's worth in its dying breaths.
Before and After Architecture for Distributed Caching Fleet
AWS has a better compliance story.

Compare

https://aws.amazon.com/compliance/

to

https://cloud.google.com/security/compliance
Taleb is saying that the surgeon being a surgeon itself is the measure of his quality in the same manner that Lindy prescribes that age is a marker for stability.

The fact that he continues to be a surgeon provides you with information about his fitness as a surgeon. In the face of poor appearance, his existence as a surgeon provides you information about his quality.