skysight-inc/HackerNews huggingface dataset:
If a repo contains binary blobs, especially executables, well, that's very bad practices right there. Also, how can somebody else modify a binary in a meaningful way and send a patch to it? How can you review a patch to a binary file before applying? I'd say that any sane project, especially if open source, would not include binaries (maybe apart from images), and even if it did, would not accept patches to them (if the members of a project were talking about changing, say, an icon, valid images would be exchanged on a mailing list/issue tracker, nobody would bother making, sending and applying binary diffs; then somebody w/ commit bit just commit it).

Let me put it more simply: if you're accepting patches for binary files in your repos you don't care about security at all. Maybe unless if you know how to decode machine code/JPEG manually.

Also, the proposition was to use the full hash internally, and truncate the representation. Nobody other than git itself uses full hashes anyways.
What exactly are people expecting when they order these things ? Are they unable to tell the texture is plasticky and highly processed, unlike normal "stringy" chicken meat you prepare at home ?
This is true.

It looks like Finland is doing the first experiment, even if it's only on the unemployed[0].

[0]http://www.news.com.au/technology/innovation/finland-begins-...
Great in concept until you run into the pigeonhole principle. Such compression schemes are fundamentally flawed and you can spend years wasting time on them until some corner edge case will throw you. Nonetheless, I'd encourage you to satisfy yourself by trying to devise such an elaborate scheme... Pied Piper may have a job opening for you.
New malaria vaccine is fully effective in very small clinical trial
i'm certainly not surprised, i dont have an issue with them putting soy in the chicken, the only issue i have is them advertising as just "chicken", if they instead advertised it as chicken + soy, then i'd be totally fine with it.
I generally try to stay as far away from mocking and stubbing as possible, and I have the scars to back that up from wasting countless hours on restructuring over-engineered tests to deal with minor implementation changes. Integration testing is where the rubber meets the road, which means more information for less effort.
This, btw, is why we have e-cigarette bans. The fact that the generally high-IQ, paid-to-think-about-subtle-categorization community of software developers needs to be inoculated against the "I Heard SHA-1 Was Bad Now" meme, should serve as a reminder for why most things should not be managed by democracy.

(Yeah, I know this will be read as a plea for monarchy and downvoted. It simply proves my point: people are WAY too subject to errors in the classes (1) "I hate him because he said something 'bad' about something 'good'." and (2) "I hate him because he said something 'good' about something The Tribe now knows is 'bad.')
The development version of this package supports graph animation (not yet on CRAN): https://github.com/bwlewis/rthreejs
Linus talked about all of this and why the way git works makes it even harder, supremely harder, to pull off. Nobody is taking the "bury my head" road and Linus talked about ways forward.
Yep, I was roughly equating mass with surface gravity, which I see now is incorrect.

I do find it really interesting and a little mind-boggling that the Moon, as huge as it is, with a good 1/6 of Earth's gravity, only has 1.2% of Earth's mass. Same with Mars: a good 1/3 of Earth's gravity, but a mere 10% of its mass. I really thought there'd be more direct correlation between mass and gravity than that. Of course, surface gravity is related to mass with both density and radius, but still, I would have assumed that the densities of these bodies would have been rather similar, as they're all small, rocky worlds.
Didn't the UK mainly copy them from the Netherlands?
Another thing this turn hurts is this another avenue the "pretty people"[0] can use to get a foot in the door with little to no actual technical experience. I am reminded by a blogpost that got to the front page a few weeks ago about the "new Google OS" that was going to replace everything...written by an admitted non-coder/technical person.

Many hackers are great at what they do, actually producing working, sensible products, but aren't bloggers. Sure, if you can do both, all the more power to you. People who can't blog (out of desire or time or just because they don't like writing may be) shouldn't be seen as any less a hacker because they don't. The best way to gauge a person's ability is their work, which github, et. al. is supposed to provide.

[0] https://techcrunch.com/2015/02/28/beware-the-pretty-people/
They use macbooks with retina screens, for them the text looks fine.
Sold, 2.99 for kindle edition.
they expect what the label says.

And you can process chicken and still have 100% chicken.
Microcenter has a tradition of getting really good cuts before/just after a new product comes out. I remember the Surface RT + Keyboard sale they had for Black Friday:

https://www.neowin.net/news/micro-center-selling-surface-rt-...

Not saying this is predictive of an Intel price cut, but I do think that MicroCenter knows its audience.
They can court order you to produce all relevant documents. They don't have to know that the document exists to order you to do it. You could lie to the court that the document doesn't exist, but I wouldn't recommend that.
Actually having a giant amount of money to throw at a hedge fund is counterproductive. In order to invest all that money, a greater number of investments will need to be made. And the more investments one makes, the more likely it is for them to revert to the mean, performance-wise.

It's a simplification, but if a hedge fund manager finds a fantastic investment for $100mn, but they have $100bn to invest, they have to be able to repeat that feat over and over and over and over.
Hmm, the cheaper ASUS boards are listed as supporting ECC, according to this page: http://geizhals.eu/?cmp=1582178&cmp=1582183&cmp=1582185&cmp=...
I agree that this is a difference caused by different basic premises, and irreconcilable without surrendering one of those premises.

And yes, you're right that Python is probably not a good example of ideologically pure fast-fail in general, simply because of its dynamic typing - so that part of argument is not really strong in that particular context.

(Side note: don't you find it amusing that between the two languages that we're discussing here, the one that is statically typed - Go - chose to be more relaxed about its strings in the type system, while the one that is dynamically typed - Python - chose to be more strict?)

The key takeaway, I think, is that there is no general consensus on this. As you say, "this is a longstanding debate within the PL community" (and not just the topics we touched upon, but the more broad design of strings - there's also the Ruby take on it, for example, where string is bytes + encoding).

My broader take, encoding aside, is that strings are actually not sufficiently high-level in most modern languages (including Python). I really want to get away from the notion of string as a container of anything, even Unicode code points, and instead treat it as an opaque representation of text that has various views exposing things like code points, glyphs, bytes in various encodings etc. But none of those things should be promoted as the primary view of what a string is - and, consequently, you shouldn't be able to write things like `s[i]` or `for ch in s`.

The reason is that I find that the ability to index either bytes or codepoints, while useful, has this unfortunate trait that it often gives right results on limited inputs (e.g. ASCII only, or UCS2 only, or no combining characters) while being wrong in general. When it's accessible via shorthand "default" syntax that doesn't make it explicit, people use it because that's what they notice first, and without thinking about what their mode of access implies. Then they throw inputs that are common for them (e.g. ASCII for Americans, Latin-1 for Western Europeans), observe that it works correctly, and conclude that it's correct (even though it's not).

If they are, instead, forced to explicitly spell out access mode - like `s.get_code_point(i)` and `for ch in s.code_points()` - they have to at least stop and think what a "code point" even is, how it's different from various other explicit options that they have there (like `s.get_glyph(i)`), and which one is more suitable to the task at hand.

And if we assume that all strings are sequences of bytes in UTF-8, the same point would also apply to those bytes - i.e. I'd still expect `s[i]` to not work, and having to write something like `s.get_byte(i)` or `for b in s.bytes()` - for all the same reasons.
Ask HN: How to handle bookmarks so you can find them again?
This may be too pedestrian a topic for HN but I have so many bookmarks that when I had another one it disappears into the pile never to be seen again. I do use folders but now there are tons of folders, too, I've tried Trello, and I tried pocket briefly but it didn't seem quite right though maybe I didn't give it a chance.

My latest experiment is Google Bookmarks and I'm toying with just a simple either HTML page I add and categorize bookmarks on or a simple app to make managing them easier. Any suggestions on something to try?

To be perfectly honest it's possible the problem is me and not taking an organized approach, not tools that are the problem. Maybe I'm waiting for the bookmarking solution to solve a problem with clutter.
Haha. Amused to see the hype train Ryzen has created.
Interesting list.

>Being able to avoid complexity by finding simpler solutions.

This is one of the most important ones, IMO. Sometimes it may also mean reducing the size or scope of the problem itself - because YAGNI (where Y is the customer), or AYRSYNI (Are You Really Sure You Need It - TM me :). Seen it done by my managers a few times, and done it myself a few times (sometimes successfully, sometimes not), as a consultant.

https://en.wikipedia.org/wiki/You_aren't_gonna_need_it

https://blog.codinghorror.com/kiss-and-yagni/

Also, googling for links for YAGNI, TIL about:

https://en.wikipedia.org/wiki/MoSCoW_method

:)
READ: I target engineers with email advertising/recruiting, and want you to make my job easier.
Save yourself some downvotes and remove the mention that you expect them.
Do you want people who have a happening social media presence over productive and competent people? It rocks to have both, but one should be prioritized over the other. The moment soft-skills are more important than actually being able to deliver is the moment the game becomes politics.
I see men being blamed, whether they are intentional or not. I also see men being put forward as being responsible for a solution. I.e. that women cannot succeed without the aid, approval, and encouragement of men.

I view this as an unfortunate sexist and patronizing attitude, and is ultimately a destructive one.

Women do not need the aid, approval, or encouragement from men to succeed in tech. This applies to everyone else, too. There's never been a time of more opportunity for everyone in the US.

If people need excuses for failure, there's an endless list of them. There is no fixing that (like how my coming up with a few thousand to start a business was dismissed.) Successful people don't look for excuses and don't make excuses. They go out and get things done.
It's not just the IA folks. The DoD regs are written in such a way that they only grudgingly accept that software can exist as its own thing.

The DoD by and large certifies SYSTEMS meaning a bundle of hardware and software. That makes sense when certifying an F-16 or an Abrams tank because they are bundled packages of hardware and software, but it is maddening when trying to work on say a web app or database.

A team I was on wanted to use a particular open source app and was told we couldn't because it wasn't authorized -- but it was bundled as part of the Oracle DBMS. So the ruling was that if we installed the Oracle DBMS on our desktops we could use it because that is how it was approved. But wait, another rule said we CAN'T run a DBMS on our desktops. ARGH!

That said it IS possible to use open source software. We use SVN and Tortoise SVN at work and it is explicitly on an approved products list. Another team is developing Java apps on Linux using Eclipse. But the only reason it is there is because an organization took the time to go through the test and evaluation process and submitted a request for approval to the network security gods (who are NOT your local IA people most likely) and waited 6-9 months for it to get through the review backlog. So it is possible, and your IA people SHOULD be in the business of helping you get to YES instead of just saying NO -- but the reality is many of them don't know how to get to yes because it can be a convoluted maze, so they just default to no for everything.
Conversational AI and the road ahead
> it's the only food place open in SF SOMA late night

Wow that surprises me. I would have though SOMA would have been one of the best places in the world for people with disposable income leaving startups late and wanting to buy food on the way home.
Rent an Azure G5 and remote in perhaps?
Yes, greed is insane. It really is insane. I personally try to live as simply as I can not because I want to win virtue points, I almost never mention it, but because I think it's the right thing to do. Greed is a pathology. It feels very sick to me whenever I encounter it. I want to purge when I feel its presence.
Having a large group of people who don't know they have HIV is shocking.
Learn how to sell/market yourself. Lesser engineers who can market/sell themselves will have work when others wont. Its a cruel reality but thats life.
Are you willing to bet $1,000 that those funds will, in aggregate, beat VTSMX over the next 10 years?

It's easy to pick the winners in hindsight. Buffett put $1mm on a bet that it's hard to do it beforehand. If Protege partners couldn't do it with $1mm on the line, what makes you so convinced that you can?
Nah, it's just artificial limits. Would totally just work if they flipped a bit in the processor. /s

Less sarcastically, what do people need >64 gigs for on a consumer desktop? I'm a dev and work on a pretty memory intensive service and don't need 128 gigs. Holding an entire double layer blu-ray in memory would only require 50 gigs.
Why are you getting downvoted?
On vacation so no links, but check out posts from Andrew Gallant (ripgrep, regex), any of the Servo/WebRender/Stylo experience reports from the Firefox team, and I there're some reddit comments out there about Rust's use in production at Dropbox.
With each step, we shall come closer to a test which is applicable to the USA's poor. For now, we are establishing whether the concept works at all. The article described several previous tests, each of smaller scale and with flaws which this new test aims to eliminate.

This program will tell us what the next test should look like.
NotWhatCD
- Truncating to 160-bits still has a birthday bound at 80-bits. That would still require a lot more brute force than the 2^63 computations involved to find this collision, but it is much weaker than is generally considered secure

What level is considered secure, then? The numbers for O(time) and O(space) should be many orders of magnitude apart to represent the relative costs.
Assuming you weren't being sardonic, any form of "government-mandated firewall" would be worse than useless, and doesn't even really make sense in this context.
If you only publish an blogpost once in a while, you wouldn't even need Jekyll. Figure out your template, and save your post in an .html file, add a link to the index.html and upload both to /var/www/ on your own cheap Linux cloud webspace. Markdown is nice, but if you don't need much you can sprinkle some <h..> and <b> tags on your post and you're done. There are browser based syntax highlighting tools where you can paste in your code from your IDE and get it back nicely formatted with the appropriate CSS.

Might not be right for you, but I had to bring up the easiest, the truly minimalist, hey, the original way to it.
Then what's the point of processing it?
The issue is that this could have been fixed years ago. All the information needed to move forward today was also available the last time this got brought up. Fixing it then would have better for git's users (because they wouldn't have freaked out over this) and better for git (because it never would have even come up in the SHA1 discussion) and better for Linus (because he wouldn't have had to spend an hour writing a blog post about this). So why not do it then?

It's frustrating, because Linus clearly isn't stupid. And yet sometimes he does stuff like this where I can't help but go "how did you not see the unforced error you were making?".
Having it be entirely chicken. Google how they make chicken nuggets for McDonald's.
Thanks for taking the time to respond. In this thread, can you provide examples of men being blamed or being held solely responsible for a solution? What percentage of the comments do so?
How do I make a GUI application in rust? Does it have support for Qt, MFC, or maybe WPF?
Juicing removes fiber but a blender does not impact the fiber content.

More info: http://www.nytimes.com/2002/04/23/science/q-a-finer-fiber.ht...
Save myself from people proving my point? Why?
They're not the same. So, yes, they're different.

> The pleading here seems to me to get more and more special with each iteration of the argument.

Really? Because you ignored what the parent comment said. I.e. special pleading!
All the things time.
So they're doing their jobs?
Ever since software design became a thing there's been a tug-of-war between visual design and interaction design. And it doesn't help that those skills are usually not held by the same person on a design team (even if many visual designers think of themselves as interaction designers).

I agree with the general thrust of this piece, and think we're in a bit of a dark age of interface design right now. Too much attention is paid to visual design and not enough to interaction design.

But while speed of response in a UI is certainly a factor in usability, it's not as significant as things like mode, navigation, habituation, vocabulary or consistency. So to that extent I think the article isn't really addressing the main problem, which is that time spent on visual design should be better spent on designing for usability.

I'm also not sure what to make of the idea of calling for the terminal to be revised and considered the way forward in user interfaces. Apart from speed, what problem would that solve?

And I'm intrigued when it says interfaces should be "composable by default so that good interfaces aren’t just something produced by the best developer/designers in the world, but could be reasonably expected from even junior people in the industry".

I'm afraid I don't understand what that means.
NY Times confidential tips page: 50-100 tips/day, about half possibly newsworthy
This is a consequence of the Merkle–Damgård construction. It has little to do with the state size.

SHA-3 uses a different construction, and so is immune to this particular type of extension attack.
Is there precedent that shows that adding restrictions to passwords is dangerous? For example, I use a multi word password for most things, and sometimes it makes me add uppercase or numbers. The average persons password transform just based on that information is probably vulnerable to a sophisticated attack. If I knew a certain site required a certain schema, I could more accurately guess how a user would change their password based on those requirements.
The other restaurants tested had 85-90% chicken instead of 50%. The chicken ends up ground up into tiny bits and bound with other things - basically salt and sugar - so I don't think it is possible to have 100% chicken post-processing. The difference is something like the difference between a raw plank and particleboard.

IMO, if it is 85-90% chicken then labeling it "chicken" is not unreasonable.
For every prototype / POC thrown away there are 9 other prototypes ending up in production or getting sold as business software. If you feel the urge to write a prototype to learn something new please do not show it to your manager/sales rep!
No confirmation on ECC with ECC checks enabled so far though. Just the ability to use the RAM.
Well that's what I do with my little projects and it's nice that it's not tied to a VCS, but it doesn't scale (nor would this I guess). You'd have lots and lots of unnecessary commits about issues and comments in your git repo and would need to merge them etc. It's easier to set up some bug tracking system.
The HN guidelines specifically ask not to express the expectation of downvotes. You may be downvoted purely for ignoring the guidelines, regardless of the rest of your comment.

Please don't bait other users by inviting them to downvote you or proclaim that you expect to get downvoted.

https://news.ycombinator.com/newsguidelines.html
It works on Beta channel (52.0b9) and also a older Aurora channel (41.0a2) for me?
Can you explain why? I went back and reread it and it said the same thing I thought it did: that the fix wasn't a big deal and they were moving forward on it.

I agree it isn't a hairy fix, but think that it would have been better for everybody if it had been made before a SHA1 collision was found, as has been repeatedly proposed to Linus in the past. This would have avoided the entire discussion about SHA1 and git, and all the angst that went with it.
They were four people shipping multiple games a year. They couldn't afford to prototype or build proofs of concept. They had to ship.
California's laws don't prohibit it.