skysight-inc/HackerNews huggingface dataset:
I gave up on this long ago. I login to various accounts from different machines often enough that a password manager doesn't always work for me. I keep a printed paper copy of some 60 different passwords in my laptop bag in case I need to remember one for a new machine. That printed copy gets handwritten notes on it from time to time, which I then use to update the text file on a thumb drive when I'm not connected to the Internet. I print a new copy about every two months, I guess.

To add to the bullshit, it is so common that a site will have some idiotic rule (like "must include a number," "must have at least one lower (or upper) case letter," "must include a special character," "must not include any of these special characters," "must change password every 30 / 45 / 60 / 90 days"), that I don't even get mad about it anymore. I can't even spend the mental energy to send them an email.

Whew, thanks. I feel better now.
Salting is to cover password reuse across services. If you already have the keys to the kingdom for a service you can almost certainly access a user's session
Global and Chinese Magnetic Float Liquid Level Transmitter Industry 2016
I don't think the unlimited plans will last. I think the only reason they've appeared is because we're past the build out phase of 4G/LTE. I expect that when 5G comes around, unlimited plans will disappear as the carriers capital expenses rise during the build out and while their 5G network is underprovisioned.
QA is a separate set of eyes. No one writes a news article without an editor. QA brings a different interpretation of specifications. Developers writing there own unit tests is a single point of failure. The developers understanding of the specification.
> after brushing

Before brushing, I'd say. Then the fluoride in the toothpaste can better reach between the teeth.
> Maybe your answer to this is to "just work harder." To that I just have to say, 'absolutely not'.

I said "ship" it. not work harder. You can even ship something you built in a couple of hours.

It IS ok to not ship every single project you work on, but it is not ok to be proud of how you never ship.

Personally in terms of "learning" I learned 90% of what I have learned AFTER shipping. You think you are learning but you are only scratching the surface.
$25 million for parts... I suspect global shipping and installation isn't cheap.
>as crazy as that sound with an insane neighbour north of the border

Not every country sees international relations as a form of game theory, with mutual assured destruction as an important component. Korean reunification can be a preferable option instead of threatening the people that used to be part of your community, but had the bad luck to be at the wrong side of the ideological fight between the US and the USSR.
I won't name them, but you can filter their names by regex: /^[A-Z]{3}$/
Biggest Russian Bank Sberbank Hires Podesta
As a developer dealing with the encoding of user input made in UTF-8 into a legacy systems which only support ASCII... I prefer this.
MAC randomization: A massive failure that leaves cellphones open to tracking
I ran Linux for 19 years, leaving for macOS a few years ago, but I work for a boss who LOVES Microsoft. He's awesome. Fairly technical (but out of date), awesome at corporate politics, cares about his employees: all-around great guy. But Microsoft can do no wrong in his eyes. He still has a Windows phone and watch, when he knows the platform has been effectively dead for over a year or more.

I think what it boils down to is that he's abdicated his technical thinking to Microsoft because he can't keep up with it any more. When Microsoft was at it's 90's peak, he concluded that he could snuggle into their product-bosom, and ride out the rest of his career on his knowledge of Visual Basic. He wasn't necessarily wrong, but it's a decision that he doesn't have the bandwidth to reevaluate now, as his career is centered around managing. So he just ignores all of these kinds of articles. I guess that's one approach.

People at much higher levels in large companies are in much the same boat. They make purchasing decisions based on Microsoft doing no wrong, and give them the capital to ignore feedback from the public sector. And that's why we are where we are.

At least, that's the way I think it works.
Is the nth_element() function an implementation of "quick select" then"
a) allocating the extra space might be expensive.

and most importantly:

b) you might not have extra space. For example, if you are implementing an out of core sort (i.e. sorting huge on-disk datasets), you want to maximize the size of the chunk you will sort in memory and do not want to waste any memory for the temporary storage. (this is related to locality of reference of course, you can a make similar argument for out-of-cache sorting).
You (and malikNF) are acting like Waterluvian was saying all Linux is bad, when that couldn't be further from the truth. Waterluvian is saying that simply choosing to switch to Linux doesn't automatically mean you'll get away from bullshit.
Honestly, if the US had generally a welcoming visa/immigrant policy, I and most startup founders would not even think to set up my company elsewhere as it is in some regards "the center of the world". But as the US gets a more and more unwelcoming image, other places like London, Berlin or Vancouver rise. Of course tech in the USA is not dead and will not be any time soon. But it could be attracting much more talent if it was more open and easier to get into. Look at Dubai: you want to found a company in Internet Zone? Go there, found the company, get your visas in a simple process, move over. The fees are high, but it is straight forward. That is how it should be in the US. I know there are investor visas, but it is a difficult process with an open end. And then there is stuff like the random travel ban, which, for example, makes it impossible to take my wife (Iranian) with me.
What make and model door knobs do you use? I manage some rental houses and have wanted to automate showings go some time. Do you add a cellular Wi-Fi hotspot temoparily too?
In addition to making GCP cheaper and easier to try out than AWS, they need developer advocates and available resources using which developers can switch their apps from AWS to GCP. After being a leader in this space for a long time, the main advantage AWS has is the perception of "how easy it is to use"
I think you are doing great that you're releasing them into public, but your problem is you are not sharing it enough.

I have many friends who release things like you. I'm not saying you are doing this but these guys just release and make no effort to promote them. They are afraid that they will get hurt if they try hard and no one still wants their thing.

I understand this is totally valid fear and I have it too, but I also know that getting the word out vs not doing it makes a huge difference.

Next time you build a product try to post it online everywhere like Reddit and Show HN. I'm sure you'll gain more confidence and experience from it.
Funny how I focused on "problems" and "using STL" when I read the headline the first time. I remember C++ fondly but only because my mind has now forgotten all the "fun" of debugging STL.
> Why? Because my password in the "create" page was silently truncated on the front end, but the same truncation does not occur in all places, so I would type a longer password on the login page then what was registered in the system and it would fail.

Here's an even worse one than truncating the end of long passwords: truncating internal whitespace

The change/reset password dialog for Apple ID does this. If your password is "foo bar baz bam" then it will happily convert it to "foobarbazbam" but not tell you it did so. Then when you go to log into your Apple ID on your phone, you include the whitespace, you try repeatedly and then lock your account (temporarily). Then you do it again...

Some general advice is:

- Don't silently truncate anything (i.e. don't limit the length)

- Don't silently remove anything (i.e. don't remove whitespace)

- Don't silently transmute anything (i.e. don't convert to lowercase)

- Don't have a password max length with a limit less than $BIG_NUM chars[1]

- Do give the user feedback rather than silently doing anything.

[1]: You're hashing them anyway right? So the storage doesn't change. Though if you're using something like bcrypt be aware of the max hashed length: https://security.stackexchange.com/questions/39849/does-bcry.... Also you can work around that by hashing the entire uses password (with say SHA-512) prior to inputting into bcrypt.
Tuples and deconstructing assignment are the big thing for me. They are the way to provide for reasonable multiple return values. Out parameters are bad, even with the improvements in C# 7. They're simply the Wrong Way to do multiple return values.
It requires about 32 development hours to add geolocation
and about 35 hours more to design a ride feature.

The author comes from the "I can estimate an entire software project with three words of description" school of planning, I see.
One problem with testing is that you're not just testing your code, but you are testing your assumptions. If you make a mistake in your code, you might make the same mistake while testing.
"Why should the browsers speak every protocol?"

Why should browsers only speak HTTP? Who made that rule?

"Why should everything be done through the browsers, instead of better specialized programs?"

I never said "everything". "Better specialised programs"? What are you talking about? I'm talking about essentially being able to access email from a webpage. There is no "better specialised program" for doing that. I'm not talking about webmail. I'm talking about automated emails.

"Why should protocols designed for one problem be abused to solve other problems?"

What you call "abuse", I call "use".

"Why not use client certs instead?"

This has nothing to do with anything I've mentioned.
I doubt Australia's power problems have anything to do with technology.
I actually did an involuntary fist pump when I saw "Tuples" listed. That feels like watching my preferred team score a touchdown in sports-ball.
My side projects are tools I use for work. I don't necessarily finish them, but I use them all the time.
To add to that, you need a large and consistent oil supply to sustain a war on that scale and it is no accident that the North American, South American and Middle Eastern oil regions are effectively all under US control.
mysecretpassword > Ae2!_jT7

from a security standpoint. I hate the required special characters BS, especially since other sites will explicitly restrict you from using those same characters. Seriously, without a password manager of some kind I don't know how people can function online.
There's something really unsettling about some of the richest and most influential men in the world throwing what might be the most lavish ping-pong party in history. The intersection of power, crassness, and triviality reminds me of Louis XVI's France.
That is very arogant, even if I believe he could do it. Australian power issues are endemic to the regions unique requirements, and born out of long term political and economic policy discussions.

I am honestly surprised that someone as smart as Elon wouldn't recognise both the crassness of a comment like that, and that he likely doesn't fully understand the political landscape that caused the situation.

Good luck getting through the red tape and border crossing negotiations. To say nothing of the near 50 degree weather beating down on old infrastructre that spans thousands of very sparse kilometers.

Edit: to clarify, it is arogant because he is stirring an already controversial pot in a country that is frankly none of his business. I am from the state that is enduring the power troubles, and the technology in use is not the core of the issue, it is the artificial market policies dictating the generation of power. Having batteries wouldn't solve that, as having people to pay for the energy generation is the mechanism that is actually broken.
Ship daily is the best advice.
I work in telecom, and on the East Coast, but I have needed to cross out IP sections of corporate employment agreements for the past 20 years. I slash, initial, and sign the document.
Usually the change gets passed from HR to the board and gets a stamp of approval.
Excerpt repository

Not sure if this fits, but for a while I've been wanting there to be a site for written excerpts and their annotations, if any.

It would be for interesting non-fiction articles, books and for research papers, but not a TL;DR service, rather it'd pull out excerpts that the crowd has marked (including the reader's annotations) as thought-provoking or key to understanding a certain concept.

HNers sometimes do something similar when they copy/paste a key line in an article posted here and share it in the comments. I want it as a service.

___

News repository

Another thing I was thinking about today is how so many articles on so many different subjects get published per day yet they seem to just disappear into the ether after a few days. For example, where are the interesting articles about _____ from the first half of 2007? Again, I'm not sure if this could be a subscription service, but it'd be nice to be able to access 10 such articles per month and have them sent to my Kindle.

By the way, I checked Google News and did a search for a random topic from 10 years ago and it gave me a fair number of results from one major newspaper and one of its affiliates, plus one or other two random sources here and there. I'd bet that if I were sent back 10 years and took note of everything that came out about said subject, I'd come away with a lot more content, and from way more sources.
I think it's a bit underestimated, but in general it's a nice case
Haskell to Elm, syntactic differences
What if you already did the free trial and spent, say, $10? Do you now get $290 for 10 months?
Obligatory, but important:

Do the Work - https://www.amazon.com/Do-Work-Overcome-Resistance-Your/dp/1...

The War of Art - https://www.amazon.com/War-Art-Through-Creative-Battles/dp/1...

You have to build a muscle for this stuff. It's hard.
You keep control over your number, which you bought on Twilio.
How to Replace (Almost) Every Part of Your Startup with Software
Thanks for the inspiring story.

One question - how hard is it to actually deal with the administrative, non-code tasks of turning your side project into your main business? I'm talking about incorporation, supporting clients, basically all the stuff that goes on outside the source code repository.
To be precise I'd call it a "dynamic API client". The codebase doesn't change, you read the schema and corresponding actions become available on the client.

There are also "autogenerated API clients", where the API code is templated, based on the API schema.

(I think the swagger-js client also falls into the "dynamic" category, tho most other language implementations based on swagger fall into the templated "autogenerated" category.)

And, yup, working towards bring Core API up to feature parity with Swagger, so that you can fully interoperate with everything that the Swagger ecosystem already provides.
I guess after today I should amend my original comment to specify that the door must have a lock too: https://www.youtube.com/watch?v=c5A1wg5FA-g
Thanks ! I'll fix this.
Is this about testing or unit testing? Personally one of the problems is that unit testing has such a hype train it leads to people using it always when it isn't always necessary. With unit testing brings all the baggage: the DI, IoC containers, factories, mocks & all the stale test cases that were written a few years ago and no-one ever looks at but take 10 minutes to run.

My current project has objects that are only ever used once in one place but still have abstract interfaces, lots of injected parts & test cases. Its only a simple class, it doesn't need all this extra complexity. For me its frustrating that lots of people think its "good design". Sure - you need to be able to test your application but unit testing everything is rarely the right way.
It said one spacecraft was active, one was not, but it didn't explicitly say which was active? I was curious if they'll be able to reconnect with the Indian spacecraft.

I assume that the LRO is active, since they mentioned people that were still on the team, so they must have just been using it for target practice.
>but if I use "aaaaaaaaa" as a password on a website I know full well what I'm doing. So why even bother?

I agree. Sometimes I'm just signing up to a site where I don't put any personal info up, or at least nothing more sensitive than my name. Why do I need high-level security there?
Travel to some other side of the world and France's CNIL recommends[0] the following password rules as of 27 Jan 2017 (abridged):

- if the system uses a login + password scheme: 12 chars min and mandatory mix of all among non-caps/caps/digit/special

- if the system uses a login + password + time-based exponential backoff rate limiting with a baseline of 1 min after 5 tries maxxing at 25 per 24h or lockout after 10 tries or a bot detector such as captcha: 8 chars min and mandatory mix of 3 among non-caps/caps/digit/special

- if the system uses login + password + environmental information (such as IP or MAC addr, etc...) + time-based exponential backoff rate limiting with a baseline of 1 min after 5 tries maxxing at 25 per 24h or lockout after 5 tries or a bot detector such as captcha: 5 chars

- if the system uses login + password + hardware second factor (SIM, U2F, YubiKey...) + lock out after 3 tries: 4 chars

To fend off in-transit and offline attacks, the document suggests that auth should transit sufficiently encrypted (using a cipher or method currently recognised as strong and non-vulnerable) and passwords should be stored obfuscated using a secure (similarly defined as strong and non-vulnerable) one-way cryptographic function with salt (and possibly pepper since they mention a "key", which makes no sense for one-way crypto functions).

[0]: https://www.legifrance.gouv.fr/affichTexte.do;jsessionid=DCF...
Yes and yes! Many throwaway accounts I have use some variation of the same password, because I don't care if someone hacks my HN or reddit or youtube account. I don't use my real name on any of them. If I lose control of it, I'll just make a new one. (Karma doesn't pay the bills, and I don't make money from my very excellent youtube comments; someone else does.)

This is why all these accounts get an email account that doesn't include my real name, too. There are so many sites that have these signup dialogs that require an email address -- why? Oh yeah, that's right, user data is the oil that will fuel the future economy.
Found this resource very useful when test driving Elm as someone with previous Haskell knowledge
The code is pretty much unmaintained at this point, it's a pain in the ass to build, besides the v4 UUID generation function everything else in there is useless, and the v4 UUID generation function is 6x slower than the one in pgcrypto[1].

There's no reason to use it and incorporating it into projects just creates headaches down the road.

[1]: https://www.postgresql.org/message-id/flat/52CF07C2.3080101%...
One possibility is that he realizes he won't be taken up on the offer, which also means that there's no chance he'll be tested on it. In the meantime, free publicity. His comment is on most major news channels today.
Show HN: An interactive buffer overflow tutorial
Agreed; many side projects are just for fun, to create a tool that you want & you don't care if others want it (though you may or may not choose to share it having created it), to ship just to show your friends, or see how it does in the wild without caring about whether it generates cash; just hoping that a few people find it & appreciate what you've made.

Personally I'd hate to run my own business, since that means moving away from the code (even if you get another person to take care of the non-code stuff; you still have to go out and find the right person for that / get involved in things that you wouldn't otherwise choose to). That said I'd love to create something, put it out there, and have 5 people come back and say "thanks for this; you've fixed a problem that I was having"; to get 100 people say that would be even better; any more and I'd probably start to get upset as there would become expectations to start implementing things the user base was asking for, rather than just doing my own thing; which for a hobby project is all I'd want.

A lot of my side projects relate to my day job; I use my spare time to create tools which make my work life simpler. Sure the IPO belongs to my employer, but it means I remove frustrations from my working day without having to justify spending company time on the tools which allow that, and I can share these tools with colleagues so that my friends get the benefits too. That makes for a pleasant life.
Particularly for sites where you're unlikely to return for months/years (government, utilities, charities, small ecommerce sites) this is a fantastic approach.
It's hosted on a paid Heroku instance, our own company number is served by this. The server didn't break a sweat with this HN traffic.
On one hand, amelius is right, there are already simple fast stable sorts using O(sqrt(n)) extra space and that should be okay for all practical purposes. (Though they aren't very well known, and inventing one will take you a week or two.) Allocating 30K elements to help sort a billion elements is no big deal, you don't need to squeeze further. My interest is more academic, how come the known O(1) solutions are so complex compared to O(sqrt(n)) and can they be simplified.
Why don't we dispense with the pretense that passwords should be human readable strings of characters at all, and just make them a sequence of randomly generated bits.
I´m open to learn anything new, so Mac OS is just another step of learning something.

Nevertheless I will have a look into the Dell options, I heard they are building great laptops, too.

(Pure Linux/BSD is the next step, once Adobe has ported its CC to Linux... ;-D)
Just another discussion about UI regression testing painful points
Isn't this exactly what Google Voice does?
FYI: I've put together an Awesome Kramdown page - https://github.com/viennahtml/awesome-kramdown - (in the GitHub tradition) incl. q&a w/ founder/dev, tips & tricks, kramdown extensions, live services & more. New links/additions welcome.
None at Notebook.ai other than being active and responsive on social media and linking various Google Forms on-site for reporting bugs, requesting features, etc. Follow-up on those is by email. Since we're open source, we also invite anyone to create issues on GitHub as well, though it's usually the more technical crowd that do so.

Reasoning: 1) it's free, 2) quality customer service is free advertising when it's public, and 3) there's less friction to "get in touch" with us (and follow up quickly) when it's on a platform a user is already using.

Would definitely love to hear about a (free) quality customer service tool if there are any out there, though. I think we're starting to outgrow Forms/email, as some way to aggregate common requests together (without manually building a spreadsheet, like now) and sort/filter/rank them would be beneficial.
What Is Cyber – An Explanation from a Cybersecurity Pro
Maybe he's suffering from Acute Musk Fever. He started slow and steady (spacex, tesla) but since a few monthes he keeps pushing new projects out like cakes (solar tiles, solar walls, mainstream mass space travel, hyperloop, boring...).
Because?

I don't see Vancouver "happening" (at least not more than it already is). Being similar to places like Seattle or SF isn't a good thing if you want to compete with them, because you'll always end up behind them in a comparison.
Got Papers? – preserve the scene's material heritage
You have a head of turnover, which implies other employees under them, and you only rent out your primary residence?