skysight-inc/HackerNews huggingface dataset:
The title does not follow from Elon's actual tweet. He promised to "get the system installed and working 100 days from contract signature". He does not guarantee that such an installation would be a panacea for all "Aussie Power Woes".
How many Snapchat clones does it take for Facebook to lose its self-respect?
What based on the use case provided [1] would the the number one most likely edge-case and what is the most common solution to it?

Making a claim without constructive supporting points is usually not useful and worst appears you may know nothing other than how to cause problems seeding doubt.

[1] Use-Case: Create a virtual number on Twilio and whenever someone calls, a list of real numbers will be tried sequentially. You can set up opening hours. If nobody answers, a voicemail is recorded and sent to you by email.
When I dared to question publicly Micro$oft's motives in releasing and open sourcing .net core, I was downvoted and swarmed by the community, who are probably just grateful for a little good will from a long time enemy.

But I am convinced this good will was a ruse, a charade, to excuse their questionable business practices at the the expense of the consumer. Advertising directly inside the O.S. is a good example.

And we, who reaped the benefits of this goodwill, are more likely to turn the other cheek when they are out of line - especially if (god forbid) our product relies on Windows.

"Oh, that's just Micro$oft being Micro$oft again."

"But what about all the good things they've done lately?"
As it relates to the topic of testing, I'd invite readers to check out "An introduction to property based testing" [0]. It's available in both video format with slides, and in the form of two blog posts. I found it insightful when I first stumbled on it.

I'm not frustrated with testing in the slightest. I consider it a fundamental requirement for any serious production application.

I get the impression that people tend to be far too dogmatic about testing methodologies. Write lots of unit tests, as long as they add value or help improve stability. Not everything needs unit tests. It depends on what the module does, and how it relates to the application.

[0] https://fsharpforfunandprofit.com/pbt/
The cultural rift in MS between their recent OSS efforts and ads in their own OS is astounding. Why are they trying to acknowledge the use cases for other operating systems and reduce the appeal for their own?
> As long as you have the older prescription (basically a small form with the required information filed in) you can get new spectacles without having to visit the ophthalmologist. The prescription is not taken away. In many cases, eyewear shops have ophthalmologists employed on site with all necessary equipment

This is true in the US too. (And the prescriptions must be transferable by law.)
It's flagged because these "personal issues" articles appear constantly on HN, and they're all kinda the same. "He said this, I did this, somebody said this, I didn't like when this happened". It's just noise at this point, it's the same story but with different actors.

(I get that that in itself is a problem - that the issue isn't going away, evidenced by the continual posting of this articles - it just becomes a bit much for a casual internet message board)
It still takes time. Time spent away from your loved ones, away from your friends, away from doing the things you really want to do with your time. It's great that you find meaning in learning from the market. But the only love the market can really give you is colored green.
Worked for two Fortune 500 real estate financial services companies. The pay was excellent. If I had family to support, I would not have left. The money was too good.

The work was unfulfilling; brown-nosing, meetings, horrendous code base. Refactoring does not exist in the enterprise vocabulary. The managers usually have masters in IT not CS so they weren't in touch with the engineers. We were forced to use expensive crappy SCM like ClearCase which required two administrators to make sense of it. All code was prescribed straight out of Microsoft enterprise application patterns. I felt like a drone.

I left on my own accord. I most enjoy the freedom to think outside the box. Job happiness level is high, pay could be better.
Just spitballing, but it's possible that you could take the given password and derive the hashcat invocation that would generate the password. In the strictest case this is equivalent to computing the Kolmogorov complexity of the password, but there's an easier way: have a list of the X most common rules, and test the password against those. Once you have the rule, you can calculate how many possibilities exist in that search space and do a calculation ala GRC Haystack[1]. If it's the case that the list of rules doesn't have one that matches the password, that's probably good enough anyway.

[1] https://www.grc.com/haystack.htm
Why the bounce rate of AMP pages is so high
Same I even made it static, their ephermal changes instantly. I love my little .2 core vm!!

I don't know how they're going to give out 100k ips tho
Is Android any different from Windows in that sense?

It's open source in name only. All development is done behind closed doors and essentially dumped out in the open when Google determines it's ready for a release. No one else has say in the development process and you can't contribute changes either.

All the other things you mentioned, can also be done on Windows. I am not sure how that's different than what Windows does/is doing.
They do sometimes tell the truth. Their animosity towards Muslims seems to be real, not a lie. There seems to be no other adequate explanation for the travel ban (the people who would push it as a rational security measure would also have been smarter about it) so I think this is a case where they can be believed.
I simply type passwords in the answers.

"What is your mother's maiden name?"
- "gHk899iL@"
Cachet and StyleCI use Helpscout.

We've had no real qualms with it.
Front + Intercom which gives us an email-based help desk, in-app chat and messaging, and a self-service FAQ help desk.
same problem here but slightly different solution
i impose myself to not start another thing until the previous is done.
doesn't matter how long it takes but i cannot do another thing until the previous is not ready
i know this will bring me to 10-year-long side projects...
On the password front, I like the new NIST guidelines (summary here https://nakedsecurity.sophos.com/2016/08/18/nists-new-passwo... with links to the detail) and the UK NCSC guidelines https://www.ncsc.gov.uk/guidance/password-guidance-simplifyi... which favour far more realistic guidelines rather than the arbitrary nonsense of hard complexity rules and forced regular password resets.
I didn't know about this problem before but now I'm incredibly curious. I love these problems where you find a trade-off between two seemingly unrelated things, here how going from o(sqrt(n)) to o(log(n)) memoey increases the code complexity by order of magnitude. If you take the code for an o(1) or o(log(n)) memory sorting algorithm, I wonder if you can identify a subroutine that if memoized would give you an o(sqrt(n)) memory sorting algorithm you already know.
I resisted for a while but now always use Google or Facebook account for sites that let me. Makes the password problems much simpler.

Special brickbat for American Express who doesn't let you use special characters in passwords - screwing up my system.
There may be 3.5B humans with access to the internet, but if you sum up all the publishers there are probably 12B MAUs.

http://www.internetlivestats.com/internet-users/
It's pretty common. I know people from many Western countries who say "this sort of bullshit only happens in my country, I'm so ashamed" when they are in fact talking about near-universal human problems.

Then again, all my friends are Westerners, so it could be that they do this sort of thing in the East too.
Show HN: Sleeping Beauty, a 7-day roguelike game
At viurdata.com we use Live Chat https://www.livechatinc.com/
Good piece of software and we also take advantage of their ticket system
Drift https://www.drift.com
You control the number of Google Voice and it has the same features too and is free. Clearly if you wanted to use Twillio platform with the same number there are things Google Voice could not do, but as is, I don't see the difference. What is the difference?
Only thing you need is https://www.youtube.com/watch?v=1n9ykP5NJ2s

(if its a bad joke, dont vote me down :) )
The developers at the Wine project have mentioned multiple times in various places how sketchy and inaccurate MSDN is.

Maybe MS has tried to clean that up recently, but it has a track record of inaccuracy, at best.

I wouldn't be surprised if the Wine developers were the ones submitting the corrections to the MSDN, anyway.
I work for a banking group. Top 3 private bank in my country, top 3 in HQ's country.

I couldn't agree more, even though I believe that "...Technologists are second class citizens in banks..." is an understatement.

You wouldn't believe the money we throw away in technology and software development only for political reasons.

I have enclosures full of servers and storage that have been waiting for conectivity for more than a year. We've decommissioned high end storage after their lifetime was over and they have never seen a byte! This is not in special circumstances, it's normal.

All this and we're still making money like nobody.

I fear that someday we'll be bought by someone competent, then we are fucked, because we couldn't stop the morons (or delinquents) that burned all this money for nothing.
How Indian families took over the Antwerp diamond trade from orthodox Jews
Online design tool with tons of free premium images
Hot Air?
House Republicans would let employers demand workers' genetic test results
https://liveformhq.com/ uses Mixpanel for tracking behavior to improve our product. We also used Zendesk for a while.
I agree 100% with these complaints about some of us don't have a choice. For example, PCI requires:

- Contain both numeric and alphabetic characters.

- Users to change passwords at least every 90 days.

- Password parameters are set to require that new passwords cannot be the same as the four previously used passwords.

Which go against the NIST guidelines. So how do you do things that are considered "best practices" when people like PCI require you to do them wrong?
In the meantime, I have to wonder if companies like Diamond Foundry: http://diamondfoundry.com/ and others are going to take over the overall diamond trade.

(Or, for a different perspective: http://iwantwhatitsworth.com/blog/diamond-foundry-lab-made-d...)
What security implications are there for a tab with the example.com origin to be able to read emails that you receive from an example.com email address? If it's behind a user access prompt, and the API requires that you specify the sender and recipient to monitor for? E.g:

navigator.notifyOnEmail({
from: 'sender',
to: 'recipientaddress',
}, (email) => {
/**
* This callback is run whenever a new email
* arrives from sender to recipientaddress.
* Assuming the browser has access to the
* recipientaddress account via IMAP, and
* assuming the sender address matches the
* browser origin and the user has given the
* origin permission to do this.
*/
});
I mostly agree with the truism that good code is highly testable, so in a way it's not separate. If you have lots of trouble testing your code you maybe just don't design things very well yet. Tests have a way of immediately highlighting structural issues with what you're building.
Revisiting 64-bit-ness in Visual Studio and elsewhere (2015)
> that you receive from an example.com email address?

How do you know that it really was from that email address?
Yea OK, but it's really hard to expect authors to dole out praise of scientists in proportion to the size of their contributions as assessed by the community. Individuals will naturally disagree with the community's assessment (which needn't always be correct), and will like their friends disproportionately, etc.

A lower bar is just that the author correctly represent the evidence and arguments about the scientific issues, especially with regard to identifying the consensus position and representing it fairly. If Lane fails to do that, it's a more serious charge.
Removing SHA1 from gnupg (2009)
I am not an accountant, but in the US, I'm guessing that there are tax advantages to offering employees dental insurance rather than just paying employees more. This is somewhat mitigated by the fact that employees could just put money for routine teeth care into a flexible spending account. (That said, most bigger ticket dental items like crowns are typically only covered by about 50% anyway because they're often at least partially cosmetic.)
It's embarrassing to see that the CIA's Self-Signed Cert trick advocates "http.sslVerify false".
As someone who is trying to learn to code on their own, I feel like I understand this. The first question of "which language/stack/etc should I learn first?" has haunted me for the years I have been trying and getting nowhere.

Not EXACTLY the same problem as the author, because I am not building out scalable infrastructure. I just spent a ton of time learning the fundamentals of angular and node, then try to understand express, then grunt, and mocha and bower and... now I have weeks into this pile of stuff... nothing working and I am frustrated, disappointed, and oh look Overwatch patch notes.. time to try out the new hero.
> Engineers are the worst at this part of the game. They'll sign anything you put in front of them.

The smart ones absolutely will not. Smart people absolutely will not do this, regardless of their profession.
Two ways why I think E-Mails are useful at signup:

- Password Recovery (this can be optional though, for my sites it usually is)

- 'Legit Users', sending an email and having them confirmed through a code in them gives a bit more confidence in the user
This is literally blogspam. The article has the same structure as the documentation and explains the exact same things.
> "Finding LRO was relatively easy, as we were working with the mission's navigators and had precise orbit data where it was located."

> The Chandrayaan-1 was more of a challenge because the last contact with the spacecraft was in August 2009.

I assume that LRO was active, as you said, because they knew where it was located. Chandrayaan-1 lost contact, so was the inactive one.
I'm not saying that's a bad thing.

What I'm saying is that moving to swift full stack is only beneficial if you are using iOS or macOS on your clients.
The question is not whether a company can change, it's whether it will. The values and priorities that a company emphasizes condition employees and managers to think in a certain way. Changing that conditioning over a large population and after many years takes more than a few personnel replacements and a new mission statement. Any new people you add will be significantly outnumbered by existing employees, so how do you get "enough people" to want something they've learned to not see?
Functional JavaScript, WebAssembly, Progressive Apps and More in FSJS #86
What's with the cheap shot at haskell at the end? I've shipped a couple of side projects in haskell.
Seems like a lot of posters here not catching on, this seems to be a parity thing with the new cross-platform, HTML-based MS Office Add-ins which are pretty sweet and have been out for a while. Unusual for Microsoft to be out in front of this since usually they like to follow examples.
> Allows CORS from any domain with any headers without OPTIONS preflights.

That'd be a great way to make CSRF attacks from any domain a default setting.
It should be pointed out that Friends was criticized a lot for showing larger apartments in NYC for what people like the protagonists could typically afford.
Wow. That's pretty good. But how viable is it for them?
His assertion is that the Fed is now better at controlling the money supply to more quickly respond appropriately to outlier events.

Recessions are always and everywhere a monetary phenomena.
By the same token, you could argue that dentists are also real. They are licensed and they can prescribe drugs and perform procedures independently.

My point was more to show that dentistry is not unique in being separate from the medical profession. There are a variety of health professions that have responsibility and esteem that aren't MDs.
Some of us grew up in this sort of flat:
https://www.gumtree.pl/a-mieszkania-i-domy-do-wynajecia/krak...

So yeah, compared to that, the flat they had in "Friends" was incredibly spacious.
Reinvents is such an awful term.

They didn't 'reinvent' anything, they improved upon an existing shortcoming.
They did, and you can make an excuse of it in their case considering what they charge for an OS. Nevertheless, the users were revolted, and Canonical removed the ads.
After explaining why many common password rules are bullshit, the author presents the few remaining rules that aren't. Or rather: if you're going to subject your users to the bullshit that is passwords, here's a set of rules that optimize the security:bullshit ratio.
Especially considering that with their competitor Peapod, the fee actually gets lower the more you buy.
Depends on the type of project. For something as big as nginx, unless you're a professional source code auditor with a lot of time, you pretty much need to rely on the "many eyeballs eyeballing the code." If big companies are using the product in production, you can bet many edge cases have been tested, bugs found and resolved.

For smaller stuff, what comes to mind is chrome extensions. Whenever I install some sketchy looking chrome extension like "user agent switcher" that requests permission to work on every URL, I always check the source code of the extension for any code that might exfiltrate data to external sources. Usually the source code is minimal and this only takes a few minutes. I do a quick scan for any code that is suspiciously obfuscated or seems to make an XHTTPRequest to a sketchy site, and if I see anything like that I "nope" right out of there.

It also comes down to what your threat model is and what you're trying to protect yourself from. If you know that, then you have an idea of what specifically to look for.
Went for another thing through my comments, and will take the chance to add an answer here.

That table is not a valid source. That goes into the bigger pcuture of you deciding for yourself what fact is and what not, and starting to insult people from your "superior" position. I mean, I'm happy about that, it disqualifies everything you write, and I despise your position.

That tables only source is a Forbes Article which has no further direct reference for it. It is coming form the head of one single man. But somehow for you it becomes objective truth.

Also, it does not hold up even when just looking at it. There are no big explosions killing people for solar and wind energy. That means the deaths counted there include numbers like people falling from roofs during installation (even then, it's improbable high). However, the number for nuclear energy is that low that it is evident that deaths like "people having an accident on way to work" are obviously not included. And it does not show which numbers are taken for the accidents in three miles, the radiation leaks we had in Germany and France, Chernobyl and Fukushima. I would not be surprised if it were 0, 0, 56 and 0, which is ridiculous. It's one thing to criticize current medical radiation models, it is another to assume radiation is completely harmless.
Prototyping a server when you already have the client
California Dam Water Levels in 100 lines of declarative graphics syntax
So they think the grass is greener elsewhere? That sounds like a pretty normal (irrational, but understandable for humans) belief to have after removing a we're-the-only-civiized-ones belief.
6 Ways to Kill Bad Habits One Small Step at a Time
once you bring dentistry under the medical insurance, i believe everything else bad in medicine follows.

dental insurance is already a lot more affordable, its just that people treat their dentist like an emergency intervention rather than maintenance.

that is solved through awareness, not trying to pull dentistry into the incredible blob
Cloudbleed and SHA-1 Collision with Max Burkhardt
How changing one habit saved a company
> I am not an accountant, but in the US, I'm guessing that there are tax advantages to offering employees dental insurance rather than just paying employees more.

That's just an example of bad policy, not a reason to encourage that as a solution to the problem. If buying dental insurance or dental services is tax deduction when paid by the employer but not the employee, fix your tax code.
If you think that's bad, try inheriting a code base that has too few tests.
Drift has worked pretty well for me so far. Use Zendesk for another product and I'm not a big fan.
Show HN: Modern node module boilerplate
Correlation (people who ate peppers died less), in no way implies their stated causation ( eating peppers makes you live longer ). Consider how many old people vs young people like spicy food and I think you get my point. I really just wanted some damned confirmation bias, not shitty reporting.
>> There's no point in shipping

There is a lot of point in shipping, and as somebody else pointed out that something made in 2 hours can also be shipped.

What shipping has taught me is to really really restrict the scope, the un-essentials. That in turn has helped in my day job as well, to negotiate correctly on milestones, feature scope etc helping me in staying sane and productive!

>> strangers things that they want you to give them

I don't know if you mean OSS users by this but if yes, then where are these users pestering the authors to give them something, they just lap it up if it is useful when the author gives it to them.
"(GPGMail support for macOS Sierra coming soon)"

And that's where it still is. 41 days after the Sierra release.

After every MacOS update, GPG in Apple Mail stops working. That's just not helping to drive adoption and it's just not acceptable IMHO.
I doubt much direct revenue would come this route. But, if you sell CRM software, or trouble ticket software, the integration might swing a potential buyer.
Walmart is for Ruralites and Aldi is for Urbanites, I think this sums up why NYT would praise Aldi over Walmart.
You only have a part of the picture. Some of these buildings need a lot of investment and some would need to be demolished in 30 years or so.

New development is also a filer for social problems. Fewer crime, drugs and people with mental issues.
I've come to dislike it more and more. Gmail hides too many details. Thinks like precise timestamps. Things like not surfacing subject changes well enough. Things like a spam filter with immense amounts of false positives. I keep having to fight with gmail in ways I never have to with other mail solutions, to the point were I'm getting very close to abandoning it entirely.
They are afraid that they will get hurt if they try hard and no one still wants their thing.

I'm in this kind of release, not because of fear, but because promoting project takes times (a full time job for some people) and I prefer to spend my time programming something else
+1 for Freshdesk. Came over from Zendesk and at the time at least it was (much) lower cost and worked better for our small biz. Great API as well with good docs.
Is "most" still true, or should it be "some" now?
This isn't feature that the CLR knows. It is just syntactic sugar from the C# compiler; As it will prepend GlobalFuncs to the Greet method.
It isn't. They could use cash to do something else where possible, like help pay for housing which is closer to where they work, or buy a computer so they can work from home, or buy a hybrid car etc.
Wow. Schneier has reversed his opinion of the xkcd scheme. Good for him.

Sad that he still didn't fix his article where he lambasted it.