skysight-inc/HackerNews huggingface dataset:
Most of the answers you're getting aren't all that big of deal for your site. You still might want https though.

You should think about https for sites like yours the way you think about vaccines. SSL everywhere makes everyone safer, even though it doesn't have a tremendous impact on your own site.

Also, shameless plug, if you want really easy SSL you can use our new startup: https://fly.io. I'm not sure what country you're in, but we have a bunch of servers all over to help make it fast. :)
Windows 10 is not free, neither as in beer or libre.

Sure, they gave it away for a little bit, but by that logic, drugs are free, because the guy down the street gave me some free baggies because 'he likes me'!
Okay, I see the issue regarding regexes.

However I take offense at the notion of "babying" users. We are all babied in some aspect of our lives: if it weren't for the active work and intervention of those in other fields, we wouldn't know whether the food we eat is safe, or if the roof isn't going to collapse during the night. I'd like developers to assume some responsibility for their users in turn.

But I concede that may be beside the point in the case of password rules.
The FPU stack is only 8 entries in x86-64, yes, but the 128-bit SSE float/SIMD register set was indeed expanded to 16 entries, just like the GPRs (rax, rcx etc). The FPU stack is legacy and is barely used anymore, instead most floating point operations are done with SSE instructions.
The last time a company had their password hashes exfiltrated. All the common passwords are quickly broken.
Or when a politician holds up a snowball in congress unironically to prove climate change is not a concern.
We use Groove also. It works fine but we do wish it had any kind of mobile support. Even if the desktop site would just function in a mobile browser would be helpful. Two way Slack integration would be a dream (it has notification only now. You can't respond to tickets from slack).
True, I should have said GPR rather than registers.
What is your strategy for when Twilio goes away?
ship weekly!
This is correct (and unfortunate).
Nice WebAssembly/WebGL demo, only for latest Firefox and Chrome.
>What I do personally is type random things as the answers, and write them down somewhere. But that doesn't improve security, it weakens it. //

It weakens it to the extent of your physical security. But in practice how many crackers are breaking in to your flat [aka condo] to find your written down security responses, unless you're famous - or a target some other way (politician?) - in which case you should have sufficient physical security to protect the written answers.

Having security questions allows users to use hard passwords without the problem of losing an account. It increases the risk of personal attacks, for sure, but I'd warrant the chance of personal attack [ie by someone who knows you (or has gone through your bins)] is minimal for most people vs. the chance of an automated online attack.

I think it's right to minimise the online attack surface at the risk of the offline one for most users.
I've been intrigued by trying to circumvent passwords completely. On the vast majority of websites your password already is only as secure as your associated email account. You control the email you can reset the password. So maybe we can build on that? Instead of entering a password I entered a code that gets emailed to me either manually out via link. For important things we can airways supplement with another token from a TFA app or better TFA device. I'd argue that this would be more secure for the average user and more convenient for at least some users and use cases. I personally would find this mildly annoying on my laptop where I'm already logged in to a password manager, but convenient on my phone where logging in to a password manager is a major pain. Cheapshark.com does something similar and as a user I find it a great experience. It's more of an obvious fit for something like this where your account isn't very valuable and you use infrequently, but it's really no less secure.
> As you might already have guessed, the actual performances didn't turn out that way. Instead of confirming the professors' assumptions, the performances suggested different conclusions.

I really like when people test their ideas and aren't afraid about publishing the results, especially when it contradicts the original expectative.

This give us opportunity to refine our thoughts and models.
An ABI for amd64 was consciously developed independently by the gcc developers and Microsoft.
Microsoft did "the obvious thing" and extended __fastcall to define their ABI.

Here are links about this topic:

> http://stackoverflow.com/a/35619528/497193

> http://stackoverflow.com/a/4438515/497193

> http://stackoverflow.com/a/35621290/497193
I think the travel ban could serve any number of non-obvious political purposes. A show of power? A distraction from less unusual political changes? A way to get press (albeit negative)? A way to decrease overall immigration? Security theater?

Airline stewards want me to turn off my cellphone. I can't think of a good reason, but that doesn't mean I'll believe the reason they state, when it makes no sense.
At least in tech, the equipment is free.
Didn't we have this already? https://linuxcontainers.org/lxc/manpages/man1/lxc-top.1.html
I've run into this kind of issue before. I had an 11-character password silently truncated to 10 on signup, then when I typed the full one into the login form it failed to log in.

Woo. Can't remember what clue the system gave me that let me figure out what had happened now.
Couldn't you say this about the software industry in general? In the 90's I used to have a Sun workstation on my desk. It ran the powerful Solaris operating system, but had just 16MB of RAM! Today you need 1GB of RAM to run an OS comfortably. My question: what does modern Linux do that Solaris from the 90's did not, that it requires 50x more memory?
Hi HN, I'm in the room 'Indie While you Work' if anyone wants to drop in and say hi (would love to share some tracks to get us both through the day!). Also would love feedback if anyone has any :)

Thanks for checking it out!
Password rules are especially bullshit on mobile devices where the pain of caps (requiring shift key) and the pain of special characters (often requiring a change of keyboard) are extra severe punishments.

A long all-lowercase pass phrase that's pronounceable is both safe and easy to remember and easy to type on mobile devices. When I hit sign ups that require other characters while on a tablet, I frequently decide I don't need it and bail out.
Indeed. Moreover, written by a person who admittedly doesn't partake in the chili-eating experience and has NOT had that endorphin rush that comes with eating HOT.
REX-Ray offers EBS data volume for Docker: https://rexray.readthedocs.io/en/stable

FittedCloud offers an EBS Optimizer under the same framework: http://www.fittedcloud.com/blog/fittedcloud-aws-ebs-optimize...
> Indeed, if anything, the C.I.A. documents in the cache confirm the strength of encryption technologies. What had gone wrong? There were two culprits: an honest (if careless) misunderstanding about technology on the part of the press; and yet another shrewd misinformation campaign orchestrated by WikiLeaks.

I think these two sentences basically sum up the entire email dump. Can't believe how much time have I spent convincing people that this dump has absolutely nothing to do with Signal's encryption and that it's still perfectly safe to use it.
I remember his original post back in 2009 and being very unsatisfied.

I wanted the 64-bit transition only so I could properly use my tools at work (used to work in a .Net shop). We had resharper and several other plugins that ran in the same Visual Studio process as everything else and it was fairly common to hit the memory limit of a 32-bit process and Visual Studio would essentially die until it was killed and restarted.

Sure, you can say "stop using those tools" or "they should have written them better". But at the time I was required to use most of them (it wasn't only Resharper though Resharper was pretty nice).

Today I don't have this problem anymore. But I think because of that type of issue it would still likely be worth it. Honestly I feel like they could optimize Visual Studio at the same time; it has a ton of capability but it's also incredibly large and, from my understanding, carries a TON of legacy code and resources throughout.
Do(n’t) you need prototyping?
I already have 32-bit and 64-bit copies of all the libraries on my computer. I'm really not looking forward to having a third copy lying around.
GTK3's Adwaita (default theme) is not flat. Sure, you can download misc flat themes, but the default is not.
XYplorer: https://www.xyplorer.com/
CSS Grid Layout: A New Layout Module for the Web
It is working. I sure didn't expect platform parity when they announced it, and yet, I don't feel like a 2nd class citizen anymore. Linux games are now cross platform, not terrible ports. And the 3 largest game engines now compile to linux out of the box (more or less). The support burden has lessened as well. It is great all around.
OpenIO – Opensource object storage solution
Don't allow them to select one, assign them one and reset it as needed.
Ask HN: Do you have a web app with the potential to be a SAAS product?
I've got an idea for making it easier to turn web apps into full SAAS products, and would like to gather some input from potential users. If you've got something you're working on, or have built but not monetised, please respond here (or even better, via email, see my profile) as I'd like to know the problems you faced.
It's especially nonsensical considering humans have done more to spread chilli peppers than birds. Birds never brought chilli peppers to my country but humans farm them here commercially.
Chilies in Asia are not from there, they came from the Portuguese during the period when they dominated the black pepper trade and also owned a colony in what is now Brazil. pepper went to Europe and chilies went to India. Before then capsaicin was unknown there. Mexico I imagine also got chilies directly from the south.
They are fine with an employee being tired during the day due to their own personal projects but are not fine with being tired due to a second employment? What difference does that make? That's just stupid.
Maybe it is even worse when it is just few - people won't know that website creator isn't responsible for all of its content. And sometimes is hard to know who is the culprit like in https://news.ycombinator.com/item?id=12091900 .

Is there any solution other than totally killing HTTP that protects from HTTPS stripping attacks? HSTS won't protect first visit and STS preload lists can only be so large.
What's he point of Himmler's quote? He wanted to reduce deaths in a system in which the end goal was extermination?

I agree with you that there are instances where Europeans wiped out natives and even where that was the mindset. The fact remains that the majority of Native Americans did not die due to systematic extermination. It is indisputable.

The US had done bad things, but every single culture in the world has done evil things. That is human nature. Many native tribes engaged in torture and regular warfare of their own. The only thing we can do is learn from it and the only way to do it is being objective about history, not engaging in exaggeration.

Can you get more genocidal than that? Can you find a Hitler quote, from before the start of WWII that comes close to that?

Mein Kampf?

Hopefully when Trump does not become Hitler 2.0 you will admit you were wrong.
No that is not all an attacker could know. TLS does not provide confidentiality of the number of bytes transmitted. So in your example an attacker would only have to crawl the public website and find the pages matching in size to the ones you have been browsing.
Yeah - my work instance of VS is sluggish as hell, and I sometimes load up a separate instance with toy problems to prototype ideas and it's practically as light as notepad.
https://news.ycombinator.com/item?id=13834401
To be fair though parent was referring to VC6's start-up time compared to the current version's start-up time. Is it fair to expect continuous compilation or maybe even intenseness to slow down start-up? I'm not so sure.
I don't understand how as a developer I have to write code to test my code, surely there should be a non-coding solution, especially end-to-end.

and if you leave end-to-end to a tester they'll have to learn to code.
> My point is: Work longer -> slightly more productive -> slightly higher pay.

And I'm telling you this is not a foregone conclusion.

> If the conversation starts from an inconclusive or flimsy premise then it should be derailed.

No. It should include both the initial position and the specific cases that inspired it and then move to a broader case. This is not customer service, these are people's lives.

> It is far too easy to make bad decisions based on flawed studies.

Are you suggesting that the decision to pay women equally, carefully audit corporate promotions, and firmly and directly punish racist and sexist harassment are actually open for debate? Is there an outcome where we might say, "Oh no, actually it's correct to pay women less for equal work?"

> The first step is to work out if it's a real issue we could be, or should be, solving.

How many individual women need to risk their careers explaining unconscionable behavior by their managers and employers HR departments before you're satisfied anyone anywhere is allowed to have this conversation? You should put that number out there.

> But you have to actually make a case.

You may not realize you're doing this, but you're actually interfering with everyone's ability to make a case by derailing every conversation and making it all about you and your (higher than any other sociological or scientific field) standards for allowing discussion.

Look at you. You're here because marketing copy for an event triggered you. You're so angry you're willing to argue that maybe pay shouldn't be equal after all.
I agree with everything you're saying except for this one. It's (currently) easy to get a tech job (in certain areas). It's NOT easy to get a good job. Unless you're well known, or have some popular programming blog with lots of readers, or really self promote well, you have to pound pavement with the rest of us to fight for a good company.

There are plenty of dog jobs doing enterprise middleware API plumbing, and polishing a product for a zombie startup that doesn't know they're dead yet, and being 8th engineer from the left at BigBoringCorp. Maybe easy to get those jobs. The good ones, interesting problems, successful product/company, growth opportunities, steady pay/raises, outstanding benefits, etc. are not growing on trees.
What an amazing business model. Not something I would have considered as I would consider the capital requirements too high to purchase almost any house. They will walk a fine line between being too picky and excluding an average consumer or having too high a price and losing money. But regardless it is very cool and potentially disruptive, much more than Redfin. A silicon valley version of "We buy your homes for cash"

EDIT: As commentors on BiggerPockets are saying, it is just like Carmax.
Unironically, this was apparently censored (no realistic human interaction would result in this post, which was gaining popularity quickly, disappearing from the first 6 pages within moments).

Meanwhile, a post about YCombinator itself (the US company) going to Canada to skirt US visa regulation changes so that it can continue its access to foreign founders whose exploitable economics are desirable to US founders... remains on the first page.

This, IMHO.

This article was excellent, btw, despite my lack of basic calculus knowledge and, thus, my inability to understand the notated equations.
When I was working on a game, we created a Patreon and promised new demo to backers every month. It's very motivating - you have clear deadline, money and feedback.
Security can improve with 64-bit as well. It's a lot harder to break ASLR in a 64-bit address space than a 32-bit one. Though again, that might not apply to VS where a user can get "arbitrary code execution" by design.
Hangouts Chat by Google Looks Familiar (watch Out Slack=
No. With 8 bit you had to execute multiple instructions to add two numbers. Same with 16 bit. This problem went away with 32 bit. Adding more bits beyond 32 does not bring proportional benefits because the numbers we deal with fit in 32 bit.
Most of my accounts use my low-security password, I don't care much if they all get compromised. I only use my high-security password on 1 site.

Password managers are horrible - Whenever I change machines, I could never remember all my passwords and I certainly don't want to store my passwords in the cloud.
Authenticator is great, but then you get the arsehole effect - every arsehole company decision maker wants you to only use their authenticator. So, I made an account on MS recently and can't use GA because "fuck you user, we won't stop until we own every facet of your digital existence" or something. That shows you where such companies rank security.

[FWIW I expect the reverse situation is probably the same, this is just my anecdotal experience].
I came across this[0] yesterday on HN. Apparently they can migrate ticket history, knowledge base, etc between Zendesk and Freshdesk.

[0] https://www.help-desk-migration.com
Amazon's Most Popular Free Startup Books
That's because "shipping" doesn't mean just posting it online randomly where nobody finds out.

It's like saying "I have a Twitter account and nobody cares what I say, I never get a single reply or a like. Btw I have 0 followers".

Shipping means getting it out there AND see what people think of it. If you at least tried to do that, you would have probably learned something. Even one person looking at your thing and giving you their thought is a learning experience.

Most people don't do that because they don't want their ego to be hurt. My point is don't worry about that and just talk about stuff you build with as many people as you can and hear what they say. It's ok even if they tell you it's shit, because you have now learned that you have built shit (You would not have known that if you never talked to anyone), and if you did built shit, you can learn what makes it such a shit, so next time you can do better. Otherwise you can just keep making shit.
You mean physician. An optometrist typically has a Doctor of Optometry degree. One can argue if that's really a Dr. (I'd say it more like an MS), but nonetheless they could be called Dr. They also write prescriptions for lenses.

An optician fits the glasses, which is more like the technician.
FWIW, the only side projects I have actually shipped were written in Haskell.
The U.S. Army 3D-Printed a Grenade Launcher
couldn't you make the indexable portion of your site fast and static and make it go to a relevant local server once users log in?
off topic: I had no idea John Carmack was so fit!
The "Railgun" feature mentioned in the article is only available in some paid plans. Using the free plan wouldn't keep an open connection between your servers and Cloudflare's.
It does improve the situation by terminating users' handshakes early, using better links, warm DNS cache, etc. among servers. But the latency hard limit is still present between your server and CF. Skipping https between your server and CL is not an option either for any site transferring user data.
Not OP, but I am honestly curious to know why you think they will go anywhere soon. Could you please elaborate?
Books that Aaron Swartz read, loved and hated
2017 Ford GT First Spin
Depends on the product. We sell our software to business owners who use it to manage the majority of their day to day operations. A well thought out support system was needed on day 1.
We...may have different definitions of "flies". Yes if you disable third party plugins then it should be fast at various points in its lifecycle. At the same time it's not really that fast when you have zero plugins installed...
I like the MUD feel :)
I don't think my intense fascination with Aaron's life will ever fade away.

Sometime back, I thought of reading through his entire blog and came across his year-end reading lists wherein he would list anywhere from 70-140 books read in that particular year.

Because all these books were linked to books.theinfo.org (which is not alive), I decided to put it into a shelf where I could add them to my reading list and access them directly.

This is my very small attempt at spreading the sheer magic of Aaron's curiosity.

Currently, I have been able to add books from 2006, 06, 08 and 10. Its a work-in-progress.
We had the same desire, that is why we built Chatlio a few years ago. https://chatlio.com/
The Hardware Hacker: Adventures in Making and Breaking Hardware
Exercise Bike Startup Peleton Seeks $1.2Bn Valuation
Is it? It was not the deal as I understood it when it was introduced. Granted, maybe I missed it.

For me, I understood it as a HTML subset, a method for image scaling, and an overall goal of having clutter free sites that work well on mobile. I knew there was a cache somewhere, too. But that users stay on googles site and the url won't be shown was not clear to me.

There was a very popular article on here about someone who implemented AMP and got surprised by this, the header change of copying the original url goes back to this.
Understanding Discrete vs. Continuous Growth
Then you're effectively banning someone's existing account, which they could have been using for years at that point. There's a lot of potential content there. Not a great feeling for anyone.

Seems like the simplest solution is to have some basic password requirements.
Is this the talk?
https://youtu.be/lX8szUWpfjk?t=2h21m3s
Gingr (gingrapp.com) uses Freshdesk for ticketing, live chat, and knowledge base. Recently hit ticket #20000 and we are very happy with it.
Action Extensions in React Native
Have you checked out something like https://psd2html.com
That taking more than a month to push an update necessary to run on the most recent (and most secure) release of a major OS is not a satisfactory basis for communications software. I don't think it is reasonable to leave users hanging for 41 days.

BTW, I am not judging. I understand how hard this is. But if they want mass adoption, they have to have much faster updates. Bruce Schneier joked that the user definition of an 'unacceptable' software delay is a 'noticeable' software delay [NB: I read this in Secrets and Lies - he may have been quoting someone else but I can't find a source online]. Based on that standard, this is way too long.
Find your way with the power of PostGIS and pgRouting
Why even the best feedback can bring out the worst in us
I share the pain. I'm incredibly productive at my day job architecting and tying together a plethora of microservices to deliver a platform of unified products. Outside of work i am absolutely freaking worthless. My problem is largely perfectionism. I've started working on seemingly great ideas and then took a turn to build a tool that would make task A less hack-ish. A few weeks later I'd open-source the tool/library and jump back on to the project only to find yet another thing to bothers me. My thinking here is that while I'm working on something in my spare time I should enjoy doing things the right way instead of cutting corners to meet deadlines. If i don't do this I cannot help but feel unbelievably dissatisfied and usually quit within a few days. Still don't know how to get over the hump. I'm almost thinking i have some kind of psychological disorder. On a side note, this same behavior helps me a lot in other areas, like working on a project car where attention to detail and just taking time makes the end result much better.
That's a flaw every large company has.