skysight-inc/HackerNews huggingface dataset:
Hah, funny you ask. I was able to siphon off internet quota in my college using a combo of brute-forcing and previously known passwords. Worked quite good until my conscience got the better of me.
I really like Fail2ban for SSH lockdowns, but I worry about using it for repeat login attempts on an application. Depending on the application, this could possibly lock out everyone in an office, campus, etc. For certain critical services being used by everyone, this could cause a fair amount of headache.
MIT Disobedience Award
I don't think that's Feynman's point, no. For one thing, it would be impossible to be a theoretical physicist without having a tremendous amount of buy-in to mathematical realism. That he, for example, believed in things like particle symmetry points to a far-more-than-contingent belief in the reality of mathematical/scientific objects. I think Feynman was just the archetypal "everything is a subset of physics" physicist, who thinks philosophers just play at science.

This is obviously not from the linked article, but it's the sense I have of him from his memoirs.
Write meta blog posts
As someone who comes from the .NET world, this is something that pissed me off about configuring Java applications like Elastic.

If I've got a box with 512GB of ram, it seems I'm supposed to spin up multiple instances to satisfy this, all because the JVM has a hissy fit if you go over ~30GB. This then means worrying about replication and ensuring we don't have both the primary and replicas sitting on the same box.

It seems insane that this is an actual issue in 2017.
I have a six year old who is interested in programming, so we learn together. We've been making projects in Scratch, scripting Minecraft with Python, and I'm getting into some Java so we can work on some Minecraft mods. I'm getting this for us to work on together as well: http://www.lexaloffle.com/pico-8.php
One is a country, and the other is a religion.

No, the "stamp rule" was never a rule, and it has long since been clarified that stamps are fine. Please do some googling before you get into disputes.
Idk what Seinfeld you're watching, but all the apartments in it are massive
you are missing the point, NYC is not worth the humiliation I might suffer
AWS as a stateless platform for cloud syncing services
No, mobile devices are not supported, due to lack of time :(
And guess what, there's still 2 years of data still missing from this. I've been typing them all in manually so I thought of publishing a work-in-progress.
This Week in Code: A Web Design Roundup by Solodev
A community-driven source of Language Server Protocol implementations
>"It's a fun area that gets even more interesting when you look at distributed systems"

Can you elaborate a little bit, specifically how selection algorithms help reduce "chatter" in distributed systems? I am not familiar with this and this sounds like an interesting context.

I have heard of Merkle Trees for similar but that's obviously hashing and not selection algorithms, or is there some connection I am not making?
You can ship daily even if your process is not automated. I usually automate building and deployment later in an application's life -- not at the beginning.

You can automate all steps for building an application but the signing to make your life easier. You can also automate things locally if you're worried about what you're signing.

The bottom line is that this applies to all apps (though your users might be irritated if they need to keep downloading updates).
I had this moment on his commentary on Dark Night.
This just happened to me on the Wii U with my Nintendo ID. I had set a 20 character password some time in the past(probably the limit on whatever webpage I used to sign up) and when I tried to log into my Wii U recently, only 16 characters were available for entry.
Does anyone know of a website that teaches you data structures and algorithms, preferably in C, in an interactive way? I've always found that's the best way for me to learn.
>I've met a 17 year old who built a wordpress website that generated $10K per month after just 6 months (though it already had tons of traffic in the first month) and couldn't write a single line of code. I've heard of hundreds of similar stories.

As developers, we tend to think the technical stuff matters way more than it really does. I think non-technical people almost have an advantage here - they'll choose the minimum technology to get the job done.

I've seen some really nice websites created by friends using nothing more than Squarespace or similar. I fear that if I'd been given the job I'd have procrastinated for ages over all the different options and ended up wasting a lot of time and ultimately creating something less impressive.
Yes. I used to look at /r/all but now I only do my front page with my specific subreddits that way I get rid of most of the crap
Found this in the comment section of here [1]. I humbly submit to the HN community to nominate Aaron Swartz posthumously.

[1]: https://news.ycombinator.com/item?id=13839298

Edit: I understand that the requirements for the award are that the person must be living but I feel they cannot ignore his nomination if a mass of people are in favor of it.
Don't agree. I think that is like saying you can become a professional athlete by just working out everyday. We mostly know what works. It's comradely, career and cash. Most things worth doing isn't going to result in much professional progress or money in the beginning, so working with and showing things for your community is generally the most important. That's what driving every sports team, music group, enthusiast etc. in the beginning. You still of course need the time, knowledge and motivation to do something.

Shipping can be the result of, or one way, to do the right things. But if you look at projects on Github it's usually not a lack of "shipping daily" so much as a lack of packaging it as something useful. Often you see daily commits until the motivation wears off and the project stops. But the software is still buggy, there's no screenshots, it's not straight forward how to build it, lacks documentation etc. They haven't made it into something that is easy for other people to appreciate, so they don't get much positive feedback.
Side topic: As an end user, the worst for me software that only tells you what's wrong with your password AFTER you've done it wrong, and then only tells you one thing at a time even when you've made multiple errors (dictionary word, password too short, needs one capital letter, needs one number...). Just tell me the damn rules and let me get on with my life!
> the food just got wonderfully hot and wow there are all of sudden a lot of churches

implies that you might have visited the green south Indian state called Kerala. Kerala is also called the Spice Garden of India (or maybe the world).

Happy to shamelessly and contextually plug my native land Kerala Tourism's website here if anyone wants to visit the land of spices.

https://www.keralatourism.org/kerala-article/spices-kerala/5...

More about Kerala here:

https://en.wikipedia.org/wiki/Kerala
Adding to my own post (and thinking out-loud)... I can potentially imagine an acquisition and the acquiring company deciding to shut it down.

But the chances of that are so remote I'd still feel comfortable putting mission critical systems on it.
A mini audit along the lines of 'builtwith'.

Hm. Good idea, why not go a step further and turn the 'no server signatures' advice on it's head: full disclosure, server signatures on, in fact, list each and every component in the stack so that end users can (through some plug-in) determine whether or not a site is safe to use.

Of course nothing bad could ever come from that. /s

I'm all for making the use of for instance Cloudflare less transparent so that users know who they are really talking to, but I'm confused about how you'd want to establish what a site is running without giving a potential attacker a lot of valuable information.
At work, I have a fast machine with 32 GB of RAM, of which Visual Studio can only access about 3 GB. About once a month, Visual Studio crashes with some kind of out-of-memory error, and more often than that, it slows down to a crawl because it has to garbage collect every few seconds in an attempt to keep its memory usage below this magic limit. Even though the machine has 20 GB of free RAM that Visual Studio just can't use.

The author acknowledges that this can happen:

> So, you’re now out of address space. There are two ways you could try to address this.

> a) Think carefully about your data representation and encode it in a more compact fashion

> b) Allow the program to just use more memory

> I’m the performance guy so of course I’m going to recommend that first option.

As a "performance guy", he should know that using a bit more RAM is essentially free, and much, much easier to code than doing the kind of bit-fiddling wizardry he suggests ("encode it in a more compact fashion"). In practice, that kind of low-level code will not get written anyway, at least not by modern Microsoft, and much less so by most extension authors. Which means that there's an arbitrary and very hard limit on how much you can customize/extend Visual Studio before you hit that 3 GB wall. And again, this is on modern workstation machines with gigabytes of unused RAM lying around.

In short, there may be very valid technical reasons why VS can't go 64-bit, but to claim that this doesn't hurt the product is in my opinion not justified.
> You could think of building a scalable back end you don't actually need as a form of premature optimization

I've heard this described as "solving the problem you wish you had". A globally-distributed, scalable cloud infrastructure of microservices is good for the likes of Google, Facebook, Amazon, Baidu, etc. because it solves problems they face: handling millions of hits in a timely manner; avoiding downtime, every second of which is user-visible, loses them money and damages users' confidence in their service; etc.

It's very unlikely that a side-project will ever face these problems; an off-the-shelf Web server on an off-the-shelf host (say, Apache running on EC2) is probably fine.

A side-project which isn't shipped will never face these problems, because it doesn't have any users, any uptime, any revenue, etc.
Shock and praise for groundbreaking sex-ed textbook in China
MSDN really is pretty damn extensive, but I'd say the documentation for the Java ecosystem is considerably better. Especially the JavaDoc for the standard library.
For me, the frustration regarding testing comes not from it necessarily being a separate skill set but that writing tests can be daunting considering the tools at hand. Consider, for instance, that only recently has JSDOM even gained a way to log issues inside its own runtime environment, making all usage of it previous to this fix amazingly difficult to debug:

https://github.com/tmpvar/jsdom/pull/1108

Now this is only one in a myriad of nuanced struggles which I can potentially face as a developer when deciding what and how to test. When these tools facilitate this need without creating such an undue burden then I, and I'd bet many others, will naturally gravitate toward automated testing.
There are some other options for this like Travelling Ruby

http://phusion.github.io/traveling-ruby/
Awesome well done @hme Big fan of services that plug into your own billing system (rather than acting as a proxy).
Writing cross-platform C++ is easier in Node.js than it is outside of Node.js
The whole idea that search engines should take preference over actual users is strange.
Once you have a working project, it's OK. But what until then? At first, you will have to invest a lot of time to have the base running.
It's almost as if different places have different cultures, social norms, and ways of doing things. Nah. That couldn't be it.
Capsaicin isn't a toxin and doesn't do anything to microbes. It acts chemically on our nerves to produce a pain signal, but doesn't do anything at all to damage tissues or cells. Disease microbes wouldn't even notice it was there.
Unfortunately it's now out past Neptune and it's broadcasting "liberate tutame ex inferis"
Does this person work alone, while also being responsible for the changes that are bureaucratically and technically important to the 'system'? That shouldn't have happened, never leave us to ourselves for extended periods. Next time place a pair in that position of power because when you only answer to yourself there are no opposing views.
Is there really much to say about StatusCake ? I use it and I have to say that it seems too much simple (not enough alert terms, hasn't got hooks, too expensive)..
Amazon stops selling more than 70 Holocaust denial books
>heat form peppers is really Southern Indian food, even though the rest of India gets plenty hot temperatures as well.

Eh; it's hard to generalize that way - Andhra food is VERY spicy, but Tamil cuisine, especially of the vegetarian variety, is quite tame. The heavy use of coconut ensures this.
UX Wireframing: Foundation of Usability
Make smaller projects, divide things in manageable pieces and define a clear end.. before starting it.
A project never gets finished just because we never stop adding to it..
Context: the "Language Server Protocol" is what Visual Studio Code uses to provide language features (auto completion, error checking, navigation, etc) via a separate process. More than tying it to VSC, though, Microsoft decided to make it a separate standard that can be implemented by other editors and IDEs. This website lists popular LSP implementations and clients (editors) who support it.
is there a javascript version of kramdown?

by the way, i don't know how they compare with each other,
but the speed of commonmark.js is blazing fast these days.
Google Cache version: http://webcache.googleusercontent.com/search?q=cache:http://...
BTW AWS Lambda do have concurrent execution[1] limits which by default seems to be set to 100 per region[2]

[1]https://docs.aws.amazon.com/lambda/latest/dg/concurrent-exec...

[2]https://docs.aws.amazon.com/lambda/latest/dg/limits.html#lim...
The problem is that it is the US that has been forcing this down on other countries for decades if not centuries. And the US society benefited a lot from this.

Read up on the Perry expedition.
They removed that in the newest beta build. Now it has a menu option to the new settings app. Pretty stupid. They haven't even finished transferring everything yet.
I think a fruitful way of looking at what org mode gives you as... a way to pull together many organizational aspects of your life into one system, as opposed to having 5 different apps that have boundaries between them.

Doing an outline for that presentation next week, but need to put it down now, and don't want to forget about it? Schedule a reminder or due date right there in the document and it'll show up in your agenda. No switching over to a reminder app. Want to log time spent on it? Do it right there. In the middle of all that and get a phone call with a new task? You're a hotkey away from recording that info without leaving what you're working on.

For me it's the integration of all things organizational that makes it compelling.
Not ideal if it takes you 4 weeks what I can write buggy in 2 days, and my tester does 2 days and me an extra 2 days to fix it up. (my tester is also cheaper than me).

Maybe your software is perfect, but maybe my customer is happy to pay me 4 times less for the software, even though it still contains the few bugs my tester overlooked.
Quilt (getquilt.com) | Web / Front End Developer | Boston | Onsite, Full Time | Rails, AWS

Quilt (getquilt.com) | Back End Developer | Boston | Onsite, Full Time | Java, MySQL

Quilt is a fast growing team making a difference in the the insurance space. Our highly motivated team, backed by some of Boston’s best known investors, is dedicated to creating a truly customer-focused product that makes getting the coverage you need refreshingly simple.
Scalability, usability, and learning fast to build and improve describe our days. We’re looking for two engineers to join our 10 person team, make an impact at a startup as we grow.
Looking for people with at least 2-3 years of production environment experience.
It seems to me that it is worth considering that HTTPS is not always a panacea of goodness. We should think about two things.

First that almost every firewall out there right now supports https snooping via MITM. Example: https://www.paloaltonetworks.com/features/decryption

Second, I just got back from rural China where most unblocked american webpages take between 5-15 seconds to load on my mobile phone many of them take upwards of a minute to load fully. This seems to be a fun combo of network latency, smaller than expected bandwidth, and pages using javascript with a series of different load events to display content. That dompageloaded->xmlhttprequest -> onreadystatechanged chain can ad some serious time on a 500ms round trip, and that's without talking about the css, the images, and the javascript.

I forgot to pay me electric bill before I flew out and it took me nearly an hour to login, push pay my bill, accept the terms, and confirm payment. I was not a happy camper.

It seems to me that while https is a very good thing, in some cases http and low bandwidth solutions might be worth implementing. It seems to me that one might actually want to tailor this to your audience, no one in their right mind is going to waste 5 minutes loading your web page. If they are so desperate they need to wait, they are going to hate you every minute they do it.
The first tower/game I started into had a room with no exit. At first I thought it was just a very nihilist game with no progress. I started a new game and that was better
Shameless plug (UK only): https://www.windsor-telecom.co.uk/call-handling/divert-forwa...
Show HN: Interactive visualisation of US budget (and UK)
I'd heard the bar for humour had been lowered, but I didn't know how low.
> but if I use "aaaaaaaaa" as a password on a website I know full well what I'm doing.

That's you. The average user thinks 'nobody will guess this password'. In other words don't assume they know about brute force attacks, rainbow tables, most common password lists and a host of other things that they haven't thought of or don't know even exist. They don't even know the complete group of actors that could potentially breach the account.
I read Chomsky's Understanding Power on Aaron's recommendation [1]. I found it equally transformative.

[1] http://www.aaronsw.com/weblog/epiphany
> I feel like the class abstraction in ES2015 is mostly a mask that doesn't do people any favors

I agree completely.

When I first read the ES2015 draft, I was excited to see the class syntax. I assumed that it meant that JS was getting "traditional" inheritance, and it seems like a lot of others did too. That illusion was shattered shortly after beginning to use it.

Now, instead of thinking "Hey, these weird objects that I barely understand how I created don't behave as I expect! Javascript is different.", I think a lot of less experienced developers end up thinking "Hey, these objects don't behave as I expect. Javascript sucks."
Is this like DNS for a Twilio number? That's what I get. If I misunderstand could you fill out more, as if so this could be useful for contingency planning.
And here is the UK budget: https://uk.wikibudgets.org/w/united-kingdom-budget-2015
https://www.random.org/passwords/?num=4&len=8&format=html&rn...
> The thing to note here is that this response from YC is not a political one, but a response that came out of market demand

At base, this is an expression of YC's disagreement with the Administration's positions on immigration. It's saying that the imposition of even more onerous visa restrictions is misguided because it prevents from entering people who would make valuable contributions to American society. That is political.
It wouldn't really matter how good your password was in the leak/breach scenario would it?
AR headset that changes focus of VR objects using the eye's focus
It depends on how the ear was damaged. The cochlea has two types of hair cells: inner and outer. The outer hair cells amplify the incoming sounds by vibrating in tune with them, and the inner hair cells actually pass the signals along to your brain.

If the outer hair cells get damaged, your ear can still perceive all the frequencies; they just aren't amplified enough. In that case, you're correct that boosting the frequencies back up according to your audiogram (with some nonlinear compression to account for loudness recruitment) can bring back your hearing. The same holds if you have a conductive loss (poor transmission of sounds between your eardrum and your cochlea).

On the other hand, if the inner hair cells get damaged, you can no longer hear at the frequencies corresponding with the hair cells that were damaged. The same holds if you damage the connections between the inner hair cells and the nerves, or if you damage the nerves themselves (in which case you may have normal hearing thresholds but still have trouble hearing). In these cases, even if you amplify to match the loss, you can't bring back normal hearing; hence the need for signal processing to make the best of what you have left.
7 HABITS OF HIGHLY EFFECTIVE PEOPLE – SIMPLE Explanation
I'm not trying to be condescending, but you should probably include a US centric example when asserting how the US works. The Scottish example is irrelevant, as it applies to Scotland, not the US. Also, if you try to relate Scotland and the US under the umbrella of the term "Common Law", but then say that that term has it's own interpretive meaning, you've loosened the association to the point where you can't strictly say that the Scottish and US systems are the same...

Also, as I've seen in other comments, we're going to get on the merry-go-round of defining "create law".