skysight-inc/HackerNews huggingface dataset:
To repeat a comment I made too late to be seen in the CMS announcement thread yesterday:

I wish people would actually use open protocols instead of private APIs, at least in cases where both seem to be available.

As far as I can see, the only feature this needs that only github provides is pull requests – omitting those would still leave you with a useful CMS, and the information could also be communicated in, for example, branch names. That way, you could conceivably use any client you want to work on the repo.
So instead of implementing Gitlab next, why not make it work with git?

This situation reminds me of email clients and libraries, many of whom now use private APIs of a bunch of providers instead of SMTL and IMAP.
Parents don't need to know about root passwords if even they don't have root access in the first place... (At least that seems to be the strategy on mobile)
Well, I have never been anything other than white, but I gather it is easiest to be white in America. You are much more likely to be picked up and treated well in some parts of rural America. (Rural america is usually next door to the wilderness I have experience hitchhiking in, etc.)

Louis CK: https://www.youtube.com/watch?v=6CmzT4OV-w0 -- Comedy can express what terse and technical explanations may not.

Edit: getting picked up easier usually means less environmental risk so it isn't just safety from whoever is picking you up at play.
Energy is conserved. Forces are reacted.
Strang's complaint is that there's too little linear algebra. This is true. This doesn't overshadow the fact that you're not going to get out of using some partial derivatives in neural net land (and many other AI subfields).
Tsimane people of Bolivia have the lowest rates of heart disease ever measured
I agree that there are games that were made for CRTs. Asteroids is another great example.

However, most games do not take advantage of being displayed on a CRT.

Do you think it's better to play Donkey Kong or Galaga on a CRT vs a LCD? If so, why? Just nostalgia?
Have you ever heard of "being grounded"? A punishment where parents restrict actions of the kid including toys and social interaction? This is a concept regardless of technology.
> (excuse me, "unsafe Rust", as if that were a different thing)

They are - there is a world of difference between the two. From a security perspective the ability to audit unsafety explicitly is massive. Right now we rely on intuition and fuzzing at large scale to try to cover massive parts of a codebase. With explicit unsafety you can limit your checks to a subset of modules, rather than the entire program. Massive, massive difference that can not be understated.

> if Rust gains any genuine traction and widespread use it is very likely they'll exist "in the wild" and as exploits waiting to be discovered.

Naturally. But this certainly isn't worse than where we are now - where languages make 0 effort to be safe, or have far too much historic baggage to do it meaningfully.

Beyond that, rust's attitude towards security is pretty positive. Rust has been quick to adopt LLVM sanitizer support, fuzzer support for AFL and cargo-fuzz, and new mitigation techniques such as safestack. With rust's updates coming out quickly you get access to these in a matter of weeks/ months as opposed to years.

Rust isn't a cure-all, no one should be calling it one. But your response is overly pessimistic.
Mistakes? You mean it introduces delays? Or something else?
Ask HN: What is your 'Theory of Everything'?
I've been thinking a lot about scientific progress over the last 500 years and it blows my mind to think that Alan Turing was less than a century ago. Look where we are today. I wonder how all this science and technology will converge tomorrow and what life will be like by 2050.
Dual use technology restrictions.
> (Especially with their marketshare falling below 8%).

Well when they keep alienating their existing user base by chasing after Chrome's tail, and keep spending effort on marketing in the developing world (shades of SJW meddling/signaling in the management, anyone?), while at the same time seem to treat anything but OSX as second fiddle, yeah their market share will tank, and tank hard.
I created a complementary resource, https://badtls.io to allow for automated testing of TLS client libraries. It uses its own self-gendered CA root to allow for generating certificates that exhibit different edge case conditions.

A few practical differences are that badtls.io is designed to be easy to run locally and having simple Python scripts to generate new keys and certs.

For my TLS libraries I utilize both badssl.com and badtls.io to provide more diverse coverage.
I'm worn out on articles dissing the performance of SQL databases without quoting any hard numbers and then proceeding to replace the systems with no thanks of development in the latest and great tech. I have nothing against spark, but I find it very hard to believe that alarm code is now readable than SQL. In fact, my experience is just the opposite.

AirBnB is using an extract, load and transform architecture. No mention of the hardware, data through put, whether they have a message broker/queue to ease the burden of peak volume but work.

I have a strong feeling that they could have 1.) Kept the system exactly how it is and done some performance tuning. But that's not sexxy anymore. Things are just supposed to scale. Which brings me to

2.) Moved transformation logic to its own server or multiple servers using a message broker and queue to aid the transfer of data between systems. It would have been more readable and could have been done in a mo the or less.

In summary I believe they should have put some effort in to keep SQL. Especially for the purpose of accounting because spark does not lend itself to readable logic.
will do! I love your work and will gladly support it.
Another throwaway account? Hilarious. You just prolonged the discussion even more.

And your manual mention the use of petty mistakes to deflect attention. It is typical after all.

Respected accounts are important but maybe they're harder to come on HN? And then use throwaways for mudding the discussion

Maybe the admins could start tracking the IPs of those accounts and tracing them back to the originating organization.
There's a good saying that cyberpunk is "high tech low life", which is not the reality of today. USA may be close to it, because social progress is not linked to the technical progress there, but in the rest of the world it's not like that. There are lo-tech areas with low quality of life and balanced and sustainable high-tech societies. Cyberpunk is usually about dystopia: mentioning utopia as an example against it is thus perfectly valid (and if you go to Japan, which might was an inspiration for cyberpunk writers in 1980s, today it's everything but cyberpunk).
Sure, it would help, in that it would have saved you a single click.

If you had submitted the link to HN with a descriptive title, then there wouldn't have been any confusion here either. So you're complaining about the site not saying what it does (even though it says so right in the README) while at the same time submitting the link to HN with a title that doesn't say what the link is about.

As some /constructive/ feedback, do you appreciate the irony?
FTR I agree, I just pointed out a technical incorrectness.
The certificate at no-subject.badssl.com has an empty subject field, but it still contains the subject domain name in the Subject Alternative Names (SAN) extension.

Using the original X.509 subject field for the domain name has been deprecated for some time, and modern TLS clients look at the SAN extension instead.
Arrive via the 'web' link under the HN title
Your own study has a pretty severe flaw as well, namely confirmation bias. To do this better you need to set a fixed time period in which you will look for gluten consumption and record everything she eats.

Then every so often you (the partner) looks back X days to see if she's eaten gluten. The key is, you can't know ahead of time whether she had a reaction, which is tricky I know.

The way you're doing it, you would find the same results if she she consumes gluten on a semi-regular basis unknowingly but has no allergy. You're only looking when you expect to find something, which is guaranteed to skew the results.
> Sadly, one can either be for open science or against it

An example of a harmful mentality.
I also used it for quite some time. Switching back to Leuven now and then.
As with anything else, devs only know their own insular world of mailing lists and bug trackers. If it is not showing up on either, it does not exist.
I'm in Japan, might be a bit far for you ;)

My current menu doesn't actually have gluten free items on it (i ask that the customers tell me, and ill do something for them on a one on one basis) - the reason being i just took over this restaurant(so its not my menu for another 2 months when we change it).

I have seen what you describe a lot - its usually by restaurants where the head chef isn't in charge. I personally go over everything about new menus - every single line of text is checked by me - as it reflects on my reputation.

As for cross-contamination, frankly anyone who says they dont have protocols in place is full of shit - we have it for EVERYTHING. In Australia we even legally have to have different coloured cutting boards for different produce types.
I have both, and I agree these are great. I really appreciate the style of the Goodfellow book, it's very approachable.
Hi Karl, I just read through your very intersting post about the sabbatical. I 've been thinking about this a while too. I see that you are currently in a A.I role at umich, I was wondering you have written anything about how you went about actually landing a role in this particular field.

Thank you.
Thank you. I enjoyed it too.
Become a Better Engineer Through Writing
Welcome to the concept of CADT. Everyone is off chasing the latest shiny so they can pad their resume (and maybe do a bit of virtue signaling on the side). Its the same crap that has been going on in the Linux GUI world since the formation of Gnome.
WebAssembly is only on by default in Chrome 57+.
We don't need better tech for kids, we need better tech for the elderly. Kids can learn anything. Elderly can really struggle with today's tech.
Founders are workers. They are the ones doing all the work and throwing years of their life away.
CVE listings are not a meaningful metric at all for security. What that could reflect is that Edge's bounty program is far more popular than Chrome's. It could mean that Edge is willing to hand out CVEs for uncomfirmed bugs whereas Chrome requires further proof (I am not saying this is the case at all, to be clear).
I hate those messages with a passion. They really reflect poorly on myself and the chefs under my command. As if i would trust anyone in my brigade who didnt keep my standards, and as if i myself, was unable to control my stations.
Thanks for the names, I'll google them :)
Ironically, all the posts calling confirmation bias are, themselves, probably the result of confirmation bias.
Private Internet Access 1 Year subscription (50% Off) – $39.95
The consumer drone world is crashing
I said it above but i want to say it again - in a well run kitchen, there should be no shared utensils. Even common kitchen tongs should not be shared between pan's, and should be cleaned between each meal.

In my opinion (not so humble haha), if you can't even do that, you don't belong in a proper restaurant.
Really like this simulator!

Please also add a MMIX version and finally translate all the MIX code from Knuth's "Art of Computer Programming" to MMIX ;)

It's great this also works on mobile devices, but it would be better if the "step" and "back" buttons were more touch friendly (bigger).
If you already have a specific aim for a ratio of you talking to the subject talking, why do you take feedback?
I mostly agree, but I think pessimism and skepticism are very much warranted in the area of security especially. Perhaps doubly so with new languages, and even more with new languages that purport to be safe(r).
For me, having to have a one on one discussion with the chef (not my comfort zone) about whether they can make celiac-safe food isn't the same thing as almost every restaurant having gluten-free items on the menu. BTW, plenty of restaurants seem to list fried foods that are gluten-free but also mention that they share the fryer with items containing gluten. That's not legalese, that's certain contamination.
As I said above, CVE listings are a useless metric for measuring safety of a product. High # of CVEs can easily indicate a safer product with a more mature bug bounty program or an attitude of "Assume it's vulnerable, don't require full exploits to prove it".

There is no good information to be drawn from those two links.
LDAP is still the industry standard for storing user data, please support that.
And there are times i wish i could roll back the clock to the XFree86 days. At least then you didn't need to herd a stampede of sub-projects to get a working X11 compiled.
With Flywheel, you set the default, and have the option to override at the end of each ride. That seems like a good arrangement to me, as it matches how I think of it, and keeps me from accidentally forgetting.
I use a much smaller solution than this which just registers a list of permissions in memory of the form: role x can perform action y on resource z and then offers checks like can.Manage(resource,role). So it avoids the policy docs and just does registration in code, and is a bit simpler. This library offers a lot more obviously, and solves a broader set of access problems, but depending on your needs the solution can be really simple and you might be better to write it yourself in one file and avoid another dependency.
The theme that I've found to be the most pleasant on the eyes is toothpaste http://imcatnoone.github.io/toothpaste/
I wish modern OSes made this easier. I would love to have an easy bullrtproof way of saying "give me a temp directory for writing, don't let me write anywhere else, clean up my directory after me".
Why is it newsworthy? Smashing Magazine is a static website. Putting it on a CDN is the most obvious, most efficient, and the cheapest optimization.

The whole thing reads like a Netlify ad.
A father went to hospital with stomach pain, he left without his hands and feet
So the guy that has been in office barely 3 years throws his arms up and goes for the latest shiny. More and more i see where JWZ is coming from, though i can't say i share his fondness for Apple products.
Best short term economic interests, maybe.

But building a reputation as brilliant whitehat surely confers significant economic benefits as well.
google has it

https://support.google.com/accounts/answer/3036546?hl=en
Being critical and pursuing the issue is one thing. You can find lots of work on formally verifying rust code as well as it's type safety online.
> You had your own SGI Indy?

A whole bunch of them in fact. The only thing surviving from those days are the keyboards. Indestructible.
I don't think one Chinese company is "the Chinese"... and if it were, why do you have a blanket distrust of "the Chinese"?
For the record, I don't raise this because it's "fun to throw rocks at the big guy". Your country is saturated by propaganda, which I'm fine with, but unfortunately it's leaking. People in my country listen to your media take this anti-government stuff seriously, even though we don't have the same kinds of problems, and it has a real effect on the electorate.

It was obvious when the Obamacare debate first started and for a week or two the US paid attention to how healthcare worked in other countries. All the sudden these hit pieces started showing up about how bad healthcare is in Canada and the UK, with all this exaggerated garbage about wait lists etc. Or recently with Norway and the "Islamic plague". It's absolute propaganda, taking the tiniest grain of truth and turning it into a giant calamity for political purposes, even though the truth on the ground (which is obvious to anyone in those countries) isn't even remotely similar.

Like I said, if your country wants to do that, that's fine. But I feel obligated to point out that you can't just look at America's government and declare that all government is that wasteful and ineffective.
Was very excited about this during the private beta, when the only pricing indication was about the dyno usage (billed by the second). Now, the GA pricing of $10/mo/pipeline doesn't seem like much, but with our small startup already at 32 pipelines, it ends up blowing past what we're currently paying for CircleCI.

I guess that's actually a more general criticism of Heroku in the microservices context; high availability (at least 2 dynos per service) and predictable performance (non-shared dynos, Performance-M at minimum) combine to make the cost of a "production" setup start at $500/mo/service. Non-issue for a monolith, quite tough for small microservices.

(To be fair, we compromise on both of those requirements and use both single-dyno apps and shared dynos, and so Heroku is very affordable for us. But the downside of those choices ends up biting us often enough that I, in turn, end up lamenting about it on HN.)
What is too much though? Backpropagation uses derivatives, some filters in Computer Vision use multivariate calculus. If you want to have a thorough understanding then calculus is necessary. That said, Andrew Ng was quite good at avoiding calculus in his Machine Learning MOOC, and for applied machine learning I guess calculus is not that important.

A great place to study about math is www.khanacademy.org, they have courses on calculus, probability/statistics and linear algebra.
hm. i think we're seeing eye to eye. you seem more willing to speculate but that is not an offense. the only points i wanted to make are:

1. first amendment does not mean you can say or do whatever you wish
2. if the we can assume the facts are correct, the guy should be punished accordingly

which, if i understand correctly, are two points you'd not even disagree with, barring any new evidence.
Putting it on a different domain would likely make the SEO much more difficult. It's unlikely you could keep it as the first result as no authoritative sites for those keywords would link to it.
https://news.ycombinator.com/item?id=13882626
The original has a rhythm, it reads like a poem. Shouldn't the corrections have tried to maintain that?

This version is awkward to read and that draws attention to how silly some of its statements are. Like that you might just want to take a little walk sometimes is not a crucial component of the manifesto, it just helped that paragraph flow before.
What is to say the human brain doesn't engage in graph combinotrics with some learned heuristics.

Some of the old ideas with enough computation power are actually pretty amazing.
In other words, SHA1 (password) becomes the actual password. As the author writes, "hardly an exploit": just a gentle reminder how insecure the default auth is.
That's more or less the situation I'm in, but with multiple applications. The idea is to pull out the "identity x permission x resource" logic so that each new project doesn't need to re-implement it..
> Young people shouldn't feel the need to withdraw and create their own subcultures to gain a sense of belonging or security. We should be incorporating them into society, giving them a sense of purpose and belonging, and equipping them to make meaningful contributions.

I'm not sure if this at all possible or even desirable. I'm not a psychologist, but my impression is that a certain degree of exploring identities is an important part of growing up - and that often involves separation from established structures and a change of relationship to family, school, etc, at least for a while. In the past, those spaces were physical, today they are a mix of physical and virtual.

That said, not everyone is rebellious as a teenager and there are many people who easily find their identities as parts if well-established groups. However people are different and I don't think those groups would at any time be desirable for everyone. ( Or if they were, we'd have a scarily homogeneous society)

Of course some subcultures and alternative groups can lead people in bad directions and be in fact harmful to them. But then the task should be to protect against those bad groups - or even better, give people the strength to protect themselves. Even in those cases, it's important to keep in mind why exactly the groups are harmful.

Seeing the existence of sub-cultures per se as the problem seems too simple to me.
Sorry, but if you had read the README you would probably have noticed that it does not matter if you use Google Auth, LDAP, MySQL or anything else. Subjects are just string identifiers, so it works per definition with everything, including LDAP.

This is a good example for separation of concerns. LDAP is for authentication, ladon is for Authorization. Don't mix those.
I can't do something this ambitious alone. That's the main thing, I need more engineers, scientists, and designers involved in order for this project to scale and make a significant impact.

I understand your train of thought though. I left Tattooine aka Atlanta because there were not very many people who were fit to co-found this project with me. Moved to Utah instead of Denver to improve as a developer and deepen my discipline in other areas of my life. I feel ready to take the leap now.

Google offered me the foobar challenge a year ago while flying to Seattle (didn't complete in time). I'm confident that should I 'fail', I can end up working at a very nice company that aligns with my moral compass.

I can't live with cognitive dissonance, I have to be around people and ideas that are trying to solve our collect existential crisis.
Isn't that their regular price?
Repost since last post got "[flagged]".
Hacking, 2nd Edition is a great introduction.

https://www.nostarch.com/hacking2.htm
Granual refreshing is not the same thing as no refreshing.
Once again, it's possible to have scrollbars that function as normal but fit with the design of the page.
> I have averaged a sale per month for the last 10 years from people clicking through onto this page.

That might be enough of a "Why" to justify the title.
>Looking back at this as an adult, having not read it for many year, I'm shocked at how antisocial it is. Did I really believe this stuff?

Congratulations, you've lived long enough to become the villain. /s
Agreed. In fact, companies like Google, which do a huge amount of closed source development, are also major contributors to open source.
I trust the relevant agencies and courts to determine whether such a sale ought to proceed. No sense choosing a side based on a news article while we are far from the details.
I have been there many many times. This is the reason for writing that library, because there are no good solutions that cover 99% of your cases. RBAC is limited, ACL is a managing nightmare, DAC is also limited, and so on. What really hit me where those AWS IAM policies which are plain beautiful, hence this library.

However, usually major programming languages have some sort of ACL/RBAC module around.
Have people really asked for a place to pray while flying on a plane? Why would JetBlue ask such a weird question?
What a horrific story. JetBlue doesn't deserve any high marks for their actions here either.
> that used a microkernel

I though they just added Mach IPC ?
"fine-grained access control in complex environments"

Oh that sounds...

"...is inspired by AWS IAM Policies."

Oh god no.

My day to day work is debugging IAM polices that have accidentally given global s3 write access or everyone but admins, admin access.