skysight-inc/HackerNews huggingface dataset:
Has the code quality improved since I was told to screw off for bringing up security?

* 2 years out of date gevent-websocket

* Year old Python-RSA, which included some worrying security bugs in that time. [0](Vulnerable to side-channel attacks on decryption and signing.)

* PyElliptic is both out of date, and actually an unmaintained library. But it's okay, it's just the OpenSSL library!

* 2 years out of date Pybitcointools, with just a few bug fixes around confirmation things are actually signed correctly.

* A year out of date pyasn1, which is the type library. Not as big a deal, but covers some constraint verification bugs. [1]

* opensslVerify is actually up to date! That's new! And exciting!

* CoffeeScript is a few versions out of date. 1.10 vs the current 1.12, which includes moving away from methods deprecated in NodeJS, problems with managing paths under Windows and compiler enhancements. Not as big a deal, but something that shouldn't be happening.

Then of course, we have the open issues that should be high on the security scope, but don't get a lot of attention.

Like:

* Disable insecure SSL cryptos [3]

* Signing fail if Thumbs.db exist [4]

* ZeroNet fails to notice broken Tor hidden services connection [5]

* ZeroNet returns 500 server error when received truncated referrer [6] (XSS issues)

* port TorManager.py to python-stem [7] i.e. Stop using out of date, unsupported libraries.

I gave up investigating at this point. Doubtless there's more to find.

As long as:

a) The author/s continues to use out-dated, unsupported libraries by directly copying them into the git repository, rather than using any sort of package management.

b) The author/s continue to simply pass security problems on to the end user

... ZeroNet is unfit for use.

As simple as that.

People have tried to help. I tried to help before the project got as expansive as it is.

But then, and now, there is little or no interest in actually fixing the problems.

ZeroNet is an interesting idea, implemented poorly.

[0] https://github.com/sybrenstuvel/python-rsa/issues/19

[1] https://github.com/etingof/pyasn1/issues/20

[3] https://github.com/HelloZeroNet/ZeroNet/issues/830

[4] https://github.com/HelloZeroNet/ZeroNet/issues/796

[5] https://github.com/HelloZeroNet/ZeroNet/issues/794

[6] https://github.com/HelloZeroNet/ZeroNet/issues/777

[7] https://github.com/HelloZeroNet/ZeroNet/issues/758
Then don't have a default that works without doing so. Really, defaults like this lead to "works, ship it" and totally unnecessary cases of vulnerable software.
Sure, so I've been a full stack developer for 11 years. Started in PHP, now working in Python (using Django). I've been the lead developer (now technical director) at a top 4 digital agency in the UK, so I've got a lot of industry experience.

The MVP was built in 2-3 days, I think I started it Friday night and launched Sunday morning, the initial version didn't do a lot, but it was good enough to get it live. From there I then worked on it most weekends for a period of perhaps 4-5 months? Since September-ish, it's been pretty self sufficient. I update it every now and again when new updates are released to the game or the parser (which is now written by someone else), and I sometimes work on new features, but for the most part it's in a good spot and I'm happy with it. It's on Github[1] so you can get an idea of the effort put into it (the version which is live isn't the same as the public Github repo, I have a few private repos on Github due to some NDAs, hopefully I'll be able to publish the latest code soon).

[1]: https://github.com/rocket-league-replays/rocket-league-repla...
One of these things is not line the others.
Even on a single Android device, you have to use Amazon's special snowflake app store to get Amazon Prime video. So I don't bother.
Visualizing layered graphs using Sugiyama method
"one in a million" happens several times per second, in todays CPUs :)

Fun small experiment. Pick a random number between 1 and 15000000 (odds for winning the lottery in my country). Loop until you pick it again (i know it's pseudorandom and cylic; but the period seems big enough for the experiment).

Watch how freaking fast it happens (sub-second), and how many iterations it took (dozens of millions).
Show HN: Nudge for Chrome on Product Hunt
There has to have been a solid solution before docker or containerization in general, what do giant companies use?
The Importance of Interactive Data Analysis for Data-Driven Discovery
> Neither argument has been tested, but the defense would that you were acting as an ISP with dumb pipes.

Unlikely.

To become a peer, you must first visit the website, fully downloading the content.

Which makes an argument to you consenting to share the information.
It's just a mirror nowadays. In the past we used to accept merge requests via this mirror as well.
Taxi booking app for fleet management
Hire dedicated android app developers for startup
Just looked that one up, it's book 3/3 in a series, first two being Singular Sky and Iron Sunrise. Do they all touch on this topic? And if not, does Accelerando stand alone well enough to be read without the other two?
By the way you don't need notify to hook into the Replication stream. It is possible to get access to the changes directly from the jdbc driver for example. Logical Replication is a big deal!
And this depends on ipywidgets (or at least similar - Syvian Corlayhas developed both).

These widgets support embedding in other contexts like static HTML pages or Sphinx docs [1]. An example can be seen on the docs [2]

[1]:http://ipywidgets.readthedocs.io/en/latest/embedding.html

[2]:http://ipywidgets.readthedocs.io/en/latest/examples/Widget%2...
If you haven't actually been to Tokyo, you're talking out if you're ass. That's peak hours at the busiest stations in one of the most densely populated cities in the world. I've been to Tokyo and never experienced anything like that.

I live in D.C. and the metro system here is a complete clusterfuck with a tiny fraction of the riders.
Sounds incredible, we'll probably be seeing much more of this type of thing in the near future.
There are projects that try to get into that gap, for example have a look at https://www.ipushpull.com
Yes, I was using 56, didnt work. I had to let it restart to update to 57 (I let my browser always open) now it is working.
Similar to the "EVs use coal powered electricity, therefore EVs are bad" argument. A weird distraction from the fundamental "Coal is bad, pretty much everything is better than coal, let's use much less coal" argument that you'd think everyone (but Trump) could agree on together.
Why would you even count the lack of security for devices which are sideloading apps at all? I mean, there's a clear section in Android Settings called 'Security', and there's an option there to enable installing apps from Unknown Sources(set to OFF by default). When you try to enable that, it says this in clear words: "Your phone and personal data are more vulnerable to attack by apps from unknown sources. You agree that you are solely responsible for any damage to your phone or loss of data that may result from using these apps."

So if I give you a knife to cut fruits, and clearly tell you that you can also do juggling with it but it's not recommended and you should do it at your own risk, will you still blame me if you get hurt by knife juggling?
What Is Carb Cycling and Is It Beneficial?
Quake Champions – Raw Gameplay Trailer [video]
> It doesn't even save a byte at typical font sizes: 20q == 5mm.

Typographers apparently use sub-millimeter precision for their sizes e.g. across 9 use cases Aicher had a single integral-millimiter font size[0]. The quarter-mm seems to have been the base multiplier suggested by DIN 16507-2, though it apparently also suggests 0.1 or 0.05mm when even more precision is necessary.

[0] https://en.wikipedia.org/wiki/Metric_typographic_units
"For Facebook, the move on outside lawyers is happening even as the company’s efforts at improving diversity in its own work force have so far shown little progress.

According to statistics released last year, blacks and Hispanics last July accounted for only 3 percent each of senior leadership, and women made up an additional 27 percent. Hiring for the 12 months beginning with July 2015 showed something of an improvement: Of those newly recruited to senior leadership posts, 9 percent were black, 5 percent were Hispanic and 29 percent were women."

I guess Asian- and Jewish-Americans aren't diverse enough to be mentioned. The latter aren't even diverse enough to be included in the reported statistics, despite Zuckerberg himself being Jewish. And of course the fact that whites are under-represented at Facebook goes unmentioned - they are only over-represented in senior leadership, with 71% vs the general US population of 63%.
You seem to confuse a product that costs tens of thousands of USD (the pacemaker) with one that costs only $100 and you purchase on Amazon on a 2-day delivery.

The former is sold within an industry that is not only heavily regulated but also very mature and governed by laws that have had time to maturate over decades if not hundreds of years.

The latter is sold within a nascent industry (IoT) and the definition of a product is not yet properly settled. Hence my question as to what you actually buy.

But hey, if you can clearly draw lines for me with your imaginary pencil, more power to you. But it does not replace proper and balanced argument.
Tax Day 2017: Are U.S. Tax Payers Procrastinating?
Compare it to chicken buses in Guatemala and El Salvador, etc, that serve the most remote places in the country and cost pennies for a ride, and the companies make a profit. The chicken bus system is really an economic marvel.
Decent article, but it seems mainly focused on the client facing aspects of the insurance biz. Nothing on stress testing and risk management or treasury operations, where AFAIK, there's lots of dated tech holding insurers back.
Reddit and Twitter were big things for me, I announced the initial release on the Rocket League subreddit[1] and then announced updates whenever they were released[2][3][4][5][6][7][8]. I automated daily posts to reddit and Twitter[9] for the "match of the day" (calculated based on a variety of factors). I engaged heavily in the community on Twitter, other fan sites and got my name out there. I gave away the extra (paid-for) features to the top teams to get them using it. I added support for features which users asked for.

One of the biggest sources of traffic for me now are the Rocket League analysis / training subreddits[10]. It's become _the_ location to upload your replays if you want to share them with other people. Making it easy to share (no account required) was a big part of this.

[1]: https://www.reddit.com/r/RocketLeague/comments/3et5yx/after_...

[2]: https://www.reddit.com/r/RocketLeague/comments/4f3jq2/rocket...

[3]: https://www.reddit.com/r/RocketLeague/comments/4d1kpe/rocket...

[4]: https://www.reddit.com/r/RocketLeague/comments/4a9s44/rocket...

[5]: https://www.reddit.com/r/RocketLeague/comments/44xp8j/rocket...

[6]: https://www.reddit.com/r/RocketLeague/comments/3yws8d/rocket...

[7]: https://www.reddit.com/r/RocketLeague/comments/3pra3u/rocket...

[8]: https://www.reddit.com/r/RocketLeague/comments/3gtulm/rocket...

[9]: https://twitter.com/RLReplays

[10]: https://www.reddit.com/r/RocketLeagueAnalysis/
I'm always curious when people ask about "multi-master" what exsctly they mean and with which tradeoffs. What use case do you envision?
I've always just cast the fullscreen video in Chrome to the Chromecast on the TV we have without a built-in Amazon "app". A bit clunky but works fine, unlike any of their mobile apps and non-Fire receivers.
It didn't because humans are not rational and bad press is highly overblown. Mostly because of link to weapons of mass destruction I suppose.

Nobody says anything about the health and ecological disaster that is coal and oil. People do not attribute mining deaths to it and are bad at linking long term chronic health effects to them.

A red herring of solar and wind is proposed that people haven't rejected due to outages thanks to the other technologies covering its major drawbacks.

Likewise hydro disasters are not covered as much as they should.
You don't need to convince me of the dangers of coal pollution. I grew up in Farmington, New Mexico with two massive coal-fired power plants right outside of town.

But this article ignores the consequences, and apparently the very existence, of nuclear waste. This is a problem we'll be dealing with for tens of thousands of years.

It's unlikely that today's pollution from coal-fired power plants will endanger the lives of people thousands of years from now, but you can bet your bacon that the pollution from nuclear power plants will.
In Mexico, they have cooperativas which are basically vans that are hybrid taxis/buses. A lot of taxis in Central America will pick up multiple passengers at a time, too.
But the important this is that, like with the US health insurance system, all the people completely ruined and destroyed by it had choice and weren't 'forced' into anything by nasty government regulation. After all, that's what really counts. Anyway, lots of insurance and finance companies made millions. That's got to count for something. What are you, some kind of communist?[/sarcasm]
Brotli is now supported in most browsers
Sounds a bit peculiar when you put it this way, but chrome has finally caught up with IE :)

One more excuse not to use HTML tables in our toolbox
Display:none in React Native
That's the same conclusion I came to when attempting to read Heinlein. Does it go deeper than that?
Looks great on mobile however
Am I missing something obvious, or isn't this something browser bookmarks/favorites would handle? I.e. storing a more human friendly title/description/tags for complicated URL's & paths.

This doesn't help with the potential complexity of sharing or remembering (on a new device) the sites of course.
Maybe it's not the right audience here. Ready player One is a total YAF, so not many adults will find it fun. I did enjoy reading it, but at the same time thought it wasn't great quality. A bit like finding a really fun article in a trashy magazine.

I feel like Ender's Game is in the same category.
At the giant company I worked at. A central server which kept a canonical mirror of all the tools (except visual studio which was installed using whatever tool large companies use to install and update applications on windows machines) and all the dependencies for everything and then just a handful of .bat files that basically just used robocopy to make sure your build environment was up to date and correct.

Not pretty, but it worked. The big advantage was that since everybody was getting all their tools and dependencies from the same place everybody was using, not only the same version, but also exactly the same binary of everything.
A New Routemaster has a capacity of 87, including 25 standing. This sort of capacity is common in double-decker buses which can run on busy routes.
"I thought it was pretty easy to disrupt / censor torrents, hasn't that been going on for a while?"

Not torrents themselves, only torrent search engines. Torrents are distributed by design, but traditional torrent directories/aggregators/search engines are centralized, thus easy targets for DCMA take-downs, ISP blocks, trials etc.
Unless your site is too big: [0].

Then you can have users end up browsing stale versions of the site. Still an issue as of before Christmas last year.

[0] https://github.com/HelloZeroNet/ZeroNet/issues/598
I don't know if anyone ever tried it but the Daystar Genesis MP running BeOS would have been phenomenal in its day.
The story of Claude Shannon – Mini documentary (2015)
Pai's logic is flawed in so many ways.

But in 2015, the FCC decided to treat the Internet like a public utility, taking away the FTC’s ability to police the privacy practices of broadband providers.

The decision to treat it like a public utility had almost nothing to do with privacy or "policing the privacy practices of broadband providers" and almost everything to do with rekindling the war on Net Neutrality.[1].

This move -- like pretty much everything else this administration is doing -- was done to appease and strengthen oligopoly power. It will ultimately hurt small upstarts in the "ISP /broadband delivery" category[2] (who vehemently opposed the stripping of this legislation), and it will make it orders of magnitude harder for small upstarts whose business may only benefit or scale with "neutral" access to the internet.

In oligopoly situations there are few, if any, choices available to switch to when said provider oversteps is bounds and decides to just start charging everybody more based on the kind of traffic they request... "because it can". Everything to do with everything on the Internet is going to get astoundingly more expensive very soon.

Pai does not understand small business. And it's worth noting that this is probably because he worked for Verizon as an attorney. Though despite his government appointment, he does not seem to have switched his mindset away from that to the best interests of the American people in mind with his policy agendas.

[1] [https://www.techdirt.com/blog/netneutrality/articles/2015021...
[2] http://bgr.com/2017/04/03/twc-charter-merger-fcc-rules-ajit-...]
I had the same reaction; the first 2/3 of the movie I was upset and angry, then everything changed, for the better. I still don't like the major change(s) in the major's character and background but I think I can almost accept it as a differing history. I really was expecting more from this movie and while I'm happy it was made, I am slightly disappointed.
So you are the barometer
"Oh no, Grid Garden doesn't work on this browser. It requires a browser that supports CSS grid, such as the latest version of Firefox, Chrome, or Safari. Use one of those to get gardening!" I am running Chrome 56 on MacOS
I use uglifyjs and it does a pretty good job of it.

We use blocks like this throughout our codebase:

if (process.env.NODE_ENV === 'development') {
fancyDebuggingFunction(stuff)
}
// ... some code later
fancyDebuggingFunction(var) {
/* do debugging things here */
}

And when combined with some stuff that sets the process.env.NODE_ENV (not sure how that part works honestly, never really looked into it) it will remove not only the if statement, but also the function if it's not called anywhere and not exported.

Throw in Webpack 2's import/export bundling stuff, you can exclude whole modules which you don't use in production which can really reduce the size of your code.

And moving forward if the JS ecosystem can ever get a handle on a good way to move to import/export by default, you'll start seeing massive gains in this area by being able to strip out any parts of a library that you don't use.

Also, I believe most widely used minifiers use AST parsing to do their work.
In his posthumously published memoirs, Valeri Legasov, the First Deputy Director of the Kurchatov Institute of Atomic Energy, revealed that the Institute's scientists had long known that the RBMK reactor had significant design flaws.[16][17] Legasov's death from suicide, apparently as a result of becoming bitterly disillusioned with the failure of the authorities to confront the flaws, caused shockwaves throughout the Soviet nuclear industry and the problems with the RBMK design were rapidly accepted.[18][19]

- Wikipedia

The design of the RBMK and the lack of criticism were due to political reasons. Similar to how today we can't update or replace reactors.
> Page response time is not limited by your connection speed.

Huh? What do they mean?
Here's Namecoin's perspective on it:

https://namecoin.org/docs/faq/#how-does-namecoin-compare-to-...
They can bike, carpool with a friend, take a cab, school bus, wait for their parents for a ride home (most households there have cars) etc.
Here's a couple of blog posts covering the conference...

Day 0 and 1: https://cloudlock.engineering/pgconf-2017-days-0-1-c897dd90c...

Day 2: https://cloudlock.engineering/pgconf-2017-day-2-8bd7e93404eb

Day 3: https://cloudlock.engineering/pgconf-2017-day-3-54e56ad8eaca
Clearly you have never faced the wrath of a small town town-council member who has the ability to ratify by-laws and knows everyone in town by their first name!

I pity the high-priced lawyer who thinks he can battle small towns. It'd be easier to battle a big city regulator any day.
Great idea! Would it be implementable with Google Project Tango? Currently working on an idea with museums, and they don't want to handle any installations (i.e. beacons)
Amazon is the better deal if you only go for one, their content library has gotten better and better.

Also, consider the other perks you get with Amazon, shipping, music, books etc
A Shift in Sourcing: Business Sustainability and Strategy
Just like an ISP has to take your request and transmit it and the response. No difference in theory. In practice, I would worry whether courts would ignore theory.
It seems like expectations for watching movies tends to produce the opposite result. I have been trying to trick my friends into having false expectations before we watch a movie to test this hypothesis, but I'm a horrible liar and they always manage to see right through my shenanigans.
Kansas principal resigns after students question her credentials
Saving bytes in CSS was probably not the primary concern upon standardization in 1976. Note that the PostScript point (now the most common definition) is younger than that. Common usage doesn't always follow the best option that's available, as evident by many examples throughout history.

Furthermore, having a measurement that can frequently be used with integer dimensions is convenient, which is probably a large part why we still use points. 12 pt is a convenient font size, so is 4 mm (technically 4.2 mm, as 11.8 pt would be 4 mm), but while 10 pt is still convenient, 3.5 mm is less so. Smaller units lead to more useful integer values (within reason, of course).
Chrome added a feature a long while back I really wanted for ages. The ability to specify the checksum of a linked asset, so that it can be verified as it's downloaded (and untrusted/discarded if not). I just can't find the docs for it. :( My Google-fu is not strong.

EDIT:

Found it :D

https://w3c.github.io/webappsec-subresource-integrity/
Uber’s Levandowski really doesn’t want to talk about any Waymo documents
Now there's a book that deserves a half-way decent reboot movie. Or maybe go with Armor instead.
I am working on a self balancing two wheeled robot, based on EduMPI, building on top of my new Beaglebone blue.
If you have previously visited a page then the response time will be limited by your computers ability to locate and open the correct html document.

If you haven't previously visited a page then the response time will be limited by how many peers are available <b>and then</b> by your connection speed.
The Metaphysics of Object Oriented Programming
Sounds like a certain cranky old man got kicked out of his niece's birthday party. Time for your nap!
Go to chrome://help/ and update it to 57.
> $270,000 annually for one bus

For comparison, in an average German town, a bus costs annually $80'000, including maintenance and driver. From scratch or rented from a company offering bus services.
You need 3rd party cloud access so the stuff in your garage can be more easily stolen of course. Just like I need my twitter followers to know when my toast is done so my toaster needs a wifi connection.
E2E Testing React Applications with TestCafe
If you look at the books, there are a few alternative worlds, backstories, and incompatible canons. Just like the Alternative Architecture. I think a lot of people know only the GitS series/ original movies and expect the rest to be as consistent. It isn't.
It's called Subresource Integrity, see https://hacks.mozilla.org/2015/09/subresource-integrity-in-f... and https://www.w3.org/TR/SRI/

Browser support is noted here: http://caniuse.com/#feat=subresource-integrity