skysight-inc/HackerNews huggingface dataset:
I could get behind an "FCC certification" style program for internet connected devices.

I don't necessarily agree with a lot of the commenters saying it must have secure crypto, or that they need to be 100% liable for all issues down the road, but at least making sure the worst offences are covered, and there is a big database of these devices will go a long way to being able to do things like recalls, and holding the manufacturers responsible if there are major problems.

Like you said, it's worked wonders with RF regulations. You don't ever see products that mess up and flood the RF spectrum with trash ruining everything else in the area, and I have a suspicion that's due to those certification processes.
edit: this was a low-quality post that I should have made. Sorry.

If you are suffering from depression, please seek medical help.
No, it's just been slow news for a few weeks. United will be relieved once the media turns their magnifying-glass to burn other ants
Don't buy it then.

I think glancing out to sea and seeing who owns the ships and where they are going would be neat. Then bringing up aperture and shutter speed for my old rangefinder so I can take the perfect photo. Looking up into the sky and identifying the planes and birds and stars and planets.

Seeing people's name tags next to them, maybe with some recent photos from facebook.

All stuff I can do on my phone, but without having to take it out of my pocket.

And before you go all Luddite on me ... "That sounds terrible!" I actually rarely take my phone with me and 90% of places I go have no signal. So for me this technology is almost like magic (if they can make it work)

I would like to remove my TV and put a plant there.
Have any go developers run into issues where an interface is satisfied where it shouldn't be due to name conflicts?
Also, you shouldn't really be running sensitive commands on a production server ever. And if you are you really should clear the bash_history. Sensitive data leaks into that file and I don't see a clear argument that it really makes your life any faster. Use something like etckeeper and document the important stuff on an internal, authenticated, Wiki or some other more secure central note repository. Often you don't need the whole history for prod, but the few important commands.

In a perfect world most things are done via config management, leaving only debugging to be done on prod servers, which should be transient in nature.

In the real world, prod servers should still get treated as transiently as possible.
To give a shorter answer: Scott Alexander (at the slatestarcodex link), through the poem, associates Moloch with negative-sum games, where no one comes out better than they went in. In extreme cases they force us to sacrifice the things we love in order to survive. You throw your children to Moloch to help you defeat enemies; otherwise, you die. Your enemies do the same thing. It would be better if nobody sacrificed their children, but nobody is in a position to bring that outcome to pass.

In this context, I would interpret "google's Moloch" along the lines of: Google is net-bad for the world, because of privacy issues and problems with centralisation and so on. Using Google's software (and services) makes them more powerful, so people don't want to use Google's software. But because everyone else is using Google's software, the world is optimized for Google users in a way that it isn't optimized for non-Google users, and so it's difficult to escape. And so Google grows yet stronger, and it becomes more difficult to escape.

(To clarify: this is my interpretation of grandparent's use of the phrase. It's not my own position, and there's a decent chance that I'm completely off-base and it's got nothing to do with grandparent's position either.)
Yubikey documentation for setting up ssh gpg and system login is ... Well, I couldn't find it when I looked circa 18 months ago. Thank you for this.
I've seen a few articles about electric aircraft on HN. In addition to the Boeing plane, there's Wright Electric ( https://weflywright.com/ ). Light electric trainer aircraft have already been built, such as the Pipistrel WATTsUP. Not a jumbo jet, but pictures like you asked for: http://www.pipistrel.si/news/wattsup-the-new-2seat-electric-...
Completely agree. What is there today is well worth the license fee even if there's never another update -- though this isn't one of my concerns as Sublime is so much more usable / lightweight / snappy vs Atom. [For it to be sunset, there would have to be a better alternative out there, and for the general case of multiple languages, I don't believe there is.]

Also packages are well separated from the Sublime releases so even in the case that there isn't another update, the ecosystem is still active. That said, I do wish the internal Python for plugins would receive a version bump though.
Show HN: zeroheight for Sketch – organise and share your design libraries
Hmm the callback issue is exactly what I have run into while trying to wrap libsoundio. The user has to provide a read or write callback, but there's just no ergonomic way to actually do that nicely. At least I can't think of one. Maybe I just don't know the right combination of Arc, RefCell, etc.
Yet, that negates one of the few advantages services have for most people, that is the capacity of migrating between development tools without porting all the code, so they can use the best tool for the problem, or change away from obsolete tooling.

As often is the case, the best place is normally between those extrema. You probably want to restrict languages and frameworks, but you probably do not want to dictate any single one. Or, if you want to dictate a single one, you'll probably want a monolith.
I've been using `allowSyntheticDefaultImports` which does some magic behind the scenes for you to be able to use `import flatten from 'lodash/flatten'` making it really easy to use modules that don't define default exports.

So far (a bit unexpectedly) I didn't really run into any nasty side-effects or things that went wrong with it.

See https://github.com/Microsoft/TypeScript/wiki/What%27s-new-in... for a (short) explanation.
I doubt it's quite that simple. It's private property that serves the public. We've had court rulings saying you can't, e.g., refuse to rent your wedding venue to gay couples. If you make accommodations available to the public, there are legal responsibilities that go along with that.

I don't know what the specific regulations are surrounding hotel rooms, but certainly they're not "private property" in the same way that your house is.
Is it even weirder than you think?

In many places in the US you will have a municipal police force and also a county sheriff (and then layered over that a state police, other state law enforcement officials (game wardens and such) and the various federal agencies that do law enforcement).
Are the rules the same before boarding? See discussion above about United's screwey definition of boarding.
Meanwhile, the Linux nightly build has been broken on all major distros for a while (see https://github.com/servo/servo/issues/12015 ), because the project won't bundle openssl. For a nightly. Which they already do for Firefox (all release channels). And of course, there are bundling it for this Windows nightly as well…
You're kind of in a bubble, there is a lot of U.S. government support for open source and most agencies use it. See https://code.gov for a starting point. There's never going to be a huge multi-billion dollar grant program because it is unfair to closed-source companies (who pay taxes) but you are imagining a debate or hangup that doesn't exist.
Always funny to see how banal bug fix commits are in comparison with the severity of the bug itself

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...
This might help, Monzo published a blog detailing their technology stack a while ago -

https://monzo.com/blog/2016/09/19/building-a-modern-bank-bac...
I have done my share of internals. Some of the time you find valuable clues in administrative audit logs and bash_history. Clues that mean you make a good and impactful finding within the timeframe of your timebox. Reality is an attacker with this level of access is going to have more time than I will, but it still means a measurable impact to security because it decreased the time it took to find something. So in that sense the OP is correct, it comes down to a risk reward trade off and is it worth clearing the history to potentially buy yourself more time in the event you are owned. It isn't as black and white as "well, the server is owned, of course you have my bash_history, that is the least of my worries now..." it is, but it could also be the one thing that gives you 3 extra hours to detect and shut down an attack.
I now wonder if that is what c# does under the hood for currency type which is a rather safe way of dealing with a limited number of decimal places for money. Hm.
Ok. So here's an example from Canada. The university of British Columbia technically had its own government. It has to do with the history of the land grant. They have a police force but this police is RCMP (royal Canadian mounted police). They are a federal police force but contracted to smaller towns and cities that don't develop their own. In Ontario many small towns have OPP (Ontario provincial police). Is there a reason why universities simply couldn't contract from a state police force?
In that case, I think they meant to say: "known unknowns"

Perhaps this is just semantics but I have always thought of "unknown unknowns" as being in that mirky realm of "every single possible thing".

Perhaps I should have been more charitable and less pedantic, which is honestly hard for me to do when I see someone passionately argue against something I thought was a scientific consensus.
Sure, it may be an extreme case, but the CEO's reaction is telling. If everybody now accepts this as normal, we're sending United a signal that this is okay and they can continue like this. If we send a signal that this is not okay, they have a reason to try to do better, and so do the other airlines.
Great question - this is actually one of the few reasons that I still recommend Macs at this point...
10 Cool Things You Probably Didn't Realize Npm Could Do
> It might be buggy and make you say "wat?" a lot but in exchange you can build insanely complex apps

Insanely complex apps on a buggy foundation? What could possibly go wrong...
Yes, 99% of the time you do not get anally inspected!
Because it sets what is stored in `state` it does not have to be. It could be inside the if, but there two major reasons why it should not:

1) Testability.
With it separated, we can write automated tests for our state calculation logic that are hardware independent, like 'normal' code. We just need to create `currentState` data, pass it into our `calculate()` function, and verify the new `state` returned. This can run both on our host-system, and on-target. We can even build simulations if we want, http://www.jonnor.com/2017/03/host-based-simulation-for-embe... (shameless plug).

2) Deterministic execution time.
Many embedded systems have soft or hard real-time constraints, action must always be performed within X microseconds. The more branches we have the harder it is to reason about whether we can keep this guarantee. By eliminating branches we are executing our 'worst case' always, giving it much more testing.
Please link to any video from Microsoft that shows an actual, simluated view of wearing a current generation HoloLens.. I've been looking, still haven't found one. All I can find are marketing videos that show fantastical visions of what AR will look like some day but not today.
The problem is that C++ can also be worse than C in pretty much every way imaginable due to how large and complex the language is.

If you believe otherwise then you have not worked with enough C++ codebases.

C is much simpler than C++ and with C source code what you see is what you get.
It means a lot because I have to physically touch the device every single time I ssh.

I can even do agent fowarding taboos and know an attacker can't go creating new connections on that agent without a physical action from me each and every time.

Compare this to how ssh keys are normally used. You use it once, type in a keyloggable passphrase, and the key is unpacked plaintext into system memory for, in most cases, the rest of the time the system is booted.

You could invalidate the passphrase after every connection but this puts an unreasonable amount of work on the developer.

Simply tapping once for each connection and having no way for an attacker to avoid that is a great middle ground, imo. Particularly for high level production keys.
misplaced anger based on fundamental misunderstanding of the contents of the article and fundamental misunderstanding of distinctions between conditions such as schizophrenia or bipolar disorder and the completely different condition senile dementia.
Meanwhile 56% of people who work or study in Copenhagen commute by bicycle.
Do this, but for devs with big social followings. Have them name the price for a tweet, post, like, etc. There is nothing like it right now and its a huge market.
There is some potential for harm: people making decisions based on incorrect information.

Yes, you shouldn't trust such a device completely. But if you can't trust it... What's the point, other than an expensive cool toy?
Teams are highly coupled by their dependence on a common framework: they can't choose their own tools, and you are at high risk of having to coordinate with another team (the framework team) to release a new feature, all of which are things microservices are supposed to eliminate. Therefore, it's an antipattern.
Was the "Execution contexts" feature outlined in the paper implemented?
It really depends on the location of departure, destination, and how valuable your time is.

For example, I can fly round trip from Chicago, IL (ORD) to Miami, FL (MIA) for $325 per person (tax included, no checked luggage) taking about 7 hours each way (45 minutes to airport, arrive 2 hours early, 3:15 hour flight, 15 minutes to get situated, 45 minutes to destination). To drive that would take 21 hours and 1,400 miles each way which would cost about $300 in gas for my vehicle. This is really a best case scenario for flying being potentially as cheap as driving. If you want to fly to any smaller international or regional airport without frequent direct flights, the cost can easily be a couple hundred dollars more per person.
When are you flying? BOS and SEA have some of the longest TSA lines in the country. I've waited over an hour in line at both. I've gotten through BOS in 20 min but that's the exception, not the rule. AUS has gotten a lot worse too.
this is soo confusing...
"while aboard an aircraft" the rules say. It sounds like United is claiming he wasn't aboard yet so they are caught in a catch-22.
Yeah, it's pretty wretched. I do miss the old "byte magazine" though. It was awesome.
And if you're operating in an area where the legality of the service is gray, you can use machine learning to make sure clients with high probabilities of being government enforcers don't get any action.
You can only use U2F for what, github and google? I am a big fan, but the 30 other services I need to access to do my job use TOTP.

We need all the help we can get on that until TOTP is finally phased out.
Or double click to fully open them.
The History of Urbanization, 3700 BC – 2000 AD
Thats a good idea. Let me see what I can do. If there are devs in the house with a solid following, send me your details.
> C is a thin layer over hardware. There is a reason it hasn't yet been replaced despite waves of new, safer, more powerful paradigms and languages.

C has already been replaced in what would have been the vast majority of its use cases 20-30 years ago, especially if we're talking about new code. At this point it's mainly alive due to inertia.

> If you need to get your code on a 8/16/24 and even most 32 bits microcontrollers, there is not a lot of choice.

Rust is starting to get some microcontroller support. And in many cases the business case has shifted away from true microcontrollers - there's no longer much or any price advantage over a proper ARM (for example), battery technology is getting better all the time...

> virtually all the hardware you own has most -if not all- of its code written in C/C++.

I don't think that's true these days. My phone is running a certain amount of C in its low-level OS, sure, but that will be dwarfed by the amount of userspace code it's running that's written in Java or similar.
I don't think I could disagree more with your post.

Every developer you have should be capable of weighing up performance ramifications of their decisions, and be able to discuss and justify them. Not saying that every line needs explaining but come on... Not their concern? I'm all for getting stuff done but doing a crappy job the first time more than doubles the TTL.

Moreover, telling your developers to ignore this stuff means it becomes a lost skill. When you do need them to double-back and profile and bisect everything back to 0AD, they'll be much less capable than a performance-conscientious developer.

I don't disagree that over-optimisation is a thing, but a hands-off approach is far more toxic. Big ticket optimisation rewrites should not be something a single developer takes on without their lead signing off. Letting developers do that is a management issue.

And "the type of sites I mention[ed]"? I think you misread my post because I was very explicitly talking about e-commerce and webapps. Not CMSes and not usually something you can run entirely static from a CDN.

And just because it's static and/or on a CDN doesn't mean it's not bloated to hell and back; that's really the point TFA is making.
Or maybe your kids/family are different from other peoples'. I've seen some peoples' kids who were a complete terror and nothing could make them stay calm and quiet. Some kids are just better than others that way. You got lucky. This is a big reason I never really wanted kids; I just can't handle constant noise and commotion. I have a friend with a 7yo kid who's bouncing off the walls every time I visit; there's just no way I could live with someone like that every day. I have enough noise and commotion at work; I don't need it at home too.

And yes, open offices are horrible this way too. That's why we're having this discussion about people wanting to work from home: for many, it's a lot better than the chaos at the open-plan office at work, even if it isn't ideal. For others, it's at least as bad (kids/wife), so they either deal with the office, or they go to a coffee shop or rent a coworking space or similar.
Kubernetes 1.6 available on Ubuntu
I really wish these announcements would come with a short check to see if you're affected and some example code to test if you're vulnerable.

Does anyone know of a simple check to see if your server is affected?
Of course there's no reason to make people buy water on the other side of the checkpoint, but that's because it's generally ludicrous to have people buy water at all. In the USA, every airport I've been to has free water fountains both airside and landside. The rest of the world is way behind in this respect.
That sounds like an incredibly awkward way to program. You'll end up with a huge function with all your callback bodies in it, and you won't be able to easily sleep the CPU.
Next time try freezing it first.
The food order thing is ridiculous but only because United can't figure out how to take orders before loading the plane. I usually sit in the last row, makes me more comfortable. And around half the time they'll run out of the better entree.
which yoga teachers have promoted anti-vaccination? did you encounter that somewhere or are you making up strawmen to lash out against?
Close... https://getyarn.io/yarn-clip/aaef2483-5214-4802-9257-a3452ae...
Is there an accessible tutorial, for someone who is starting to learn Rust too, for embedding Servo within a Rust program? I haven't been able to find anything with a Google search.
"Nearly 8% of programmers now work from home, following a staggering increase of nearly 400% since 2000."

Could working remotely reach a tipping point where it becomes the default? I could see it happening in the next 20 years, the advantages are too numerous. Most of the downsides are typically related to the inherent friction between onsite and the offsite workers, meaning companies that start out as remote-first will have a big advantages over companies that later add remote working options.
... because they can not afford to buy a car.
Ask HN: Anyone started an enterprise startup?
How did you get your first sale for your enterprise startup? What was the process like? Did you manage to sell your product before building it?
Feeling stuck on the corporate ladder?
You can just use cgroups on their own without docker
I wouldn't put "old people" in the mix - after all, they were already around; if anything ageism restricts what was the established pool. Ageism is enacted to lower wages (young talent is cheaper), not fought.

For women and ethnic minorities, the opposite is true: the more you promote them, as a simple employed worker, the more you're effectively lowering your own wage in real terms. You are effectively self-taxing out of solidarity, while your employer reaps the rewards in terms of additional productivity and profit.

This is one of the problems of modern life for which progressives (including me) really have no answer beyond a generic "all will get well eventually" feelgood optimism. One quick look at statistics for male remuneration and wages in real term post-feminism doesn't really support that optimism.
Apple could invent this an then license the sensor to other people. They gave away health kit. And they could choose not to license it to their competitors, only medical companies. But surely they'd put it on their own devices as well.

Seems like a weird attitude though: If company X can afford to (possibly waste) billions of dollars to make a medical breakthrough in Y, I don't want them to because then they'd use it themselves and charge money.
Also consider that tech like this has applications beyond just diabetics. Glucose could be correlated with caloric intake. Tech like this could be a step toward the Apple Watch actually monitoring how much you are eating passively.

I would put money on that being the reason why Apple is developing it; not to directly help diabetics, but to add fitness features to the Apple Watch.
I am taking a great coursera course on the very basics of a computer (uses a hardware simulator to build the chipsets necessary to build a computer). It is VERY intro-friendly and gentle, including teaching basic Boolean algebra. Also can be very hands on, which is what I really like about it. Might be a good fit!

https://www.coursera.org/learn/build-a-computer/
Comment se stimuler?
the job market for burger flipping is high. LOL

in a capitalist society, small/rare usually means high-paying! don't make it your career but it pays to know these things when writing your high-level code.
Public Domain Day: January 1, 2017
These guys from Israel have a very promising approach: https://www.osapublishing.org/boe/fulltext.cfm?uri=boe-5-6-1...

Is someone else in here besides me working on self-made tracking tools for logging your metrics beyond glucose? Would love to chat!
"Our proposal for execution contexts in Rust is similar but considers execution threads, instead of object graphs, as the unit of isolation. Rust’s low-level interface, safe memory management, and large community make it a particularly good fit for operating system development. If future language development can address the challenges
we have demonstrated, Rust should be well positioned to
support the next generation of correct embedded operating systems."
ESET has multi-platform support, that along with carbon black Defense seems to be legit.