skysight-inc/HackerNews huggingface dataset:
> Open source code now carries a moral maintenance obligation?

Yes, and it always has and it can't be discharged. Pay-it-forward is the right thing to do.

> Do we say the same thing about any large company that uses openssl or any other open source libs that people use or depend on?

I certainly do. A red line, I-will-quit condition is and always has been "I won't participate in the development of private forks of open-source software" and I have at multiple employers gotten checks straight-up cut to open-source software maintainers. I have also entreated (and in two cases succeeded in convincing) maintainers to start up maintenance programs so we could pay them a yearly fee--because donations are way harder to push than support plans.

And, in turn, I open-source useful tools[1][2][3], including major parts of my consulting business, because it, too, is the right thing to do.

You should do likewise, because it is the decent and human thing to do.

> That doesn't seem fair or reasonable.

I consider not paying forward kindnesses paid to you way, way more unfair and unreasonable.

[1] - https://github.com/bossmodecg

[2] - https://github.com/eropple/auster

[3] - https://github.com/eropple/cfer-provisioning
This was such an interesting read in the context of me being half-Korean and my wife being mainland Chinese, and we met in Korea, recently moved to NYC... The difference of traditional and simplified was a very real learning experience for me (especially finding subtitles for movies), and for her, experiencing american-chinese culture and history here.

Your write-up was especially fun to read because it avoided the touchy politics of mao vs chiang, mainland vs hongkong and taiwan, etc., that I've only somewhat recently been exposed to (including Korea somewhat). It seems very neutrally written and focuses more on the interesting details than the emotional tribalism that I sometimes see.

Thanks again!
clickbait. I don't consider this multi-cloud
Given that a fair chunk of today's NY Times front page is devoted to Steve Cook rebuking Travis Kalanick, I'm not going to short to incense stocks quite yet.
Yes, it makes perfect business sense for Apple itself, but it is just another Apple decision that negatively impacts Apple's developers.
Is this implying their database was leaked?
BART takeover robbery: 40 to 60 teens swarm train, rob weekend riders
True, but isn't this basic common sense? We do exactly the same with other poisonous chemicals in the house: drain cleaner, etc. Of course, most of them aren't sweet-smelling like antifreeze, but you also don't use antifreeze in the house, only in the car.

I think the real problem with antifreeze is when people drain their radiators at home and then leave the old antifreeze out, either because they're too lazy to put it in a sealed container right away, or because they're letting it evaporate instead of figuring out how to dispose of it properly. Then, usually, some animal comes across it (and is attracted by the smell).
Throw in some ice. Juice isn't rocket science, I'm sure you can figure this out if you really apply yourself...
For the type of usage you mentioned, a Windows Phone is a good fit. They are pretty well known for their performance and battery life even on low-end phones.
> LSD is a very comforting, pleasant, and soft experience

Not necessarily, it is a totally subjective experience and very much dependent on the individual and the dosage.

> at most you see some visual stimuli, like blending colors.

This is an incorrect and dangerous statement, the effects of LSD can be very intense and very easily traumatizing, even in a controlled environment. The intensity of the visual hallucinations has considerable variability between individuals and can most certainly include "seeing things" and "talking to objects". This is without considering the possible permanent side effects like HPPD or the serious risks to those predisposed or with a family history of certain psychological disorders.

> People who say that they were hallucinating have never tried it or are lying

Very wrong. I am going to flag your post because it contains serious misinformation that could be dangerous if taken as genuine by someone without accurate knowledge of the risks and effects of LSD.

edit: I am not against LSD usage and think it can be a very enlightening experience, but the glib dismissals of its potential side effects are wrong and dangerous.
Mailchimp?
WTF? I got the email from HipChat. It includes this sentence. Without additional non-techy context

"HipChat hashes passwords using bcrypt with a random salt."

This is a good example of how not to do mass e-mails targeting the general population.
1. Buy the rights for "Car Talk" re-broadcast.
2. Record new, current ads using Click and Clack's voices.
3. If the voices sound a little too "mechanic", pretend it's a joke.
I'm sure the majority of the article is valid, but Apple's stock skyrocketed after Job's death. I'm sure it's an outlier but kind of wish that had been acknowledged given the image used.
Chaitin on creativity in mathematics
I've seen the tactics I described work very well in investment banking, purely in terms of personal advancement. I naively adopted a USMC style approach as a newly minted manager and got beaten up and stabbed in the back massively by the more experienced and Machiavellian managers. So I left. It's important to realize the difference between a mature org and a growing business. In a mature org the senior staff are all fighting to get a bigger slice of a pie that doesn't grow. That's not the case in a growing business. Note that I'm using the term manager, not leader.
Serious question: Do you need the non-techy explanation?
Ask HN: How much does a report from Slice cost?
With the news that Uber was buying reports on Lyft customer behavior, interested to know how much a report would cost.
I think this is a part of the general meme that big companies are making money by taking open source without giving back, and that big for-profit companies could do more for the open-source community.
You don't get double taxed on salary, salary is expense and offsets income.
this is not true for everyone. people with anxiety issues will have absolutely terrifying trips more often than not.
I don't think anyone is trying to shift blame, just to explain what happened. I am not affiliated with Atlassian so I'm only guessing.
no.. but I could be a non IT user using hipchat. This sentence is likely meaningless to me.
I've been editing audio professionally for ~20 years now. This is short of perfect, but it's already good enough to be used in some kinds of editing emergencies - coincidentally exactly the ones where you're likely to have audio problems in the first place.

For example, in a movie with a busy action scene involving gunfire/helicopters/storms the production audio is usually useless because there were fans and other loud machinery on the film set to create visual illusions of powerful winds and so on. In this situation the audio is either not recorded or used only as a guide track to match timing on a high-quality track recorded later in the studio. Actors hate re-recording dialog by lip-syncing in front of a screen and producers hate paying for it. This solution is already good enough to use for incidental characters in scenes that are going to be noisy anyway. I give it about 5 years before it's good enough to use in ordinary dialog scenes - not for the intimate conversation between the two Famous Actors flirting over a romantic dinner, but fine for replacing the waiter or other background characters.
"possible unfolding of latent mental conditions"

Interesting, can you expand on this? First time I hear this. I know someone that told me of a friend of his that hid some LSD at a border crossing close to the body and as a result of the trip, the guy got severe permanent psychatric damage in that he's currently residing in an institution.

I thought he was full of shit, but if what you're saying is true, he might not have been.
Wow
An idiot created service for idiot.
That's genius!
The HipChat desktop client had a trivial MITM vulnerability which took them several months to fix after I reported it. They never made any kind of public notice about it, so I'm almost surprised to see them talking about security here.
Indeed! The most fascinating part was the simplification of the word "country". I didn't know a 1977 variant existed (which looks like the word for "mouth")
Reason is simple, very few people love programming and even fewer love to keep learning to stay up-to-date with new technologies. Its simply hard if you are not much interested in doing programming and were in the profession to get a nice job because everyone else was jumping on the bandwagon while you were in college. It is also possible to lose love for programming after initial interest fades away. It has happened to me multiple times. The only reason I stayed as programmer is because I hate management even more.
Hi so awesome to see work on a tiled window manager on windows.

I HATE paid programs and love donation model. I think my favorite is Synergy (Software Keyboard Mouse sharing) over say purchases from say Partition Magic (Live Linux OS for System repairs). Would be interesting to see how much they actually make.
The utilitarian in me chooses to attach value to insects according to how I perceive their value in the ecosystem. Bees, bumblebees, spiders etc. are useful, so I don't kill those. Houseflies, gnats, ticks, mosquitoes on the other hand, I have zero problems killing when they annoy me.
Both of these are problems.

The first is the US government not doing enough to prevent shell IP licensing from being used to eliminate US profits (while the companies are benefiting from US stability and legal protections).

The second is the issue with US companies repatriating (or not) profits earned in foreign subsidiaries.
Sure. I get your point. Just asking if YOU specifically needed the explanation, which I'm sure a number of folks would be happy to provide.
I don't see how one can say that a clump of 64 cells is a child, given that it has the potential to be one

Thats not what I'm talking about (although I admit I'm generally against.)

See "Born-Alive Infants Protection Act" and "Partial-Birth Abortion Ban Act" to get an idea.

Edit:

I think the first trimester is a fairly decent cutoff.

As far as I am aware this is not a general cutoff in the US.
Then you would be fine with the standard boilerplate "your data is secure with us"?

I'm happy they say this.. now i'd like some sort of proof :-)
I filed this bug here http://crbug.com/713982

This is a behavioral difference with Firefox. Chrome is currently blocking scrolling on the JS inside the wheel event handler which appears to be very slow on the linked website. Firefox is only blocking on the JS for the first event inside the scroll gesture and asynchronously scrolling after which hides the very slow JS handlers.

This is an interesting case because the Chrome behavior lets sites implement certain effects without lagging behind scrolling while the Firefox behavior favors smoothness of scrolling over JS effects synchronized with wheel handlers. In any case, Chrome is currently working towards switching to the Firefox behavior which will make sites like this scroll much more smoothly.
I know math. But my point is that no solution will ever be satisfactory. Is 9% too high? 6%? 3%?

Also, think on the reverse situation. Apple currently makes 0$ on the sale of free apps but obviously these apps have a cost in storage and distribution. ¿What is the "fair" proposition in that case?
My phone is usb c. My laptop is usb c. GoPro is usb c. It's slowly happening, if only Apple would ditch lightning but that's not going to happen. Hell I'll cheer if they adopt QI because it will spread like wild fire.
Googling bcrypt should do the trick and most people know how to do that. </sarcasm>
And yet we have Trump's business (cited by the OP), which per public info has possibly been 'doing business' for years without turning a profit or generating any real value.
The cartridge just plugs directly into the CPU, essentially every game provides its own BIOS. You can only get away with this with systems where software is provided on pluggable ROMs, Fairchild Channel F being the first video game example and similarly the better-known Atari VCS (aka 2600).

Technically the NES does have a ROM in the CIC lockout chip, which talks to another CIC on the cartridge to ensure it is a legitimate copy, but this is entirely irrelevant to gameplay and invisible to software (unlike similar chips on the N64 which the game could check at runtime). Indeed with the NES-101 (toploader) this was removed, arguably to improve reliability (if you ever saw the blinking LED on an NES, that's the CIC resetting the hardware).
Too expensive to manage? Or too easy to game?

Better to just tax it once and call it even.
whisper is a much superior, still alive platform that does the same thing.
Not really. I don't want a better fox guarding the hen-house. I don't want it to be a fox in the first place. Heck even Wikipedia with all of its flaws would be a better arbiter.

Google wants to put the responsibility of evaluating an advertisement onto its users, if they are so concerned about erroneous search results, they should first put a fact-check box next to their ads. Adopting a hands-off strategy when it comes to their revenue and a hands-on strategy when it comes to their perceived ideology is hypocritical at best.
I had heard of that project. I'm sure there are OS's in Haskell too, but yes, that was not what I meant.
I already have something pretty close to that :)

I keep a big list of links to high-quality tutorials and articles on React, Redux, and related topics, at https://github.com/markerikson/react-redux-links . Specifically intended to be a great starting point for anyone trying to learn the ecosystem, as well as a solid source of good info on more advanced topics.

(The entire list has just been me working it by myself with the occasional "add a link" PR from random other people, but I'd certainly appreciate any actual offers to help improve it, especially since my own knowledge is rather limited in a number of areas.)
Create Hybrid Test Framework – Work with Config Files
In addition to the other advice:

- avoid appetite suppressors (e.g. caffeine) and modulators (e.g. artificial sweeteners). "avoid" != "eliminate": sure, have a coffee or two in the AM, but don't drink it all day.

- exercise will make you hungrier (it is an appetite suppressor for those whose body asks them to eat out of boredom, which is very common).

- choose a healthy diet. You won't have the 24-y-o metabolism forever, so don't make habits you'll later regret (e.g. two croissants in the morning). This also means you'll be building weight through your body and not just adding fat.

At 24 none of these "rules" need be strict, so have a milkshake, etc; you have a great opportunity to experiment with what works and is enjoyable to you.
It is for online purchases. The charge back isn't fraud. It is the end user whose card was stolen reporting the purchase made by the fraudster. The bank then takes the money back from the merchant vendor, throws on a chargeback fee, and done...

The only time the bank or cc is left holding the bag is card present.

I'm not guessing either. This is how it works for card not present... vendor merchant bears all the cost.
Huh, well Square seems to be in the right place at the right time to make this acquisition of talent. I still don't get how Square intends to retain/gain customers at the price point their at, Mercury, Heartland, etc are eating their lunch.
> What's is their cost?

Cost isn't relevant, the commission is because Apple brings X hundred million credit cards to your door and presumably increases sales by at least that much.

> Most developers don't make a profit

Because most apps are garbage?

> but Apple is guaranteed a profit form each purchase. When the creator makes less then the deliver there is a problem. When the deliver makes money from purchase 1 and the developer might never see a penny after thousands of purchases there is a problem. A developer makes an app that cost her $10,000 and she must sell $14,300 to break even and not make a dime. Apple will make $4,299.

Except Apple eats all the credit card fees, server fees (hosts free apps for free), built the platform with an install base of hundreds of millions with a demo that spends more than other platforms etc.
True, but ordinal position doesn't matter as much as absolute value, which tends to fall off according to a power-law distribution. For example, Python (#7) is tagged barely half as often. C (#18) is a third of that. Topic-based (instead of language-based) tags fare even worse. "Filesystems" has been used only 6K times, "storage" less than 4K. As someone interested in those areas, there's just not going to be much content for me - few answers to my own questions, even fewer opportunities to answer others'. When the density of interesting content falls below a decent threshold, my interest doesn't continue to decline linearly. It simply drops to zero. I suspect that's true for a lot of people working outside of the web/app/mobile space. SO is just not seen as a forum for them. It's a forum for a particular (common) kind of programmer, and everyone else feels like a bystander or gatecrasher.
IMO, frankly, yes.

If you use someone else's code, especially if you're not paying anything for it, you get what you put into it: nothing.

The liability for this breach is ultimately owned by Atlassian, not the third party library writer. To quote the most permissive license out there:

"THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED."
That's a really good point and I hadn't considered it. Thanks!
Say what you want about Trump's business (and there is plenty to say!) but it's clearly a real business. It owns tons of real estate and licenses the Trump brand all over the place.
Yeah, that's a real issue. You can already fake audio very very easily. People don't realize how constructed movie soundtracks are, and I don't mean in terms of special effects but just people talking in every day situations.
USB-C has so many compatibility problems (and safety issues) I don't legitimately believe we buy today will be futureproof. Buying anything USB-C today is a minefield. At the very least you'll want to check that Google engineer's spreadsheet but even that only assures safety, not future proofness.

I don't think we'll see the USB-C connector change again soon, but everything else about the standard seems somewhat in flux. There's already competing standards for fast charging over USB-C. Once Apple hits the market with a USB-C iPhone, that's going to tip the bucket over.
I think it's basically the shrinking of the middle class and people with enough capital to contemplate starting a business. Looking at the number of business starts shows an ever decreasing number - which correlates with the stagnation of wages and size of the middle class. Also linked, the number of hours worked has increased steadily, as well as a increase in both parents working, so availability of time in households to supply "labor capital" to start businesses has also shrank.
Two new block I/O schedulers for Linux 4.12
TL;DR - call services on GCP from your AWS lambda functions using Cloud Endpoints.
The idea behind estimates is to get you to think about the scope the work that is to be done. Quickly walk yourself through the process, give a SWAG, do your best to track your time spent on the task, then review what you got right and wrong in your estimate. It's less about giving the exact time required (in theory - some managers will never understand that) and more about estimating if you have time to complete X, Y and Z.
I know quite a few App Store Developers and I don't think a single one would say that Apple does the following:

> they keep developing better services, devices, and platforms for devs to use (and, they give some of that away for very cheap or free).

Follow the money and Apple, Google and Valve are making a killing off the backs of creators. The cost of delivery is what 1% if that?
I've never done this with UUCP, but if you don't care about anonymity you could do two-way authenticated TLS (both client and server have and present certs).

Maybe you could do a ratcheting protocol like Signal does, instead, which might be better.

There's a couple ways to do this that might be sensible depending on whatever constraints there might be in a deployment.
So you argument is that it's fine to not care for insects because there are a lot of them, and because their lives are short and brutal.

I would say the opposite. Animals whose lives are rife with pain and misfortune can use all the help anyone is willing to offer. Granted, I will not seek out every fly and try to "save" it. But if I come across one I can help, I will do so. I think you're making the argument "either you HAVE to care about every fly or you CANNOT care about any flies." Perhaps that logic works for you, but I think it's a fallacy. I can care about flies without needing to care about the well-being of every fly. I also adhere to non-interference. If a fly is caught in a spider web, I will leave it. To free the fly is to starve the spider. Some things we just don't have control over. But I will do my best personally to not harm other animals.

I said this in another comment, but I'll repeat:

> I will show kindness to animals, but only to the point where it doesn't completely impede my life or my ability to find happiness.

In other words, it doesn't impede life or my happiness to catch a fly and bring it outside. Therefor it falls under the "show kindness to animals" category.

(I should add an addendum to that: any animal that is attacking me physically is subject to death (horse flies, mosquitoes, dogs, bears, etc)).

Given all that, I do not judge people who don't care about insects. I get it, completely. But that doesn't mean I won't stop challenging people's viewpoint on why it's ok to kill some animals and not others.
I have prior ios experience and was able to get the view side of React Native working without much problems, but once I started needing to store something on the device (especially trying to understand Redux and other similar solutions), I hit a pretty solid wall in my development and eventually put it on the backburner.

It looks like you might have been able to bypass this in your app, but if not, how did you approach that aspect of it?
Just think of all the unborn insects that die!
Webroot matching non infected files
Look on twitter, seems like Webroot update is marking almost all files as infected.

https://twitter.com/swiftonsecurity/status/856613843312799745
I bet he's now glad he doesn't work with people with attitudes like that.
While I can see your point in this case I think it was the appropriate action, their ops team should've just beefed up their resources in conjunction with the email blast.

Only emailing a rolling amount of your customers becomes a shit show of support, who do you email first? Who do you email last? How long do you wait between groups? For who is security important, your biggest customers, highest paying, most security conscious? It's a real shit show to know, and one you'd absolutely get wrong, letting everyone know as fast as possible is the only acceptable solution to a security breach.