skysight-inc/HackerNews huggingface dataset:
Have local credit unions gotten better at this? I left a local credit union a decade ago because they didn't offer online banking at all and when they finally did, the security practices they used were horrible. Memory may not serve perfectly here but I recall they had no EV cert (while common with banks, not everyone had them back then), the login form was provided in-the-clear POSTing to HTTPS and many of the banking functions were issued via GET requests, causing certain "internet accelerator extensions" that worked by requesting data before you clicked them to actually make changes to your accounts on certain pages (this is where memory doesn't serve -- I think it was a "theoretical" problem because these extensions usually didn't pre-request HTTPS pages for this very reason).
None. Its blackhat territory.
Exploiting Flaws in Big Data Systems [pdf]
That's outrageously stupid that saying "I am an engineer" is qualified as "unlicensed practice" and that you can be fined by just describing your qualifications. It's not like he opened a company and took a contract pretending to be licensed, he just described his level of knowledge. Special interest groups privatizing common language is outrageous and shameful. It's also an obvious 1st amendment violation and probably the only reason it's not overturned yet is because nobody brought a lawsuit about it - and it'd be probably hard for a private person to support such a lawsuit over $500. Somebody like ACLU should look into it though, if they're still caring about freedom of speech.
> Sounds like maybe you have some existing IP that could be utilized.

Yes, I co-founded a company a few years back that designed, built, and sold FPGA mining equipment. We are probably one of the very few hardware Bitcoin mining companies to ship hardware on-time with nothing but happy customers. I designed the FPGA firmware (which is open source), embedded firmware, and drivers. Others designed the boards, software, etc.

> What level of capital commitment would you need to build a proof of concept?

Depends on what kind of proof of concept. A small scale proof of concept, where you have a board in your hands that's mining Bitcoin, would cost ... nothing. I'd just lend my devkits to the company :P Or the existing FPGA miners that we built.

Sometimes it's required to simulate a significant percentage of the final ASIC design. That would require a much higher end FPGA devkit; ~$10k-$20k. Sometimes you can get FPGA vendors to loan you the kits, though.

If the goal of the company is merely to sell mining equipment, or if that's necessary to promote a crowd funding round, then the proof of concept should probably be closer to what that shippable product would be. I'd rough that out to maybe $100k to pay a board designer to do layout and fund a spin or two of small quantity prototypes based on FPGAs for simulation. That board design would then be re-used once the ASICs are ready. That's back of the napkin; could be more or less depending on scope but generally in that 6 figure ballpark.
Tons of companies take satellite views of the entire earth and they're freely available online.
check out Figma!
> Call me crazy but I don't think you need 100 engineers to recreate the front-end of Uber.

Your sentiment is valid, but consider this: whenever you're working with a project with a ton of money on the table, it becomes possible to add small bits of functionality which more than pay for themselves in terms of return on investment for the engineering effort. This is why you can often write a basic version of a more established application in "a weekend". We've had extensive discussion and meditation on this topic on HN before[1]. Basically apps will grow and add features as long as the engineering effort will pay for itself (I suppose I use that term loosely in this case).

Also consider that the UX is different in different markets, and the reason for that is related to the first issue.

I sympathize with what you're saying, though, and couldn't help but think about Alan Kay's talk that we discussed the other day, about natural complexity vs artificial complication.[2]

[1] https://news.ycombinator.com/item?id=12626314
[2] https://news.ycombinator.com/item?id=14188759
Unfortunately, there's still a bunch of internal Sketch APIs we have to call, though radically, radically fewer than in the version of react-sketchapp pre-Sketch 43.

see also https://github.com/xaviervia/sketch2json for some interesting stuff :)
From what I've seen of this industry, there's two major hurdles to getting this working: One, getting the shipping companies to provide any kind of network infrastructure would be like pulling teeth, and two, a lot of the companies doing this shipping are running on margins so tight that they care about things like saving 25 cents on a box. Their idea of cheap is completely different from yours.

I'm interested in solving a slightly different issue: could you build a cheap device that records accelerometer data while an item is in transit, to create a record of which way a box was oriented, and how hard it was dropped? Maybe provide a USB interface to download the data on arrival? Something like that would be interesting to businesses that ship fragile, high-value items and want evidence to back up the claim that items were damaged in transit. (I'm thinking of things like television sets.)
Probably not much higher without some significant changes.

But the main idea of a septic tank is to have the bacteria eat everything objectionable, give off CO2 and methane,
leave a little sludge (after 20+ years, I've never had the septic tank cleaned), and those are also the main ideas for sewage treatment if have big sewer pipes, bring all that stuff to a central location, and treat it there.

As far as I can tell, what runs into the drain field in my backyard is just harmless. It doesn't even make the grass grow faster than elsewhere. The back boundary of my backyard is a small stream; it only has water flow from melted snow or heavy rains; and I've never seen any evidence that my drain field or those of any of the neighbors generates any flow in the stream.

All the houses in my area, at least 25 square miles, have such septic tanks, and I nearly never get any whiffs of methane or anything else.

So, for your question, sure, with somewhat higher population density, just do a little more with septic tanks. Even with the population density of NYC, in the end the crucial step is some bacteria eating the rest just as in my septic tank.

The NYS building codes for houses are careful to specify what is needed for a septic system, especially about what has to be in the drain field. In some cases, suitable soil has to be trucked in as part of building a suitable drain field.

As far as I can tell, the water from my septic tank just goes into the soil just like melted snow or rain water. Maybe the best view of what, besides just pure water, my septic tank is adding to the soil is, in a word, more soil!
Prince of Persia Level Editor for the Apple II
I suggested eliminating fines and court costs associated with a traffic citation and just rely on license demerit points as the penalty for a traffic violation. Once a diver accumulates enough demerit points on their license, it's suspended. If they're caught driving on a suspended license, then they're arrested and taken to jail pending a hearing.

I strongly suspect that without the possibility of making money from traffic violations, most law enforcement agencies wouldn't bother doing any enforcement.
Blindly shooting it down probably isn't the right approach, but neither is treating it at as a sort of silver bullet. There are plenty of situations where RN isn't the best solution or just isn't a good fit.

In this particular case, a company the size of Uber isn't going to reap the benefits of RN the same way a smaller one would, and RN's downsides will be magnified. Further, to fix the issues it has with RN it'll need its engineers to do native work anyway, making the extra abstraction layer something of a distraction that could've been avoided.
I have a particularly unique perspective on being poor and usually when I tell people the reason why I got to where I am is because of luck, they often don't believe me or say that luck doesn't play a part.

My father had died when I was a kid. He was a fisherman and his boat capsized due to problems that should've been recognized and fixed. My family at the time was poor, however she was able to find a lawyer to work pro-bono and won a wrongful death suit. Because of that specific suit, I had just enough money (along with financial aid) to afford going to a local community college and eventually getting a bachelors degree in computer science. Even then, I lived in poverty saving most of my money just to afford classes / help my mother and at times sacrificing my health for a potentially better future.

My father also suffered from mental issues and drug abuse. If this didn't occur, I'd likely be still in poverty. Naturally I tell very few people, but it's frustrating interacting in the software world and seeing so few people understand what it's like to truly be poor. To see your parents struggle and go nowhere.
Sorry - wasn't sure of a good solution for this without rewriting our blog too.

Some things I tried:
- not autoplaying the videos (but they're super short, so it would be annoying to click play)
- playing them when they're in focus & pausing afterwards (would have to mess with our WordPress installation instead of launching this thing)
- using GIFs (they were HUGE - I couldn't get them below like 2mb each)
- YouTube embeds etc (ugh)

I thought this was the best compromise but yeah. Sorry :(
Instagram passes 700M users, up 17% in 4 months
Yup. It's very interesting that the argument from Symantec is that their customers have to buy Symantec certs indefinitely - not that they can't replace existing certs in servers, but they've hardcoded the Symantec root in enough clients, such that buying certs from a Symantec competitor will break their clients.

Among other things, if what Symantec is saying is true, this means there is zero financial incentive for Symantec to behave. The largest certificate customers in the world have all voluntarily made it infeasible to choose a Symantec competitor, so as long as Symantec has any product at all of any quality, the market will keep buying Symantec.

If what Symantec is saying is true, the mere fact that they went to their largest customers and said "Suppose you had to buy certs from one of our competitors, what would you do" and they replied "We've never thought about that before" is itself a major victory.
I don't think it does. There's nothing particularly common sense about "giving poor people money makes them not want to work". "Poor people should get help" is much more common sense, in my opinion, and plenty of people hold that view, as well.

The issue is one of popular belief. People currently believe that everyone is deeply in control of their lives, which necessarily demands that the situation of the poor must be their fault. Similar conclusions flow from high individualism, the idea that nobody can help you but yourself, and that difficult situations make good people. None of these things are common sense, they're counterintuitive, actually, so they require a pre-built framework of thinking to accept.

It's a problem of philosophy, not empiricism. Most people don't care that much about research and, honestly, given the state of psych research right now, they probably shouldn't. But you don't need research to come to the simpler conclusion that a more dangerous environment reduces someone's chances.
Developing Software Performance Training at Alibaba
That's a great one. Good catch.
Hey Vlad!

You could still use it for styleguides for type & color etc, if you keep those definitions in JSON.

if not, probably not :(
Just how much faith do you have in your politicians?

By using existing political structures, and a mix of rhetoric, they have managed to get a lot more power than a typical person.
I second this. No doubt the effort is laudable. The funding comes from Swachh Bharat cess though.
But I too see quite a lot of PR around this. This scheme was the one among the first to project Modi as a modern day Indian saviour. The very first effort to bring even opponents together.
e.g. checking accessibility of colors in a UI :)
I thought it was funny. Does that make it okay? Or do you use this site the "right" way?
He did not give a mystery pill to an unwashed commoner. He wrote to a specialist board who are supposed to be experts. If they claim they were misled by his claims they all should be fired, since they are not competent enough to distinguish between a real engineer and a quack. But looks like they weren't misled at the least, and he wasn't a quack either - they just went on a power trip, probably because he annoyed them by questioning them.

> I am likely to have the appropriate medical knowledge that would justify my suggestion.

One can have relevant knowledge without being an MD. E.g. by being a biochemist. Having license for particular profession is not the same as having knowledge.
Thank you for the video!

My 5 cents:
Please make the small x (close button) to something else, like swipe to up to close the dialog. Small x is not good gui for mobile phone apps.
Couldn't a non-libc "standard library" for a hypotethical language be written to be re-entrant safe so dealing with signals would be less painful? For example having a separate malloc-like heap for allocs inside signal handlers etc?
The assumption is that a singular intelligence (the superhuman AI) will eclipse that of many intelligences (humans plus tools). Any given intelligence might be more capable than me, but it's constrained by all the other intelligences in the environment.
HN isn't generally liberal leaning. HN is generally libertarian leaning. Not all of us, of course, but the sentiment here is very pro-business.
> drinking tea beer/wine (alcohol desinfects)

Also, beer provides large amounts of calories, so it also feeds the consumer with low risk of the "food" getting stale. There's a reason why in Bavaria a fat belly is called a "Bierbauch" ;)
The article can be boiled down to the last sentence, which retracts the rest of the article:

>So my claim that there’s a better alternative to signalfd is wrong, but it’s still true that signalfd doesn’t solve any of the other troubles with signal handling: it just saves you a separate thread.

Of course this sentence is disingenuous. Avoiding a separate thread is a huge gain. Dealing with concurrency is one of the main problems with signals. So yes, signalfd is absolutely hugely useful, allows for a lot of simplification, and should be the first tool you reach for if you want to handle signals on Linux and don't need portability.
They've been playing the same game for literally 10 years

https://medium.com/@sleevi_/a-history-of-hard-choices-c1e1cc...
If you don't mind me asking, where do you have citizenship? What is your degree?

I don't mean to sound unsympathetic, but I'm gonna throw out a bunch of questions because I want to know more details about your story.

How old are you? Did you ask your parents and other family for assistance? Were they unwilling or unable to help you? Why did you go for a terrible job in India (if you're Indian, ignore this question)?
> Keep right rules are meant for absolutely slow traffic and not for driving the speed limit.

Do you have a citation for that? Many state laws use the speed of traffic as a reference to define slower as opposed to using the posted speed limit as the reference. If they meant to say only slower than the speed limit, then the text of the law would be explicit on that point.
The Edison Box – Monthly Circuit Building Kits for All Ages
Won't be long though:

http://www.news.com.au/finance/business/retail/amazon-launch...

If I were Gerry Harvey or Richard Murray (CEO of JB Hifi) - I'd be _very_ worried...
If we can figure a way to translate React DOM to React Native-style components then this will be doable.

You could write a codemod that turned <div> into <View>, <h1-6> into <Text> etc, but there's complexity in standardizing layout systems & CSS properties too. React Native-style components provide the best chance of us using React as a truly universal platform.

see https://github.com/airbnb/react-sketchapp/issues/37 & https://github.com/airbnb/react-sketchapp/issues/29#issuecom... for some more context

If you have any ideas on solving I'd love to see them in GitHub so I don't lose track of them :)
It really, really doesn't matter if a Hacker News poster "sees through it". It matters that the rest of the world cares.

Technically-correct well-actuallys lose to real-world perception ninety-nine percent of the time.
the chances of the memory erroring in such a way that the checksum still matches becomes quite small
Why doesn't the US federal government publish a "your rights" like the UK does: https://www.gov.uk/browse/justice/rights

First thing I looked at when moving to the UK in case I get pulled over and know how to comply to law enforcement powers whilst understanding the limitations and my rights...

Are these published in the US, on a state level at least?
Though people are suggesting the answer to your question is agriculture...I'd say it was likely writing (accounting/contracts) and in today's terms writing disrupted the existing systems of agriculture and city planning/building/management.

As far as technology goes...one day there was spoken word the next voices/thoughts could be communicated without a person and through time - that is magic.
Yes. signalfd is the easy and correct way to handle signals on Linux, as long as you don't care about portability. I use it in everything I write that needs to handle signals.
The hot water thing was nothing more than a method to kill bacteria AFAIK. In much of Europe the preferred way of doing that was to produce beer.

Many East Asians to this day still believe that hot water is better for your health, even when filtered water is cheap and plentiful. If you ask for water at a restaurant it will inevitably be warm. I've had people express concern when drinking cold water during the winter, or when I'm sick.
According to Jared Diamond, part of this was the development of complex, spoken language. He thinks it is responsible for a "great leap forward" about 60k years ago -- https://www.theguardian.com/education/2003/jul/03/research.h...

This would predate agriculture.
Yeah, so can you name that mysterious miner? You can see the big ones here, for instance:

https://blockchain.info/blocks

Which one is it?
It's factually incorrect though.

> Two years ago, the FCC suddenly changed course – even though there was no problem that the agency needed to solve.

There was a problem. The FCC enacted the Open Internet Order establishing Net Neutrality in 2010, Verizon sued the FCC in 2014 and the court said the FCC could only enact the order if Verizon was a Title II common carrier. The FCC reclassified so that they could enforce the Open Internet Order, like the court said it must.

You could argue that there was no problem that the Open Internet Order addressed but that happened in 2010, 6 years ago, not two.
Holy smokes, I found https://www.hnchat.com/

check it out.
Alternatively, fishing also allows for high population density's. But, those city's are now under a lot of water.

Further, civilizations based on wood instead of stone may have vastly fewer remnants. Which creates bias as we assume civilizations started in areas without much wood.

Or, it's actually not food that's the limitation but rather something else like culture with farming going back much further.
The topic was internal CAs. Those have completely different requirements and possibilities than public ones. The authentication will look completely different as well. You just can't compare those issues.

And you're missing the point I raised as well - if you have hosts coming up automatically, you either need automatic certificates, or shared keys. As long as you rely on SSL, there's no other way to go.

(For example of authentication: public CA verifies your domain, internal CA can ask the hypervisor to verify a token on your instance - not remotely in the same class)
- The system won't pull more than 350 to 400W
- A GTX 1080 needs less power than the R9-280X
-- AnandTech and others have shown that
- System Idle is around 80W (thanks AMD ^^)
-- 20% load would be around twice: ~150W. So the PSU runs at about 10% load in idle
--- When running at 10% load the PSU has a worse efficiency
- Why the fuck is he buying a AMD GPU? Ahh.. Hackintosh BS :/ ("no real NV drivers...")
- Even if OCd, the system will not pull more than 400W (look at AT and their OCd X99 system). Maybe 420W.
> This paragraph seems, at best, misleading. C NULLs are not untyped either (using the same asterisk-avoidance as you): `T pointer x = NULL` means x is a NULL pointer with type T.

The point, I think, is that this type information is carried only at compile time on the binding, not at runtime on the value itself. If you have multiple aliases to the same null value (e.g. via references or pointers to pointers), the behavior will change depending on which alias is used. Not so in Go.

Of course, this is also true for non-null values in C++, when methods are non-virtual, so...
I know several companies are using Amazon's ACM and public domains that resolve to internal ip addresses. It's not 100% automated, as it requires a validation email, but better than most homegrown stuff.
I think it's public he owns Uber and owned it early. I think it's early to say if that was a "win"; I reckon he got in at a good val but Uber ain't public and w/ a braindrain, 2 lawsuits, likely death of their AI program, ceding China to Didi and public backlash idk if it's got legs.

Chris made a lot of money and he did a lot of interesting things. He's interesting and a lot was luck and a lot was skill. That said, Twitter (if he exited a bit post IPO was the companies big win. You only need one though.

Edit: Forgot about Instagram. He crushed it. Point is more Uber might not be as big, but his track record is amazing compared to other shops
I'd gamble the liberals have the plurarilty, but just with a much higher representation of libertarians than broader society.
Its interesting how in some circles it is totally cool to publicly slander a group like the Mormons. Take what you wrote and substitute "Muslim" or "jew" and people would, in one second, write you off as an ignorant racist.
That's odd. No insight as to what caused it?

Generally shouldn't be much of a difference you'd notice for those tasks other than the desktop environment.
There is no sharp definition here. The relative ease or difficulty of using an API in secure ways is unavoidably imprecise with vague boundaries. It is a continuum, not a binary value.

That said, an issue like the one reported is inarguably on the wrong side of that boundary, both conceptually (not requiring host key verification by default) or empirically (by the data collected by the reporter).

Thanks, though, for your unnecessary, gratuitous, and frankly absurd editorialization.

API design is critically important to security whether or not you believe it to be — we've learned this the hard way through decades of treating keys and IVs as "stringly typed", as overwhelming numbers of developers use `rand` to generate keys and use hardcoded IVs. An API design that encourages misuse will be misused, and the onus to improve the default situation should be on the author of such APIs.
CA infrastructure business is built on trust. Symantec lost the trust and got thrown out by Chrome. I hope that as the result Symantec will lose significant amount of CA business thus making a show case for other CAs to demonstrate that good processes and trust are key for staying in this business.
And more generally, "the map is not the territory".
I mostly agree with you, but what are the 'non-reality' conclusions?