skysight-inc/HackerNews huggingface dataset:
How about SQLite? Hardly anyone could claim that it was built by the team of "bad developers". However:
"the SQLite library consists of approximately 122.9 KSLOC of C code. (KSLOC means thousands of "Source Lines Of Code" or, in other words, lines of code excluding blank lines and comments.) By comparison, the project has 745 times as much test code and test scripts - 91596.1 KSLOC."
Up to date details about recent Android BankBot botnets
isn't about their appearance

Pro-tip for the socially savvy: intuit what about their appearance they put a lot of though/effort into, and then make a compliment based on that. Examples.

- Your new hairstyle is amazing, who's your hairdresser, I need to go there.

- Wow, looks like you've been working out hard recently, great definition on your upper arms, can you recommend some good workouts?

- That top you are wearing, where did you get it? It's amazing, reminds me of Christian Dior's 1978 collection, you are the most stylish person in the room. Where, Harajuku, Tokyo? You went to Tokyo? Wow, when? I love Tokio, you need to tell me everything about your trip!

- That tan line ... looks like somebody was on holidays recently ... Where, Greece? That's so cool, I'm so jealous, tell me ...

It is also worthwhile reflecting on how the recipient will process a compliment: the recipient will compare your compliment with the previous compliments received. Let's illustrate this point with some social cliches:

- 17 year old conventionally beautiful girl: will typically get large amounts of compliments every day. She will have heard it all before, and have a lot of experience with gracefully handling compliments.

- 17 year old convention computer gamer boy: will typically never have been complimented on anything at all. Will have no canned graceful reply for his first compliment.

Summary: Adjust your compliments to audience expectation.

something that might make them
uncomfortable.

That's good advice for beginners. For the socially savvy, ambiguous compliments work really well, too. The classic "nice hair, is it your own LOL" has been discussed many times. However, it's easy to mis-calibrate and get it wrong.

Flattery is like paying with counterfeit money: easy to do and effective ... as long as you don't get caught. Meaning: when Alter realises Ego is using flattery, Alter feels manipulated.

Finally, there are different cultures of complimenting. For example, in the US compliments are given freely, often and expected. In Easter Europe, in contrast, compliments tend to be given more rarely, and not
usually expected. Unless you are socially savvy or a social risk taker, I recommend to adhere to the ambient conventions about how often compliments should be made.
One of the nice things about BBR is that it tries to avoid buffer bloat by measuring buffer bloat at the bottleneck link and avoiding contributing to it. I'm not a protocol expert, but our protocol team has done an implementation of BBR, and I've been in plenty of meetings where I've heard it described. Let me take a crack at trying to explain:

As I understand it, BBR goes through periodic bandwidth probing cycles. When it ramps up and sends at higher bandwidth, it sees if the RTT increases without a corresponding increase in bandwidth or packet loss. If so, it assumes that a queue is building at the bottleneck, and ramps down to a rate below the expected max bandwidth on the flow, thereby draining the queue. When the RTT has bottomed out, it ramps back up to the expected bandwidth on the flow. This keeps queues small.

The bad thing about BBR is that it is much more expensive than other commonly used TCP congestion control algorithms due to the periodic ramp up/down. It also does not lend itself to hardware packet pacing either. Early versions of our implementation are considerably more expensive than the default congestion control. Eg, a server that is ~50% idle at 90Gb/s will be CPU maxed at less than 90Gb/s with BBR. But this is improving daily.
> even renting out San Francisco’s AT&T Park

Now I get the opening scene in Silicon Valley Season 2 Episode 1 where they're at the baseball stadium.
It changes my approach to a problem, in that, with dynamic typing, I tend to think of problems as manipulating data, while with static typing I am modeling a domain, deseriazing data to it, and serializing the result. The end result usually ends up being a bit more verbose, but at the same time does a better job of holding my hand when the input format changes in the future. It's definitely a trade off though.
Do you own the pond? As long as property rights exist and are enforced you could negotiate a settlement with BigCo
SOC point of view: Rise of the worms: JScript.vjw0rm
Why places like Corvallis, OR and Vancouver (not B.C.), Washington (not D.C.)? That's where HP inkjet printers have been developed for the past 30 years or so and HP has large offices there already.
Redesigning Apple Music after Being Rejected
How to Lower Your Bills: Tips from the FBI’s Top Hostage Negotiator
For instance, they spent much of the nineties finding innovative ways to break their competitors' products with OS updates.
You're right. A better way to phrase it is this:

"Health-care quality in proportion to wealth" -- the poor get worse care because they can't afford to pay for gold-standard care.
Having said that they're frequent enough if you're an out-of-towner they feel like they're running perfectly on time.

If a bus is late where I'm from it just vanishes - you can be watching Arriva's live map and its route blip will just disappear, enjoy waiting for the next one (minimum half hour wait, repeat if that one's running late too)
Source Code for old Amiga game released on GitHub
TFl has the data and City Mapper use a lot of it but with their own additional heuristics.

Anyone can write an app that consumes the data.
https://api.tfl.gov.uk/
Also, the code of a test could be used as the documentation. Just recently I started using bleve(https://github.com/blevesearch/bleve). Documentation is quite poor, but I was able to learn the product entirely from the code of its unit tests. That's not normal though.
Did you talk to the government? Won't answer that question. You're fired.

Of course the SEC is mostly a toothless worm so while he did the right thing, I doubt much will ever happen to the company or its founder.
I am not happy that Google has published a full exploit well before it has been possible to anyone to actually deploy the patch and within just 3 days of notifying the vendor.

It seems that Google is eager for someone to use this exploit to attack as many systems as possible before they can be patched against it.
There are plenty of products that do this.

I do some work with Power BI, and a pretty common set up is a bunch of SaaS connections (Google Analytics, Mailchimp, Salesforce, Zendesk, Stripe being the most common in my engagements), plus a database or two, plus some static files (excel mostly). Depending on the department, throw in some social media accounts (some directly supported.

Connect it all together in a tabular model, and you've got yourself a nice little BI layer.
Well, the argument here is that for example, there are types of cancer which have extremely low survivalability rate, like 1 out 10 people who get it survive it. But we still treat them, and sure, right now 90% of them die but the data is used to create new drugs which in the future might improve the odds. If we just straight up said "it's very unlikely this person will survive so we won't spend $$$ on trying treatment" then we wouldn't get anywhere with many different medicines.
Next up: Why create a neural network in JavaScript?
My last few jobs have had flexible hours, so I wake up naturally every day. If I feel I can go back to sleep, I will.

Getting enough sleep every day and never having to force myself out of bed makes a huge difference to my work performance and general mood, to the point where I don't think I could do a job without flexible hours.
Insurance companies are just cost control entities. Even in a single payer system that function has to exist.

Of course you can argue that having just one system is far more efficient than having hundreds of different ones as exists in the US today.

However, someone still has to say "no" to certain care. I know when i was in Canada that role was taken by the gov't.
Had to reply here given how special it is to watch LeBron play right now. Even if you're not a basketball fan, watching LeBron is like watching an extra rogue queen run a chess board. He should be past the peak of his career, but he's adapted his game to become a better all-around player. Reminds me of Mega Man suits where he can co-opt certain abilities given who's on the floor. He can kind of make his teammates necessary, if that makes sense. And he's more than aware of everything that's happening on the floor and on the benches. Him pulling Powell back on the court was a fun, albeit silly example of this: https://twitter.com/wenotsocks/status/860900323275264002

I'm not sure there's much relevance here, but there's something to watching someone maintain competitiveness as they age.
"Do you think the top 1% of Americans consume significantly more government services than an average 1% of Americans?"
They obviously do consume more of about everything, including government services. Have you compared the cost to government of several McMansions versus a small rental appartment? Policing cost in an affluent neighborhood? The cost of people flying very often versus not or almost not? Of a heavy SUV versus a humble small car? I'm not even touching other externalities like environmental cost...

"If not, why should consuming those services cost significantly more money?"
One doesn't even need the "if not". This can be a perfectly valid political choice.

"It might feel right that rich people should pay more, but that's not how any other market works - why should government services be different?"
Because government services are not "any other market". To illustrate that, one could also turn this around and ask "It might feel right that everyone should pay the same, but that's not how government services work. Why should private markets be different?".
Calling F# Code in a C# Project
Alphabet’s Sidewalk Labs Eyes Toronto for Its Digital City
I like Perl, and use it quite a bit. But the obvious drawback of that decision is that sub(%foo,%bar) passes a merged hash. You can use refs of course, but I've seen this bite beginners a lot.
For traffic analysis resistance, Tahoe-LAFS over I2P
Forecasting with Julia
They spend 83% of premiums on medical care.

(they list both numbers on page 9 of http://www.unitedhealthgroup.com/~/media/CEBA762A544B44D19F1... )

Some of the 17% represents necessary administrative costs. Who knows how much.
Is getting fired from a fraudulent company really a net negative?
I don't think they are more efficient in Norway harsh winters..
Yeah, I don't get this. The announcement on twitter contained zero information apart from "there's a remote code exec vulnerability on windows". Which I think you could confidently say at ANY point in time (about ANY system).

But Graham and others (https://twitter.com/taviso/status/861575086632968192) continue to attack Tavis for announcing the fact that there is a known vulnerability. As if this somehow makes users more insecure.

Surely it is better to alert people (and especially organisations) that a major security issue has been found so that they can be prepared to patch their systems as soon as a fix is released?
It's a pretty thin piece. I'd like to read more.
They do? Just check the version: Open Defender, go to Help => About, check "Engine Version". Should be 1.1.13704.0 or higher.
They certainly do answer some of the questions you explicitly spelled out. As for the rest:

1. I generally care if people are being pushed towards (under|in)-effective treatments. I want people to be guided towards the safest and most effective treatments for ethical reasons.

2. I worry that there are misaligned incentives between the drug consumers and the drug suppliers.
> . This is security engineering on the level of the other AVs, Linux Desktops and similarly insecure software

Why the unnecessary jab at Linux for no reason?
Obligatory Slate Star Codex Link:

http://slatestarcodex.com/2017/02/09/considerations-on-cost-...

Scott Alexander examines "cost disease" in the sectors of health care and education.
I think with JS being one of the most popular languages around, this can always be answered with 'to enable millions of devs to use this without the need to learn yet another language'
For some reason, I am getting really depressed reading this.
If you don't do it right, citizens rise up against you and pillage your empire from the inside. It's certainly frustrating, if not interesting.
It's working alright for consumers
Tavis also got some blowback on Twitter simply for announcing that he'd found a vulnerability. It's baffling to me why people think it's a problem.

If mere knowledge of the existence of a vulnerability in a particular product is enough for the 'bad guys' to find it, well, they were going to find it anyway.
To be fair, I suspect that Windows simply makes for an attractive target, both for security researchers and malware authors, because about 90% of desktop computers are running Windows.

If GNU/Linux had a market share of >50%, I would expect similar news to pile up at a comparable rate.

For the moment, GNU/Linux enjoys kind of a reverse herd immunity, but I do not believe it is inherently more secure than Windows.
That's because the second person that disagrees with the same thing is expected to be more right on average.
If you lump it in with the standard deduction its not so regressive.
I think there's an argument to be made that if the desire for testing is a main driver for your architecture then your tests are too granular, and you aren't testing any internal integration points. In my experience that means that your tests are so tied to your current architecture that you can't even refactor without having to rewrite tests.
The costs of the services in the bronze ACA plans isn't that high. They basically are catastrophic plans. The premiums and deductibles are expensive because medical care is expensive and a real medical catastrophe can have obscene costs.

Cheaper coverage can pretty much only be obtained by excluding people or limiting the benefit.
"Data analyzed for this report reveals, however, that the U.S. led in many broadband metrics in 2011 and 2012."

Anything more recent? I can tell you from my experience in the south of Spain that investment and availability in broadband has improved massively since that report was provided (e.g. I personally was struggling to get the full advertised 10Mbps in my area 5 years ago, I've had solid 300Mbps for around €25/month extra for a year now). I wouldn't be surprised if the study took place shortly before fibre and other investment in certain areas really came to fruition.

I also see they seem to be hedging things in the summary descriptions (e.g. mentioning cost as a positive on the US side, but then making excuses while they admit that US access is only cheaper at slow speeds), so that doesn't seem particularly convincing.
The C Puzzle Book (1982) [pdf]
Thanks! I didn't see that one, I'll be sure to search first in the future!
They are different beasts :), and yes it's very important to understand both because they work in different ways.

Most people that know of CoDel think it's a panacea for buffer-bloat on their LAN but BBR is actually much more likely to be effective. The important distinction is that CoDel only prevents buffer-bloat on the hop where it's running. CoDel manipulates packet order in outgoing local buffers to signal the congestion control protocols at higher levels such as TCP that buffers are overflowing. The drawback of CoDel is that it only works if your router is the slowest link.

If the bottleneck link is on your modem (most are), CoDel will only help if you artificially make your router the slowest link by limiting outgoing bandwidth to slightly lower than your modem upload speed. In practice most people don't know to do this.

BBR in comparison reduces buffer-bloat along the entire path of the packet, but has its own disadvantages. First, it only works on TCP connections. Second, it helps the most if machines on both ends are using it. Each end of the TCP connection uses its own congestion control. Thirdly, it can only be applied at a machine level. If you put CoDel on your slowest link it will help all the traffic going through it, but only if the bottleneck is at that link. BBR will help prevent bufferbloat from end-to-end through all links a TCP connection flows, but only prevents TCP buffer-bloat completely on your router if every machine on the LAN is using it.

Ideally you want to use both in every place you can.
Basically no.

When I'm looking for a domain I often see people squatting on a domain I would like. I would consider buying the domain at a premium, but renting, no way. If my product or service is successful they will always have a hold over me.
What the last Nuremberg prosecutor alive wants the world to know
In comments under the article about civilization, definitely. It is going to be be different in comments under article about doom, wolfestein or some adventure game.
Better Version Control for Design Projects
Finland's universal basic income trial for unemployed reduces stress levels
> The middleman role of insurance companies in American healthcare seems completely useless.

It depends on where you are. There are areas of the country where insurance companies are fighting a cost war on behalf of patients against increasingly conglomerated and monopolistic hospitals.

This American Life had a great episode on this a while back. I went in thinking, "This problem's simple, it's all the fault of x." (For a few values of x.)

I left the episode thinking, "Wow, who knew health care could be so complicated?"

I have moved towards a Marxist philosophy on healthcare. Well, Groucho Marxist: I no longer trust any solutions to healthcare that non-experts like me could understand.

https://www.thisamericanlife.org/radio-archives/episode/391/...
From the FAQ: https://news.ycombinator.com/newsfaq.html

> Are reposts ok?

> If a story has had significant attention in the last year or so, we kill reposts as duplicates. If not, a small number of reposts is ok.

The dupe detector is slightly week to allow good stories to get a second chance in case the first submission was unlucky. I don't know the thresholds, but clearly the previous submission didn't get attention.

(This is a problem with some stories that are submitted 5 times and get only 1 or 2 votes each time.)
Keeping people alive too long is definitely a really difficult problem. Having walked through many dementia floors in nursing homes, I'd prefer to have some reasonable way of opting for assisted suicide in my will. Maybe once a consortium of doctors verifies I'm at a specified stage of dementia. Assisted suicide is another tricky area but I think it is humane when administered properly.
on my win10 machine, I had to open Windows Defender Security Center, click the cog in the lower left, and then click 'About' in the upper right.
Good for him. That's why we have whistleblower laws in the first place. Most of us have a lot to lose by doing the right thing: damaged job prospects may equate to a large future loss of earnings over your career. Still, history shows plenty of people have paid (and continue to pay) a far higher price than that.
Businesses I build my self. In a way when you buy a stock you are buying a fraction of a business at a premium rate.

Why not invest in your own business, you get total ownership at a huge discount to the stock market.
What specifically would you change about Nuget?
Have you tried the new SPA templates?
https://github.com/aspnet/JavaScriptServices

They're better at "download this and everything will work" than any equivalent I've found in the ecosystem for other languages (though elixir/phoenix is there, too). I'm impressed (as a .net newcomer).

With postgres support through npgsql, I'm doing my latest side project in C#. We'll see how it goes.
The tragedy he mentions aren't 100% code coverage. It's more about people using the wrong tools for the job and using 100% coverage as an indication that everything is fine.

100% coverage for my team means that we were intentional about our code. It's not hard at all to have 100% coverage in a Ruby application as it is possible to do a lot with very little code.

Furthermore it allows us to bring in a junior on the team because we know they have a safety net.

Also for the record we do code reviews and are very thoughtful about the code we write. 100% coverage does not stop the possibility of some bugs inserting themselves somewhere.
Product Engineer
Hello fellow hackers,

Please help to upvote this if you think there are startups who would benefit from this. To be totally clear, I'm looking to join an awesome team and available to do (remote work).

I have an excellent experience scaling applications/products from zero to millions of users both from a product and technical POV.

Proven skill sets ranges from the actual sales growth, partnerships, marketing, project management application testing, scaling users via viral acquisition (Facebook & email), and in terms of the startup process (mostly scrum).

I'm a guy full of dynamism in knocking things off, caring about details, and taking feedback very well.

On a downside I probably really expects world class work from who I work with. I need to be part of a world class team, Joining one of the big boys is OK, but I would prefer to be part of something newer and awesome ;)

If you have leads please ping me @ mudongo[dot]oarabile[at]gmail[dot]com
The starting MSRP of a base model Prius is 27% more costly than the Corolla a similarly sized car w/ a standard gas engine.
This Is Fireball Malibu Vlog 600
> It demonstrates a very high level of social awareness and emotional intelligence.

Any reasonably average human being should have these skills as an adult. If they don't it's because something went wrong at some point, or they are on the spectrum or something like that.
A lot of people in IT (a surprisingly high portion of programmers, even) don't understand the value of full disclosure in security research. For some reason, they decided to export their usual arguments to decry Tavis's tweet:

https://twitter.com/taviso/status/860679110728622080

The responses to his tweet calling him irresponsible are consistent with the tone of this remark. "This can help the bad guys". Nevermind the fact that there's no details in the tweet relating to the actual vulnerability or exploit.

To be clear: I don't know what relationship (if any) Graham Cluley has to the people being jerks to Tavis, and it's possible that this quote was taken out of context. However, given the backlash Tavis's tweet summoned from some Twitter users with inflexible opinions about disclosure ethics, and this alien remark in the article, I'd hedge on the two being related.
Finland's guaranteed basic income is working to tackle poverty
I've had good experiences here and bad. The absolute worst was when I took over a project that a contract firm had developed and had to work side by side with them for a few months.

They were a 100% test shop. The site itself was broken, certain parts of it would literally crash the web server for certain users because the code was so terrible...but they had tests for everything.

What's worse, when fixing some of the broken code they got mad at me for making it harder to write tests...because somehow in this mindset a working product was less important than working tests. I've been wary of test nazis ever since.
Exemplary fullstack Medium.com clone powered by React, Angular, Node, and more