skysight-inc/HackerNews huggingface dataset:
Ask HN: How to be offline first for desktop app backed by RDBMS
I need add offline first feature to a desktop application which is driven by relational database.

Thanks for any feedback!
I've mentioned it before on HN, but Zillow is vastly overvaluing my home. I paid $43k for it as a foreclosure in 2009. Today it appraises for about $60k (it's a tiny farmhouse on a half acre lot), yet Zillow constantly values it at over $80k. I believe they do this so they can bring up the average price for the houses in my area. Maybe it's good for me, I don't know, but it's dishonest.
it's also worthwhile mentioning that a lot of 3rd party companies provide support for open source products, it's paid support of course but most of microsoft's support options above the base level are far from free
I also never said that "they made up a terror threat and lied about the contents of information in the raid".

There are thousands of pieces of intelligence being gathered every day from various sources about potential new terror plots. They aren't black or white and most of the time very hard to interpret. In the end, it will always come down to interpretation of the actual factual evidence at hand. What is "strong" evidence for one person can be "pretty weak" for someone else. Even if everyone agrees about the actual pieces of evidence you can arrive at very different conclusions about what is actually going on. And even if you were to arrive at the same conclusion on what is going on, you can still have very different opinions on what the best course of action in this situation is.

Nothing of this is "making up a terror threat", "lying", "fraud" or "conspiracy".
Yep. True MVPs only work if you are solving a problem with no other effective competitor.

So it's either your MVP (to solve their problem) or nothing.

That's extremely rare.

If you are making "a better ___". Some basic ugly MVP is not going to get you far.

People will just be like "Ok we'll use one of these 10 other competitors until your product catches up to them".

And yes, I know you will differentiate in some aspects, but a lot of solutions are nearly useless until they cover a large critical set of features. If you implement 5 differentiating features but you lack a polished UI/UX and 100 other "basic" features that other established competitors have, you can't win anyone over because of the differentiation alone.
Top Career Tips for Programmers Over 50
is it confirmed?
Ready to discover new worlds?
Isn't really hard to say what the "real" value of Bitcoin should be? I mean what are the fundamentals?
Until there is some kind of law in place that makes companies financially responsible for this kind of blunder, it will proliferate. In the current state of affairs it's simply not economically justified to implement proper security.
Zero-emission autonomous ship planned to start in 2018
Comparing the United States and the Nordic countries as speculation about “basic income” gradually heats up, I could see it working for the latter but being a disaster for the former. The Nordic countries have a strong tradition of publicly funding community centres were the jobless can still go out and do wholesome things. Libraries and clubhouses are well-sustained and many small locales have an orchestra or theatre. Plus, with alcohol sales being a state monopoly, people are discouraged from drinking themselves into oblivion (though some subset of people will do their best anyway).

Meanwhile, in the United States where the state doesn’t always provision such places, and even churches have been losing their role as an analogue, people might be relatively susceptible to destructive behaviours. Perhaps the heroin and meth epidemics in “flyover country” are a harbinger of this: many of the victims aren’t exactly in danger of starving – existing welfare covers their needs about as well as a basic income would – but what else is there to do with their time?
This guy's at Dependency Injection revelations Stage 2.

In Stage 1 he realised that a bad understanding of DI has resulted in a ton of pointless Interfaces.

At Stage 2 he realised he didn't need those interfaces to unit test.

Wait until he reaches stage 3 realises that DI itself is fairly pointless and bad coders are still going to make a massively coupled mess even if you force them to use DI.

For example, one of our controllers has 20 odd "services" injected, with each of those services then having a bunch of other services/Dals/etc. injected, causing a massively coupled dependencies. So much for DI cleaning your code.

DI code is no less coupled than if you just coded it cleanly in the first place.

The only good thing I've found it for in C# is that it passes the EF context around per request without you having to manage that, so all your services are using the same context.
I'm strangely not surprised with HP and their actions (in this case, a lack there of). It reminds me of the Bose issue a year or so back with their products.

And the impact in which HP is going to experience - is nothing. Most people still to this day really don't care/understand on why this is a problem. They just want to get a computer for school, General internet surfing or watch cat videos. (Cat and Dog videos are quite interesting.)
What, is it so much better if a bomb goes off while in checked in luggage? What about fires? Stupidest thing ever. We do have security checks, oh wait, they are just for show and to annoy everyone.

"Oh no! It's dangerous, terrorists might do that! Let's make a rule that has no positive effect!"

Arriving in the US and being asked to give up all your keys and passwords is nothing new. "It's because we need to check for illegal content".

Cause that makes sense, if someone had something to hide nothing would stop them from downloading it over the thing called the Internet... /s

Americans are damn stupid, and other countries are doing similar stupid things.
The article suggests that as well, the way I read it:

"Actually, the purpose of the software is to recognize whether a special key has been pressed or released. Instead, however, the developer has introduced a number of diagnostic and debugging features to ensure that all keystrokes are either broadcasted through a debugging interface or written to a log file in a public directory on the hard-drive.

This type of debugging turns the audio driver effectively into a keylogging spyware."

Carelessness sounds like a fairly reasonable explanation, simply applying Hanlon's razor. :)
It won't help for the screen... Those are made by Sharp and would be exceedingly hard to get hold of in Shenzhen.
Enterprise Architecture and modeling tools (EA 101)
"P" is for partition tolerance.
> Actually, the purpose of the software is to recognize whether a special key has been pressed or released. Instead, however, the developer has introduced a number of diagnostic and debugging features to ensure that all keystrokes are either broadcasted through a debugging interface or written to a log file in a public directory on the hard-drive.

Looks like it's not intentional. Although really poor code-quality process I would say.
Well, nothing here is surprising beyond maybe the scale of things (if a random pizza joint now uses facial recognition in ads, who else is using them?). But those things still need to be called out and opposed, because peer pressure is an important part of morality in society. People are social animals, and are less likely to do things that are disliked by their friends.

Looking at things from a little distance, the whole thing is abhorrent, and paints a really sad state of our society. I wrote this many times, and will keep writing it: if you did the same things personally to your friend that people in advertising industry do to everyone, you'd most likely get punched in the face. And yet somehow marketing became a respectable occupation.
It's not surprising that it's possible. It's surprising that it's already happening.

It feels straight out of Black Mirror.
googling "conexant keylogger" shows this is not a new problem.
Let's Talk About the Wrong Things
In my opinion, Mind Maps are not great for organizing information, learning things or keeping track of things. Notice how the Github read-me itself is formed like a Table of Contents. Table of Contents (or other organized lists) are better for organizing your information and placing it in thematically similar topics, etc.

In cases where you're presenting or recalling information, the more linear narrative of a Table of Contents is superior. Use your brain's natural triggered associations to tie subjects together or to recall related topics, and use hard-copy writing to commit concrete, factual and clear information to that 'external' memory.

There is a reason that we've been using TOC like structures much more than Mind Maps. Mind Maps are terrible. We use TOCs, concrete lists, tools like Universal Decimal Classification and Dewey Decimal Classification to organize information, because they work and cover up the weak areas that human brains have.

Google Image search "Mind Map". You will see colorful distracting pictures like this: https://www.mindtools.com/media/Diagrams/mindmap.jpg

If you want random associations, follow links on the web. Browse Wikipedia, open new random tabs. Learn new topics, discover new interesting things! Just don't use Mind Maps.
I will be honest, I have no real problems with this. Then again I enjoyed some of the concepts for advertising shown in Minority Report which did feature ads which could identify you.

the idea of collecting who looked at your display is invaluable. It would be beneficial for both government and ad agency. Ad agency is obvious but government could learn if displays present information people want and it was presented in a manner to catch their attention. The negative aspects of government use could be limited through privacy laws and such.
1) I think the debugger used it
2) I had an Action Replay that used it
3) It existed
4) I had some off computer hardware I was talking to

memory a bit hazy !
Top Five DevOps to NoOps Trends to Watch in 2017 and Beyond
A friendly reminder that there's no such thing as "anonymized data", there's only "anonymized until combined with other data sets".
Introducing Long Term Support for Qt 5.9
A bit off topic:

I'm looking to get an Amiga mainly to run Octamed and get that Paula chip sound. Can someone suggest a model to buy?
It's a shame he can't name the telematics company. I have a suspicion it's one I interviewed at a few years ago.
Making methods that you want to be able to mock virtual prevents the compiler from inlining them which can impact performance. I'm sure if that's advisable.
A talented developer can earn up to 15.000 Euros a month in Finland
I have a feeling it's a subtly different problem: the people they've contracted to build this just don't understand security. They've evidently attempted to secure this, just in completely the wrong manner!
Funny, you don't name it either.
What is a caring consumer to do? At this point, pretty much all laptop brands are on my blacklist for one such reason or another.
Nah, they won't need to push that hard. "Warranty void when microwaved" will most likely be enough.
Is there any news about CoreRT? That is what I am excited for, and that would make me consider C# instead of Go.
These are tiles that sit flush with your roof, east west roofs act like zero tilt panels which provide less power everywhere in the US and thus lower efficiency. Granted if it's cheap enough that's not a deal breaker, but it's always going to impact ROI.
Idea management by ideahub
Every organization require some technology so that every every employ could share their idea.If some one idea get approval he should only get the credit.Solutin for all that is vyi.ideahub.online
What kind of screwed up religion did this author grow up in? Someplace where people were judged just on the number of times they prayed?

In the religions I see, activities like prayer are largely for the benefit of the participant (strengthening their connection with God and helping bring them reassurance and guidance) not to "keep score". And all the religions I know of have some obligation to their members to invest time, money, and care into aiding the poor and the needy, which had a direct positive effect on the world.

And I say these things despite the fact that I am an atheist.
> Looks like it's not intentional. Although really poor code-quality process I would say.

OTOH, pretending incompetence has always been a pretty successful defence. This is a class of error that I won't easily attribute to incompetence.
Ask HN: Anyone using Kano analysis?
I'm writing an article on Kano feature analysis and I'd like to interview people who had experience using it for their products (both good/bad experiences welcome). If you'd be up for a 15-20 minute chat, please ping me. gojko@neuri.co.uk
> Looks like it's not intentional. Although really poor code-quality process I would say.

To quote from

> https://en.wikipedia.org/w/index.php?title=Underhanded_C_Con...

(emphasis by mine): "The Underhanded C Contest is a programming contest to turn out code that is malicious, but passes a rigorous inspection, and looks like an honest mistake."

Do you really believe that Malory does not use practices that make the security hole look like a mistake of a not-so-experienced programmer or an internal debugging tool that was accidentally left in?
There already exist commercial transmission (not backscatter!) full-body x-ray security scanners. They are used in prisons now, but there's no reason they can't be used in airports.
Slightly off-topic - I always find it a bit sad when people say things like "Christians go through life trying to gain points... If by the end of your life you gain enough points, then after you die you go to the next level of the game (aka heaven)".

It shows the author has never actually heard the gospel (ie the good news) of Christianity - that you don't need to do that! That's why it's good news.
They bought the company that made OneNote, so I believe it was already a product called OneNote.
Here's an interesting thought: what with the money there is to be made in security these days programmers that actually know everything there is to know about security will leave applications development.

There is a good chance that the lure of security consultancy $ is resulting in a degradation of the quality of the applications.
I've heard that you can disable RFID readers (not tags, readers) with an appropriately-resonant coil and an EMP circuit.

I'm not sure if the same can be done to tags, but considering the size of the tiny electronics, and the fact that they are manufactured under the assumption they'll never need to be touched (aka, no CMOS spike tolerance), it might be trivially...

...wait. I just remembered about RFID alarm barriers in retail stores.

Well this is annoyingly difficult to discuss, then...
To fix the super-wide article:

document.querySelector('.blogbody').setAttribute("style", "max-width:650px; margin: 0px auto;");
Nope.

You can do controlled user-testing sessions with that system with specific people that have consented and are potentially compensated in some way. You will most probably also get more useful information out of that.

But being recorded "en masse" in a shop for that purpose I would think is invasive. I would totally avoid that shop if I knew that system was in place.

Also, I am not convinced that statistics lead to better design, so that would most probably be just wasteful, but that is another discussion :p
For me it is a side project (got payed from my company to create it), for more than 1 year i could do some support, but since than i work fulltime on other projects.

In my (less) free time i watch for issues and PR, but if somebody could be payed for doing this, i had no problem with that.

For famous projects it is not a huge problem to find free maintainer and contributors, but for smaller projects it is a problem. I did not know if paying a contributor would help, but i think it's worth a try.
I can imagine, that there are some developers that could work fulltime for many small projects and earn money.
I'm not saying you are trying to scam people but all the signs you are giving off are pointing in that direction which certainly won't help.
And just today I got an ad (in the paper mail) from an electronics distributor notifying me of new parts they stock. Among them was an embedded face and expression recognition engine that would emit pretty much this data, in a convenient text output you can read into any little microcontroller and act on (omron B5T-007001-010 if anyone is interested). This is no longer exciting cutting edge technology, it's off the shelf. And terrifying.
As a rule of thumb, you have:

* Decent software companies terrible at making hardware
* Decent hardware companies terrible at making software

I yet have to see one that does both correctly. Hardware manufacturers are known to produce the worst code quality you can think of, badly designed, poorly written, undocumented, insecure, bloated.

I have the feeling that the whole IoT problem is also related.
Why not simply have the cluster sync a time between themselves? First node in the cluster gets the time, and as the new nodes come online they set their own internal time via the cluster? So in a world where there is not NTP or atomic clocks the system could continue to operate.
> Its absurd people are outraged about something like this, relatively harmless and at the same time use Facebook.

What is absurd is there is someone like you in every privacy-related thread claiming that everyone who is outraged is also a Facebook user, or somehow is fine with what Facebook does.
You are either completely missing the point of the discussion or being obtuse on purpose to push a political agenda.

First of all: There's a law in France that prevents campaign and propaganda 48hrs before the vote. Similar laws exist in other countries (e.g. Spain, where it's 24hr).

Now back to the point: The planting of misleading information pushed the attackers to delay the publishing of the information so much that they fell under those 48hr previous to the vote and still dropped bogus data.

A measure of defense in depth saved Macron's bacon.
Apple?
On your pricing page it mentions 'basic' add-ons and integrations and 'advanced' add-ons and integrations. What are these? I cannot find any other reference to these on your site.
I have not been following all of the incidents that happened in the past. Do you mind sharing your list ?
When a battery fire sends a plane down they will blame terrorists or something, not their policy. Have you seen anyone blame policy on the Brussels airport attack?
It does for the definition of "useless" that the article uses: not employable.
I get that his comment didn't include any reference to machine learning or industry disruption, but did it need to be flagged into oblivion? seems like overkill. Just delete the whole subtree if it's offending people, keeping the sub-comments doesn't make any sense.
Apple was not bad at both some time ago. Not anymore though.
POCOs and functionality are orthogonal to one another.

Plain Old Class Object means no special inheritance chains or attributes, just a "plain old" class.

By way of example: this contrasts with old Entity Framework or other ORMs that made you inherit from a certain kind of class, breaking the objects original intent, and hurting you when it came time to port to another framework, or serialize, or maintain your own class hierarchy.

Even what DDDers would call a Value Object could and should still have relevant business logic attached to them. For test-ability and portability you don't want your classes married to any particular framework, but your objects are still responsible for hiding relevant information.
The aristocracy can be a great subject of study for a post-work society. In the majority of cases, they seemed to be perfectly happy living a life of leisure.
> So while our system would be able to say "I have seen person 1234 at locations 4,7,9,11 on dates x,y,x" we had absolutely no way of knowing who 1234 was or anything about them...

Minor nitpick, but giving someone a nickname isn't the same as anonymization.

"Hey Bob, thanks for logging on. Did you know we've been calling you 1234 these past five years!"

When a passive recognition system _uniquely_ tracks & identifies a person, it just takes time before that gets cross-referenced.

(different story if the data gets aggregated, or you scrub the uid completely after some window)
Second part is here: http://www.europarl.europa.eu/ep-live/en/other-events/video?...

Starts at 12h30 Brussels time
> Carelessness sounds like a fairly reasonable explanation, simply applying Hanlon's razor. :)

On the other hand: If you do believe that there exist software on most computers where a security hole has deliberately left in (and since Snowden you should), applying Occam's razor will tell you that it probably looks like "innocent incompetence", since considering the typical software quality this gives rather plausible deniability.
Modern X86 machine code is optimised as an intermediate language between compilers and the microcode the processor runs internally, subject to the constraint of backwards compatibility to all previous X86 machine code versions. Clean design is impossible due to the backwards compatibility constraint.
That's why I wrote "Looks like" in first place.

A little paranoia here would actually be helpful. Anyway my thought process is :

If it's really intentional, they would not dump the keystrokes to a text file ( maybe some `.dat` shit ) and will not truncate it on every log in.

On the other hand. It seems quite stupid for anyone to not foresee what happens when the code is being executed on a scale.

If I'm a big corp, I would actually demand ( via court ) from HP/Conexant to open source the driver itself, since any investigation will need access to it anyway.
I wish emojipedia worked like this. Great job,
That's really interesting. You're not talking about finance or engineering, but yes, it certainly seems possible that there's a business that does things that way.
What is Google Translate good for?
Thanks, you will go far in life.
Project(ing) Management: The People vs. Remote Work Neuroses
Coming from the standpoint of a very curious independent researcher, I'm curious what I might query/search for to learn more about these data brokers.

Not at all out of anything that might be categorized as malice, just to add this datapoint to my mental map.
I have called Microsoft and gotten them to fix bugs and/or back-port fixes to the SP we were on. Anyone with a premier support plan can do the same.
The Federal Government region is what I think they mean.
So they had this vulnerability live for 3 years, didn't even pay a bounty, and they still don't get named or shamed? What incentive is there to do a better job if they can just do a shitty job and nobody finds out?

Name and shame, please!
In the context of "unemployable" it certainly used to. Modern laws are great, but it used to be the exception that folks in those groups were hired in large numbers.
My daily Java: Yet another Jigsaw opinion piece