skysight-inc/HackerNews huggingface dataset:
As a maintainer who also cares about feedback and usability, but who doesn't maintain any high-traffic projects, I can just about imagine how frustrating and destructive of motivation it gets to see the same no-thought issues raised over and over and over.

But if you close them NOTABUG or WONTFIX, you get a reputation as that guy who just doesn't want to hear about it, what a bastard.

I think there must be a middle way somewhere, for those projects which attract a lot of interest but few or no co-maintainers. But I'm glad I'm not on the hook for finding that middle way, too.
> You're being sarcastic, right? This is OS. It's fundamental underpinning is that if you want to use it (or at least engage its maintainers), you have to care.

Ugh.

My partner, who doesn't know the first thing about code, understands the value of FOSS. Caring about FOSS doesn't fix bugs.

A month ago (more?) I encountered a bug in LibreOffice Writer, which I use because it's really good, where track changes on a docx file wasn't working properly in a particular situation involving the deletion of tracked comments across saves.

QUICK! Find the line of code that caused it! Find the mechanism for creating a test case! I'll wait here.

Back here in the real world I was able to report the bug and have it fixed by someone who knows what the code does.
Looks like it now says "Chrome or Safari or Firefox"
The only thing that was truly python specific was the UTF8 question - you'd need to know the library. The stuff about reference equality is pretty common in almost every language that abstracts away pointers - js, ruby, c#... The thing about closures was a basic closure question that anyone with experience in a language about closures could answer.
It's presumably possible to update and spawn a new instance from inside vim, but I won't say it's sensible.
Supreme Court Ruling Bolsters Zoho's Stand Against Patent Trolls
See also the damned cable channel bundles when I just want to watch NBA or NHL live.
> But 'screw you'? Not classy.

To be fair that's exactly the tone I read the gist in as well. It seems a bit overly hostile to users who may have questions or suggestions but either don't or cannot contribute code for whatever reason.

Emotional comments beget emotional comments.
The top comments here are really harping on things that aren't necessarily actionable (with the exception of backups, but I'd split hairs on whether that's a security mistake or a business process mistake). I interpret your question to mean security mistakes that have an actionable basis.

The most common security mistake I see is API authorization errors, in the abstract. More specifically, I see this manifest itself reliably as insecure direct object references. Nearly every security assessment I have ever been on has had an API where you can slightly alter a parameter value and bypass authorization controls altogether to access another user's account (or whatever other state-changing action you can think of in the context of their session).

In an era where just about everyone knows what SQLi and XSS are, actual logic errors fly right under the radar and authorization controls are not implemented universally.

To be even more specific - do you have a microservice architecture? Have you tested that every backend service has the same authorization controls in place? When was the last time you tested this?

Put your backend services behind a common access policy (you can use something like Kong for this), and make sure that you parameterize all calls between services, because someone can and will access your privileged services through a less privileged service using an unexpected or undocumented call. For that matter, use internal access policies to discriminate between more and less privileged services. It doesn't matter if you have a DMZ and firewall open IP traffic if you give a user-facing service access to a more privileged service - users can hop between them.

And when you deprecate an internal legacy API, actually remove it from being accessible by other services. This is probably still the number one way that people find really serious vulnerabilities in Facebook. I've seen cases where user input was used by Service A to directly query Database B using fallback API C, giving the user de facto arbitrary read access to the entire table. Database B is always firewalled to outside internet traffic in these scenarios, but Service A gets a free pass to access internal resources and voila.

It's fairly straightforward to classify specific technical issues, but if your APIs for various backend services are not properly set up with authorization controls you open the door to remote code execution, command injection, server-side request forgery...it's pretty bad. And it's largely unknown by developers because they are hyper-focused on common web vulnerabilities, which frankly are mostly solved by using the right libraries these days.
Where did you get the 1/3 from? It's been 55% of eligble voters. Counting non-eligibles wouldn't really make sense in your argument

Source: https://www.google.de/amp/s/amp.cnn.com/cnn/2016/11/11/polit...
How would one go ahead and use Jquery Resize with this? Adaptable enough to allow that?

Looks great!
Have you ever left the city yourself? There's great food everywhere. The best food I've had has been outside of cities. There are art galleries at every college and some outside of them too, but even if cities have "better" art, I'm fine with just getting it from the internet. Same for music - Woodstock took place on a dairy farm. I'm not sure of the exact intent of "play" but things like hiking trails and snow tubing hills are found outside cities, along with again the internet. The only point here that might make sense is dating, if you assume a higher density of people means a higher chance of finding the right person for yourself, but it also means more competition.

If you want alternate theories, one influence could be that cities having higher populations means that among the group of people who have remote work, more of those people will live in cities. Also, someone who works as a programmer likely had to move to a city in the first place to get a job and wouldn't want to move out immediately after being used to living there. There are likely other factors too but I'm really not seeing how the quality of food and entertainment is supposed to be better enough in cities that it would be a driving factor.

The trade-off of some additional convenience living in the city might give you, for always having to be on the look out for pickpocketers, no outdoor privacy, not being able to feel as safe being out at night, having to pay for parking or use public transportation (I'd rather not have to only take home from the grocery store as much as I can fit in a backpack and then have to carry around a gallon of milk on the way home), having to deal with aggressive panhandlers and drug addicts asking you for money all the time, and higher cost of living among other things, isn't worth it to everyone, even if that's hard to believe for you. I've spent a fair amount of time in cities and I know that the negatives I listed are enough for me personally to not really want to live in one if I don't have to.
>other than that

That's... a pretty big "that"
Single payer health care already exists in one form, The VA. How is that working out?
> just as economical to move into "luxury" apartments

Come now; choosing where to live is a complex balance of pros and cons for most people, I can't imagine many having this anywhere near their list of priorities.
You know, I'm so dense sometimes. When I started doing transcripts, I was thinking "SEO", not "deaf people". Duh!

>It's a pretty solid career choice for deaf people, considering 98% of the job is doable without being able to hear anything.

Never thought of it that way before. I bet it makes open-plan offices tolerable, too. Hmm.
>It's incredibly well studied and respected academically.

So was phrenology. This search for the g is just cargo cult science.
Using the word “whiz” in my domain name?
Hi, I'm not a native English speaker but as far as I know whiz seems to be a synonym for wiz, or wizard.

Can someone please tell me if using Whiz as the prefix of my domain name has any negative connotation?

The one I want has only availability with whiz.
Maybe there's a simpler explanation: FOSS projects can easily turn into unpaid work, and devs tend to burn out.

Projects that start as fun programming exercises eventually take on all the aspects of a full-time job with "customer" support, project planning, maintenance, bug fixing, and so on.

It can become very draining, and if the project isn't unusually popular or high profile and/or there's no other dev support and/or the team isn't solid and mutually supportive it can be understandably difficult to stay motivated.

One of the insidious things about FOSS is the way that devs can make themselves feel as if they ought to be doing all of these things, sometimes in addition to a full-time job.

The problem isn't that they're not up to the task, it's that the expectation isn't very realistic.
This may be a cop out but I would say I agree with both of you. Students may not know for sure, but nor does the education bureaucracy. For my part I'd far rather student choice!
Dealing with Optimistic Concurrency Control Collisions
I consider myself barely Python literate (I've modified maybe 5 python scripts in my life) but also managed 15/15. Most of the relevant core semantics are extremely common to dynamically typed scripting languages:

- Reference semantics for pretty much everything, except perhaps basic types such as integers - but those are generally "immutable" (e.g. no 5.add(6) mutating the "original object" in-place) making by-reference vs by-value moot.

- Arguments copy the reference, they do not alias the original reference.

- Mutating functions, if the return value isn't being used, are either being misused (e.g. the code has a bug) or mutate the original object in-place.

- Closures alias the same variables

This could be JavaScript, ActionScript, Ruby, Powershell, Squirrel, PHP, ... hell, even a lot of the compiled statically typed languages share similar semantics. I'd expect someone coming from, say, a pure C/C++ background to have some trouble though, which is perhaps the point you're getting at.
Heard that he takes finasteride for the hair. This drug screws with the steroid system; Progesterone is rather important for brain health.

Some of el presidente's linguistic choices are technique. It's said that Bandler & Grinder had troubles with the editors "fixing" their books - the editors didn't realize the wording was intentional.
In Europe you have a lot of languages and nations mixed. People who design signs know and care about that. In US you have a huge country where everyone speaks the same language. People who design signs don't even know it's a problem that needs to be solved.
Yeah, that last report specifically refers to Windows 8, in the context of energy savings (typical Chinese style, but still a mention of Windows 8, so I guess the Windows XPs, 7s and 10s would not fall under this).

Anyway, lot of generalization going on from the original article without clear grasp on the specifics in the field in China, as always.
Conspiracy Bill Advances in Japan Despite Surveillance Fears
I agree, although as I said to another commenter, I'm more bothered by assuming others to be incompetent even though they are, than I am by assuming yourself to be competent when you're not. And they're related, but not quite the same?
THIS is the "How I met your mother" we want.
I have no idea what this means.
I use Fusion mainly because it intuitive enough to figure out without doing much reading. I tried Solidworks at first, but, as a complete newbie to this, I couldn't make heads or tails of it. As far as I know, both are equivalent in functionality, but the UI of Fusion 360 was much, much better (and yes, Fusion is free for hobbyists, so that's a plus).

As far as I know, Blender isn't parametric, so it's largely unsuitable for doing this kind of work. I would recommend OnShape as a very nice starter CAD program, and it's very very easy (almost trivial) to move on to Fusion afterwards, so my advice would be: If you can get Fusion for free and it runs on your OS, try that. If not, OnShape is a very capable second choice.
https://youtu.be/IFe9wiDfb0E And I'll add this text just to say this is very relevant to what you said and not just a drive-by spam drop.
"I found a bug and you won't consider it unless I phrase it as example code? Screw you, I won't report it then!"

This seems like a reasonable thing to think and say.

A better alternative to the article's suggestion is to state somewhere that it is very likely your issue won't be considered unless it takes the form of a PR. The maintainers, if they don't want to deal with the bug, will say "could you make a PR with a failing test case? Otherwise I don't have the time to work on this".

That way, those who really want the bug fixed have to put in work, but those who just noticed a problem and are kind enough to let the maintainers know can do so easily. Why discourage bug-reporting?
59% of eligible voters voted (http://www.electproject.org/2016g). Not great, but much more than 1/3.
Find a good local tailor, they can fix inseam/waist perfectly for $20 or so.
Came here to say the same.

If you win on lottery you can expect to get offers from criminals for your ticket. This could be the same thing on a larger scale...
The FBI raided his girlfriend's parents house and harassed and disrupted the lives of all his friends and family prior to him going to Iceland.

All he did was download a file. The FBI knew he was politically motivated but treated him like a criminal.

Sure his first employer is within their rights to fire him. But the hedge fund only fired him (despite him already giving notice to leave) after the FBI showed up to harass and disrupt his life.

This is not how law enforcement should work.
Assuming strings live on the heap. Small strings could be stored in the vector itself.
Royalty in the UK would presumably mean just the members of the royal family, which has a fuzzy boundary. The aristocracy is a much larger group, obviously.
Isn't Skype in china done through a JV?
The 100D is pretty clearly not a mass market product.

I guess it is close to the average price of new vehicles sales, but I think even $35,000-$40,000 is pushing it, especially when that range is going to be closer to 250 miles than to 400 miles.
Precisely. Most of the time electronic device manufacturers set the commercial warranty[1] to one year, but that's purely their prerogative. That's why you can go the Apple Store with your MacBook during the first year[2] even if you bought it from FNAC or Amazon or whatever. Apple Care extends that duration to three years, and possibly sets additional coverage terms like with Apple Care +.

On top of that, as merb said, following the EU directive, local law (in France, that's the Hamon bill) says the legal warranty of compliance[0] covers for the whole two years. So Apple can tell me to buzz off past the first year if I bought their hardware from Amazon, but so that I can go through them directly instead of going the roundabout way through the seller during the first year. The seller can never tell you to buzz of (as long as you duly prove the defect past 6 months as merb said), even during the time a possible commercial warranty applies, but it can be more efficient to go through the manufacturer directly, as is the case with Apple Stores, but I've been using this for other brands where the wait list was months long through the seller whereas the manufacturer fixed it in less than a week and even footed the bill for the postage.

[0]: https://www.service-public.fr/particuliers/vosdroits/F11094

[1]: https://www.service-public.fr/particuliers/vosdroits/F11093

[2]: https://www.apple.com/legal/warranty/products/mac-french.htm...
Totally agree. A lot of hype without real understanding of the limitations.

https://blog.tokenize.io/the-case-against-blockchain-identit...
That's very true. But the relationship between developer and user is not symmetrical. I'll give the grumpy developer a pass that grumpy end user didn't earn.

Fielding a few hundred rude and entitled support requests for your free software can make anyone grumpy. Once you have a few thousand users your inbox is a source of frequent misery.
The Race to 10nm/7nm
The ignorance of philosophy among educated people is a relatively recent phenomenon. It happened in part because the American philosophical community after WWII shifted away from pragmatism and adopted a type of philosophy, namely analytic and logical positivist, that is quite counter-intuitive and also quite irrelevant to most real problems in the world.
> You receive a couple hundred watts of near infrared radiation (ie the 1550 nm in the laser) just by being in direct sunlight.

The visible light in sunlight makes pupils dilate, decreasing the amount of infrared energy that reaches and heats the retina.
Nano? nah...no.
Some seriously fishy math here. $400B is the total projected cost which includes existing health spending — the $100B is additional, not total. Yet when getting to their $208 per month number, it's based off the $100B, not the $400B. Yet they claim that this would be the grand total, and that premiums, co-pays, etc. would be entirely eliminated. Seems like the calculation should result in a number closer to $800/mo per individual. Am I missing something?
Why are kickstand hybrid laptops a thing?

Its the combination of an over-sized tablet that you find impossible to hold and touch type on comfortably at the same time because 'TOUCH ON EVERYTHING', mixed with the idea the family photo frame sitting on your desk would make a great workstation if I just added a detachable keyboard. Lame!!!
It's about fucking time. Imagine if the Germans had built monuments to the Nazis with giant swastikas after WWII and they were still defending them as historical in the year 2100. This is no different. There is absolutely no redeeming factor to the confederacy or slavery. The two cannot be separated. A monument to the confederacy is a monument to slavery. Goddamn right it's about fucking time.
I don't know... You might be right that the voting part can take care of this. What I fear though is that the community will get used to this idea that there is no point in submitting anything that is outside of the mainstream, because the mainstream is already using HN, and any fringe topic will be drowned by the other voters.
I never replaced those either, but HP adapter did melt the plastic cover on one of my laptops and I started to see the naked wiring (on the DC side). I bandaged it with some tape.
Browse Against the Machine
Actually, my father-in-law, which was pretty funny because he is typically quite reserved.
>always answer "no" to "may I search your laptop?"

Good luck with that when faced with a border nazi & zero rights.

I just leave my personal laptop behind when travelling to countries with dubious personal freedom policies...like the US.
I didn't say it's got proof. I said it's got more proof than the Russia-Trump connection.
Better, the feature should _always_ show both "Enable Travel Mode" and "Disable Travel Mode" buttons so that it's not possible to tell whether or not it's enabled. Disabling travel mode should prompt for a password, then return a message like "all vaults protected with this password are now enabled" no matter what the result of the operation is.
The reason those jobs pay so little is ranchers can find people willing to take them. You may be right that Americans wouldn't take that job, but that's not an argument for bringing in cheap labor from other countries. Quite the opposite, actually. If ranchers couldn't fill those slots they would pay what it takes for Americans to work there.
Not if the source of the fires is ever-changing scope or features by clients and/or BAs/Executives, especially with them trying to bypass the existing process and get the changes out the door that day. When pretty much everything is determined to be an escalation...

I've been in this situation many times.
Julian Assange is offering a 100K reward for information about the murder. A PI hired by the Rich family has stated publicly the police were told to stand down and that sources available to Fox News told him Seth Rich had been communicating with wikileaks. Kim Dotcom -- well you can click the link at the top of the page yourself.

I understand this is all circumstantial evidence and hearsay, but I would like for you to explain which of these people are "members of the right wing media."

Basically you're telling me that all of these people are conspiring to distract from Trump conspiring with Russia. I'm pretty sure you have the conspiracy theories today.
40mW would be dangerous for a constant laser (class 3b), but I'm not sure about a short pulsed one. I think you should look at the amount of energy per pulse.
C-x C-e evaluates the Emacs Lisp expression before the point. This gives the same result as the much more obvious M-x kill-emacs, but with the added fun of writing and executing Lisp directly in whatever buffer you're in. So to close the editor, we've written some code in a weird ancient language into some random text file, fired up an interpreter that's probably so portable you can run it on a 1980s toaster, and executed an expression which we had to make sure was wrapped in those vile parentheses everyone loves to hate.

Straightforward.

But I just had to explain my own joke, so I'll go wallow in shame for the rest of the day. :(
Yet more evidence that there is an entire generation in the western world that is incapable of communicating, navigating, planning or discovering anything without a device telling them what to do.

In 50 years, smart phones will be viewed the same way as automobiles are now: a catastrophic mistake from which it's almost impossible to extricate ourselves.
> Someone could provide a nonfree package collection that users could install separately but I don't know of any.

This is the main think holding me back from switching to GuixSD (from NixOS). While I do like the prospect of running a 100% free OS, I'm not 100% sure I can with my current hardware. If I install GuixSD, and find out that I need a non-free driver or kernel, the responsibility of getting that falls on my completely inexperienced lap. I would be much more inclined to run a partially non-free system to get used to GuixSD, then start cutting out the non-free parts.
To use your analogy, when I start exploring outside the valley, I think to myself - "wow, a year ago I only knew this valley. Now I'm getting to know this new area! I've come a long way and I feel great I've made progress!".

I tend to focus on the fact I am constantly expanding my knowledge, instead of worrying about all the stuff I don't know yet.

I still consider myself a generalist, however. I can't say I'm an expert in any one area. Maybe that's why I feel the way I do.
Incorrect.[0]

[0]: https://energy.gov/lpo/ford
MSN Messenger had a thing like that, also granular to the feature level. Disclaimer: I was involved with its development 12 years ago or so.
I'm gonna bet that trying to "language-lawyer" how your CBP agent phrases their questions is a one-way ticket to a private interview, because that's not suspicious at all.
>This is a nice feature, but ultimately if you are concerned with border agents requiring a phone search then you should just backup and install a fresh OS before traveling

This is just another version of the "why do you need privacy unless you have something to hide" argument.
Yes, technical analysis by leading security firms. Malware samples from compromised networks, strongly attributable phishing campaigns.
Why Commission-Based Business Models Often Fail
This reminds me of https://news.ycombinator.com/item?id=8908462. Use command line tools when applicable