skysight-inc/HackerNews huggingface dataset:
> Index funds are basically set it and forget it, so why would I want to continuously use this app? Just buy some $SCHB, $SPY, $VTI, or whatever combo of index funds you want and that's it.

Because of re-balancing. Say you invest in three index funds at a 70/20/10 split. One of those funds performs much better than the others over time, leaving you with a distorted ratio. So you re-balance to get back to your original 70/20/10. Typically you'd re-balance one or two times a year.

Ideally you want to avoid selling to rebalance, so if you're investing regularly (once a month, for example) you want to know exactly which funds to put your money in to each time to maintain your percentage split.
> Of course in addition to executing an AST you can also generate CODE for it...

Yes! In the third part of the book [1], we'll do exactly that. The C interpreter's parser generates bytecode as it parses. I haven't written the text yet (that's the hard part...) but you can see the code for it here [2].

[1]: http://www.craftinginterpreters.com/a-bytecode-virtual-machi...

[2]: https://github.com/munificent/craftinginterpreters/blob/mast...
There's shooting yourself in the foot, and there's C++.
Story time...please excuse the tangent, related to the above comment.

In the mid 1990s, I was the computer security officer for the 81st Medical Group in the USAF, which is the proper name for a rather large DOD hospital in southern Mississippi.

Though it was 22 years ago, the hospital was almost completely paperless. Every member of the staff, from doctors to orderlies, used one of the 10,000 or so VT320 terminals spread across a dozen or so building in the campus and beyond. Needless to say, on an average day, a person would enter their userid and password many times. Many of those accounts were very powerful, because we were networked with the rest of the DOD's medical records. One example report I ran with a doctor's account credentials was 'List everyone in the DOD, past or present, who is or was HIV positive.' ('Was' because the person could be dead.)

Furthermore, this entire system was reachable via the Internet, via AFIN (Air Force Information Network).

This probably strikes anyone reading this as...kind of nuts. And by today's standards it certainly in. But 22 years ago, most people weren't thinking in those terms.

The implications did freak me out a bit, once I took the job, and though I didn't have the power to do much about it structurally, I could do some things to improve password security.

So I had a dedicated (dating myself here) Pentium Pro Linux server that did nothing but run password attacks on our entire authentication database. On top of that was some automation I wrote that, once an account's password was guessed, would send automated e-mails, daily, to the account holder and their manager.

If the password wasn't fixed in a week, then their account would be automatically expired, forcing them to pick a new password.

The system didn't stop them from picking the same one as before, which people frequently did, but the automation was smart enough to expire their password again the next day without the grace period if that was done, which was annoying enough to get people to stop that practice.

This was rather...unpopular...among the staff. But I had that little 'HIV Positive Report' presentation I mentioned before. I said the account I ran that report from was behind the password '1234', and that anyone in the world could have logged in, run the report, and published the results. The thought of that spooked even the most technically and security clueless medical types.

Scare tactics? Yup. But sometimes scare tactics are justified.
Verizon really dropped the ball here....it's totally negligent to send a text with a number nobody will answer. I would sue Verizon.
But in the table I see, pair-compared, C is faster than C++. Am I interpreting this wrong?
> the end result predictably would be movie studio accounting that leaves the content provider with nothing

This always saddens and upsets me that "movie studio accounting" even exists in the first place. I would be loathe to support a model that could devolve to this.
A good example of human behavior in TFA as well as the talk it cites is how deeply convinced they are that C++ is objectively always better than C; they don't even try to suggest that there could be a tradeoff and sometimes C would be better. Of course the guy in the talk makes a living from C++ consulting; another part of human behavior is it's hard to convince someone of a truth which threatens their paycheck.

And I'm not here to argue how terrible C++ is (I've done enough of that elsewhere), but only that "behavioral" arguments cut both ways, and are usually little more than an ad hominem attack and/or some good old marketing tricks rebranded as "behavioral science."
I don't. My blog has one, but the hand-rolled static site generator I use for the book doesn't do that. It's pretty minimal.

My impression (for better or worse) is that few people use RSS these days, so it didn't seem like a great use of my time to get it set up.

If you don't want to join the mailing list for whatever reason (though it is quite low traffic), you could follow me on twitter too (@munificentbob). I tweet whenever a new chapter is up.
In a lengthy piece about rational arguments, you would expect somewhere in there someone would actually present a rational argument for switching beyond "it's modern."

I mean, maybe the actual details of the case for switching are slightly beyond the scope the author intended to write about, but simply starting with an assertion that "modern = better, therefore people should have already switched if they were rational" and treating that as self-evident strikes me as highly arrogant and logically fallacious.
British Airways IT engineer blamed for outage
That doesn't make sense. Transactions aren't slower if you move more Bitcoins. In fact, if you move a big stash then the transaction fees probably doesn't matter much and your transaction can be first in line.

Most exchanges still need those six confirmations however, so any bank run would be limited by that. If you need instant sells you have to keep that stash with an exchange at all times. That requires a fair bit of trust in them, which I wouldn't recommend for regular users, but for an institutional investor that's probably how they would do it anyway. Those guys don't exactly walk around with an USB stick carrying their private keys.
It has half the rounds and a tree hashing mode by default, which makes it extremely fast when hashing big files (yes even in software). Check https://cryptologie.net/article/393/kangarootwelve/
Show HN: Lasercut 3D topographic map of Africa
It is a great article, but why on earth someone will use a service like Quantopian or similar service?

They are your competitor and who will prevent a disgruntle employee or a hacker to steel your successful trading strategy?

Just buy some data from eBay, you can get 20 years of historical stock market data for less than $100 and you can test any trading strategy or idea imaginable, including trend following, buy and hold ETFs, etc...

The barrier of entry is pretty low and you can develop a great lifestyle business with no customers, employees and investors around that...
> 4) All that said, the politics discussion on HN and similar sites is low quality, bad signal-to-noise ratio, full of emotional comments instead of insightful ones.

Disagree. Because what about that phrase from extreme programming / devops: Bring the pain forward.

Maybe if there hadn't been censure, we'd be inclined to work here on better ways to have controversial, emotional conversations. See: pol.is https://blog.pol.is/pol-is-in-taiwan-da7570d372b5

I was personally really disappointed in premise of the detox -- though perhaps more retrospectively as time wore on and I saw this place neutered. I now go elsewhere for my fix of political ideation and creativity.
You can find those analysis, but try submitting a link to the CATO blog and just watch. They are a libertarian site with good articles on climate, taxes, and government abuse; mostly police misconduct.

the whole recent climate issue is a bunch of people not understanding the Paris accord and assuming it did so much more than it would. it was a "in name only" agreement much like other agreements created and implemented in the last decade
Without knowing how reputable any of this is, I'm somehow not shocked to hear Peter Thiel is interested in medically unnecessary blood transfusions. This could be totally fake, but just based on what I know about him from news, this seems like a perfectly plausible and normal for Peter Thiel interest.
Its a new sales org and growing rapidly.
I kinda like the eclectic mix of articles linked on HN, and offers something in terms of content discovery.
>>Party A and Party B have the exact same policies

No they don't.
Yes, more specifically, the "let rec" is what begins the series of mutually recursive definitions. The "rec" is a clue that this is specifically for supporting this exact recursive case.

> Although personally I've never liked the idiom where everything at the top-level is a statement.

For statically-typed languages, I'm not a huge fan of it either. But for dynamically-typed ones, I think it works out OK.
> I think the entire point is to get people using uBlock etc to either turn it off or to pay,

It is not an either or situation. Google wants to track you and get paid for doing so. They don't care if the money comes from you or advertisers. They do however care if they can't track you.

A contribution system could be setup completely independent of the ad serving system. That however has not been the case. With all iterations of Contributor before this, if you had Ad Blocker enabled then Contributor did not work at all.
So, AGL was speaking specifically about TLS. He wasn't suggesting other protocols / formats not use SHA-3 / SHAKE. But this blog post talks about misuse of hash functions as a reason to switch to SHA-3 as if AGL had not referred only to TLS.

That's a strawman. It's NOT useful.

EDIT: What's the one downvote for? Just curious!
Don't break the chain: use Rx's compose() operator
Process Hollowing [pdf]
Well, I would say information differentials + a huge power imbalance. And I would add to that a huge cultural shift vs. decades ago in terms of what is considered "acceptable" and "moral" as relates to relative compensation of rank-and-file workers vs. executives. (One can debate the extent to which these cultural shifts are also the result of policy shifts.)
When I worked for SAP back in 2007 (I was a fresh grad at the time), I was working in the business intelligence (reporting, analytics, and data warehousing) group and noticed how cumbersome it was for organizations to simply create and view reports (we're talking millions of dollars). I once said to my boss "you realize that in the future we'll simply just write 'show me a line graph for sales in the northeast'".

And so here we are now.
What you're describing is exactly the problem. The high quality report has to hope to survive on secondary effects (which don't work), unlike the junk-food reporting whose cost is paid for by the single viewing.

This is what every online newspaper has been saying for over a decade as they saw this problem approaching and didn't have a way to solve it.
You can't survive this way in the extremely efficient web.

Either top quality content needs to be able to pay for itself (ie charge more), or you're left with only two successful business models: make junk-food content, or off load your content creation to people willing to do it essentially for free as a hobby.

Neither of those are good destinations for the web. They work in niches, but not across the board. Ex. I don't want my newspaper to consist of only volunteer journalists doing a bit here and there in their spare time.
@pc do I get a free t-shirt for suggesting the feature 1557 days ago?

https://news.ycombinator.com/item?id=5172637
Walk Score Ranks the Most Walkable Cities of 2017
Getting rid of the GIL is easy - just move everything into the interpreter instance struct and add an interpreter pointer as the first parameter in every C API call except create. This should have been done in Python 3 since they broke the API anyway. Now everyone will have to go through another painful transition when they come to their senses. The current thread local storage hacks and PyThreadState/PyEval_SaveThread/PyEval_RestoreThread/PyThreadState_Swap are ridiculous.
That is an unfortunate URL...
> Jokes aside, i am VERY MUCH looking forward and EXCITED to see that the next chapter is on implementing a bytecode virtual machine.

The next chapter will be on adding control flow to the Java interpreter. The next part, which is still a handful of chapters away, will begin on the bytecode VM.
It's a purely informational comment about what the service is, not about the significance of the security breach.

Any identity related service, especially one that also includes password manager and desktop login functionality along with secure notes, etc. being involved in something like this is a major issue. We were looking at using them but have decided to stick with Google instead.
They buy the blood from blood banks, so people donating blood don't know it's going to paranoid rich people instead of sick people, and they don't get any of the money!

Edit: I thought it was illegal in the USA to pay for body parts, but there is an exception for plasma (and maybe the rest of the blood?). But it's already predatory http://www.nytimes.com/2009/12/06/business/06plasma.html and this new business only makes it look worse.
9 documentaries for UX designers to watch online: free and paid
(Martin Luther's) 95 Theses: You Won't Believe What #32 Is
No not really. I cited BLAKE2bp or BLAKE2sp in the post.
If we were discussing two languages Strawberry and Kiwi, and I had a large, established codebase in Strawberry and a bunch of programmers who are experts in Strawberry, it would be a hard sell to get me to switch to Kiwi even if Kiwi were better than Strawberry in every conceivable way and backwards compatible with it to boot:

- Learning to use a new system effectively takes time and energy. Are you 100% sure that the benefit of the new system is great enough to offset these costs?

- Hybrid codebases have higher maintenance costs than homogeneous ones. If Kiwi mixes with Strawberry seamlessly, maybe that burden is lower—but the more true that is, the harder it is to believe that moving to Kiwi confers a large advantage.

In this specific case, I could believe that C++ by seasoned C++ users leads to demonstrable net gains. But it's easier for me to believe that switching to Rust or Haskell would confer higher gains, corresponding to the higher risk and higher cost of switching. So I think it's not that people are irrational about avoiding C++. I think that C++ is in an awkward place on the hill between C and things better than C++. If you need something better, you will go to something with better tradeoffs than C++; if you don't need something better, you just live with your existing C codebase.
I think the argument that people could misuse SHA-2 is bogus, because if people are rolling their own crypto, they can get themselves into a lot of trouble, not just with SHA-2(key || data). Indeed, that argument may cause people to assume that it's ok for application programmers to do cryptographic protocol engineering, which would be disastrous.

A much more general argument is that most people should be using cryptographic frameworks (e.g., which implement TLS), and Adam Langley's thoughts about whether or not SHA-2 should be skipped should be aimed at people who are creating those cryptographic frameworks.

But if we are giving advice to random application programmers, they shouldn't be trying to pick cryptographic algorithms to begin with, and the question of whether you should be using SHA-2(key || data) is the sort of thing where the Zen master would be hitting the student with a cluestick for asking the wrong question to begin with.
That's one way of doing it, but there's no one-size-fit-all solution. Some do what you said and just stop spending anything. Not everyone retires either, it's just that they do work they like because they can afford it rather than having to.

It's really a personal experience, I know myself I don't feel like my life is missing anything even if I'm putting money aside to my future. I'm still traveling at least once a year, and I eat pretty good food all the time. At the same time, I don't have a car and rent one whenever I need one.
You hit my pet peeve right on the head - our instincts, such as fear of the dark, not wanting to touch dead bodies, etc., may be irrational, but there's usually a good reason we have them, and going against them without first understanding them is what is irrational.

I still vastly prefer C++ over C though :P
> With all iterations of Contributor before this, if you had Ad Blocker enabled then Contributor did not work at all.

"This time is different", or at least I think this time it will be different, since the whole point is to reach users who have ad blockers enabled, I guess we'll see how it goes.
to shreds you say
Headline is a bit misleading. This was possible before, it's just a bit more official now. "Visa applicants might have faced requests for their social media handles in the past, but the practice is now explicit...."
zxcvbn accounts for the use of word lists. (And keyboard patterns, and common dates, and repeated characters, and a dozen or so other common patterns you probably haven't thought of yet.) Try it yourself: https://dl.dropboxusercontent.com/u/209/zxcvbn/test/index.ht...

And in fact, four random words is actually quite strong. The XKCD comic that password is taken from accounts for the use of word lists in its entropy calculation. In fact, it even _assumes_ the attacker knows the exact 2048-word dictionary you're selecting the words from. Even under those assumptions, four random words is _still_ a pretty strong password.
The language does do great at the core of it, but there's a lot of stuff that makes it easier that's not the language's job.

compare https://doc.rust-lang.org/1.2.0/book/rust-inside-other-langu... to http://usehelix.com/ for example; the former is only using what the language knows, the latter is a nice library built on top.

There's been some effort for nicer Python integration, but I haven't seen anything super super slick yet.
If a transaction fails to be confirmed for several days, then its fee was by definition not reasonable; it was too small. A fee significantly smaller than the average fee on transactions making it into blocks is unreasonably small.
Savings accounts aren't the only option though. Bonds will return like 2-3% depending on the type, without the occasional dramatic crashes in value.
Subject you to more searches, seize your luggage with few means of appeal, and deport you. More and more reasons not to bother traveling or doing business with the US if it can be avoided.
Yes-ish. I don't sweat HMAC-MD5, nor HMAC-SHA-1. What really sucks though is when you can't use them (even though for interop reasons you must) because some stupid auditor (typically software) goes "oh no! MD5 found!! alert! alert!".
Boiler Room | Full Stack Developers | London | FULL TIME | ONSITE

Boiler Room is the world’s leading community of underground music fans. We live-stream DJ sets and live gigs from music hubs such as London, Berlin, New York, Paris, LA and >60 other cities to music lovers all over the world. It started as a webcam taped to a warehouse wall in East London - in five years Boiler Room has grown to become the online home of underground music, and also a complex broadcasting and editorial platform in its own right.

We are currently in the process of building the next generation of Boiler Room apps. We have upwards of a million users interact with our products a month, and that's not including the hundreds of millions of views that our videos have accumulated on YouTube and Dailymotion. We want to create a completely unique experiences on multiple platforms that live up to the quality of our live shows and bring Boiler Room to an even larger audience.

We're on the hunt for some great full stack developers with a passion for underground music:

https://boiler-room.workable.com/j/02D4C53C5D
>Does he ever mention Conway in any of his texts?

For "A New Kind of Science", here is the index entry:

Conway, John H. (England/USA, 1937- )
and arithmetic recurrences, 1115
and Game of Life, 877, 880, 949
and iterated run-length encoding, 905
and non-periodic tilings, 943
in Preface, xiii
and recursive sequences, 907
and universality of Life, 1117

https://www.wolframscience.com/nks/index/names/a-e.php?Searc...
> And so by following your heart instead of your head, you sometimes make seemingly illogical but objectively better decisions.

And sometimes you make seemingly illogical decisions that end up being objectively worse decisions. The problem is that we don't really have a way to quantify our emotions usefully, which means we can use them accurately and are forced to allow for enormous amounts of error in our calculations when we provide any level of significance to them. That's why they are often seen as detrimental to rational decisions, not because they don't matter (obviously emotions do), but because including them sometimes leaves us no better off than flipping a coin (are the downsides really that bad, or is your fear of change in this instance vastly overwhelming the other considerations, and in an unwarranted way that you aren't entirely aware of?).
This prompted me to post my thoughts here: https://cryptologie.net/article/400/maybe-you-shouldnt-skip-...
They are both professional consultants in this space.
Have you done this? If so it would be great to get your perspective
Or one could say it's irrational to write return (x); :] More typing, less readable, more confusing.
It's kind of amazing to me that OP's 4000-word article doesn't mention -- even once -- the relative complexity of C vs C++.
I think they're trying to avoid people thinking that it's all about diet. They don't want you to think that you can be physically inactive, live a high-stress life, but eat this magic diet, and you'll live to 100.
For US citizens, they may hassle you a bit but they have to let you in. For non-citizens, any refusal to cooperate will likely result in being refused entry and immediate deportation back to wherever they came from.
I've had this conversation with my wife many times. She's aware of my arguments, and I'm aware of hers. I don't necessarily think it needs any mediation, though. That, to me, would signal that it's much more of a life intrusion than it is. I mean, I'm not going to lose her over it.

This is more of a "does anyone else get this way?" because I'm having a hard time relating with the real world in this issue.
There are two claims here that should be considered separately.

1. Hackers are reluctant to acknowledge that their work has political ramifications. I believe this is true, and a problem.

2. Politics should be discussed more on HN. This is what most in the comments are disagreeing with, and I think with good reason. I like that HN avoids politics for the most part, but I'm also very glad to see someone point out that too many intelligent and technologically-inclined people insulate themselves from taking questions of values seriously.