skysight-inc/HackerNews huggingface dataset:
Numpy is so 'normal' I think many people believe it is part of Python.
What's stopping you?
There are about 200 open "Numpy Enhancement Proposal" issues on Github, https://github.com/numpy/numpy/labels/01%20-%20Enhancement
They tried to propose a simple modern solution but after reading the article it does not look simple and works much worse than traditional approach with tokens.

And of course it would be better if browsers would not make cross-origin requests unless permitted by server.
Ask HN: Story about a company using 404s to demonstrate customer demand?
I have a distant recollection of hearing some big name company that had done this with a lot of success.

From what I recall, it may have been a travel company that would add a call to action link to some new area of business that would go to a 404 page. Then they judged demand based on how many users click to that page and used that data to justify building $new_area_of_business

Does anyone know the story I'm thinking of or have any other successful examples of a similar technique being used?

Thanks!
Well, in that case I disagree with your point ;)

From a user's perspective, the transaction is confirmed when the app says "transaction confirmed", i.e. the second you press the "send money" button. I think that's what the OP was getting at.

As you correctly point out, the transaction could still bounce if the user has insufficient funds, but that's not in the happy path. Most users' experience with Venmo/Paypal is that they get a "confirmation" immediately, and then they move on. The happy path for a BTC transaction involves minutes to hours of time without even getting a _provisional_ ACK from the network, at any point in which your payment could fail and require a retry, or the payor could cancel.

(The time taken to finalize the payment is much less with BTC, but since modern payment systems paper over that detail, I argue it is not relevant to the user-facing concern that the OP is commenting on. Perhaps it is something that users _should_ be more concerned about, but consider the use-case of trying to buy a cup of coffee with BTC. Nobody is going to wait 2 hours for a transaction to complete in that use-case.)
What if that's what it takes? And besides that, it is $645020 more than they had otherwise, that's serious dough. (Though not serious in terms of the value created with Numpy but that is the nature of open source.)
> Today's release is the first to run Firefox using multiple operating system processes for web page content, making Firefox faster and more stable than ever.

So it's finally not slow and laggy? I hope someday it can be as snappy as Chrome so I can ditch google forever.
The value of the trickle of gasoline to get me to my kitchen is less than zero. To use it I would have to waste considerable money architecting a way to get my car indoors.

The value of AWS is greater than zero because spending my day monitoring my server would be exponentially more costly than paying Amazon to do it at scale.

And Ether is worth less than zero (as a computation engine) because I could develop and run the computation in less time by opening vim, even if the Ether was free.
>What the heck does "nation-state activity" means?

That looks hard enough to understand, but additionally it is "potential".
Basic Principles of Visual Design
the tinder-auto-right-swipe of job hunting
A Slump in Tech Stocks That Leaves Some Investors Mystified
Judging by the size of financial industry, the electronic money which could be programmed to do things with money without human help 24 hours per day is a serious threat to many companies in finance.
Yep, the class property syntax helps with event handlers.

As for C# and TypeScript, we also have a very strong JavaScript background, from vanilla pre-ES6 to the latest ES2017+. We still prefer JavaScript to TypeScript, although out of languages that compile to JS, TypeScript is the best in our opinion.
tine, tiny note: it means Clone on write, not Copy, and it's String not Str.
Related (was on Hacker News)

"On the Futility of Email Regex Validation"

https://jackfoxy.github.io/FsRegEx/emailregex.html
> Begin with survey papers for your field

What exactly do you mean by survey papers?

I do have a narrow set of keywords that I should be looking for but only from common-sense. I have been compiling a list of generic approaches that might be helpful down the line.

> Reading the latest research papers is truly the only way to know what the latest research is.

I've observed that often research papers get light on details of implementation just to not deviate from the core idea. While understanding the core idea helps, various new black-boxed techniques emerge in every paper (techniques which are cited in another paper itself). I've tried to prevent myself from being overwhelmed by keeping them as black-boxes for the sake of understanding the core idea, but when it comes to implementation, I feel the urge to understand those techniques intermediate techniques in detail which often put me on a longer path. Is this expected or should I adapt faster?
What about submodules or subtrees doesn't fit this use case?
I can't help but feel that Microsoft providing these security updates long past XP's stated EOL date will only decrease security in the long run. After all, if any "big enough" vulnerability results in getting a patch anyways, why upgrade/firewall that old XP system running your equipment? And I'd bet that people will expect the same treatment for Windows 7, too.

People never learn when disaster is narrowly averted. People learn when their decisions mean everything is on fire.
The flip side to the liver's amazing duties in the body is the catastrophic impact on health when it fails. A failed liver takes out basically every body system.

When the liver can't break down bilirubin, you get jaundice and itch all over.

When the liver becomes cirrhotic, blood can't move through it, increasing pressure in the portal vein and precipitating life-threatening bleeds in the stomach and esophagus. For an extra bonus, clotting factors are manufactured in the liver, so these bleeds can be uncontrolled.

The spleen enlarges and gobbles up white blood cells, compromising immunity.

Ammonia and other yet not fully understood toxins that the liver can't filter cross the blood-brain barrier and cause hepatic encephalopathy, ranging from brain fog to coma.

Liver disease is also tied to hepatorenal syndrome (kidney failure) and hepatopulmonary syndrome (lung damage), both of which can be sudden and fatal.

Ascites (retention of fluid) also accompanies cirrhosis, often requiring paracentesis, which in turn is correlated with sepsis that the compromised immune system can't fight (also often fatal).

Low Vitamin D in cirrhotic patients leads to osteoporosis, including vertebral fractures.

Inability to process protein leads to muscle wasting and weight loss, reducing strength and immunity.

And finally, cirrhosis is correlated with an increased risk of liver cancer.

The cure for any of these conditions? Transplant, if you're lucky and the other systems aren't too badly damaged. Everything else is just holding on.

And to get a transplant? You have to be sick enough and sufficiently close to death that you're eligible, but strong enough to survive major surgery. No insurance in the US? They won't even assess you.

A liver transplant saved my life three years ago. I've lived this list of symptoms. My debt to the universe is to educate when possible, to console when necessary.
Interest is what gives someone the motivation to learn and improve themselves.
If you get 1/10th of what you are owed, you will end up far better off than most creditors in bankruptcy cases.
I'm not saying the customer shouldn't be able to vote with their feet/wallet, but they should also be aware that code rots, and security vulnerabilities become more known as time goes on. I don't think criticizing an organization for sticking with ever older, ever more insecure software is necessarily wrong.

What makes this harder is that people bought into a platform that doesn't given them access to the code they run. The business that originally created it isn't interested in supporting it further (well, they are, i.e., "Windows 10", but I presume that that's not acceptable to our hypothetical "vote with there [sic] feet" person), and I don't really see that the business should be forced to support it, either. (It's not like MS didn't support it for quite a while, and don't still offer a solution.)

Software evolves. Ideally we're finding more secure and better ways of doing stuff, and shedding the old stuff, though I acknowledge the debatability of that. I acknowledge that it's also unfortunate that UI changes, and bloat, often seem tightly coupled with that. But if people also persist in choosing non-free, non-open source software…
It doesn't have to be about a female leader. It can be about a grand old company that has fallen on hard times and whose board ponies up big bux to attract a promising young CEO. Unfortunately the promising young CEO can't deliver a return to the glory days, so the second best is a carefully negotiated sale.
The functionality has been available on an opt-in basis for a while now, and I can confirm that it massively improves Firefox's performance and responsiveness. Whether it's "as snappy as Chrome" is a separate question; I've never found that browser as responsive as seems to be the general experience, so I can't really speak to the comparison, but I certainly can say that Firefox itself is much more comfortable to use with e10s enabled.
> There are many definitions of hacker and sniffing packets on your phone or attaching debuggers to apps on your phone are only one narrow definition of many.

The willingness to look under the hood or desire to at least be able to do so is a rather universal property of hackers.
That's great, thanks. I don't live in New York though, and I'd bet most people reading this don't. I wonder what the equivalent local regulators are.

Someone should make a list of all local regulatory agencies by location. List all places hat deal with average joes as well as how likely they are to respond to you and how often they win against companies.
I guess the modern part here is the use of the Origin header, but in all honestly this feels really flaky in comparison to using a CSRF token. I'd argue that SameSite cookies are a better 'modern' alternative than this (for a majority of use-cases), especially because of all the edge cases that have to be dealt with for this approach (Origin not being sent, falling back to Referers, policies for those...). It feels like a giant hack.

Also, I really don't get the relevance of the refutation of "Use only JSON APIs" - it's a fixed bug that seemingly only impacted Chrome anyway? The second point is that preflights are expensive, which might have some weight - but e.g. Twitch seem to cope okay with these preflights and I think a lot of browsers do cache them for a short period of time now anyway.

I'll be sticking to CSRF tokens plus SameSite cookies (for where the browser supports them). The only issue I can see with SameSite is that JS can still send requests (with no credentials), but I'm not convinced this is a credible DoS vector.
Solar Eclipse Simulator
> As expected, Marissa Mayer, who had been the CEO of Yahoo and recently received a $23 million ‘golden parachute’ for her work there.

Nice!

I dream of a day when the Engineers who make the Tech Company what it is, are also offered 'Golden Parachutes' as part of a Job Offer.
Can't edit my comment anymore, but good point.
Thanks for the read, @aonoma....something good for my commute home.
Selling that many coins could drop the price considerably, no?
Really surprised there wasn't already funding for this.

Numpy is an amazing library, and it's basically Python's "killer app." The fact that you can seamlessly blend numerical/data science computing with more general web applications is what makes Python great.
Not a bad thing. Just a personal preference of trying to separate views and view models for a long time. I believe it just needs some time to get used to it. As I said, I really do like declarative nature of JSX, knowing that it's just compiled to a regular JS/DOM code.
>Yep, we are using arrow functions and other ES2015+ goodies, but they don't help with event handlers.

They do. Just do:

myHandler = (v) => {
...
}

and you don't need to bind in the constructor anymore. You'll need to use Babel of course to transpile that.
We have government wide standards, they standardize on Microsoft's proprietary non-standard products.

Microsoft built this mess for profit, and continue to profit off of taxpayers indefinitely as hobbled state institutions are forced to pay permanent support contracts for old OSes because the states themselves mandated they use this shit by law. I'd love to see how many campaign contributions MS made to representatives pushing laws standardizing on Word or other bullshit MS only tech in state institutions and even worse, in schools.

Public education is infested with Microsoft giving away / heavily subsidizing their locked in products so children are hooked on them for life, and nobody is outraged about it.

Hell, the whole war for the classroom from all parties involved is disgusting. Microsoft, Apple, and Google all push free access to their proprietary services and products to lock kids into their ecosystems. And while Google's platform, Chromebooks, are much more open than their competitors, they offset that by also having the ulterior motive of farming these kids for their big data research (not to say MS and Apple aren't doing it too, just saying Google is far from innocent here).

The whole intersection of state and software globally is a giant mess of corruption. There is way too much profit to be made off taxpayers money for anything close to good intentions to win the day.
There's some stuff that is interesting in that the recommendations indicate what wasn't done. In addition to what jldugger pointed out, for example, they apparently were not doing any training for:

1. HR about how to handle complaints.

2. Managers about... well, anything? But particularly, they did not include any policies on harassment.

3. Employees in general for how to interview candidates.

EDIT: And reading through:

On harassment policies: "Human Resources
should emphasize the importance of adhering to the existing policies and codes of conduct for work events such as offsite conferences and meetings, including those held at hotels and resorts. It should not be necessary to draft separate policies for these events. Policies should be applied consistently throughout the organization. No special treatment should be given to any employee, regardless of level, tenure, or past performance." Seems to jibe pretty well with Fowler's story and others. EDIT 2: And they even emphasized it in a separate bullet point! "Policies and practices should be applied consistently throughout the organization. No special treatment should be given to any employee, regardless of level, tenure, or past performance."

On substances: "With respect to alcohol consumption at after-hours work events and at other work-sponsored events, Uber should consider limiting the budget available to managers for alcohol purchases, restrict reimbursement for
alcohol-related events, and include training for managers on appropriate events for retreats and out-of-work events."

That whole section on the internal transfer process ("Remove Transfer Barriers") speaks to a lot of issues Fowler brought up, e.g. "An individual evaluator can determine whether the employee is requesting a transfer for reasons relating to a difficult or divisive work environment, or if a supervisor is attempting to block a transfer for improper purposes."

Etc. etc.
Yes, class properties are the way to go.
For 2 weeks now I'm fighting an enormous amount of spam that start popping up from nowhere and I did trail-back in my memory to not find a single instance in last 3 months where I would give out my email address to anyone new.

Its insane how much of it goes to my direct mailbox right in front of my eyes! Some even have "viagra" word in subjects, they come from weird addresses like hJGabtmDwbaiaJUsgUNiepwwUzDUUdanBHFpiMEghzLKNsotQTbrhZdpDzCHFWatqQB@perico.hunmooth.com and open up with images and everything ready for my click.

I suspect Verizon is already working hard on break the remaining thing that worked fine until now - yahoo mailbox.

But I'm fine with that. I had it in my pipeline to move out of them for so long now another incentive to actually do so :)
From the stories I've heard I wouldn't be surprised if some were still on DOS. It's hard to develop in house with a tightly controlled budget and it's hard to outsource when you're dealing with sensitive data.
Kudos to Microsoft for doing this. Who else in the world is patching 16-year-old code well past it's EOL, for free?
Max Martin, Spotify’s Daniel Ek on Gender Equality: ‘Stop Talking, Start Doing’
Had a hard time finding a reference, but here is something (not exactly what I wrote, which I think was from either The Economist or Die Zeit, it's been a while):

"Writing in the journal Nature in June, Professor Euan Nisbet and Dr Mary Fowler of London University argued that the quantities of heavy metals in Brent Spar are minuscule compared with those found naturally in parts of our deep oceans. In so-called "black smokers", whole communities of highly specialised bacteria eke out their lives where the earth's crust vents huge amounts of superheated water and metals into the ocean depths. One estimate puts this discharge of metals worldwide at 700,000 to five million tonnes a year.

Dump the Brent Spar near such a vent, argues Professor Nisbet, and its impact could not even be measured. Its contents might even give the bacteria a free meal."

http://www.independent.co.uk/news/science/to-dump-or-not-to-...

Also, the amount of oil was much less than Greenpeace had stated, estimated at somewhere around 100 tons, rather than 5500 tons. And oil is something that bacteria do eat.

All the articles I could find essentially state that Shell's plan was scientifically valid and posed less environmental risk than disposal on land, but didn't "feel" right.

Another more detailed look: http://negotiationlab.co.uk/user_uploads/KSG%20Brent%20Spar....
How do you handle long lasting operations like checking something from time to time? Seems to me this is a natural use for a thread.
We have to weigh the potential risks against the potential benefits of a quick rollout and try to come to a balanced decision. If we see a problem from feedback from early installs, then we have a chance to quickly patch it and re-release, sometimes within one day. Staged rollout is fairly standard in the industry. (Speaking as a Firefox release manager)
Tell HN: All Quip and Evernote documents are stored unencrypted on their servers
I was surprised when a friend told me this recently, so I figured there may be a few other people on HN who'd like to know.

To HN: What motivation would they have for doing this? Particularly given Evernote's imperfect security record, seems to be an especially bad idea to store all notes in plain text. Can't imagine the chaos that would be caused by an Evernote or Quip hack.
That's definitely a valid consideration. I was more focusing on refuting OP's statement in implying machine learning is a black box because only a select few people are able to understand it due its complexity. I think I should have made that more clear in my original comment in order to avoid any confusion.
Yen value at the time of purchase? Does it get updated at any time? Surely 20 years old construction machines aren't worth as much now?
From https://en.wikipedia.org/wiki/List_of_longest-living_organis...,

> "Humongous Fungus", an individual of the fungal species Armillaria solidipes in the Malheur National Forest, is thought to be between 2,000 and 8,500 years old.[33][34] It is thought to be the world's largest organism by area, at 2,384 acres (965 hectares).

So it may be the oldest organism, but it also has the crown for largest.
Over here moose hunting is quite popular; to keep their moose hunting license every hunter needs to pass a test (every year, IIRC) that involves hitting a moving target.

Most hunters pass this test without much difficulty. Of course, on the range the distance is known (100m, IIRC), and the target moves at a constant and known speed, so one knows how much lead is needed. Still, AFAIU in the wild the results are decent.
Need is there, but tools are not.
I'd love to see how many campaign contributions MS made to representatives pushing laws standardizing on Word or other bullshit MS only tech in state institutions and even worse, in schools.

I keep hearing it will be the Year Of The Linux Desktop and it keeps never happening. That's why. No need for any wacky conspiracy theories, for the average user who just wants their computer to be a tool to get work done, the choices are Windows or Mac, and for large organisations who want to centrally manage machines, the choice is... Windows.
In case you're wondering how this release affects legacy (non-WebExtension) add-ons, and what the roadmap looks like until Firefox 57 fully disables legacy add-ons:
https://blog.mozilla.org/addons/2017/02/16/the-road-to-firef...
Liver - Latin for life. Doctors used to say, you are what you eat, how many have eaten a lb of Ox liver in a sitting?

Hint - Its better than Red Bull!
I wouldn't be surprised if some traffic-related agency was using Windows98, I've seen everything from supermarkets and grocery stores to banks and post offices using Windows98 here (Brazil).
In this context, you want ‘sow’, not ‘sew’.
DNA is probably your best bet for bottom up approach.

Its surprisingly difficult data to find and the rate probably varies a lot, but wikipedia claims:

"The human germline mutation rate is approximately 0.5×10−9 per basepair per year"

My RAID array does better, polaroid pictures somewhat worse, etc.

A bit error rate of 1e-9/yr is something that can be worked around over a lifespan but probably not over a million years.

https://en.wikipedia.org/wiki/Mutation_rate
> I didn't find anything in the original blog post in the tone of a "complaint". If anything, they were merely pointing out what kind of things they run into and their thoughts, while transitioning from an ASP.NET background.

Yes, exactly this! There's nothing to hate really. It's more of a complaint against our inability to quickly grasp new concepts than trying to throw some stones over to React.
It's a standard "motte and bailey" argument [1]. What you're saying is the reasonable argument that anti-gun folks fall back to. But for many of them, they're always reaching for the whole enchilada. For example, although the Brady Campaign is only pushing for strong background checks at this stage, we know that their ultimate goal is an outright ban.

[1] http://slatestarcodex.com/2014/11/03/all-in-all-another-bric...
"Inner Scalia" was a joke because you're reading too much into what I said and Scalia was, famously, a staunch textualist.

And your straw man is this: "Your comment reads as if you have little understanding of how women are treated in our culture."
"An act to grind" sounds so playful!
But normally it's "an axe to grind"...a little more sinister twist to it.
We enacted Glass–Steagal specifically for reasons like this correct?

I can't believe I didn't see this sooner. I wonder if Coinbase will have to divest GDAX once regulation catches up.
Sad part is that there will still be owners of WinXP who won't patch their systems.
For what it's worth I've mostly lived in moderately poor communities in the Midwest. Not grindingly poor, but not on the right side of various median measures.

Somehow I haven't been in any situations where a gun seemed like it would have helped (and there aren't such stories flying around my extended family either).
IoT gateway options and best practices