skysight-inc/HackerNews huggingface dataset:
I think that languages like Go are objectively speaking in much better position to release 2.0 or 3.0 updates because we have the example of Python 3 and have some pointers what not to do.

I think even major (=with source-level breaking changes) version bumps are feasible specifically with compiled languages. This is because you can still continue to support the both versions of the language in the compiler, and if you are careful with semantic changes, you can support linking packages of two different versions together.

Additionally, if you start designing breaking changes from the start with the mentality that an automatic tool should be able to upgrade the code base, that eases up the migration a lot. (There is 2to3 with Python, but that didn't always work, which to me means that the language changes weren't exiplicitly designed to be automatically upgradable.)

Btw. I wrote this thinking that a major version bump means source-level incompatibilities – but it's possible, although challenging, to introduce major new features even without.
To your first point: Yes, I wish we knew more.

To your second point: Quite a timely comment!

I released the results of a ~660 person study on MDMA tolerance/'loss of magic' this morning - as far as I'm aware, this is the first study of this kind.

https://rollsafe.org/mdma-magic/

If you have constructive criticism, that's always appreciated, or if you just like it and find it useful, that's nice too.
Can fashion actually be separated from advertising at this point?
One of those groups has the funding and experience to create malware that finds its way into 150000 computers. This group already monitors billions of other devices.

The other is an isolated nation that's decades behind on technology, only recently building weapons that can compete on a global scale, and struggles to feed its starving population.

It wouldn't be the first or even hundredth time that the US gov did something shady and pinned it on an enemy. It's less about the money and more about justifying their expanding powers.
It's trivial to exchange Bitcoins anonymously to cash almost anywhere in the world.
I find it hard to take a post that accuses someone of engaging in an unwarranted "vendetta" and smear campaign that includes the unsupported hearsay alleging the perpetrator has a bad reputation and is an "arrogant dude" very seriously. It's hard to take the high road when you're digging your own set of tunnels.
> I know people who have worked with Terrone. His reputation is not so great either, he is an arrogant dude.

I used to watch the adafruit streams and youtube videos. You can definitely get a sense for this in those videos. I quit watching their stuff b/c he just rubbed me the wrong way with how he interacts with the community.
Android Kotlin – RxJava Intro
US, Russia, and China have ballistic missiles capable of destroying all the cities you mentioned and some more. And what are you going to do about them?

All this talk of "North Korea may have missiles that can hit us!" is getting tiresome and, frankly, worrisome. The only reason people talk about North Korea and, say, not Russia is that the US can preemptively attack North Korea and they can do nothing about it.

Everywhere you live, your place can be incinerated in 30 minutes if one or another national leader decides to push the red button. And it has been like that for ~50 years. Deal with it, and if anybody feels extra warlike and feels like they have to invade yet another country to save the civilized world from WMDs, remember Iraq.
Will you be putting this on the mac store?
Ask HN: What if one day the Bitcoin rigs start to be used to crack the wallets?
In other words, you believe states should have the right to allow children to work in factories, with no worker protections. The total lack of moral sense in right-libertarianism never ceases to amaze me.
Mixing $140,000 in Bitcoin would be trivial.

For example, bitmixer.io holds ~1000 BTC reserve for mixing, which is currently worth ~$2.5 million. So ~60 BTC could be safely mixed over a few days.

Decent mixers:

bitmixer.io (bitmixer2whesjgj.onion)

Bitcoin Fog (foggedddxlunnaaa.onion)

Helix (grams7enufi7jmdl.onion/helix/light)

I'm not aware that exchanges have blacklisted any mixers. There has been talk of blacklisting stolen Bitcoin, but I don't believe that's been done either.
If the universe simulator can solve iterative problems in O(1), then I question whether our concept of optimization is meaningful enough to it for this discussion to make sense.
It's bullshit. Such measures do not exist at any significant scale.
It's not weird, I'm right there with you. I love this stuff.
I was in a situation like this at some point. I wrote the following blog post from a now deleted blog:

"You only need one

Flash back to early 2008, it was the end of my first interview after deciding to move on from my first start up, www.virtualstocktrading.com. I was fairly demoralized from what I had perceived as the failure of my first start-up(looking back I was actually ramen noodles profitable-- I wasn‘t aware of the terminology at the time) so much so that I express my disappointment in how it turned out in the interview. The interviewer said to me “You only need one to succeed”, and a smile crept across my face at a time when smiles rarely came naturally.

I smiled because this is exactly something I would have said if it wasn’t my start-up, and the statement is true. That statement is why I'm here trying again at my third attempt at creating a start-up, timeline-x.com [The second was pock.it, shout out to Odi, Tom and Mike]. My hope is one of these start-ups will shoot the moon.

The statement provided some much needed perspective; that in fact, I hadn't fail, only made my first try. I mentally glance over stuff I had learnt, the code base I had built and the contacts I had made. No VirtualStockTrading.com wasn't a failure it was a setup for the rest start-ups to come[Used some of my code in pock.it].

Hope if these words meet you in despair, they would do the same for you as it did me: “You only need one!”"
What does Signal do for link previews? Nothing at all?
This link does not mention f-strings, the feature in question.

The answer is there are 3 ways to format a string: %, .format, and f-strings.
Channel 10's demise reflects an industry 'splintering' under the digital age
+1 org-mode.

When it is something right on the spot then I will either do a voice recording on the phone, or a quick note on scrap paper. I will get it into org-mode later.

I also have all phone recordings synced to laptop via syncthing, so even if I don't transcribe, at least it is kept somewhere safe for later.
Keeping PagerDuty Secure
Developer Survey Results 2017
> So, a cyclist breaks a minor law, which is that they use the sidewalk at a red light, so it is _okay_ to hit a _200 pound cyclist_ with a _2 ton metal object_?

Didn't say that.
It is a guarantee---or else it's a bug (which is the same as every other safe foundation). A type T gets to be `Sync` in one of two ways:

1. It is "auto derived" when all of its constituent types are Sync.

2. It is explicitly implemented using `unsafe impl Sync for T {}`. Note the use of the `unsafe` keyword.
Hmm. Is there some specific case law relevant here? I'm having trouble buying into the idea that an agreement can be unilaterally rescinded and the law doesn't care.

If I agree that my neighbor can have 5 feet on my side of the property line in perpetuity and put the offer in writing, I can simply change my mind later and take it back?
I'd venture to say #3 has no love lost for N Korea so highly doubt #3 would look kindly at aiding and abetting N Korea. #2 is rather frustrated with the DPRK regime and have tightened commerce with the regime.
The idea that the entire news world is a cabal set out to disinform you is narcissism wrapped in a tech narrative.

There are a plurality of actors, each with their own motivations and biases, and it's your responsibility to be aware of that and sort through them.

Parent's point is that "advertising companies being preferentially treated" and "a demonstrably false article" are not even in the same ballpark.

Assertions to the contrary lead down the path of "well, we should just ignore all news", which is suspicious in its own right (and one of the first steps in deconstructing a fact-based civil society).
https://www.austintexas.gov/sites/default/files/files/Public...
I'm liable to believe The Grugq, Marc Rogers and Peter Singer [0].

I've never heard of novetta before, and have no particular reason to doubt them, but I will say that this looks more like promotional material than anything else.

[0] http://gawker.com/a-lot-of-smart-people-think-north-korea-di...
Not sure ~$150k in Bitcoin is that interesting to the DPRK.
Sell them on one of the Chinese exchanges for yuan and physically carry it over the border to NK.
> I can kill people now when they frustrate me?

Not what I said.
I moved to kubuntu LTS and zfsonlinux ( have a couple btrfs volumes too) after iXsystems provided me with absolutely the worst service possible on my appliance I bought from them. I got tired of restrictiveness of the platform, lack of features etc. I used unraid for a little while instead of freenas and aside from being btrfs only i found it was much much nicer to use. I really love being able to make good use of kvm on Linux now too.

Edit: forgot to mention how I absolutely hated how brittle the upgrade process of some of the plug-ins was too!
Looks like robertk wrote `lockbox` specifically to solve this.

Dependency management still sucks in R. Too many options, each a little different: Packrat, checkpoint, now lockbox. I have friends using Docker specifically to encapsulate their R package dependencies, too.
D3 V4 Data Join Scenario 2
Go 2.x is not much more than a collection of thoughts, improvements, and opportunities that could come about with breaking backwards compatibility. No real work, to my knowledge, is even planned for it.
>In its blog post, Kaspersky acknowledged that the repetition of the code could be a "false flag" meant to mislead investigators and pin the attack on North Korea. After all, the WannaCry authors cribbed techniques from the NSA as well. The ransomware leverages an NSA exploit known as EternalBlue that a hacker group known as Shadow Brokers made public last month.

>Kaspersky called that false flag scenario "possible" but "improbable."

This is more a standard disclaimer of any intelligence analyst than a serious qualification in this case. When trying to attribute something that allows easy copycats, an investigator will obviously constantly be thinking "is this clue genuine or intentionally placed to suggest a different origin"? And without an incredible amount of evidence, it's hard to definitively say certain malware or tools were written or used by a particular entity.
What would a "hard link" be? A signed confession from the head of the DPRK military? Under the circumstances, barring classified intelligence (like the NSA may have), we are as sure as we can be.
My colleagues have developed a "spitting noise" ritual after any utterance of the word "Arduino" (<hock> ptui). As embedded developers attempting to teach others, they're not enamored of Arduino's burgeoning, and dominant, market of "people who want to do embedded development but not learn anything about embedded development" sucking up all the oxygen. I know, that's an oversimplification, but not as much of one as I could wish.

I don't want to wish anyone ill, but the emergence and success of competitors that don't go so far out of the way to hide the complexity (and the need for good practice) of working with embedded systems and SBCs, wouldn't be such a bad addition to the ecosystem.

(As one of two developers who actually fool around with Arduinos and Pis a fair bit (although I detest the Arduino dev environment and 'sketches'), I'm tired of all the vandalism and graffiti in my cubicle, TBH).
Who do you believe conducted the original attack?
True, I overlooked that. Thanks for taking the time to point that out :)
How to Be an Expert YouTube Marketer
Good faith is only what you perceive it to be?
Hell, you don't even need to carry it over: anything you want to use the money to purchase is going to be in China anyway.
yes, you can. a psychedelic trip will be different every time but you can very definitely control your mindset and physical setting to make sure your experience is safe and you are free to explore whatever experience comes to you on your own terms.
Senators Ask FCC to Prevent Rise of 'Ringless Voicemail' Spam
The NSA has always been a mix of offense and defense.

You can argue that balance has tilted inappropriately in recent times (I do), but that's different from any sort of indication they'd misattribute something like this.
> It exists solely to influence the behaviour of a third party not involved in the transaction.

And? So are speeches, and HN comments. As long as it isn't fraudulent, I don't see where the aggression/externality comes into play.

Similarly, just because someone put up a building you don't like to look at on property that wasn't yours does NOT entitle you to reparations (or the building owner to taxes for the corresponding 'externality'), because in a practical society, it is ridiculous to claim that you were harmed.
You probably despise a lot of popular Haskell libraries.
Services are also part of GDP. If I pay you to sing, that's part of GDP.
George Washington had his oil changed there!
In this case a line graph is bad because the line doesn't mean anything. It implies an extrapolation that doesn't actually exist.
> Why wouldn't it check all of them?

If I request a certificate for "* .github.com", how do you propose that Let's Encrypt check all of the infinitely-many possible subdomains?

> Why would requesting a wildcard for a subdomain (i.e. pas.github.com) give me a cert that works for the root domain (i.e. github.com)?

The issue here is that it's only safe to issue a wildcard certificate to someone who already has full control over all of the domains covered by the wildcard, now and in the future. This is impossible to prove using only an HTTP challenge-response.

For example, let's say an attacker requests a wildcard certificate for "* .github.io". Hypothetically, LE could say: "OK, to prove that you control all possible subdomains, place a particular nonce at http://e9cd20b9c359939c.github.io/.well-known/acme-challenge... Our attacker quickly registers the username "e9cd20b9c359939c" on Github, satisfies the challenge, and gets a cert that allows them to impersonate other Github users.

Alternatively, you could require validation of "github.io" itself, and say that anyone with control over the top-level domain is assumed to be authorized to get wildcard certs as well. But this weakens security for everyone else. For example, Google probably wouldn't be happy if a compromise of their search engine at "google.com" was escalated to a compromise of "accounts.google.com" which handles user sign-in.

These aren't fundamentally unsolvable problems, but there are enough edge cases that the ACME folks decided to postpone wildcards until all the details can be carefully figured out. See https://github.com/letsencrypt/acme-spec/pull/97 for some of the messy details.
Try to maneuver him to where there's a whiteboard and write things down as he's talking through them: if he's reading cues, he'll slow down so that your visible note-taking keeps pace.

If that doesn't work, get him a rubber ducky [] and tell him to go talk to it if he's not willing to compromise on communication styles.

[] https://en.wikipedia.org/wiki/Rubber_duck_debugging
How is this a "smear campaign"? He privately contacted someone who lied to tell them to stop lying, and in response, they lied again about whether they'd correct it. Only then did he go to the media.

Is lying good now, and pointing out liars bad? Can you explain this newfangled morality?
WebExtensions in Firefox 55
Lighting! I can't stress that enough. A simple ring light works wonders for your image.
Your editing is decent, you have plenty of energy. Light!
Also works well to clean hair, for shaving, and even to clean your teeth. (Yes, they also make toothpaste, but a drop of the soap can be used as toothpaste directly. Obviously you miss out on the fluoride found on most toothpastes, but it works well otherwise.)
> Who exactly is pro-North Korea that the US is trying to sway?

Perhaps China.

However, propaganda doesn't have to be false. It just has to fit the narrative.

Hmm. This could even be an attack on bitcoin itself? We already know North Korea is bad, then North Korea uses bitcoin, therefore bitcoin = bad?

In this case, there would be a motive to plant a false attribution to North Korea.
The purpose of idioms is to have common vocabulary that everyone can understand easily when you read it.

The downside is that you do have to recognize those idioms in the first place.
You should consider putting the JS in an iframe using srcdoc so that you can sandbox it from XSS attacks.
For what it's worth, I made the same mistake and have since discovered that ZFS on Linux is a smooth experience. Raided a pair of SSDs and now enjoy a (single) real command line and native docker containers.
Being an introvert isn't an excuse for poor communication. Regardless of its cause, poor communication is bad in a work environment, and it makes sense for interviews to select against it.
Oh, it's badly flawed enough that it's visible without testing. The way some TLS libraries are implementing it---fusing the early data with the regular stream---is a recipe for Triple Handshake style bugs.

What's going to be interesting about broad rollout of 1.3 without 0RTT is the effect of middle boxes and other crud trying to parse streams as they forward.
Holy shit this is nuts. This is clearly a course on how to create propaganda. The saddest part of this are the many out there who will emerge from a course like this thinking they are some sort of moral crusader doing good not realizing they are everything they claim to despise.
I understand your point, but there is a good middle ground for people. As a software developer, I was amazed the first time I connected a LED to the RPi's GPIOs and made it blink with software. From that, I moved to an Arduino, with its Lego style shields, and to an ESP8266 and my own PCBs.

I don't think the Arduino is just for people who don't want to learn anything about embedded. Those people exist, but it's good that they can do stuff with hardware without learning. The people who do want to learn, will learn faster with the Arduino ecosystem than without it.

That said, the Dev environment sucks, PlatformIO all the way.
In addition, a static typed language allows you to find most breaking changes at compile time. The bytes/str situation would easy to fix in golang, instead of exploding at runtime now and then as in Python3.
Does anybody know what significant changes were made in this draft, compared to the version that was previously implemented by Let's Encrypt?
I'm not convinced the $150K+ salary figures I see sniffed at on HN as "bare minimums" are quite as common even in SF/NY/etc. as people imagine they are. Startups and (some) "star name" tech companies in those areas hit those figures, but even today I still see more technical jobs than one might imagine in the $80-120K range. I'm aware a lot of software engineers insist that when they're only making $140K they're underpaid given all the Amazing Stupendous Value™ they bring to their companies, but I have some doubts about how sustainable such figures are going to be at most employers as the VC markets tighten (which is definitely happening now).
Right, but my question isn't about T itself, but rather how it's published to another thread. The example I gave is of a plain struct with no atomics or any other synchronization types internally. A &T is auto-derived to be Sync. But, if a publisher incorrectly publishes this reference, the other thread may see a partially initialized value.
https://www.inc.com/cody-steve/yahoo-logo-redesign-marissa-m...
Try PlatformIO instead, it's much, much better.
Top 3 CD/DVD Burners
> And this is based on what, exactly ?

The NSA developed the exploits that WannaCry was based on. The NSA lost control of its weapon (EternalBlue) in the Shadow Brokers leak and the world suffered economic damage as a consequence.

The NSA doesn't seem interested in switching to a more defensive role where they will inform software makers of the security problems they find. Instead they seem intent on maintaining offensive capability by seeking out, cataloging, exploiting, weaponizing, and keeping silent about the software security flaws they discover.
Nobody in their right mind would support 3-8 unit apartments going up next door.

Those type of buildings are not very profitable to build now with modern building requirements like ADA. Once the economy goes south, the rent and quality of tenant will plunge.

Real estate is always boom-bust. Having a conservative outlook about building is pragmatic.
Show HN: A takeaway of E3 2017 in 12 epic gaming GIFs
It also gets an Environmental Working Group score of zero, making it probably the best cosmetic product on the market of any type.
Won't interest rates be low if everyone is saving?

Won't there be more investible cash because a lower percentage of one's wages is devoted to commodities, and essentials? As well, there is less of an incentive to stockpile or "get ahead" of future price increases.

So.. more left over to invest?

Does expectation of future flat or lower prices give you confidence to plan a vacation, invest extra money, etc.. or would you prefer to worry about food, gas, and other prices going up in the future? (along with your sticky wages making your real wage go down)

In fact, I 100% agree that savings and investment are key to future growth, technology and the whole enchilada. Which is why I don't support stealth tax of inflation, or of governments debasing the currency and stealing wealth from citizens.
Why go on people's word when the evidence is right there! There were public keys used for encryption in the Sony hacks that were reused from other attacks years before.

Also, Operation Blockbuster was a joint action, taken on by Novetta, Kaspersky Lab, Symantec, and others
generally don't want to use RWMutex unless you can help it; the performance is much worse than the regular sync.Mutex
I think the counter point of this is being kind when people report bugs that aren't bugs.

If users encounter a weird result, report it, and have someone call them an idiot because they misunderstood a nuance of the system... they're​ probably not going to take the time to report next time around.

(And I get it, there's that common issue that people consistently misunderstand and you continually get reports about. But each one of those users might also be a user who finds a real bug next time.)
Oh wow. No wonder my mom switched from trying linux back to windows after I tried to tell her "you can just use gimp for basic Photoshop stuff"

It doesn't even have a circle tool and the best "solution" seems to be ellipse select with shift -> fill -> shrink selection -> delete

What a dystopian ux nightmare.

Sorry Mom, for inadvertently inflicting gimp on you.
Our sun can't come close to the temperature reached in advanced fusion weapons, and it exhibits the power density of a compost pile.

8/10