skysight-inc/HackerNews huggingface dataset:
True. But from my own experience I get the impression most engineers are ignorant in this regard rather than malicious. Though I'm happy (or not..) to see evidence to the contrary.

We all enable it, I'm not sure the awareness of the full affect is there though.
The title seems a bit strange to me:

"without JVM" - providing what is necessary to run Java is a JVM in my book. That you compile Java to JavaScipt is just an implementation detail, isn't it? EDIT: Yeah, ok. It emphasises that you don't need an extra JVM on your computer.

"fully client side" - isn't that how Java Applets always have been executed?

"no plugins" - Not sure what you mean by "plugin". Installing an extension does not match that?

Hmm.. ok, ok I am nitpicking :)

Could you instead provide a bookmarklet that runs Java Applets on websites? That would be something I would use. I would not install an extension because I don't want your code to run outside of the browser sandbox.
Intel treats TDP numbers as more of a vague classification than an actual indication of power consumption. "140W" is basically code for "tons of power".

In PCPerspectives i9-7900X review you can see it uses significantly more power than the i7-6950X despite them both ostensibly being 140W parts.

https://www.pcper.com/reviews/Processors/Intel-Core-i9-7900X...
Context. The subject is in the comment above the one you quoted. Conversations diverge and reconvene, it's how they work.
I tried doing that a few years ago, random password constraints made it highly impractical.

And if you end up using a database for storing your nonces and hashing schemes you'll end up with the same limitations and attack vectors the parent was complaining about.
Here's why someone may disagree:

Your company has hammers and screw drivers as your tools. If your employees only know how to use hammers, they are going to hammer screws. If your team only knows how to use screw drivers, they will shrug at nails. Hence, the tool is not always at fault for end user error.

Learning how and when it is appropriate to use the tools at hand is important.
> already known information.

No. Records released include "names, dates of birth, home addresses, phone numbers, and voter registration details, as well as data described as “modeled” voter ethnicities and religions." [0]

Dates of Birth, Phone Numbers, Email Addresses are not public information. [1] [2]

[0] OP

[1] http://www.michigan.gov/sos/0,4670,7-127-29836-88651--F,00.h...

[2] http://www.sos.state.co.us/pubs/elections/FAQs/GeneralRegist...
HEADLINE: Finalise LXD support

DESCRIPTION:
It would be great if Debian finished its LXD (container hypervisor)
packaging and got it up to a decently complete level (per Ubuntu).

https://wiki.debian.org/LXD
People with no background in programming, maths or engineering might treat the vertical bars as mere embellishments and read it as a racist slogan.
These demos allow you to test this tech without installing an extension:

http://www.leaningtech.com/cheerpj/demos/

It's kinda fun to see Swing again...
Seems the extension converts Java to JavaScript before executing anything, that's why it gets by without a JVM.
You won’t be able to use a Surface Book if you want to take the bar in Tennessee
> I don't even really use Arel in ActiveRecord. I just write raw SQL that serves JSON directly back. I made it easier for me to organize SQL in partials just like views and to injects variables and conditions into my SQL.

This seems misguided. Arel is already very much like a library for partials for SQL that allows composition and takes care of tedious but important concerns like injection safety.

> All these kids want to do a bunch of busy work and for no good reason.

That's what your SQL-partials system sounds like to me! Different strokes for different folks.
certainly not you cowards.

you're all idiots.
I'd like to hire you as my lawyer to review my contracts. Lawyers need good reading skills. Can you please read this fax to me and tell me what it's about?

I'm looking for someone to cut my hair. Can you tell me how many hairs are in a typical human head? Can you show me how you hold a scissors? I'm only looking for people with the best scissors skills.

Oh, you're here to fix my microwave? Great. Before we start though, can you show me the contents of your toolbox? I want to make sure you are familiar with all the latest brands of screwdrivers and wrenches. Come over to this whiteboard and draw a typical microwave, labeling the major parts.
Thanks for the suggestion, but it doesn't seem to support anything other than line charts, which is too limited for our needs.
Streaming sports startup FuboTV raises $55M
"The heart rate monitor is not even close" sounds like a defective unit. Open a case at https://help.fitbit.com/
I've been aching for a solution to run Webex on current browsers on Linux. Sadly, this doesn't appear to do the trick.
> a ton of unpaid work for companies they're applying to

Okay, that's a logistical objection to work-sample tests, which is easily rebutted with, "Simply don't assign _a ton_ of unpaid work" to your candidates.

The process we use for hiring software developers at my current employer:

1. Clone this git repository.
2. Build a trivial feature (e.g. adding a search feature to an
existing blog platform).
3. Send a patch or pull request.

Everyone who's being considered gets the same task, and we base our decision off of several factors: Did they implement a working solution? How much new code did they need to create (knowing that the framework does 99% of this already, and is documented)? If so, did they write unit-testable code? Did they write unit tests? Did they find any of the intentional vulnerabilities?

It should, realistically, take most people 2-3 hours at most to complete this task successfully. If they're familiar with PHP development, probably 15-20 minutes. Furthermore, it can be completed at their leisure.

If that seems unreasonable, contrast it with the cost of taking a day off work to get dressed up and perform an in-person interview during business hours with complete strangers who are scrutinizing you for fitness, with a very high chance of not getting accepted.

The burden of work-sample tests shouldn't be on candidates; the burden should lie with the company to ensure they're collecting objective facts about candidates rather than making subjective decisions.
> With software... when you write a program, the program is done. Most of your labor goes into R&D...

Not by a long shot! The vast majority of the lifetime cost of software is in the maintenance (daily operations, upgrades, new features, bug fixes, integrations, rewrites, etc).
"Our unique Java-to-JavaScript technology converts Java to JavaScript on the fly directly on the browser."

Seems like a transpiler. But it would have to be a half-baked JVM written in JavaScript under the hood.
Regarding Go, what matters is that you read/write []byte and transform it to string explicitly.

> in the real world you get all kinds of broken encoded data

> String#encode most of the time is enough but as a last resort, String#force_encoding is there to use.

When your byte arrays and strings get passed around your code soon you don't have a way to validate which one is safe and which is not, which one is a byte array and which is a string.

The thing is not about content, it's about communication and contracts. #force_encoding should not be available on a string, and #encode should not be available on a byte array. If you receive something that may be broken, it should be received into a byte array (b"" in python, []byte in Go), then "cross the gate" to be a string, and that moment is where you eventually perform sanitisation (u"" in python, string in Go). From then on a consumer of your string will be able to assume its content and its declared encoding match.

> I'm a bit surprised that you mention Go [...] This is exactly the same behavior as in Ruby.

Indeed, but you have two types to use and discriminate against, with assorted funcs corresponding to each level of abstraction.

From the Go doc [0]:

> It's important to state right up front that a string holds arbitrary bytes. It is not required to hold Unicode text, UTF-8 text, or any other predefined format. As far as the content of a string is concerned, it is exactly equivalent to a slice of bytes.

I am definitely not concerned about what is in a string. I am concerned about distinguishing between "I just read that bunch of data from somewhere and I'm not yet sure what it is" vs "Ok, that data has been through some earlier process that took guarantees as to what format I expect it to be in". Different abstraction levels. Where Go gets it right is that io.Reader/Writer reads/writes []byte, not string. So you're explicitly acting on your own responsibility when you do:

var b = []byte{0xA4}
var s = string(b)
foo.IExpectSomeSpecificEncoding(s)

So, when to insert a sanity check becomes obvious, as well as relying on the static type system/method dispatch to check things around for you becomes incredibly useful. and foo.IExpectSomeSpecificEncoding can then use the string as an opaque container.

[0]: https://blog.golang.org/strings
What Is URL? How It Works? – SuratNow
The last company I worked for had an IBM fanboy as CEO who wanted to do all internal communication with IBM tools. Domino, Notes, Sametime.

I think these were the worst tools I ever had to use in my whole career. Even after they rewrote the UI with Eclipse later.
Documents for communication? Seems clunky at best.
Silicon Valley could be next target for nationalism
The description provides some clarity (can't fit everything in a title!)

"without JVM" means you don't need a "standalone" client-side JVM install (outside of this extension).

"fully client side" means it's not doing something like "execution on a server, streamed video to the client"

and "no plugins" means it doesn't require a "chrome plugin". In chrome plugins != extensions. Flash and java were plugins, extensions are written in JS.
From the description, it sounds like perhaps they transpile Java Bytecode to Javascript?

> Based on CheerpJ, a solution to convert Java applications to JavaScript, the Applet Viewer extension compiles the Java applet on the fly, without relying on any remote server.
Doesnt this just mean it never received the exit call
The solution to ignorance is education.

Even if someone refuses to learn, educate everyone around them and let social pressure either break their stubbornness or isolate them.
Does sound strange at a glance, but I think these are implicit references to what we traditionally know about applets: they generally required the full JRE JVM install/plugin.

So, it's advertising that this is no longer required, and that they haven't achieved it with any server-side tricks.
No, actually only stating truly paranoid people would not use a 3rd party password manager. Else you still have somewhat trust in third parties, making you not paranoid.

Your reply however... stamps paranoid label on it :)
How would you, or would you at all, work with me, as a candidate, if I had a particular distaste for solving puzzley type problems? Note that I'm not saying I wouldn't try during an interview, but my distaste for puzzles may inhibit my successfully completing the assignment regardless of my programming abilities.
The 7740X retaining dominance in browser-oriented tests demonstrates the continued bottleneck we suffer due to the "single-threaded" (or nominally single-threaded) predilection of web browsers, the DOM, and JavaScript. Servo and other concurrency-oriented innovations are going to be very welcome when they arrive in earnest.
+1 vhdl is much harder to reason about than c. With fpgas you don't write a code flow, instead you write logic that gets executed all at the same time.

It's good for things that are compute heavy, but not for anything else.

I'd also wager that asics might make more sense than fpgas. Which seems to be the path we are going down
In the future, the right to anonymity is a right that will become worth fighting for.
No, Intel classifies TDP as the instantaneous maximum power draw, AMD classifies it as the average maximum draw over a period of 1M.
> You are 2 clicks away from the applets you need or you love.

lol, so they're mutually exclusive?
"no plugins" probably means that the extension doesn't install native code, but is written in JavaScript that's run in the browser.
I completely agree, and it's the very reason social media holds no interest for me anymore. I think people have forgotten what it used to be like on Myspace and the early days of Facebook. Social media was about self expression and finding out where the party is, now it's a finely tuned marketing platform for grandmothers.
I'd be quite surprised to see metrics that show an increase in spend on Health Care and Education. I would imagine it was always a spend.

I may be an outlier, but most of the "rich" individuals I know are very humble and in fact not likely to flaunt. Most you wouldn't know were multi-millionaires ($25+).
SEEKING WORK – Poland REMOTE
I am a Python neural machine translation (NMT) consultant who specializes in Russian, Polish, and Carpatho-Rusyn (Lemko). I would be glad to help you. Send me an email or call me here: pgleasonjr+office@gmail.com, +48 514 544 297

Linkedin: https://www.linkedin.com/in/pgleasonjr/
Take a look at the Channel List under Preferences -> Advanced to only show unreads, then combine that with individually muted channels. That's how I have most channels set up so I can passively aware of activity with badges.
Did anyone else read PoC as point of control? The IT seems to be draining out of my immediate mindset.

edit: added link to what I thought PoC was in this context: https://marketdelta.com/how-to-plot-and-trade-naked-pocs-poi...
Regardless of current issues, I figure that in 30 years everybody will have access to AIs capable of trawling the internet and correlating all my online identities. At least barring things like nuclear war, global draconian censorship, etc. I've taken to just using my real name in most places online to remind me of this. If I'd created this HN account a few years later I'd be AndrewClough rather than Symmetry.
To me, that doesn't make much sense; the whole point of a smartwatch seems to be making the reading of notifications more efficient and unobtrusive. If you disable all except the rare urgent ones, what's the point of the smartwatch?
Stop committing TODOs
can't wait to try running Runescape with this and watch my CPU explode.
It may seem like a little thing, but you have to be very careful while typing not to accidentally press Enter. I've found this to be surprisingly difficult, and it makes typing a lot more stressful.
Yes, from the FAQ: "The CheerpJ compiler, based on LLVM/Clang, as well as on parts of Cheerp, converts Java bytecode into JavaScript, without requiring the Java source. CheerpJ can be invoked on whole Java archives (.jar) or on single .class files, and generates a .jar.js (or .js) output. "

We've seen this plenty with GWT and the likes, but this one is self-hosted in the browser to support dynamic class loading. As with Emscripten, the real struggle is the stdlib, not the translation. As an alternative, I would recommend people look at TeaVM[0].

0 - https://github.com/konsoletyper/teavm
nonces and hashing schemes are not very sensitive information though. The nonce does not make the HMAC more predictible in any way
Looks like we're back to P4-style levels of power use. Not sure how I feel about consumer chips running 150 watts on the regular. That's a lot more carbon in the atmosphere for questionable reasons.

https://www.pcper.com/reviews/Processors/Intel-Core-i9-7900X...

Incredibly, the 7900X is hitting 240 watts. When was the last time we had a chip that burned that much energy? Granted, its destined for the server room, but a 2U quad CPU box will be hitting 1000 watts on CPU usage alone at 100% utilization. That's close to a medium-sized window AC unit.
first CheerpJ demo will download of approximately 25 MB. !!
He is still alive...and apparently has done quite well for himself... http://www.cnn.com/2017/06/19/politics/trump-investigation/i...
HoFs are not array comprehensions and array comprehensions aren't supported in ES6.

https://gist.github.com/sleepyfox/1879845

https://developer.mozilla.org/en-US/docs/Web/JavaScript/Refe...
retro video gaming thats where its at. Play games, make videos about games. Talk about the technical behind games.
I store the settings. It's either in the shell history or I just remember it. There are few services, notably online banking websites, that impose such requirements: ironically they are reducing the strength of my password scheme.

I use this tool to generate the passwords: http://hackage.haskell.org/package/scat
Cool, I hadn't seen that! bulk-decaffeinate is a wrapper around decaffeinate, jscodeshift, and eslint with a similar goal. And I've certainly thought about incorporating lebab and/or prettier there as well.

https://github.com/decaffeinate/bulk-decaffeinate
Funny. Just posted about Swing yesterday and, in particular, as a solution to what current JS frameworks are trying to achieve:

https://news.ycombinator.com/item?id=14581407

I'm not advocating traditional applets, but the Swing paradigm is actually near-perfect for the job.
I have never heard of react vs respond. I wonder if you could explain a bit of what it means?
> Any API that AWS ES exposes has to be there forever, clearly pending_tasks had some risk of leaking internal implementation details that either couldn't be exposed, or that they didn't want customers building a dependency on.

If this is a reality of using cloud based ES then clearly it's something to seriously consider before using it - which is all the author is saying. The article is titled 'things to consider' not 'things AWS needs to fix'.

ES is big complex beast of a Java app. This is good advice regardless from someone who has used both approaches (self hosted vs AWS) in production.

I did not get the impress that he's saying that AWS can resolve this easily.
The only, and still unmatched, advantage of using applets was having access to external devices, such as smart card readers, in order to be used with eID, for example.
This is not possible with this plugin. The only interest would be for some old applets you don't have sources anymore and aren't techie enough to use a decompiler to retrieve some codebase to work with.
Isn't this basically what LessPass (https://lesspass.com/) does?
> Article is a bit naive about what it takes to run a shared service.

This is a bad assumption. Loggly is a shared service.

> Any API that AWS ES exposes has to be there forever

This a bad assumption. No API is forever. Maybe you meant a different timescale. AWS has removed and made breaking changes to APIs over the years (e.g. random breaking change: https://forums.aws.amazon.com/message.jspa?messageID=513640).
Cool new weight loss resource site I found
A good site I use all the time whenever Im searching for new health & fitness products or articles is https://www.dietspotlight.com/
Github, and the number of stars on their repo.
Why stop with compilers? Inspect the circuit diagrams for all your hardware and then make sure the actual manufacturing followed the designs to a tee.
I'm not sure if it was impossible, just that it was a giant mess and it utterly failed to work properly for me. Broadly speaking, point is just that TS treats JS as a second class citizen, and it adversely affects the day to day usability.
Generally yes. I've yet to encounter a Java applet that I've both needed and loved at the same time. Every applet I've used has either been some awesome but impractical/silly toy (e.g. science demo toys) or some mission-critical but painful-to-use monstrosity (like ADP eTime or my work's HVAC interface).
Wow, not good:

"State", "Juriscode", "Jurisname", "CountyFIPS", "MCD", "CNTY", "Town", "Ward", "Precinct", "Ballotbox", "PrecinctName", "NamePrefix", "FirstName", "MiddleName", "LastName", "NameSuffix", "Sex", "BirthYear", "BirthMonth", "BirthDay", "OfficialParty", "StateCalcParty", "RNCCalcParty", "StateVoterID", "JurisdictionVoterID", "LastActiveDate", "RegistrationDate", "VoterStatus", "SelfReportedDemographic", "ModeledEthnicity", "ModeledReligion", "ModeledEthnicGroup", "RegistrationAddr1", "RegistrationAddr2", "RegHouseNum", "RegHouseSfx", "RegStPrefix", "RegStName", "RegStType", "RegstPost", "RegUnitType", "RegUnitNumber", "RegCity", "RegSta", "RegZip5", "RegZip4", "RegLatitude", "RegLongitude", "RegGeocodeLevel", "ChangeOfAddress", "COADate", "COAType", "MailingAddr1", "MailingAddr2", "MailHouseNum", "MailHouseSfx", "MailStPrefix", "MailStName", "MailStType", "MailStPost", "MailUnitType", "MailUnitNumber", "MailCity", "MailSta", "MailZip5", "MailZip4", "MailSortCodeRoute", "MailDeliveryPt", "MailDeliveryPtChkDigit", "MailLineOfTravel", "MailLineOfTravelOrder", "MailDPVStatus", "MADR_LastCleanse", "MADR_LastCOA", "AreaCode", "TelephoneNUm", "TelSourceCode", "TelMatchLevel", "TelReliability", "FTC_DoNotCall"
That's been my experience.
Here's how I prefer to use Slack:

1) Turn off notifications (except @mentions or DMs).
2) Code uninterrupted.
3) Check in when I'm taking a break.
4) Profit.

Our company culture is such that Slack is mostly for notifications from our toolset, so that probably helps. Also, we're small (< 20).
Here's a solid article: https://zenhabits.net/respond/
Leaked iPhone 8 Screen Protector Includes Reduced Bezels and Front-Facing Camera
I partially agree. In the sense that I would port regression fixes constantly (THIS is important security-wise), I would NOT like to have updates to major releases, as this means breaking-changes and it's against the whole Stable philosophy. GCC 6.4 is going to be released soon and I hope Debian Stable will get all those regression fixes that update will inevitably bring to the table. After my experience with Jessie (which still offers GCC 4.9.2 although version 4.9.4 fixed an impressive list of bugs and it's not even available in the backports), I'm not going to be so optimistic. This is so important it should not be left to the volunteers' will.
He probably doesn't use a smartphone, as some of us don't including myself, given the total impossibility to achieve decent privacy and data security under any mobile operating system.
From the PDF: "Bitrot will burn libraries with merciless indignity that even Pets Dot Com didn’t deserve. Please
mirror don’t merely link! pocorgtfo15.pdf and our other issues far and wide, so our articles can help fight
the coming flame deluge. We like the following mirrors.
https://unpack.debug.su/pocorgtfo/ "
https://pocorgtfo.hacke.rs/
https://www.alchemistowl.org/pocorgtfo/
https://www.sultanik.com/pocorgtfo/
I don't think that's such a big problem for most users. The vast majority of websites impose only a few easily satisfiable constraints, at most: small and capital letters, numbers, symbols. This covers 99% of websites, and the default generator can cover this by default by generating something like bhAwG9$nj#.

For those corner cases you can have different password generators, for more complex constraints. But overall it's not a big hurdle.
Yeah there is! No wonder it never worked for me.
We had innovation team member spawn a project that would track how often call center reps were seated and monitor their activity. I had to be the party-pooper that brought up how Draconian his amazing idea was. I told our lead I refused to work on projects that spied on people to punish them, but would love to work on projects that reward people for doing a good job as long as it respects their privacy.
I had the same problem.
For me, it was being a software developer that made me aware of it.