skysight-inc/HackerNews huggingface dataset:
So, here is some more anecdata for the pile. We go with the multi-repo model at work, and the number of repos we "use" is over 1100 right now, and growing about a hundred repos a month.

How did we get here? An (imo) extreme dedication to "microservice all the things", a CI system which intentionally only allows one build artifact per repo, and a release system that encourages the separation of parts of a service's components to minimize red tape for changes.
Why do you say that? It was just purchased for $4B last year.
New life goal: understand at least one of the math articles on quanta..
What about Jar Jar Binks?
But perhaps that would be too evil.
Some do analytics tools use +new Date instead
The primary reason for multi-repo in my experience is when you have to share a code base with an external team: contractors, customers, open source, et cetera. Certainly you can do that with a mono-repo, but if tools & processes have to work without the whole mono-repo, it may be easy to go all-in on multi-repos.
Certainly depends on the language and where in the standard library you are, though you're completely right to always be cognizant that it's all been taken through battles in production at scale and has been optimized accordingly. One could also argue that that kind of code might be idiomatic for that kind of problem (an example of general, portable, and efficient), and a good guideline on how that might be done, though it might not be a super satisfying argument depending on how conservative your definition of "idiomatic" is.
Getting human trials is a significantly harder regulatory hurdle than monkey trials.
Might be stupid but i never considered unsubscript from default/popular reddit, i will do it,

Anyway if i want fun/troll i can find it by looking the more pop posts overall, thank you
Julia Computing bags grant worth $910K
Not just worthless, it has negative value. They try and stir up controversy where there is none, just to get more eyeballs. Just like CNN, Fox News and CNBC do with news. (Yes, I realize that FN is the worst of the bunch.)
Hopefully these issues will also put a stop to government's requesting software backdoor access.
This is merely a taste of what is to come.

When President Obama stated in December[0] that we will deliver a "proportional response" to Russian hacking at the "time and place of our own choosing", it seemed that most of the country was proud, almost gleeful at the thought that we would be striking back. I for one was mortified.

We should not be escalating cyberwar, even if we do have proof of who attacked us. People are going to die. We can see from this article that hacking can cause serious real-world problems.

When we strike back, does Russia then strike back again? What does it look like after four or five volleys? Will entire power grids be down for days or weeks? Will the stock market crash?

It's time for the American people to demand that the N.S.A. become a defensive organization, not an offensive one. And it's time for us to demand peace in general. Cyberwar is war.

[0] http://www.cnn.com/2016/12/15/politics/obama-russia-hacking-...
Why is nobody complaining about the fraudulent domain names and the registries that enable them? This is where the problem starts. The certificate only proves that the owner has access to the domain, nothing more.
I'd definitely recommend clicking through that article and reading the source of the announcement:

https://groups.google.com/a/chromium.org/forum/m/#!msg/blink...

> As captured in Chrome’s Root Certificate Policy, root certificate authorities are expected to perform a number of critical functions commensurate with the trust granted to them. This includes properly ensuring that domain control validation is performed for server certificates, to audit logs frequently for evidence of unauthorized issuance, and to protect their infrastructure in order to minimize the ability for the issuance of fraudulent certs.

> On the basis of the details publicly provided by Symantec, we do not believe that they have properly upheld these principles, and as such, have created significant risk for Google Chrome users. Symantec allowed at least four parties access to their infrastructure in a way to cause certificate issuance, did not sufficiently oversee these capabilities as required and expected, and when presented with evidence of these organizations’ failure to abide to the appropriate standard of care, failed to disclose such information in a timely manner or to identify the significance of the issues reported to them.

i.e. they apparently weren't even checking requesters controlled the domain they requested a certificate for in some instances!! And that's pretty much the only requirement for DV certificates?

My point is that the legacy ssl providers you're referring to were doing less checks than Lets Encrypt!
No, chrome's flash doesn't do DRM on regular linux distros. It does it only on ChromeOS.
The black hole is a nice way to cover the limits of the Sim
4. world class execution.

Without this, all you have is just time to tinker about on an idea.
I'm sure it's greatly simplified: every thing I flinged went into a nice orbit! How did they do that? I recently was tinkering with a gravity simulation thing, and because I couldn't figure out how to make things orbit nicely I just gave up and made that the main game mechanic for a Ludum Dare competition entry https://mrspeaker.github.io/ld38/.
Show HN: I made a collection of kick-ass designs
getting it working > having it secure

then its taken out of the hands of those that want to secure it.
If you take two companies one developing a secure and working product and the other just developing a working product capitalism will weed out the secure product and pass the insecure one. This is because it is cheaper to create, will get to market more quickly and be easier to configure.

As these sorts of attacks are rare and there is no established and straight forward legal framework to economically punish those without security; the company with least security almost always wins.
Then when someone does show the security holes the tendency is just to arrest them in order to keep this awful system going. :D

I'm not entirely sure how we start to fix this.
You Won’t Believe the Simple Error Responsible for Venture Capital Sexism Crisis
New York Under Water
Oh what a world we live in where cyberwarfare could result in death. I would have never thought, as a kid, that life (and death) would end up this "real".
> I'd argue that "science-based game" could interest many more people than the subset of github users. If it was a list of programming resources then maybe, but even then many coders don't have a github account.

In terms of contributing, fair enough - but for just viewing, GitHub lists are public.

> What percentage of the population do you think understands what a pull request is, let alone how to create one?

If you edit directly on the GitHub website you don't have to deal with that, as it is mostly handled for you automagically in the background. It's not Facebook-level friendly, but then again this little barrier to entry probably does wonders for the quality.

--

Re point 3, I could respond sentence by sentence, but what I really mean is that the site sets the tone and the culture on it.

I can trust user-submitted lists on GitHub due to its culture. I wouldn't trust a user-submitted list on an ad-ridden site and/or the site that significantly rewards people for contributing. Commercial interests destroy the quality and trustworthiness of information, so the best place to post such lists is a place that doesn't care about the content it hosts.

GitHub works because it's ad-free, free to use for contributors and readers alike, and doesn't try to monetize hosted content directly. So they don't set a money-making tone for their service, and they don't generally interfere with user-submitted content.

--

Still, I think the core reason GitHub is used is that GitHub is good enough, and is already popular with the developers.
> startssl

I must have at least 4 accounts there due to them using client certificate login. Great proof of concept why certificate based website logins never took off.
The reason it is a function that calls itself is to not pollute the global namespace. The rewritten expanded example leaks "gaScript" to the global namespace which is a little rude if you are injecting your script onto a third-party page and using a random or long function name is not as clean a solution since it still leaves dirt and takes more bytes.
They don't use git, right?
I think the trick is figuring when underlying details are just details, and when you miss an important understanding in the underlying foundations that might spawn misunderstandings. I guess a good lecturer is one who can tell you - insisting on learning everything is inefficient, although less work for your lecturer..
https://www.mail-archive.com/ubuntu-bugs@lists.ubuntu.com/ms...

"[Bug 1691901] [NEW] 50-motd-news costs 5 seconds every login on disconnected systems"
What is this assertion based on?
Yes, that's the one! You could even screw this little stick into the d-pad and use it like a joystick, or like me, as a child you just broke it off in the hole and never told mom.
Also isn't twitter much more about celebrity and brand worship than about internet culture?

Or am I showing off my lack of understanding of Twitter and/or Internet culture?
ICO model as we know will go away because it's a scam. The only reason they happen is that SEC is slow to prosecute what's basically an unregulated securities selling. You can't sell securities on the basis of some pretty landing and a few blog posts.
Gravit Designer 3.1 Just Landed: Sketch Import, Gravit Cloud, Templates
Ladies and gentlemen, I’d like to present Gravit Designer 3.1 (https://designer.io/), our biggest update yet. Some of the most notable improvements are:

- Full Sketch import: Finally a way to open Sketch files on Windows (and other platforms). Also means that you can quickly pass on a design to your developers for inspection.
- Gravit Cloud: All of your designs can live in the Cloud if you like, so that they are available anywhere, anytime, on all platforms.
- Migration of gravit.io: We finally took our existing users from gravit.io on board and merged everything into https://designer.io. Rest assured that no files are lost.
- Design templates and assets: Getting started in Gravit Designer is as easy as pie now with a wealth of design templates, ready for you to use.
- Video tutorials: Access a broad range of tutorials right in the app, giving you an immediate head start.
- Measurement guides: For the ultimate precision, holding Alt shows you the distance from the selected layer to other elements now. In input fields, the same modifier key gives you 0.1 increments.
- International text support and Chinese version: Our international users are critical to us, so we made sure that you can use a broad range of languages in Gravit, including Chinese.
- Gravit Klex: Last but not least we also launched our entirely new design tool Klex (https://klex.io/), that enables everybody to create awesome designs in no time. It’s totally free!

Please read the full list of improvements on our Medium blog: https://medium.com/gravitdesigner/gravit-designer-3-1-just-landed-5a042ee0921f.

Start using Gravit Designer online now at https://designer.gravit.io or download the desktop apps at https://designer.io/#download (the app stores may just take a few hours to update). It’s available on all platforms, and of course, it’s 100% free!
10 Years Ago Today, the Original iPhone Officially Launched
Snapchat is a public facing company with clear revenues way way more than tumblr.
It's clearly a trade-off. I have found that as I gain experience, reading code becomes faster, even for domains that I'm not familiar with, and it's nearly always worthwhile to understand the problem.

Moving fast and breaking things adds to the technical debt. The word debt implies that you will have to repay it (or at least, someone will have to repay it). So moving fast now means slowing down later. Sometimes this is desirable, sometimes not.
In the beginning God created the heaven and the earth. ~ Genesis 1.1

I wonder sometimes if our universe was created this way - define some basic rules, start an experiment, invite other gods over to build whatever they can imagine, watch the results and share on some cosmic Facebook.
Lisp is LL(1). If we have #, we don't know what we're looking at until we read the next character, like #s structure, #( vector, #= circle notation, etc.

Actually there can be an integer between the two; but that doesn't change what kind of syntax is being read so it arguably doesn't push things to LL(2).

Other examples: seeing (a . we don't know whether this is the consing dot notation, or the start of a floating-point token.

Speaking of tokens, the Lisp token conversion rules effectively add up to LL(k). 12345 could be an integer or symbol. If the next character is, say, "a" and the token ends, we get a symbol. Basically if we see a token constituent character then k more characters have to be scanned before we can decide what kind of token and consequently what object to reduce to.
I know that the laptop bans are currently only on inter-continental routes, but investors in this kind of system must be watching the laptop ban in horror of things to come.
Ethical and moral people fall prey to cognitive biases all the time.

It's not about honesty and integrity, if you (or others) don't ask [the right] questions.

We are biased, by ideology, world view, experience (and history/genetics/family/friends/aesthetics) by long- and short-term (self-)interests and so on. With money it's very common to spot the conflict of interest, the bias when people give advice, with other things, it's a lot harder.

That said, people by default are gullible, susceptible to persuasion and so on. People are by nature social animals and easy to misled, to influence, and so on. We are naive.

It takes training to spot the bullshit, even in our own thinking. (And we haven't even mentioned the psychopathologies that can also very seriously undermine our blossoming critical thinking by sheer force of emotions - anxiety/depression/impulsiveness/xenophobia/etnophobia - or via a persistent insistence on fringe patterns - schizoid-type disorders, hallucinations, paranoia.)

> compelled to produce from the data what our boss thought the answer should be.

That's not asinine, that's misconduct. That's fraud.

So, all in all, the situation was never good. The Enlightenment never happened. It started to, but suddenly stopped.
To normal folks, maybe, but in technical language it can refer to the entire EM spectrum (as there's no meaningful difference between "visible" and "invisible" EM radiation for anything other than human eyes).

EDIT:

I looked up the spectrum PV cells tend to respond to and some sources on the usual meaning of the word "light", and I admit my original comment was me being pedantic about the more obscure usage of the word. Sorry :(.
If you haven't explicitly enabled microcode updates for your distribution, then chances are good it's disabled. You should check into it.

Most of the time that just requires installing a package, but you might also need to rebuild initramfs. For NixOS, it's just a single flag in configuration.nix as usual.
LetsEncrypt could easily sell extended expirations out-of-band. I see it as nearly inevitable when they need (more) money.
kanyewest.com replaces the letters with "k,a,n,y,e"

!function(k,a,n,y,e){k.GoogleAnalyticsObject=n;k[n]||(k[n]=function(){
(k[n].q=k[n].q||[]).push(arguments)});k[n].l=+new Date;y=a.createElement('script');
e=a.scripts[0];y.src='//www.google-analytics.com/analytics.js';
e.parentNode.insertBefore(y,e)}(window,document,'ga');

ga('create', 'UA-34495711-11', 'auto');
ga('send', 'pageview');
Open source sucks
You are missing the part where the user manual and the systemd new features announcement state that the Desktop Bus API is systemd-resolved's "native, fully-featured API"; and describe the GNU C library NSS API and the DNS APIs as limited functionality APIs, whose avoidance by applications is "strongly recommended" in the case of the latter.
I still don't see the analogy. The lower quality was not intentional and, what's more, they clearly labeled it as an inferior product. This seems more akin to designing a processor so that it will fail just out of its warranty period and you need to buy a new one, but not mentioning that to anyone.
Moot?
There's a fourth option: neither. It's also surprisingly common. A lot of companies have a component named something like CompanyNameSupportLibrary that's pulled in and used by everything. Voila most of the cons of both multirepo and monorepo without any of the benefits.
Actual non-loaded question, does GitLab offer a wiki like Confluence and a full issue planning / management feature like Jira? I've only used a small amount of GitLab, and it was purely for code hosting, so I don't know.
Agreed, FA looks like raw material compared to piwik. There's a lot of components needed to build a full solution. You need browser capture, data sink, backend aggregation, dashboards, adhoc query capability, etc...
Just read that whole series. I appreciate the time and effort you into writing that up. I feel like most of your complaints were valid and boiled down to, "Etherium is too new" and "as a honest person, I get no benefit to using it".

Block chain is set up to be no trust so unless you're working with people who you can't trust, you shouldn't use it. The other main reason is that you want to avoid banks and government, which is certainly a smell that you may be a criminal. These benefits aren't for people who are honest.
sysdig is a monitoring system for docker that sells for $25 per month per host.

Part of the debugging method has to do with "let's show our product".
Ripple is doing that with its Interledger Protocol. They're partnering with banks to get it implemented.
The part where it wasn't scalable because it wasn't free.
There’s an Almost Perfectly Legal Way to Get Free TV
It's here -- https://www.atlassian.com/licensing/cloud/future-pricing
Why the Cloud Is Transforming Customer Experience
I am pretty solidly in the multirepo camp more often than not, but nothing about monorepo forces synchronized release schedules as long as you are branching appropriately.
It looks like the power limitations of running from radio waves are limiting. What about a battery or phone that charges from radio waves? It would give the phone a lot more power to operate, because the phone itself doesn't run 24/7.
But the entire point of copyright is to prevent less-ethical businesspeople from exploiting the intellectual works of others for their financial benefit, i.e. the rights holders earnings are injured and they are legally allowed to seek compensation for that injury.

This person is co-opting the images, but not to sell the homes or defame the work of the photographer, but to mock the (ugly) style of the homes. There is no impact to the rights holders or even the people using the photos by virtue of this silly little blog existing.
If history has told us anything, it's that this won't be fixed until we wake up one day and the majority of the computers in the world are bricked. Then the government will act. Not before.
OK, but if you have a job as a software developer you almost certainly signed such an agreement.
They are! I recently had to make peace with a family of them, one of whose fledglings I had inadvertently upset by getting too close with a camera.

Fortunately, ravens are smart enough to recognize the combination of repeated food offerings, and a demurral to repeat the initial rudeness, as earnest of good intent - walking out the door with my camera no longer provokes alarm calls and surveillance overflights. Catbirds, not so much - I pissed off one of those back when there was snow on the ground, and I suspect he'd still quite happily rip my lungs out if he could.
I really don't see that being used on anything but hobby sites. Their definition of privacy essentially means it doesn't work.

For me, Google Analytics privacy issue is that it's used everywhere - Google can track users across a fair chunk of the web. Your site running its own private Piwik install? Fill yer boots, not a problem.
Another problem is that a single repo for all the code you run is impossible for all but the biggest companies (Google).

Most of the code that you run is open source dependencies, like the Python interpreter, GNU C library, and Linux kernel.

You could import everything, including outside dependencies, into a single repo and build an OS/application image from that repo. That is effectively what Google does. But that requires a lot of careful attention to pulling in updates of external code, and requires a particularly excellent build and dependency manager (aka a package manager). It is also huge enough to run into serious performance problems no matter how you try to fix it.

So more practically, your monorepo is just for your internal code. Which means if you ever want to fix a bug in any outside libraries, or make some of your code available as a separate library for the outside world, you need to work with multiple repos.

So why not just be multi-repo from the start? Or rather, have multiple monorepos, one per project or group.
If the private key is only used for this purpose, and the cronjob as well as the key only reside on the server, is the security of the key then not a moot point if the server is breached? Genuinely curious.
There also are a lot of alternative [1] implementations which are less bloated, some are really small with only some hundred lines of code and few dependencies.

[1] https://letsencrypt.org/docs/client-options/
That's only Paypal :) There are hundreds more instances of abuse
Home online business opportunity – Rich Schrefren business builder Course
Top 5 Resources to Become a Database Expert
I am a Cisco network engineer before. Later on, I decided to change my path to software field. Luckily, I got a slot of a Software Engineer in a Japanese owned Production company. The environment is quite different, though I have a very basic background in OOP and database. Now, my task is more on backend which is facing a lot of database scripts. By the way we are using an old school Power Builder for the front end. What would you recommend to further enhance my database skill?
Help would be greatly appreciated.
They are nice to have and welcome, but not mandatory. I'm actually the only one in my group of friends who has ever enjoyed these kind of things. That's why I say we are very lucky. Once you step out of the tech bubble you see that what you take for granted is only a dream for many. I can work part time and still make more money than they do.
Yes and no. I ran into an instance where certbot itself needed to be updated and the scheduled renewal didn't take place until I did so the next day.

I also use Subsonic @home which requires generating a keystore as the app doesn't yet handle LE natively.
You'd think they'd use this opportunity to run a sale for Safari to ease the transition for people who aren't yet on the platform. Maybe they didn't expect this to cause any problems?
DV certificates were never required to have different checks than what LE is doing, so what checks are you talking about?
Alphabet says Uber is engaging in a coverup
"I never really learned the basic things like linear algebra, actually — I only assimilated it through learning some other stuff."

The hacker attitude seems to be the way to go even in fundamentally anti-hacker environments.