skysight-inc/HackerNews huggingface dataset:
Coffee Extraction: Sour vs. Bitter and how to tell the difference
Billions total? Per month? Per day? Per hour? Per minute?

I hate the word "large" in these contexts.
You could say the same about using Windows.
Innovator and investor Joi Ito on setting a course through change
> A lot of time on that blog was spent mocking purely aesthetic features of the homes and I feel like if you like the aesthetic then there is not much else to consider.

In fairness, the blogger spends a lot of time going into the philosophy underlying architectural aesthetics. For example: http://mcmansionhell.tumblr.com/post/161514422581/mmh-does-a...
NYU Lands New York City's Ambitious VR/AR Hub
So what exactly is the current attitude towards cryptocurrencies? E.g. a coin named Diamond went up 200% since yesterday. https://coinmarketcap.com/currencies/diamond/ However it's not obvious what's driving it.

Also, on Saturday, there was an ICO of this coin called TenX (https://www.tenx.tech/) which sold 100,000 ETH (~$30M) worth of TenX in like a minute. Is it all pump and dump?

I can't imagine that anyone has definite answers but I'm interested to hear some opinions.
>> We have a toddler so time became extremely tight.

Take it a step further, buy pre-made meals from someplace like ICON meals and you just have to heat them up.
> I don't want to go back to a world where financial transactions are conducted based on hand-scratched notes and shouting on trading floors.

Seemed to work pretty well for a long time.
What would a manufacturer making first-tier hardware have gotten from partnering with Mozilla?

The most likely I'd see there would have been a "Certified for reflashing" platform.
Couldn't agree more.

Obnoxious biased introduction:

"The web is the greatest application delivery platform on Earth, and frankly it’s a stain on our profession that you need to know five different programming languages and three different frameworks if you want to make it do anything. Really, all you should need is to be able to code - ideally, in a friendly, readable language that’s easy to learn and isn’t full of unpleasant surprises."

As someone who does fullstack dev in JavaScript I find the comment totally without basis.
Go to class. Break up with him. Get out more.
Just because YOU cant figure out how it works, does not mean its not possible my friend.
But I will say, that when you have a backdoor, and suddenly that backdoor stop providing intel/data/whatever, its usually a good indicator.
Well my kid is in school, and already before first grade they're "programming" a teaching assistant in a robot suit. I think that's great, but like everything else in the list it's just superficial. You're not in school to become a programmer any more than you are to become a journalist or physicist. It's just an intro, and chances are a lot will be upturned when you're older.

The thing is most of those things are practical skills that everyone is going to need. And just like when there people who couldn't read, there are now people who don't know what the little X in the top right corner of Excel does. Sure, school should teach you "elementary thinking skills" but a lot of what goes on is just practical.

I also think not having those practical skills is going to demotivate people. How often do kids give up on something because of mundane reasons? If you're comfortable with using the machine, maybe you'll find it easier to persevere through tougher material. Ideally you'll pick up something useful as well as a reasonable idea of what lies down the line.
HIPPA, PCI, etc. compliancy doesn't actually mean you are secure, it just means you are compliant. Take ransomware attacks for example, most of the bigger companies that get hit and have no working plan to continue their business are compliant to all sorts of things, hell complete governments are in that category...

Compliancy only tells a story about management and how many MBA's you have, it doesn't actually mean you have good security. Only being compliant isn't going to help you not get data leaks or data loss!
Yeah, I am painful aware of the reality, being an Wirth language's fan since the early 90's.

The fact is that UNIX-like OSes are married with C, unless there is a commercial entity like Apple or Google, pushing out of the way, UNIX FOSS developers will always gravitate around it for system level applications.

It has always been like that, system languages that aren't the platform main language(s), are relegated to 2nd class status and eventually die or strive in a small niche.

Hence why I think UNIX only has a path to safety in the hands of Apple and Google, because I don't see *BSD or Linux developers using anything other than C for system level code.
I bet Nimoy would never have been the voice of In Search Of... without having been Spock.
Headline here is misleading, I first thought it was about less client-side scripting on websites. However, this is a talk actually about using Python (compiled to JavaScript) for client-side scripting.
The implication that "a web OS" is what people want raises some question marks. I use the web a lot on my phone--for reading documents. I use applications for interacting with services because, still (and this is years after FirefoxOS), the experience of using a mobile web app, especially for integrating with hardware, is awful. There may be something of a chicken-and-the-egg problem here, but at the same time--if it's awful, it's awful, and so going towards real applications is the only thing that makes sense unless you want to make devices that are awful. Nobody wants to make devices that are awful.

Letting "the web optimize" your dialer, though, is perhaps the most dangerous idea I've heard in a while. Core applications under no circumstances should be optimized by the web because that's how you get malware masquerading as those core applications. No bueno.
Beekeepers Feel the Sting of California’s Great Hive Heist
You're doing great.

I'm sorry, you're not going to die young.
The nuts and bolts behind Petya ransomware
Rule #1 of Mental Illness: If God starts talking to you, it's not God.
And I only clicked because I actually like JavaScript and the title made me angry.
NYU Tandon selected as operator for state-of-the-art VR/AR lab
Union Sq market on Saturday blows every grocery store away, catches it on a way out, and blows it away again but that's probably the only farmers market that has the scale and popularity needed to replace a large section of a grocery store
That hasnt been my experience. Maybe it's my ego, but I always go in thinking that I'm good at what I do and that I will be the last man standing, I survived three rounds of layoffs at a former company, was laid off when the company laid off everyone but four people when it was acquired, and even then I negotiated a deal to work as a contractor for one of our customers. The company was very up front about its prospects.

The next time around, during a reorganization at another company, I not only wasn't laid off, I got a promotion. I don't think I play politics I just know how to be effective.
I think the problem with this would be to find sufficient sources of random bricks where the good stuff has not already been removed.

E.g. minifigs can get high enough prices in some instances that the total value of a set can be higher if you sell the minifigs and higher value bricks separately, because some people want to buy just the minifig, or need some piece that only appear in a few sets.

This would be my main issue with buying Lego to resell - I'd want to be very sure I'm not buying from other resellers where there'd be a risk it'd been stripped of the more valuable pieces.
> they just focused on application over theory.

That would be exactly the criterion I had in mind. Colleges and universities should teach computer science, not coding. Dijkstra was an accomplished computer scientist and never owned a computer; there is a whole academic discipline there which should be taught in its own right. Whereas a coding school should probably lead off with source control and the command line, the university should start with lambda calculus.

It's not that these things can't be just as useful, it's that they are distinct topics and neither should be used as a replacement for the other. (The unfortunate corollary to this is that it takes 6-10 years to become competent as a programmer, and a number of those years must be in the industry. We should really get a guild structure together.)
Slack already had a public compromise. Most small businesses haven't been publicly compromised.

I'm not saying it's safer to self-host. There are a ton of foot-guns with operating your own IRC server.
> Why do you assume that Slack's security expertise and security budget is greater than your own?

I don't assume it. I know it for a fact; I've met some of their team and I know others by reputation. And I'm not exactly a slouch when it comes to this stuff (I don't eat and sleep crypto but a large part of my business is building secure infrastructure/consulting on the systems running on that infrastructure for regulated as well as non-regulated environments).
Make the outer edge of the screw have door brushes[1]?

[1]: http://www.formseal.co.uk/
"Vinegar isn't pure acetic acid so I'm not sure why you're bringing that up. I mean I know why, because then you can argue against a point I didn't make instead of the point I did."

Ah, but now you've pointed out the problem with your own argument. Nobody uses 100% glyphosphate either. It's highly diluted.

"Saying "salt + vinegar is more toxic than glyphosphate" is only true if you bastardize the definition of both and willingly forget for a moment that one of the chemicals is specifically designed to kill things.
"

Saying salt + vinegar is worse than glyphosphate is only true if you bastardize how glyphosphate is used. So yes, i'd agree with you that your point makes no sense :)

" forget for a moment that one of the chemicals is specifically designed to kill things."

Intent is irrelevant in nature. It's also not made to kill humans.

This point is just more of the same. Acetic acid is meant to destroy things too!

You are arguing "in the concentrations used, it's not destructive". That's quite literally the same as glyphosphate.
Your first paragraph stands in contrast with the last. For some people napping optimizes their energy through the day.
I have an analogy.

Why would a zebra have evolved to have black and white stripes? You could see a zebra from miles away due to how it stands out! Yet.. when it's in a herd of zebra, it's hard to pick any individual one out, and that's why the pattern works.

And so it goes with using services like Slack, Gmail, S3, etc. My account on its own may not be the most secure thing ever but it's hidden in such a large pool of data - much of it far more valuable than mine - that the safety of the herd becomes relevant.
I agree the answer is shades of gray. Personally I prefer self host because I am able to get more visibility on my threat model that way. If you aren't equipped to use that information then I see little benefit to it.
A VPN resolves this issue and provides encryption and authentication.
and if you dilute the glyphosphate to the amount actually used, it's still going to be less toxic than the salt + vinegar.

You may not like this, but that's science!
Exactly. Thats my point. Its not beholden to me. But alters what I see, based on what fulfills their interest, not what fulfills mine.
Slack has, publicly, a multi-member security team! That's entirely focused on the chat system that I don't have to put any of my teams time towards.
> I can't think of a common use term for negative feedback off the top of my head.

"self-defeating"?
> Am I being too sensitive

Yes, absolutely.

> or do you think this will cause issues, too?

No.

For one thing, the Captain isn't a black woman.

For another, portraying people as flawed can lead to stronger characterization.
How to Protect Android Banking Apps from Malware
It seems like Quip, the document service, should be a much bigger concern:

Based on their security practices document, they seem to store documents unencrypted on their servers. It's encrypted in transit, sure, but not in storage? I was shocked when I found out.

https://help.salesforce.com/servlet/servlet.FileDownload?fil...

At least Slack encrypts data at rest https://slack.com/security
Yet once the restaurant is in place the rent continues month after month, year after year. The permit delays / fees are less pernicious. And less $$.
It's a means to an end. You can choose - if you think the thicket of Javascript frameworks is strangling accessibility of the Web platform, can either whinge about it on the Internet all day or try to build something better.
I rarely, if ever, hear voices in my head that I don't will myself to have, like when I'm considering the phrasing of this sentence.

Although, I am always very puzzled when I think about my speech, especially in conversation, and how the phrasing of words get put in order so quickly, almost unconsciously.
A corollary of this is a saying a friend's dad used to have, "If it isn't in writing, it doesn't exist". Of course, with VOIP, video, etc, it is more, "if it isn't done in person via voice, it does exist". If it would be damaging to leak, seriously consider whether it should be written down at all, especially in casual conversations.
They are something between a pyramid scheme and a multi level marketing scheme. They have no inherent worth, are deeply flawed as currencies, and are highly volatile, so aren't useful stores of worth. There is a very low barrier to entry to creating one, so expect them to be created pretty much without limit.
Wait, how can Bricklink send C&D letters, unless it's actually owned by Lego? It's like Ebay sending C&D letters to Craigslist because someone happens to list something that's also solde there.
" Maybe we developed language and "consciousness" together?"

I read/watched something some time back. It used to be believed that folks that couldn't hear - and therefore, couldn't talk - also had low IQ's. It turned out this can be correct if folks aren't taught sign language early in life. It went on to refer to language as the program that lets us run consciousness.

So yeah, you are probably onto something. Language and consciousness, if not developed together, definitely seem to go hand in hand.
Really depends on if you're a target yourself. If someone is trying to target you specifically, use Slack as it's much harder. If you're not a target and are worried about Slack in general and have the budget to run your own stuff, do that.
I like it. Simple and clean. Consider appending a 20-30 word plain text snippet from the first sentence of the linked article to the entry.
And then, the page shows, as a supposed example of the reason for not using javascript:

> And here’s how you’d do it in Javascript. I count three separate callbacks here. I’m not exaggerating - this is an example straight from the documentation of the postgres library!

Yet this JS code is done on a mediocre way (for today, 2017). This code would be far shorter and easier if done in JS using async/await, which is what everybody should be using now.

So, besides that, there is the premise that using the same language in the browser AND in the server is a good thing; but how true is tat premise when the "alternate" language is pretty much similar in features? I mean, there's not such a huge benefit of going from JS to Python; perhaps i can concede that Python is mostly strongly typed (a good thing), but it's not like there were huge advantages.

And then, how hard is to go from Python to JS to C# to Java when these four languages are very similar in syntax, as well? Hard stuff, for a programmer, would be to jump from JS to Forth or to Prolog; radically different languages.
>It's not a single keyboard shortcut or menu option like Windows/Explorer out of the box

That was my point?

>a power user could also make that happen and could even map it to Cmd-L if they wanted

I've even seen Applescripts for it! They took longer than 5 minutes to develop. I want to spend my time tweaking in-depth parts of the UI, not very basic features that exist already in another.

OSX being dumbed down is a feature, if you want to sync your podcasts it's a great system for it.
For those who don't know, newspapers often have a Reader's editor whose job it is is to criticise and be the voice of the readers inside the newspaper. In this case, this is written by that person for the Guardian after what would appear to be a thorough investigation of the matter.

There's a lot of people here saying this should have happened faster, they're likely right, but also, given how extensive and thorough this is, it is more likely an example of how old-school editorial rigour just takes a lot of time.
do you not have a fridge with a freezer?
(+ a b c d e f)
> Is it all pump and dump?

Unless proven otherwise, yes.
His (tentative and ancillary) neurological conjectures haven't worked out. The main ideas have not been engaged with or found wanting;there is no prevailing theory of consciousness, and psychology as taught and practiced in the US is laughably reductionistic and has never shaken off the influence of behaviorism. Western science treats the brain as an organ amounting to little more than a set of synaptic reflexes to be either drugged or trained. A 'healthy' mind is is equated with an untroubled economically productive one, and there's no real theory of experience or identity.

Thinkers like Sacks, Dennett, and Hofstatder are well-respected but have little visible influence on the practice of psychology, and the field as a whole is treated as a sideshow in the intellectual carnival. Admittedly the Us does not have a strong public intellectual discourse so I may be looking innovative thinkers who are confined to the academy and have difficulty reaching a wider audience.
Same here but how do we know when we suddenly think of something (sometimes like total random recall or random idea) that it is not just a healthy version of the voices that folks with mental illness hear? Maybe mental illness in this context is just them associating a voice with what would otherwise be silent (potentially self-intrusive) thoughts?
Any info on Mozilla's speech recognition efforts?

Is the aim to do the actual work on the client?

Slightly related if anyone knows: is speech recognition a priority for the folks at Gnu/FSF?
PHP does have a track record of terrible security, though. WordPress and Yahoo both still have reputations as security clusterfucks; Facebook did too until they grew up as a company and were able to hire some really good security people.

However, most of the backend services at Slack (the ones you'd actually want to attack) aren't even in PHP anymore: according to their job reqs, they're in Java and Go.
Not to mention, they are required to prefund pensions for their employees, something no other entity is required to do. They also are required to take a letter from anywhere in the country, and deliver it to anywhere else in the country, within a couple days, for less than 50 cents.
Depends on who's doing it. In the abstract, everyone has a "right" to speak their mind, and everybody else has a "right" to ignore them. But that gets you nowhere. IMHO Unless you've done something that makes your opinion worth something, you should be focused on proving yourself.
TLDR we chose Mattermost over Slack because of security. https://www.mattermost.com

We recently evaluated many chat systems for a large tech consulting project that includes security needs.

Slack was the frontrunner because of ubiquity, ease of use, plentiful third-party integrations, openness to free areas, and helpful in-person meetings with the Slack staff.

We picked Slack for our informal connections with external developers for non-confidential discussions.

For our own teams' use, I really like Ryver. The security is better (IMHO), the team-oriented features are stronger, and the billing is much clearer. The Ryver team is fully open to discussions about how to grow the platform and improve the security.

Ultimately the security team chose self-hosted Mattermost. We liked the combination of intranet deployability, plus a ramp toward security compliance capabilities that we do need for a few projects.
How to solve R&D productivity challenges: 10 innovators share their strategies
But also from the HN guidelines:

"If you flag something, please don't also comment that you did."
> we can work on to get out of oil's malthusian trap.

Say all cars on earth ultimately ends up converting to electric. That is a lot of batteries, right? To produce and to dispose.

Any idea how that is going to affect the environment?
> The West needs to take this threat very seriously, or we'll soon find ourselves at the wrong end of the barrel of a new weapon.

Our geopolitical opponents should be cautious as well - Public knowledge of weapons technology is often decades behind the reality and I doubt the US and it's allies are unable to defend and respond to any large scale attack.
I can confirm this. I wasn't able to get into meditation on my own, and so I took the more extreme route and visited a dedicated 10 day Vipassana mediation course.

The effects were incredible and lasted for quite some time even after the course. It's hard to explain, but they teach you to be more empathetic and to listen to the "vibrations" in your body. Once the course was over and I was back in the real world my body was vibrating (not visibly of course) like crazy when I was interacting with other people, simply due to my happiness and love for everything, everyone and the whole universe. I know this sounds like some crazy new age foo, but it's really not.

All in all this was one of the hardest, but also best experiences in my life. Unfortunately once I got back home, daily life and stress took over and I stopped meditating. But I plan to visit another course again as soon as I can, and then I will try to stick with regular mediation. I can highly recommend this.
You have more disposable time now than you will again for quite a while. Don't waste it all.

The marginal cost of an additional class in college is entirely in time (see above).

Study languages more. Do not stop with the minimum requirements for your degree, continue on to at least sound reading proficiency.

Take more math classes.

That VDT with a blinking cursor? Learn something about it. Computers are more usable when you can get away from punch cards.
What are these 5 programming languages? I assume that includes HTML, CSS, JavaScript and maybe some backend language. Still, that's only 4. Also even in desktop and mobile application development there is a separate markup language for putting together the UI. For example XAML for Windows devs and XML for Android.
>Maybe I'm the wrong target demographic

These services are for people who want to cook but feel they benefit from having someone else handle most of the planning and the shopping.

In urban locations, there are tons of options to have take-out delivered.
I'm sorry, as a schizophrenic I'm calling bullshit on this one. Psychics? Seriously people? How about adequate treatment programs and access to affordable medication.
I happen to know a few people on the Slack security team from a prior job. SalesForce, another SaaS business people trust to manage all their data.

There's no question that Slack's budget is greater than my own. They have a large, full-time security team. I have a bit of attention from myself or a colleague when setting a system up.

There's also no question their expertise is better. These are life long security professionals with direct experience at other SaaS companies.
The author clearly feels that five is not enough, and that adding Python will give us the six languages that we need.
> "The web is the greatest application delivery platform on Earth, and frankly it’s a stain on our profession that you need to know five different programming languages (...) Really, all you should need is to be able to code."

The guy who wrote this is sadly one in a new breed of so-called "coders" that don't really love the art of programming.