skysight-inc/HackerNews huggingface dataset:
Right now the mass of the kilogram prototype is defined to be exactly 1 kg. If someone adds or removes matter from the prototype, then the numerical value we assign to the mass of everything else in the world would change, but the prototype would remain 1 kg. On the other hand, currently, the value of Planck's constant is known only to a certain level of accuracy.

Under the new system, Planck's constant would be defined to be exactly 6.626070040e−34 kg.m^2.s^-1, with no error bars, and the prototype would no longer be exactly 1 kg. If we refine our estimate for the physical value of Planck's constant, its numerical value of 6.626070040e−34 kg.m^2.s^-1 would not change, but the numerical value for everything's mass would.

This definition of 1 kg requires we first define 1 m and 1 s, but there are already good definitions for these quantities based on fundamental physical properties (namely, the speed of light and the frequency of the transition between the two hyperfine levels of ground state of the caesium-133 atom).
>I missed that. What's the HN URL?

https://news.ycombinator.com/item?id=14639451 ; looks like the linked site has come back online (for now).

>There are ways to avoid such oversight. Consider, for example, Sci-Hub or TPB or third-generation dark markets. What's hard is doing that at scale. And that, I believe, is a huge niche that's aching to be filled.

The TPB saga should scare all of us, because it shows how far corporate interests will go to remove a thorn in their side. TPB lives on because the swarm refuses to let it die, but its founders were rewarded with a witch hunt led by the top brass in the United States, exile, and imprisonment.

Anyone who wants to take this on: do not expect a more favorable outcome than TPB's founders got, especially if you live in the U.S., where they won't have to threaten sanctions against your homeland to get you brought down.
I also created an HTML-based version of this one some time ago that allows rotation and color codes the rows as matching or not:
https://gregable.com/p/regexp-puzzle.html
Wildcards were one of the two big blockers for Let's Encrypt adoption at a lot of organizations. The second blocker, the operational discipline to automatically refresh the cert and restart services every <90 days, will likely be the only excuse left.
> plenty of other operating systems didn't render fonts in the kernel at the time, and they seemed fast enough.

Which ones? I'd be surprised if either of classic MacOS or BeOS didn't have the display layer in the kernel; Solaris had it in userspace but was pretty slow; BSD was still tangled in lawsuits and Linux barely existed.
Luckily for us, a bunch of wealthy and influential people disagree with you and know more about this stuff than you do, and have started companies like Planetary Resources. All that stuff we're mining from the Earth's crust came from asteroids, not from the formation of the planet, and it's far better concentrated in asteroids than it is in the crust, so no, there really is a huge niche for asteroid mining or else there wouldn't be a lot of money put into exploring this. No, asteroids impacting Mars are going to have the same problem that they do on Earth: it reduces the concentration too much so you have to process a lot of dirt to get to the valuable ores; this isn't the case with asteroids.

>You need life support, food, water etc.

We figured all that stuff out ages ago. We can already recycle air and water and have been doing so on space stations for decades. Food can be supplied by resupply missions, and also grown on-site; it's not that hard. You're completely overstating the problem. If you think that running a small space station is somehow far harder than running a habitat on Mars (where you cannot control the gravity at all), which seems to be what you're implying here, you have no idea what you're talking about, and I think you're being intellectually dishonest to boot.
Years ago I used to tell customers that it was a picture of Bill Gates backyard. Most of them (if not all) believed me.
Why Brexit could entail a hard landing for low-cost carriers
I've never been able to articulate why I gave up on this game when I did, and your comment finally put it into words. Spot on observation, thanks!
This is great news for organizations. I work at a large Fortune 150, and there are lots of services that require wildcard certs. We have a process to get these from our internal CA as well as a third-party - the internal CA is automated, but the third-party (for external services) can be slow and cumbersome, to the point where many departments just buy their own cert. And then a year later, they move on, forget, etc, and suddenly we have services that have expired certs and there's a scramble to fix them.

This move by Letsencrypt should hopefully make them the standard for any external service that doesn't require an EV cert.
I don't see why this wouldn't be possible, just tell Nginx (or whatever proxy) to serve one on 443 with appropriate TLS options and the root domain on 80. To a large extent subdomains are treated as different sites w.r.t. security. But it's possible Azure has some particular settings to make this impossible.
You make it sound like we already know about most of the problems and there is a ton of room for improvement in the current systems.

Isn't this exactly what Musk and his employees are good at fixing? I have seen no reason to bet against Musk, Your complaint is the same as the others saying he cannot do something. You seem to have expertise in how a thing is done now, not in how well it could be done.

He might be late, but he won't fail. As it is this is the scheduled shortened by 6 months.
Detroit’s car firms try to match Silicon Valley
8tracks Hacked: 18M Accounts Compromised
I strongly dislike wildcard certificates.

I worked in a few places that had a *.company.com which covered, obviously, everything under that domain.

That meant if that wildcard cert leaked then our EV cert for, say, checkout.company.com would be essentially compromised too.

Not to mention. If you have a wildcard cert it's rather likely you're passing those certs around servers, lots of scope for leakage.

I really think that if you feel the need to do wildcard certificates, then you should at least try to figure out another way around it. I'm not saying you absolutely must never use them, but be incredibly mindful of what is at stake and limit the scope and availability of such certs as much as possible.

For instance. Don't put the same wildcard on mail servers and IM servers and git servers and etc; a compromise of one will compromise them all and the revokation system is not good enough.

https://blog.dijit.sh/please-stop-advocating-wildcard-certif...
Location:	Chicago, IL

Remote:	Yes, preferred

Willing to relocate: No

Technologies:	Swift, iOS, Sketch

Résumé/CV:	Will provide upon email request

Email:	tcjohns87@gmail.com

I built the iOS app, Routinist, which helps you achieve goals and build habits by scheduling them into your daily routines. Routinist has over 60k downloads and 600k sessions.

I am an iOS developer with 2.5 years experience in Swift and have executed all facets of the iOS development lifecycle from conception to launch, debugging, customer service, etc. I approach my work with consideration to the impact it will have on customers, coworkers, and the success of the business overall.

Prior to iOS development, I worked as a CPA in fast-paced environments and developed skills that are useful in app development including communication, team, interpersonal, management, organization, time management, and math/logic skills.
Well, the creator of the CNN clothesline wasn't merely "guilty by association" given he had a clear history of posting hate speech and creating fairly obviously bigoted content.
Cool alarm to wake you app at a location if you sleep in your commute
I'll admit I too was expecting cat-centric "speech" synthesis.
Outcomes4Me | Back-end software engineer | Cambridge, MA / Boston, MA | Full time, Onsite

O4me is an early-stage startup in the digital health space based in Cambridge, MA. We are building an integrated platform to transform how patients and their families discover & navigate their treatment options as well as engage with healthcare systems globally.
For the position: this is technical hire # 2. you’ll work and interact directly with founders.

outcomes4me.com for more information. Email me abdin@outcomes4me.com to apply, mention HN. Please, no remote, no recruiters
Sure, LetsEncrypt can issue certificates for that domain. If you have a webserver you control that runs on port 80, you can use Certbot[1] to get a certificate for that domain.
[1]: https://certbot.eff.org/
First you have to define what a great programmer is. Best CS knowledge? Highest Pay? Most prolific? Leading edge?
Knows lots of languages? Most famous? Makes software that users love? Makes profitable companies?

Usually great programmers are good at some of the above but never all, so you have to be clear about what you mean by great. After that its easy :)
I've been learning elixir for past 10 months and will be releasing a project to the public hopefully by the end of the month. Is anyone interested in any specific topics? I plan to write an accompanying blog post when I release.

Stack: Elixir, RethinkDB, Inferno (react alternative) + Redux (The goal when I started was to learn new things, hence the unusual stack)
> I'm not sure that's "easy to measure" since how do you know how many hours have been saved without doing it the "slow" way first?

Like I said, not always easy to boil down to a concrete number, but you can always find good proxies. Fixed a problem that caused service to trigger alarms in the middle of the night? Saved engineering hours. Wrote a library that several teams use? Saved engineering hours. Even your example, writing documentation, saves engineering hours.

> Someone who isn't fixing a lot of bugs [...]

How would you be able to do any of that if you're not doing meaningful work on the system?
Yeah it would seem better to convey the pizza through a longer oven.
My translation to casual modern English:

In just a few days of writing - a few hours of reading - six hundred years have passed, and the life or reign of a king seems but an instant. Death is ever present, and the criminal who seizes the throne immediately loses it. From our remote position we look down on the rapid passing of sixty dead kings, who together barely make an impression on us. We might be surprised at their ambition for a throne that seems to bring nothing but death. But that surprise is lessened by the fact that the ambitious turn up everywhere and always. Nonetheless we might wonder why there is this constant desire to rule.

...I won't bore you with a long discussion of how miserable it is to be king, but it's clear that they are pretty miserable.
Other discussion: https://news.ycombinator.com/item?id=14711153
> Electric cars are technically superior once all the problems that make them inferior to petrol cars are solved.

Not exactly a glowing recommendation.
Dadaists and Surrealists would have argued that the cleaning lady did an an even better aesthetic gesture than the original artist by throwing the installation to the garbage...
Exploiting PHP unserialize in unknown environments
You can find 6x6 backs (as well as 6x4.5) but they're not as common as the 6x7 backs. Tried a Mamiya 7, and though I liked it, I just can't get into rangefinders. The framing not being exactly what the image will be always bugs me.
> However building teams on in individual hires take too much time and effort, with no knowledge about compatibility or assurance regarding the resulting efficiency of the team

Yes, but the cost of integrating too different cultures is also pretty steep. A group of people will tend to resist change stronger than an individual person. When you hire new people, they tend to bring what they know, arguing with things like "trust me, we used to do it that way in my previous company and it was great", now if the 10 people you hire think the same, you will have some serious cultural problems.

That said, I've seen a team (6 people) hire happen once, and it actually went well. The hired team was composed of super nice guys though and integrated very well with the existing team.
How do Lidar devices deal with potentially dozens of other Lidars operating in the same area?
Bridging the Gap Between Businesses and Developers
It looks like LE will let you do that:

https://community.letsencrypt.org/t/can-i-use-lets-encrypt-i...
Show HN: DIY tool for customized Machine Learning – absolute zero coding
And a quick follow up - our security team does not allow rogue * .company.com wildcards - they hunt down those sites and boot them off the network.

They do, however, allow *.<service>.company.com.
"It sounds like she just flat out ignored her manager under the assumption that her manager just needed to accept whatever her therapist advised her to do, which is kind of ridiculous on the face of it."

How, exactly, is this ridiculous? Is her manager qualified to give her mental health advice? Is her therapist less qualified? Is there some business "thing" that must be considered when suffering with a mental health issue?

You make it sound like she basically told her boss to "fuck off" while expounding what her therapist said. In reality, if was her boss who wasn't very empathetic. Probably because the cunt couldn't be.

Sympathy is showing concern for others where you don't have direct experience yourself. Empathy is where you share the experience or something very similar. So, for a company to claim that she had lack of empathy is what is ridiculous.
It seems like LetsEncrypt should support that, per e.g. [1] - I haven't tried it myself, but I don't see any obvious howlers in that thread, or any a priori reason why it should not work given correct arguments to certbot and a service configuration that permits ownership verification to succeed.

It looks as though Azure itself also provides a CA [2], or at least resells one's services, for use with apps hosted on the platform. Depending on your needs, that may be a better alternative, though certainly it will also be more costly. It also appears [3] that the only route that service offers to satisfy the subdomain requirement is a wildcard cert, so there's that.

[1] https://community.letsencrypt.org/t/certificate-for-just-a-s...

[2] https://docs.microsoft.com/en-us/azure/app-service-web/web-s...

[3] https://stackoverflow.com/q/43074994/1713079
That's actually a good point. Hence, the problem with such blanket statements I guess. But perhaps one can figure it out from the context in which it's happening.
Just a warning to anyone expecting auto-completion in Rust to be anything like C++ or Java, or even Typescript. It isn't close to that yet.
While I do not know the full potential of this, apparently certbot is the way to go for refresh services: https://certbot.eff.org/

In our prod we use https://github.com/GUI/lua-resty-auto-ssl to generate over 1k lets encrypt certs that refresh as they expire.

Hope these can help
I think this is an outdated perspective. You can easily train the WordPress CMS to handle any content you could possibly want to throw at it, including your above example (which would take like ten minutes, tbh), for sure. Took a bit of time to figure out all the moving pieces, but WP is a fully mature CMS at this point.

Interested in what other CMS's you would recommend? You aren't being very specific.
Yeah, I put on headphones for this. Seems like a cat generator.
More like hungry bears.
Wow, I didn't know about that one. Wonder if I'll get fired for spamming the eggplant in Slack later on.
>We will have some mining forever though, whether that's here on earth or elsewhere.

Yes, of course; the need for raw materials is never-ending. I just want mining on Earth to mostly stop, or at least be done in the most environmentally-sustaining way possible. Moving a lot of mining offworld would accomplish this.

>I want those with the means to (rich or upper middle class) to have kids

I'm not so sure this is such a great idea. Rich people can already have all the kids they want; it's not like financial concerns are holding them back from it. And I don't see how they're going to do a better job of it than regular middle-class people; in fact, rich people generally seem to be much worse and more sociopathic human beings, and their kids frequently come out awful--look at Paris Hilton for instance. I don't see why we should be encouraging them to have more; we don't need more sociopaths in the world. And again, there's so few wealthy people it wouldn't make a significant difference.
Platinum is a nice speculative play on your first note.

"Replace diesels with batteries on timeline x-y-z. Bam, just like that. Problem solved."

The platinum price has been dropping for many years, because Mr Market is thinking 5 steps ahead of where we actually stand with this. With above ground reserves likely dwindling, platinum has still managed to drop below gold again (and rhodium has dropped below platinum).

But batteries are not yet ready to take over everything. Diesels or at least combustion engines will keep improving for some time to come. In the meantime, plenty of room for alternatives like the discredited fuel cell, which can also use loads of platinum. (And on the supply side, you have the vulnerability that the country supplying 70% of the world's platinum is looking increasingly unstable.)

And for the record: I totally agree we should get rid of the combustion engine as soon as possible.
Real-World Angular Series – Part 4: Access Management, Admin, and Detail Pages
Author here. This hit hacker news in the middle of the night my time. I think the other replies already answered your question but it is worth mentioning that my point could have been worded better. Note that go works very well for other parts of the container system: docker client, docker daemon, containerd, kubernetes, etc. It is just the low-level namespace handling it has trouble with.
it is a _favourite belittling expletive goes here_ urinal there are millions of it.
Just use any of the dozens of tools to manage this automatically through cron. You don't even have to restart services, just reload them.
Saved me a lot of time. Thanks!
I'm pretty sure RMS said something to the effect that the ship has sailed with Clang. There's no longer any point in trying to prevent people from using proprietary back ends with the GCC front end. If they want to do it, then they can do it with Clang, so there's no point anymore in trying to "adjust" GCC's architecture.

I believe a prominent example is NVidia's CUDA compiler. As far as I understand this is just a modest fork of the Clang front end and a big new LLVM back end, and it's proprietary.

However Google has developed an open source alternative CUDA compiler, which is also based on Clang/LLVM: https://research.google.com/pubs/pub45226.html

Also I would have thought that Clang already has LSP support for C++, but maybe I'm wrong.
Instagram vs. Snapchat: Where Your B2B Should Focus
*s/democracy/meritocracy/
Right on! Perfectly stated.
1. All programmers should drop the "I don't have to be good at math" habit...you're disrespecting people who are likely in possession of knowledge that will help you later. Being "good at math" means you communicate and try to understand concepts. It's more about attitude than knowledge.

2. All programmers should learn Galois theory, not only to get over the idea that they can't be good at math, but to learn to appreciate math. The book by Ian Stewart is good, although I would supplement it with Artin or Dummit and Foote.

3. Try to figure out why Ken Thompson and Dennis Ritchie did what they did, when they did it. Very important for getting a historical understanding of programming. Also, try to figure out why Ken Thompson said what he did in "Coders at Work".

4. Read The New Hacker's Dictionary.

5. Read Naive Set Theory

6. Try (and fail, at least for a year) to read A Shorter Model Theory (don't give up!)

7. Read Code Complete followed by the Python 2.x source code

8. Read SICP and write a scheme interpreter in a language of your choice

9. Implement a simple LR parser, instructions here: https://en.wikipedia.org/wiki/Simple_LR_parser

10. Play Kitten's game http://bloodrizer.ru/games/kittens/

11. Play the UC Berkeley CS 61a adventure game https://inst.eecs.berkeley.edu/~cs61a/reader/

12. Play JSRobowar https://statico.github.io/jsrobowar/

13. Read "Development of the C Language" https://www.bell-labs.com/usr/dmr/www/chist.html

14. Read "The Mythical Man-Month"

15. Read "Simply Scheme"

16. Read "The C Programming Language"
There's also the idea of timeless physics, as argued in https://en.wikipedia.org/wiki/Julian_Barbour#Timeless_physic...

or in slightly different form in http://lesswrong.com/lw/qp/timeless_physics

It's apparently possible to rewrite all physical equations without time coordinates and they still work.

I'm not competent enough to understand all of it and to check if it's not contradicting any experiments, but I'd love to hear if it does.

It seems particularly elegant (because if the state of the universe can't repeat, then why do we need time?).
Very interesting read indeed. I've a question about it; the article is about defeating malicious crawlers/bots affecting a TOR hidden service, so my question is, how might the author differentiate bot requests from standard client requests on a request-by-request basis? I mean, can I assume that many kinds of requests arrive at hidden service through shared/common relays? Would this mean other fingerprinting methods (user agent etc) would be important, and if so, what options remain for the author if the attackers dynamically change/randomise their fingerprint on a per-request basis?
Meet these guys, they are kicking ass in that space, check out hypelabs.io
Is there a write-up somewhere explaining why this was a technical hurdle compared to base domain certs? Very curious.
I hope it hurts them enough that they stop with the shady business practices.
>This move by Letsencrypt should hopefully make them the standard for any external service that doesn't require an EV cert.

I'm kind of worried about this myself.

No matter how well intentioned, secure, or "good" lets encrypt is, having a significant portion of the world's TLS be under one umbrella isn't a good thing.

I'm hoping that we will begin to see other services pop up that are similar to lets encrypt (free, even using the ACME protocol) so that we don't have too many of our eggs in one basket here.
Author here. For more discussion on init handling you may find my article on pid namespaces[1] enlightening. In terms of differences from runc, there aren't many. The goals for railcar are threefold:

1: provide an alternative implementation of the oci-runtime so that the spec doesn't become too locked to a single implementation.

2: provide an implementation in a single language without some of the "baggage" of the existing implentations so that it is easy and fun to hack on.

3: experiment with new ideas to inform the future of the oci-runtime spec.

[1] https://hackernoon.com/the-curious-case-of-pid-namespaces-1c...
I've heard this is likely the most viewed image of all time. Any evidence for or against this claim?
The reason to go to university is to work with and learn from the best and smartest people in an area you enjoy. There is a ton of opportunity and you just have to take advantage. It is also a great time to figure out yourself, what you want and only have to answer to yourself.

I do think colleges should offer a 101 course where you get to work on establishing healthy habits and provide an understanding of mental health etc...
Decreased revenue tends to lead to even shadier business practices though.