skysight-inc/HackerNews huggingface dataset:
That would just make a masters the new collage degree.

The real problem is a huge swath of the US economy is based on reputation not ability. Exclusivity is the goal, so the more people reach benchmark X, the further companies will move the benchmark.
The added "benefit" is that once more systemd gets to define behavior.

Systemd is not about building refinements on unix, it is about turning Linux into something like OSX or Android. a OS that use unix semantics only for bootstrapping convenience.

Effectively they are turning the Linux kernel into a convenient source of drivers, but beyond that could not care one bit about unix.

I really wish i could find the interview again where it mentions that Poettering in the past have advocated throwing away the chapters on unix programming from one of the seminal works on programming unix and Linux.
I'd rather take it a step backwards. Instead of making college free and standardized, fix high schools so that a diploma means something and your entire populace does have a foundation.

High school already doesn't mean anything, making college free and standardized means that college becomes not just a defacto expectation but something everyone has to do and there's really no point in that when we have the level below that underperforming.

Both are monumental tasks, though.
Again, if that takes you 40 minutes with a Blue Apron meal, you're doing it wrong.
Yes - this. I'm pleased that younger people in my team are learning things from her posts. Being a grey-hair *nix guy (not a grey beard!) the posts are interesting, but I know there is a LOT more beneath the surface. She's a valuable addition to the net!
If anyone is interested in the engineering and management failures that led to the disaster, I can highly recommend the lecture at the link below. It's presented by Sir Brian Appleton, a chemical engineer who provided technical advice to the Piper Alpha inquiry. He examines the systemic safety shortcomings in great detail and reveals some fascinating and broadly applicable lessons on managing a complex system.

https://www.youtube.com/watch?v=S9h8MKG88_U
Is it ever OK to take a harmful job to do more good? An in-depth analysis
We are somewhat offtopic, but: That sounds a bit like the church in the middle ages saying: "your sins are what is holding society back, that is why you can't have nice things". Or like many utopians, who wanted to create a "better man". Or their detractors, who said utopia doesn't work because people are flawed.

I don't want to change people, I want to change society.
GoCD vs. Spinnaker
I believe the major web browsers all reject wildcard certs for TLDs. For more discussion: https://security.stackexchange.com/questions/6873/can-a-wild...
Yes, I am all about the calisthenics.

I don't have the best set up now. But my Walmart style iron gym pull up bar for my door, with gymnastic rings hanging on it, goes a long way. Sure, if I needed to progress further in the future, I would probably need more space for the rings, but it suits my workouts.

Hiking up mountains is for the leg workouts.
As a member of this demographic I'm seeing a huge reluctance for peers (and a reluctance in myself) to bite the bullet, swallow my pride, and take a minimum wage job until I can get better on my feet. I feel like I'm so close to the promised utopia upper class lifestyle of a full-time software engineer that taking extreme measures like the women described in this article seem justified.

But why didn't she just go to the public library? An internet cafe? How many hours and how much frustration was endured trying to code on a touchscreen device?
Upgrading simple shells to fully interactive TTYs
But have you seen Woman In Underwear Masturbating While Lying On Bed?
PAIR: The People and AI Research Initiative
It's not reasonable that a person's life be thrown into chaos through circumstances that may be outside of their control, but life isn't fair.
You make a really good point about the post patch exploitation from Cloudbleed putting that in a different category. I guess my thinking was: Is this guy the first? Are the authoritative IO domain servers compromised some other way? Are the other servers legit?
With some exceptions, those proofs make assumptions about their primitives like having block ciphers be "unpredictable permutations" or having hash functions be "random oracles". These proofs also make assumptions that information doesn't leak in other ways (like BEAST, heartbleed, timing attacks, poor entropy sources, etc).

In other words, those proofs don't have as much real-world significance as you'd like.
One day this is going to happen with someone's stolen boudoir shots and we will witness the first of a new genus of lawsuits.
HSTS preloading doesn't help if you can get a Domain Validated certificate. HPKP preloading helps, but only if you pin to a CA that won't issue a DV certificate to someone who controls 4 out of 7 of the nameservers for the TLD your domain is in. And also only helps if the incident is cleaned up before the browser preload process catches the malicious server when confirming the preload. It might be a good idea to require DV certificate issuance to respect DNSSEC -- in this case, the poison nameservers wouldn't be able to sign the responses properly, and .io is DNSSEC enabled.

Certificate transparency should help you know what's going on, but only if you're getting notifications through a method that's not compromised (email to your domain may not make it to you).
People are focusing on the wrong question.

The question is not: what are the relative costs and benefits to user-repairable products? Of course there are both benefits and drawbacks.

The question is: who should decide?

That is, should the government enforce a "right to repair" - which means a ban on non-repairable products? Or should companies be able to manufacture both repairable and non-repairable products, and let consumers decide which they want to buy?

A free society is broader than just the free market. No companies manufacture a repairable version of X product? You can use free association to form the "Society for User-maintainable X Devices". You can use free speech to campaign in the press for user-maintainable X devices. You can promote to others the virtues of having a user-maintable X, until there's enough latent demand for startups to spring up to fill it.

None of this requires the government.
A central aspect of a market to function is transparency. With a service contract, there is more transparency, since you know exactly what the service will cost. Not so with products.

Also, let me ask: would you recommend the government to look for a service contract for their fridges/lighting/washing machines? Or would you recommend them to look into buying this equipment?

What would be different for companies and consumers?
working on the MVP as we speak
Poettering is perhaps an asshole, but Torvalds reputation for being so is overhyped to put it mildly.

Never mind that they have faced off (sort of) on camera at least once, with Poettering basically missing the point again and again that not just Torvalds but also other long term kernel devs on the stage was raising.
Listen Up Gals: Here’s What’s Up with Tech
They do that to prevent account farming. Google is one of the very few companies that refuses to accept my VoIP DID number for 2FA, because they know it's not a "real" number. A wise move, considering that SMS-capable DID numbers only cost a few dimes when you buy in bulk.

They're not insisting on 2FA-by-SMS since you can immediately disable it after you prove that you own a valid phone number and thus is much less likely to be a spammer.
Yet more reasons to disagree with experts on nPetya
The article worked... I am alarmed.

Is there anything I can do with software that would make a difference? Currently, the only things that are coming to mind are simple carbon footprint calculators or infographics/visualization of data, which imo would not be that impactful. I would love to hear ideas
I though ICANN was supposed to be getting serious against fake contact data on domain registrations? The fact that even a TLD's NIC admin info is fake is pretty spectacular.
It is, I use it
Code and Journalism Today
Actually, I think and read about these processes a lot. I have taken intro to psychology, social psychology and a class on negotiation and conflict management. I find social stuff fascinating and I love to study it.

But it takes 15 to 20 hours a week to establish and maintain a genuinely close relationship. Forty five minutes is barely a down payment on that.

I have known "players" and how they operate. They are good at creating an illusion of closeness, often based on outright lies. Their goal is sex, and her welfare be damned.

Forty five minutes is also not enough time to verify if what they are telling you is something genuine. It can take weeks to learn that what he shared day one to make you feel all squishy is all made up BS.

So 45 minutes may be enough to create certain feelings, but if you think that is genuinely a close friend that you can trust, you have a lot to learn about how relationships work.
Yeah I remember that story as well. The reason it made the news is that the bot went a bit too far at times: http://www.rawstory.com/2013/03/ceo-automated-process-led-to...

You have the same type of listings for hoodies, mugs and many other "consumables" that are cheap to print on demand.
Pair programming tests are fair because the company is investing the same time as candidate, just like any interview.

Asking candidates to do tests on their own time is rude and dumb.
I remember watching a video about this town on CNN and it dead coal industry and its younger generation leaving for college, many with no plans to return.
People had to drive into the next county to shop with the walmart gone.

edit:
http://www.cnn.com/2017/06/14/us/west-virginia-graduates-app...
That's par for the course. Unikernel people talk about VMs that use megabytes of RAM while cloud providers only provide gigabytes. Unikernel people talk about spawning VMs in tens of milliseconds while clouds take tens of seconds.
> There is no conspiracy

Aren't corporations, by definition, a conspiracy to make money? Conspiring to make money is what an investment bank exists to do. It would be dereliction of duty if they weren't conspiring to make money.
You are completely theoretically correct.
Even just entering text into the search bar uses loads of resources. Every character entered does a full search of your history and bookmarks, sends a request to Google to do autocomplete, prefetches the web page you are typing, applies spellcheck, etc.
>At the same time, it’s proven difficult to kill off particular types of two-factor even after they’re shown to be insecure. The National Institute of Standards and Technology quietly withdrew support for SMS-based two-factor in August, pointing to the risk of interception or spoofing, but tech companies have been slow to respond. If anything, services are relying more on SMS as Twitter and PayPal look to tie accounts more closely to phone numbers. It’s less secure, but easier to use. As long as it’s two-factor, few account holders know the difference.

Is perfect the enemy of better here? I would think that having a second factor is probably orders of magnitude more secure than not having one, even if it's a hijackable medium like sms.
"I did not miss the point".

Really though? You're going to be like that? You're going to be the guy that tells the person making the point they didn't mean what they meant, after failing at reading comprehension?

The post I responded to said:

"Why even ask for resumes if you're going to ignore them? I also get very annoyed when people ask about your experience, then in the very next breath pretend none of it matters and you should do fizzbuzz."

Which I called bullshit. Then I listed a bunch of things that are also bullshit of the same kind but they get incrementally more bullshitty, among them was this:

"Alright you aced your assignment which despite being entirely unrelated to the actual job, domain and language, convinces us you got what it takes."

Which somehow you took literally.

Because somehow, you believed, someone would actually not only do that, but they would actually think that. They would actually knowingly hand a candidate an assignment they know is entirely unrelated to the job opening, and they would go online and detail their though process on this.

Was this a one time incident or do you go responding to every piece of irony on the internet pointing out that the writer must have meant what they said.
1Password moving from local storage to cloud subscription
Me neither. I'm not saying she should've lied more, I'm saying it's sad that that might have been to her advantage. The real problem is the media and the electorate just cannot handle a serial liar like Trump.
> But why didn't she just go to the public library? An internet cafe?

She isn't close to one. And I don't know of many libraries that are cool with you videoconferencing with instructors and pair programming 8 hrs/day.
I've sometimes used it (or ve) in the past, because there's no good gender-neutral pronoun and I don't like to assume. (This is partly a politeness thing and partly an accuracy thing.)

Occasionally when I would do so, people would get confrontational about it, so I mostly stopped. But now that means I sometimes waste time trying to find someone's gender even though that's totally irrelevant, and/or try to work around needing a pronoun at all, and/or use "they" even though I don't like it. None of these solutions is great.

(Btw, I don't parse you as confrontational. Comments like yours wouldn't have bothered me.)
Unikernels are not that new. CMS running on VM has existed since the 1960s, with CMS being the unikernel (actually, a unitasking OS about as complex as MS-DOS) and VM being what's now called a hypervisor: Something which multiplexes hardware, but provides no APIs, such that VM guests think they're running alone on bare hardware.

(VM can even run VM as a guest, recursively, which is useful for developing the newer version of VM on a machine other people are using for other work.)

Therefore, we can evaluate these claims by asking what we know about security breaches on VM/CMS systems.
Yeah Awk and JavaScript have surprisingly similar syntax. But the semantics are very different. Here are some things I found when studying Awk a bit more:

- Awk has no local variables! There is no "var". Believe it or not, people fake locals with unused function parameters.

- Awk has no dict literals like d={}. And no function literals like f = function(x) { return x; }

- Awk dicts can't be nested. You can't have something like: {key1: {key2: 123}} (using JS syntax)

- Awk CAN accept dicts as parameters, but it CAN'T return them. "return d" is invalid.

- Awk can't take functions as parameters OR return them. That is, no higher order functions.

The latter three facts are basically consequences of the fact that Awk has no garbage collection. It has a strict stack discipline and no nested compound data structures.
Experience Dunkirk in WebVR
Amazon Patents Underwater Storage Facilities Plan
It changes the practical side.

As more and more psychopaths learn that there is no global ruleset the more entropy we get.

If everyone learns that there is no difference between suicide and drinking coffee(via Sartre), then the number of suicides will inevitably rise.

There are people who supported certain presidential candidate(s) just for the lolz. They were proud of their nihilism.
Eventually the internet will just be bots creating content for other bots to consume. And us humans can go outside and find something better to do with our time.
Previous discussions of JMAP:

* https://news.ycombinator.com/item?id=7141152

* https://news.ycombinator.com/item?id=8785894

* https://news.ycombinator.com/item?id=10781894

* https://news.ycombinator.com/item?id=14283659
I assume it's referring to shell injection attacks. No shell means no shell injections. Of course, it also means that whatever functionality you were calling in a child process now must be in the same address space as the rest of your system. (E.g. rather than call Imagemagick to convert some incoming images from the client, you now must have a library with equivalent functionality in your unikernel.) Whether that's a net security improvement is questionable.
There's an income share agreement and you submit forms to the IRS that lets us see your taxes. So it's a legal agreement.

You pay a fixed percentage of salary if you're above a certain threshold (currently $50,000/yr). If you don't get a job in your field above that threshold you never pay us anything.
At scale the cost of implementing a feature as wide ranging as 2FA is well beyond the tech cost. A basic TOTP implementation can be coded from scratch in an afternoon[1].

The real cost is testing to make sure a code change like this doesn't break existing users and estimating the additional support overhead of dealing with users that lose their two-factor devices.

[1] Seriously the RFC is very straightforward and readable: https://tools.ietf.org/html/rfc6238
Hacking web with BurpSuite Vulners scanner plugin
Looks to be unikernel is just a RTOS, why the name unikernel then ? Whats the difference with RTOS?
Exactly, thanks for explaining.
Reasons Why We Need to Decriminalize Drugs – And Why We're Closer Than You Think
I have to say, it only seems troubling because you're reading an offer that isn't actually there.
Project Everest: Efficient, verified components for the HTTPS ecosystem
Very true. My ex- was nervous about accepting a vet tech position for about a year before she started vet school.

She was nervous because they "required"/"only wanted" someone who "was going to be there long term".

I asked her: "They want you to make commitments to them that you will be there for a long term. Are they willing to make the same commitment to you? Or are you out the door the moment you are unneeded?"
> every resource on it has to be reloaded every time the user navigates

Since when? Browser cache is a thing that exists.

> especially for users on low-end devices and/or high-latency connections

I use an original iPad Mini (so basically the guts of an iPad 2 with a smaller screen) for occasional browsing. It definitely works better on simple, JS free pages.

I use said iPad Mini in Thailand. Regardless of our ISP provided line-speed, connections out of the country are always a throttling point for data. Having a regular browser-provided loading indicator (which can actually be intelligent and use things like the Content-Length header) is definitely preferable to some in-page JS (see above) spinner that gives zero indication of what % is loaded, or if it's hung, or whatever.

I am convinced at this point that SPA's basically exist to be 'portfolio' sites for front-end developers, the way designers would (maybe still do) create their own take on a popular app/website/etc and publish it, to show off what they're capable of.
I think they will be impressed by any developer, without professional algo trading experience, being able to understand the nitty gritty of how exchanges work plus some basic algos.
PropEr Testing: Property Based Tests
This appears to be browser specific.

I copied his code-pen and used his first example in Safari (just using the `left` css property) and it was still 60 FPS in Safari (per debugging tools). I wonder how much variance there is between browsers on this. (I'm on a Mac 10.12.5 using Safari 10.1.1 (12603.2.4))
A good example of the architectures you are describing are Android and UWP.

Although the lower levels are written in a mix of C and C++, the OS Frameworks are explicitly designed for Java, C# and VB.NET.

Trying to use C or C++ for anything more than moving pixels or audio around is a world of pain.

The Android team even dropped the idea of using C++ APIs on Brillo and instead brought the Android stack, with ability to write user space drivers in Java (!).
And if you're focusing on operating efficiency with an digital-only storefront you could try variable pricing.

Want a sandwich at noon? That's $7. Want it at 3pm? That's $4. Want us to drop everything and get it to you in 15 minutes? That's an extra $2.
I think this is a great argument for a single payer system. Let the government and hospitals duke it out. When it's the government's money that is being lost, the government might actually care and start negotiating with these providers. Even if it doesn't, at the very least, patients lives won't be ruined by bills for services that they had no control over or knew the cost of beforehand. Not only that, but the government can afford it. When they're losing trillions of dollars on the defense side, I'm certain they can pay for every medical procedure in the country and still have plenty left over. This whole idea that the government doesn't have money to pay for healthcare and other necessary social services is such fucking bullshit when they have the ability to lose trillions in defense and just shrug it off. That's not even mentioning the money that isn't lost on the defense side. Unfortunately, I don't think people have the capability to push their government to spend that money correctly. But that's a different problem altogether.
That is a good stat. I also wonder what the median is (although there probably aren't THAT many vintage/classic cars skewing the average).
FoundME | Frontend developer | Gent, Belgium | REMOTE, INTERNS
This comment is in terrible taste but it isn't wrong. We can't just shove our hands in the sand and say it isn't fair so it isn't true.
Joe Hruska, founder and CEO of RescueTime (YC W08), has died
Tl;dr / excerpts:

1) Decriminalization benefits public safety and health.

2) Drug possession arrests fuel mass incarceration and mass criminalization – not to mention institutionalized racism and economic inequality.

"U.S. law enforcement arrests about 1.5 million people each year for drug law violations – and more than 80% of those arrests are for simple drug possession."

"For noncitizens, including legal permanent residents – many of whom have been in the U.S. for decades and have jobs and families – possession of any amount of any drug (except first-time possession of less than 30 grams of marijuana) can trigger automatic detention and deportation, often without the possibility of return."

3) Other countries have successfully decriminalized drugs – and the U.S. is moving in the right direction

4) The American public – as well as leading governmental, medical, public health, and human rights groups – already support drug decriminalization.

"Polls of presidential primary voters last year found that substantial majorities support ending arrests for drug use and possession in Maine (64%), New Hampshire (66%) and even South Carolina (59%)."
"Kidnapping isn't that bad if it doesn't happen often" as an argument means I'm bowing out at this point.
No worries :)

Yeah, on one hand, relative ease of use is important, especially if you're trying to write a tool to replace others. And I'm not saying that is not important. Just that it's important to consider both, not only one.

Compare it to when trying to make a website easier to use. Ok, fine, compare it to other websites too, but your first-timers that have no experience with anything else are important too.
Higher Levels of CO2 May Diminish Decision Making Performance (2013) [pdf]
I used to worry about that, then I realized that I've book 3 copies of some physical books I like - I read them enough times that I wore 2 copies out. Now I realize that it doesn't actually matter that I can loan paper books as I rarely do.

Cheap paperbacks wear out quick, I wish hardcover was available after books come on paperback because the books I like in paperback I go back to look for hardcover but by then hardcover is out of print. Though often I can find a library edition which is starting to become my default for paper books.