skysight-inc/HackerNews huggingface dataset:
I've been both a "toiling in relative obscurity" and "rockstar" scientist. I really didn't mind being the first one, and I don't think my earlier research was necessarily bad, but I was at an undergraduate-focused university where teaching dominated my time, and I did not have the resources to conduct world class research. I am now a soft funded researcher at an R1 and love my new position.

What the author seems to be advocating is some sort of normalization process for the peer review process... it's not entirely clear what she is calling for. I've always advocated for double blind reviews, but it's very difficult for these to work because in small fields such as my own, it's pretty trivial to figure out who wrote the proposal. So it one sense, the rich get richer, but so long as the science that comes out of it is good, so be it! You aren't going to get R1 research done when you have a 3/3 teaching load with no graduate support, that's just life.

I have been on both sides of the review process and I have yet to feel like I was snubbed in my earlier "toiling" days, nor have I, when reviewing, felt compelled to award someone just because they were a "star" - if anything, I might even be more critical when reviewing proposals and papers from "stars". For me, though, I just basically follow the guidelines for evaluating proposals and let the chips fall where they may.
Nice! At Keplers in Mountain View you can buy version of Scrabble that uses regexes. The designer used to sell it in front of the shop -- he is obviously a programmer.
This is called double-blind peer review. Unfortunately, it is often against the interests of the most "eminent" players in a field, who benefit from their eminence leading to gentler peer reviews.
I would wager most US citizens are at least passingly familiar with the kilogram. Metric units are used in science courses, after all.
There is no dichotomy by default. In practice, most people can't seem to balance them, but I'd argue it's because they chose their partners/friends etc... wrong. Ever hear of a "Power couple?"
Think about your error handling best practices. Mine are:

1. Re-structure your logic so the error cannot happen

2. If you can't do 1, recover from the error silently and continue on with the program

3. If you can't do 2, handle the error gracefully and notify the user of what state is changed, letting them choose whether or not to continue

4. If you can't do 3, inform the user of what happened and ideally provide the user corrective action they can take, then exit cleanly with an error code

5. If you can't do 4, exit cleanly with as descriptive of an error code as you can

6. If you can't do 5, you're probably faced with crashing or exiting with some unhandled exception. This is a bug that should never go into production.

Always be looking for opportunities to move your code up that hierarchy. Moving every 6 to 5 is my personal bar for barely acceptable quality. 4->3 is usually a big win (basically anything that prevents the program from exiting).
It's not a job you go into for the money. They're making like twice the median income for the US, that's more than enough to live comfortably. Frankly, you don't get involved in that line of work without some serious patriotism.
CAs in practice don't verify who you are; they just verify that you are the entity that controls a particular domain name.

LetsEncrypt does this automatically, for free, and in a more user-friendly way. For information on the security considerations involved, see [1]. These are similar considerations to those of most DNS-based CA verification methods (which is most of them).

[1] https://ietf-wg-acme.github.io/acme/draft-ietf-acme-acme.htm...
DDD – the rule that Entities can't access Repositories directly
In addition to what the other replies have already said: Domain Validated certificates have been a thing for years before Let's Encrypt entered the market. Most sites have used them and all mainstream CAs have automated the validation procedure and do not verify the entity requesting the certificate, only domain control/ownership.
For those of us who don't know what any of that means, can you add $ figures to those terms?
Awful news. But I'm glad to see that it's part of an attempt to stay independent - I hope Soundcloud sticks around, in control of its own destiny, for a long time.
User ruytlm has posted links to hacker factor blog, and it seems some sophisticated scanners (e.g., Eddie) were crashed by the exploit. In that blog the author postulates that Eddie is a nation-state level (not script kiddie) scanner, so I'd say that the answer to this question will be in your definition of naive. It's tempting to qualify any scanner which crashes on this as naive though, I'd agree. Especially moving forward with the publicity of this post/topic.

Well actually from memory the author of the blog was doubtful if this exploit actually crashed Eddie or not, but it did crash the other bots (Eddie V1 did go offline, possibly as a crash), so it would appear you are correct. Only truely naive bots might well be affected by this.
The problem with a physical standard like that is that you can't (easily) ship it to labs all over the world so that they can calibrate to it. At least when you use fundamental constants, each lab can set up their own equipment to produce the correct measurement.

Also, anything physical will shed atoms, which will affect the mass.
A lot of those positions aren't in high cost areas, especially if you don't have kids. The area near Fort Meade, MD isn't too bad. San Antonio, TX is reasonable. Aurora, CO (just outside of Denver) isn't bad either, neither is Augusta, Georgia. A starting salary of $70-$80k for a recent college grad goes a long ways in those areas.
A note from Alex Ljung (Soundcloud lets go of 173 employees)
Regardless of those points, having a standard protocol for this kind of thing makes a lot of sense, instead of binding directly to the AST data structures of each compiler.
> hData is null! Why is that? It turns out that the clipboard allows an application to pass in null to SetClipboardData for a given format.

"Turns out"? This is clearly spelled out in the MSDN API documentation, which is all you need to understand all this. (No NotePad stack traces required, let alone ones in a proportional font).

SetClipboard: https://msdn.microsoft.com/en-us/library/windows/desktop/ms6...

hMem [in, optional]

Type: HANDLE

A handle to the data in the specified format. This parameter can be NULL, indicating that the window provides data in the specified clipboard format (renders the format) upon request.
Actually, that law in Seattle that allowed trash collectors to rummage through your trash was ruled unconstitutional under the state constitution as a violation of privacy.

http://www.seattletimes.com/seattle-news/politics/judge-seat...

That aside, I think a smarter solution is taxing the actual thing you don't want (carbon in the air via a carbon tax) rather than second order things (gasoline cars).

It's much more effective. For example, if your Tesla is being powered by coal, you're doing almost nothing for the environment by switching to electric. So we need to set up the incentives thoughtfully, rather than being reactionary.
* Why do I have to download an 8MB payload on load, most of which consists of 1MB+ PNGs, which aren't even visible until I scroll?

* Why are you doing some unintuitive scroll-jacking?

* Why are you using React for literally a single scrollable page?

* Why are you putting the scroll position into the URL instead of somewhere like local storage? It's annoying that I can't even leave the page without pressing back multiple times.

ugh
There is an alternate definition using a sphere of silicon with N atoms:

https://www.nist.gov/physical-measurement-laboratory/silicon...

What's really need though is a universal, stable over eons, single standard for time, length, and mass. I believe time is N cycles of an excited sodium (light) emission. Length is N wavelengths of that same emission in a vacuum. Mass would be N atoms.

So why are they not using a single element to define everything? Is it a matter of finding the proper element that is easy to excite and stable enough (chemically and atomically) over the long term? Sodium is very reactive and easy to excite. Silicon is probably the opposite.
Or a third salary if you're a triple agent :)
Let's Encrypt strongly encourages you to use a tool that does automatic renewal a month before the cert expires. If someone manages to DDoS Let's Encrypt for an entire month, I think we're firmly into "you have bigger problems" territory. (Among other things, if 50% of the internet were in fact on LE, major internet providers like CloudFlare and Akamai and Google would start offering to run LE directly on their own infrastructure after a week or so of this.)

Bugs in the cert verification process are the same amount of risk regardless of whether everyone is using the CA or nobody is, as long as the CA is trusted. There's nothing gained by putting your eggs in multiple baskets.

Also, these all seem like hypotheticals when the old-school CAs have had OCSP downtime, bugs in the cert verification process, incompetent staff signing and publicly logging google.com certs to test their infrastructure, governments asking and receiving unconstrained intermediates, unconstrained intermediates as a publicly advertised product, etc.
Could I stop by this afternoon and expect it to be in stock or was this a temporary offering?
France set to ban sale of petrol and diesel vehicles by 2040
Young Minority MIT Grad Needs a Laptop to Code, can We Help Him?
I recently spoke to a young African-American MIT grad who moved out to Silicon Valley a couple weeks ago to work on his startup in an (unfunded) incubator program. Unfortunately, his machine is on its last legs and he's unable to get another one at the moment.

I thought I'd reach out to the HN community to ask for any creative solutions to help this young man out. Some of the other incubator members started a GoFundMe for him (email me for URL) but I'm not sure that's the most direct approach for solving the problem.

Do you have any suggestions as to how we can get this young man a machine to continue his journey as a young entrepreneur?

Desired Specs: "Any decent development machine. Preferably 8gb RAM and MacOS or Linux."

Note: This story can be verified with a well-known VC and other reputable folks around Silicon Valley, just ping me for details.
To verify that it still boots correctly after an update.

If an update does something that breaks your startup sequence it generally is much better to find out about it right away than it is to find out about years later in the middle of the night when you get a forced reboot due to hardware or power issues, and find that things are broken and you have no idea which of a dozen allegedly minor updates broke it.
How Mutable DataFrames Improve Join Performance in Spark SQL
I believe that system existed before pagerank, and always assumed that Larry and Sergey were inspired by it.

EDIT: CiteSeer is what I was thinking of (1997).
> Some rough news today for SoundCloud, the audio streaming site whose content is largely based around uploads from its 175 million users in 190 countries.

Does SoundCloud see itself as an audio streaming service now, as opposed to an audio hosting service? That seems like a focus shift away from where they started, and puts them up against behemoths like Spotify. Maybe that's related to why they're struggling.

Tangentially: does anyone have any idea of how Bandcamp is doing?
> One thing that emojis cannot convey is unconscious body language.

Would be interesting to build a chat application that uses the front-facing camera and a little ML to determine your facial expression and attach the appropriate emoji while you focus on writing the text.

Even more interesting would be if it did that without showing you the emoji it inserts.
> code-inlined error reporting is still a big miss

Do you mean errors next to lines? If so that works today in the RLS variant. You get a red highlight and can mouse-over for details.
"paypal.com in the name" is a bit too ambiguous. You can register a subdomain like "paypal.com.example.com" and acquire a certificate for that, that's correct. There have been no mis-issuances under the actual domain "paypal.com", to my knowledge.

Here's a blog post explaining why Let's Encrypt does not think it should be the CA's job to prevent this[1]. At least two browser vendors seem to share this sentiment[2][3].

[1]: https://letsencrypt.org/2015/10/29/phishing-and-malware.html

[2]: https://groups.google.com/forum/#!msg/mozilla.dev.security.p...

[3]: https://groups.google.com/forum/#!msg/mozilla.dev.security.p...
It's been a downhill trend ever since trending likes were replaced by reposts. Trending likes actually showed which tunes my friends found most interesting. Reposts allowed a single user to spam a feed with their personal taste. Then repost bots were allowed to require repost to unlock a free download and now discovery on SoundCloud is almost dead. My friends who are successful producers but refuse to play the bot and pay-for-repost game are completely drowned in the noise.

My bet is that since trending likes are a Graph DB problem, SoundCloud just chose not to solve it once it became too hard on their database. They famously had issues with early Mongo adoption so this would fit right in. Their most recent frontend HTML5 rewrite always winds up my CPU and hasn't changed in a couple years.

SoundCloud to me has always been a great idea with some great design that got ruined by some poor engineering choices from the top. And at the end by a desperate grab for stats and cash. I think producers would have paid more, better subsidizing free plans, if discovery hadn't gone downhill. I ran the numbers once on how CDbaby and Bandcamp became successful (based on stats trickled out over the years) while SoundCloud could never turn a profit. There's still plenty of room for someone to do this right.
Fun fact: the eigenvector centrality computation in PageRank was originally used for citation networks many years before PageRank.

A surprising number of web spam problems have parallels in academic publishing: spam rings, "rich get richer" problems caused by paper search engines, and outright demands for self-citations from editors to boost a journal's impact factor.
Other sources say total employees are 420, so it's roughly a 40% cut. Ouch.
people who have enough money to pay off a middle-class house and live off investments

Because that's not freedom. That's some middling low rent outcome.

Freedom means I don't have to wait in line if I don't want to. That if a hurricane comes through and destroys my house, I can just move to another one without trouble. That if I get Liver cancer, I can buy a house in Tennessee and skip the donor wait list in California (Like Steve Jobs did). It means the local cops won't bully me and my family because I paid for all of their fancy new equipment. Etc...

Freedom is not sitting idle in some garage fiddling with some bullshit. It's about being able to act with as wide as options as possible.
Not when you factor in good work life balance.
Daring to Defy Software Extinction: A Limited History of Development Tools
Ask HN: Your best advice when scouting customer dev interviewees.
I'm working on something new and unlike in the past when I'd dive in straight into product development, I really want to take the time to validate the problem and hear why it wouldn't work (if that's the case!). I'm determined not to repeat mistakes of the past.

I'm realizing that the ideal person who I'd like to interview/validate pain-point with is CEO/COO/someone in a similar capacity. The reason is that my idea falls in a space (more effective collaboration in companies) that concerns them the most - ensuring knowledge is being shared and discussions are taking place across-the-company.

Reaching out to CEOs of well-known mid-stage startups on LinkedIn though seems daunting - not because they may ignore the email but because I wonder if this may just be too cold and ineffective a way.

What has worked for you when starting cold and prospecting interviewees (at the highest levels) for your customer interviews (pre-product)?
You're right but size doesn't really factor in any of your points.

Assume for instance that the country of Hackeristan manages to have one of its authorities accepted in major web browsers. This authority is only meant to sign Hackeristan domains and only signs a tiny amount of certificates.

Now let's imagine that this authority is compromised, maybe the Hackeristan government wants to intercept connections to gmail, maybe the authority is vulnerable to hackers. One way or an other, it signs a bogus *.google.com certificate. Well it's game over, since the authority is trusted by all major browsers everybody's vulnerable, even though it was a tiny CA. Only certificate pinning can save you now.
Building an analytics and reporting stack in 2017
Statamic is dope! not sure its open source though, i think it requires a license.
For your own projects, nothing.

For me accessing your project, third party validation that a consistent entity exists is worth something.
Intro to React Native for an iOS Developer
This is what my ex-gf would call my manhood. Guess why we aren't dating any more...
UK common law as it pertains to "duty to retreat" and "self-defence", is largely a question for the jury. There is no fixed legal standard other than whether the actions were reasonable given the person's knowledge of the situation at the time.

The US tends to be a little more prescriptive, leaving a situation where different jurisdictions have more specific requirements for defining what constitutes self-defense.

Juries in the UK tend to have significantly more responsibility for making judgments like these, leading to a system where evolving views of what is right and wrong can result in standards naturally evolving over time, rather than being fixed by what people thought was okay thirty years ago.
This times 1000.
AN API IS ALREADY A PROTOCOL but it doesn't require external processes, serialization, extra failure modes, etc, etc.

The fact that the HN community seems to have jumped aboard this idea, "yeah let's just require a server to do something simple like format text in your editor", is completely flabbergasting. People just seem to have NO IDEA how much complexity they are adding, and don't care.

Maybe in 5 years our machines will be running 10,000 processes at boot because people will want a server for every operation...
Go on ebay, and search around for 386 motherboards, 5.25 floppy drives, and the like - for old DOS systems. Prices fluctuate, but on the whole some of those boards go for an insane amount of money (for what they are).

A lot of this is "collectibility" bumping prices up; but a part of it is also the fact that there are more than a few companies in the world running CNC tooling that uses these machines as controllers. We're talking CNC machines that to replace entirely would cost hundreds of thousands of dollars (USD), if not more in some cases. So parts to repair and keep these machines running are in hot demand.

There are, though, a few companies out there taking a different approach: Since most of these systems are DOS based, they work to reverse engineer the controllers, and build custom Linux or other embedded systems, running DOSbox or some other emulator, to keep these machines alive. In some cases, a complete reverse-engineering is done (both hardware and software). There is a demand for it, and very few providers of this kind of service (some machines have little or no documentation on how they worked or were controlled, some have manuals in a foreign language, software is highly proprietary and dongle-ized, etc).

So for that case - for your question - yes, this is still done, and likely always will be. I'm sure there are other more "mundane" examples of people using old software on either new machines (say in a VM, or maybe if it runs, just on the new system) or using emulation. There are a few kinds of software where there is great trouble to be had trying to emulate it or such (either because of security dongles, or other custom hardware) - but if it can be done, it is likely to be done...
Gibberish title deliberate; note that you can get in via FB: https://www.facebook.com/wsj/posts/10156297291923128
Still no cure for cancer.
Ah, interesting. I wonder how much the longer drive hurts the quality though. I can certainly tell when my pizza sat around too long.
> You do not need emoji.

> You need to communicate. Clear, concise, eloquent, and precise use of english* allows this to occur.

Unfortunately, it's not that simple (is it ever, with language?). Different forms of communication have different standards, and some modern forms differ from normal English. For instance here's a study showing that text messages ending with a period are considered less sincere:

http://www.sciencedirect.com/science/article/pii/S0747563215...

Clearly, there's more to it than just using clear English. I bet if some of those sentences ended with a smiley instead of a period, the intended meaning of the sentence would have come across more clearly to the recipient.
If you mean GS-11 and GS-13, that's $52329.00-$68025.00 and $74584.00-$96958.00 [1]

[1]. https://www.federal pay.org/GS/2017
So US bonds were yielding 4-5% back then?
LastPass – An unsolicited redesign
7 tips to become a better web developer – DailyGit
As a vim user, I'm very excited about LSP. Neovim (close enough) may add native support, which would be great: https://github.com/neovim/neovim/issues/5522

It's possible to do a lot of the nice IDE features in vim (and I'm sure emacs) today w/ all sorts of contortions, but a standard way to get this done would be amazing.
My first thought was that these formed during glaciation when most of the continental shelf was exposed. The rivers just had to flow further to get to the sea. My second thought is that my first thought is still valid after reading the entire article. It is interesting that they have mud flows in those areas, but I doubt that has much to do with how they formed.
Never mind, this was an error in the https://regexcrossword.com/playerpuzzles/595e5542d2433 version, which has a (.) where it should have a \1 in row 2 (thanks to @angry_albatross).
Deako (YC-W16) | Senior Software Dev | Seattle, WA | Onsite, Full-time | deako.com

Fast growing home automation company in Seattle. Our product is a mesh connected smart light switch that lets users control any light from any switch in the home. Our hot swappable design lets users and builders upgrade dumb switches to smart in seconds.

Our full stack engineers use Python, Flask, AWS, RDS, React and other tech. If you like to geek out on IoT, Python, and home automation then come join us.

Apply here: https://www.deako.com/careers
"Every Olympian has a coach"

I like to do things by myself, but the quote above I heard a few years ago and really changed the way I think about asking for help.
Ask HN: How do you easily manage multiple remote servers?
I manage a lot of VPS servers (Linode, Digital Ocean) for work. At first, it was no problem to just SSH in and do maintenance, package upgrades, manage iptables, etc, but I don't find that this scales well past 10+ or so servers (now have upwards of 20).

I'm aware that there are commercial products available, like Parallels, and Canonical's Landscape. However, only some of my servers are running Ubuntu, so that rules out Landscape, and in my limited understanding, running a command panel like Parallels really increases the attack surface on my servers.

Currently I use terminator with broadcasting to simultaneously type on multiple terminals. Are there better options? What tools would you recommend?
It just sounds sad, honestly. Cooking is not hard, and it can be downright easy with just a small amount of ingredients and whimsy. There are hundreds of dishes you can make in a single pot! There are fantastic recipes with three ingredients.