skysight-inc/HackerNews huggingface dataset:
I would gladly subscribe to an NPR-caliber newspaper that doesn't have pushing liberal narratives as a #1 priority.

Just like Fox is #1 because it's the only not-liberal media outlet, a real not-liberal newspaper would have a huge following because of the lack of alternatives.
I did 3 semesters of community college. Calculus 2, 3, DiffEq, physics 2, 3, chem 1 and 2... It was pretty rigorous, and dirt cheap.

Why can't this model be extended into a 4 year school for twice the price?
Just in time for Prime Day!
Looks similar to the "bpipe" project I was experimenting with three years ago, except it appears seashells is only a one-way pipe ( can't pipe data back from browser into Unix pipe ).

The project I made has two two-way bindings from Unix pipes directly to DOM elements and supports DOM events.

Like:

bpipe -s "#myInput" -e "keyup" | less

echo "hello there" | bpipe -s "#myDiv"

If anyone is looking for inspiration on this sort of thing check out: https://github.com/Marak/bpipe. Includes both client and server.
> GC performance is a trade between throughput and pause time.

Go has sub-millisecond GC pauses, and even at that minimizes the need to do stop-the-world pauses (previous HN discussion https://news.ycombinator.com/item?id=12821586) I think it would be a very interesting exercise to give a crack at it. If anyone is interested, let me know.
I strongly support nuclear power, and although I kind of understand their points of view, I can't stop thinking those opposing nuclear power is not serious about climate change.
I don't think you can make an apples to apples comparison of salaries between Canada in the US.
It sounds like he was still solo in the basement when he got his first big order. That's good enough for me.

I don't know if a literal basement was involved, but Plentyoffish was solo for about four years and had a fair few users before hiring any staff.
When elinks is compiled with javascript support you must provide an external javascript library.

I really like elinks, it's a shame I can't use it to view blackboard and other sites I have to use...
I wonder if the bizarreness of the images is part of a guerilla marketing attempt to create viral posts like this.
Sure, but anyone putting together an article and headline like this, and using a picture of people living in tents, is a liar.
I think if we get into the technical side, there's a lot of question too.

It doesn't seem like they are very good at code review or testing, for example:

https://twitter.com/marcan42/status/724745886794833920?lang=...

And when called out on this, they simply block the people saying it.

I'd personally be very skeptical of any security company that values their own tolerance for dealing with people telling them their code sucks over finding out that their code sucks and fixing it. And a lack of good code review and testing is of huge import when it comes to security, at least in my opinion.

Then there's also their weird crusade against (e)BPF without any supporting evidence beyond "It adds more features so that's more attack surface and thus shouldn't ever be added or attempted and we don't believe anyone involved could ever make it secure so there."
>I'd love to be drill a hole in your well-protected cranium and stick a needle in your brain to obtain a sample to diagnose major depression, schizophrenia, or PTSD. Just a small sample, ok?. Let me know if you're ok with that

Sure it's okay, post mortem. Many scientists have tried this. Unfortuntely, you would not be able to make a conclusive diagnosis, because the science isn't there.
> rebooted with both wifi aerial options and the machine is still somewhat deaf.

Hmm. Laptop wifi antenna cables run through the hinges into the screen. Which means it's very well possible they're damaged or torn (and given your description, since manufacture).
I'd say it's certainly possible to get everyone involved to pursue profits in such a way as to accidentally completely disregard longevity.
Not sure why the downvotes, but okay. Tough crowd.
The nice thing about the low flow shower heads and toilets is if you find one that works (which I have), you do save a little bit of money every month. Water is cheap in the US so it's not that much, but since I don't mind the low flow items I have, I have no complaints. :)

I'd have to read up more, but as I understand it, that style of gas pump (as well as "new gas cans" which also get a lot of complaints) were made to counter gas vapor leaks that reportedly contributed significantly to smog. Was it trivial in nature? I'd have to see a study.

Separately, the last big thing I knew with clothes cleaning was how phosphates were removed from detergents some years back due to environmental concerns; from my understanding, phosphates in consumer detergent caused far more than "trivial" nutrient pollution (example paper: http://www.jstor.org/stable/25038382?seq=1#page_scan_tab_con...). I noticed when non-phosphate dishwashing detergents were introduced, with our hard water they left lots of spots. But there are non-phosphate ways around that issue. The actual cleaning part is fine.
Yes, you're not wrong. I tend to think of the slightly larger, more complex scopes having multiple programs with many teams when looking at these things lately. This is just a small example of an impetuous reply not adding value and it didn't even reflect any real opinion that I may or may not hold.

I'm about a decade removed from any real "two-box shops" (small and/or startup focus etc.) and so sometimes think they can't possibly exist anymore. I see a few of the "we want the world" job postings and experience burnout just reading some of them.

"Pragmatic engineering" I like the sound of that but I'd secretly hope it's not meant to rhyme with "best practices" - I like good practices and all but I like and appreciate the actual games much more. :O) That's just a small parting snark - mostly harmless. Best of luck on your search! I'm trying to maintain some focus on data operations at the moment but with any luck my next jump attempt will be into something counter to current trends.
This is unfortunate. They presumably do it because people routinely lose 2FA keys, but rarely lose their phone number, and so requiring an SMS backup first cuts down support requests.

What it means in practice is that when we train people to set up 2FA, we have to teach them a somewhat elaborate dance of enrolling their phone number, adding the U2F and TOTP authenticators, removing their phone number, and then making sure they don't have a recovery phone number set.
> But most damning to the narrative Taibbi wants to sell, Goldman got in trouble with eToys --- for underpricing it.

I think you're underestimating Taibi's argument if you think the IPO-ing firm being pissed off at a later date argues against Goldman pulling off a scam, or that under-pricing and over-pricing can't be part of the same scam.

There are 4 actors here:
a) Goldman
b) Goldman's preferred clients
c) The company
d) The investing public

The argument goes that Goldman underprices the IPO initially. Their preferred investors get cheap stock. The stock goes public. The preferred investors have agreed to buy post-IPO stock. This causes the stock to rise. This rise doesn't appear to the investing public to be artificial, but a stock with momentum. This causes the price to shoot up. At some point the insiders take their gain and sell their stock. They then reward Goldman by channeling a significant portion of their profits back to them by using their underwriting services.

As a post-script, the thing that first struck me was, if they screw their clients, how do they get new ones. Well if you read on to the next section, Taibbi explains part of that puzzle too: "Here the investment bank would offer the executives of the newly public company shares at extra-low prices, in exchange for future underwriting business."

Losers:
a) The company: they have less money to invest in their company's success, and fewer "long-haul" stock-holders than they would like.
b) The investing public who buy high, sell low.

Winners:
a) Goldman's clients - buy low, sell high
b) Goldman - they build long-term relationships with investors and skim some of the profit back directly

Here's the eToys guy:

After the deposition, he recalled, the S.E.C. lawyers began to show him some Goldman Sachs documents. He saw that one big firm after another had been allocated shares — and had immediately flipped them, even though Goldman had promised that its clients would support the stock. “That’s when I thought, ‘We really got screwed,’” Lenk told me.

Although the experience still angered him, he now has 14 years’ worth of perspective. “Look at what has happened since then,” he said. “If you think eToys got screwed, what do you think happened to the country?”

“What Wall Street did to us in 1999 pales in comparison to what they did to the country in 2008,” he said.
http://www.nytimes.com/2013/03/10/opinion/sunday/nocera-rigg...
Bad actors are on those mailing lists too. What you describe would be the equivalent of mailing fulldisclosure with "Hi all, there might be more unregistered nameservers at .IO (or another 101domains-serviced TLD) that could be used to attack live traffic if anyone wants to grab those, kthx"
We're talking about USA Today here.

The actual report is this.. .http://wihopelab.com/publications/Hungry-and-Homeless-in-Col...
I agree with you. I just don't think the banks and their private governmental armies will allow it to happen freely. And yes they can stop it. They probably are behing its creation, not a fake japanese alter-ego.
It's an operating system (pretending to be a browser).
> In short - this post has a hell of a click bait title but really insufficient evidence to suggest that these are truly "secure".

From the original pull request drafting this post:

> While I agree that making hyperbolical claims isn't typically good I'm not sure if it is bad here. There seem to be a tradition in unikernel land with outlandish claims in various blogposts ("Unikernels will kill containers in five years", "Unikernels are unfit for production", etc) so I wrote it with that tone in mind.

https://github.com/Unikernel-Systems/unikernel.org/pull/45
Seems like that metric is about as useful as LOC
Your profession is still largely a fraud. It votes into existence new "diseases" while the people that do the voting largely are on the payroll of the big pharma companies that will then market the same "diseases" via massive marketing campaigns to an uninformed public who thinks what you do is science. (https://en.wikipedia.org/wiki/DSM-5#Criticism)

In the medical field, no disease is ever voted into existence. There are lab tests, scans, x-rays, physical evidence of issues requiring medication. In psychiatry there are no tests to decide which medication to put someone on, and the profession largely admits to not knowing how the drugs they put patients on work.

Nevermind that most of these drugs cause horrible side effects in patients like massive weight gain, loss of sex drive, suicidal tendencies, psychotic episodes, etc...

Nevermind that most school shooters in the last 20 years were either coming off from or on some form of psychiatric medication.

Nevermind that over 100 000 toddlers are medicated, TODDLERS, with the same mind altering drugs in this country. How do you diagnose a toddler with depression?

Now your profession wants to go into prenatal and fetal psychiatry and start drugging the mother before the child is even born.

Nevermind you shamelessly do ECT, 450 volts through the brain which countless studies have proven is not a beneficial treatment once it is stopped and that patients do worse after (some who become complete human vegetables and require 24/7 care) as a form of "extreme treatment" when your pills don't work to numb the patient enough. (See http://emord.com/blawg/wp-content/uploads/2016/08/1-ECT-Citi... )

Your profession is a sham. The threads are coming loose and you can't hide it anymore. Please quit and go find another job.
This is one of those perfect "I had a problem, made a solution, and others think it's neat" posts that make HN impossible to miss. Well done!
Incremental compilation is something that no major compiler for any ahead-of-time compiled language anywhere does. It's one of the most advanced features in any compiler, and as such it's taking time to implement. No C++ compiler I know of is even thinking of it.

As the first post here in this thread mentions, going down the C++ road of header files might have gotten us some short term wins, but ultimately it hits a brick wall. Incremental compilation is inescapable.
Dunno, when you make egregious errors like that we can't help understanding not only what you meant but also some things you likely didn't mean.
I suppose it depends on why the academic is writing code. I've written simulations for social science research -- basically to extrapolate the results of certain decision making strategies by an idealized decision maker in a toy problem. The theory is the subject, not the code. Many people who read my paper will not be programmers able to critique the code, and few will care whether it follows best practices. I've made it open source (https://github.com/joeclark-phd/bandito) because I think it's a good practice to promote, but I'm kind of an oddball. When I was studying other well-known simulation papers, I found their models were incompletely described and I had to contact the original authors to get implementation details in order to replicate them. This is a lot like the problem of data sharing -- all academics should be willing to share their data in order to prove that their results are as reported, but it's not an easily enforceable principle.

If you are talking about computer science academics, of course, that's a horse of a different color. In that case, the code is the topic, so I would guess that they're providing it! On the other hand, the majority of such research is probably solving niche problems and special cases, so it may not be very usable in your professional coding.
I actually think it just loses your choices completely on its own and local news thing is unrelated. If you add them a few more times, they stick.
>HTTPS + HSTS would prevent the author from spoofing the DNS of that those sites and sending them to a server over HTTP thus avoiding the certificate errors.

I'm confused, how would that help? Could the attacker (the author, in this case) not get a valid https certificate for these domains, returning spoofed DNS responses when the CA goes to validate it?
The trains itself are okay, but it's an unreliable system that stops running much too early.
According to the article they are charging 19 yuen for something that costs (presumably at scale) 60 yuen and have no real way to ensure they don't get stolen this way. Not sure what they really expect :\
I think you set this up to be knocked out of the park, so I'll oblige:

U.S. Department of Housing and Urban Development says 564,708 people in the U.S. are homeless (2015)

https://www.reuters.com/article/us-usa-homelessness-idUSKCN0...
FVWM and VTWM switch windows and workspaces instantaneously on my crappy netbook with just the EFI framebuffer.

I always laugh a little inside watching people try to do the same on windows 10 and OSX with all the hardware acceleration and waiting multiple for seconds.
>HTTPS + HSTS would prevent the author from spoofing the DNS of that those sites and sending them to a server over HTTP thus avoiding the certificate errors.

Unless I'm missing something if you own the DNS it should be trivial to get a valid HTTPS certificate for any .io domain. Then the only thing that can save you is certificate pinning.

That makes me think: I wonder if you could "trick" a CA into giving you a wildcard *.io certificate when you own the TLD. Would that even be accepted by the browsers?
Not only that, they seem consistently gross and provocative. I would expect randomly generated covers to be more mundane.

This isn't the first the internet has seen something like this. (Remember Horse ebooks?)
> Where's your sync client then?

I guess I was unclear here. It's hard to make a polished user application. The not-hard part is just the core algorithm selection. I have enough minutes in the day to consider algorithms, but not enough tens of hours to write suites of quality software products.
How Rust is tested
HSTS (correction: HPKP) preloading would help avoid that, and Certificate Transparency monitoring would help detect it, but yes, in general, if you control DNS for a domain, you can get a valid certificate for the domain.
A few years ago I bought some rainbow stickers with the text "Mothman" on them, just because I stumbled across it and it was bizarre.

Digging a little further, the seller had basically every word + background combo you could think of. Surely created by a bot and made to order.
I share something in common with the subjects of this article. Came from a good, though not wealthy, home. Parents wanted me to get an education like they didn't get, so I went to community college majoring in information systems and programming.

Worked a part-time (20-30 hours) job, had an apt, but was evicted because people I lived with partied all the time and didn't obey the rules. I didn't have enough to get a place on my own, so I slept in my car or at the homes of friends for almost a year, keeping the tech support call center job and going to school.

Though I didn't get a degree, it was a good lesson of personal responsibility, lifelong learning, and not relying on others. Ended up in software development by starting at the bottom at a tech company (customer service) and learning on my own time at night, clawing my way up. If my parents would have taken me back in (if they even would have), I'm not sure I'd be where I'm at today. I do wish I would have been able to graduate though.

This experience is sort of what leads me to view with derision tech interviews that only focus on CS/algorithms, and ignore the more common day-to-day challenges of software engineering, most of which I learned on the job.
Don't give 20 hours of your life to a programming excercise for a job application, unless they are compensating you.

If your new employer sets your start date 7 weeks in the future, keep interviewing. You don't have a job yet.

I recently signed an offer letter with a firm that required a drug and background screen and a start date 2 weeks out. So knowing i didn't actually have a job yet, I kept interviewing, received two more job offers, and took the best one. i called the first company the friday before my monday start and told them i wasn't coming in.
Twilio: The Inside Story with Jeff Lawson, CEO/Co Founder (Video and Transcript)
Driverdoc Key 2017 with Crack Full Version Free Download
I'm fine with that happening, because the people who run .IO need to be spanked. If their customers are subsequently unhappy that their domain names have been hijacked, they can take it up with whatever corporate entity runs .IO. Same problem as publicly disclosing serious flaws with an SSL/TLS root CA.
HTTPS + HSTS + HPKP with restrictive settings might help against the attacker just getting another certificate.
No ideas about the second, but an aside on the first.

'Most ideas have been done to death' is a central reason I have stopped reading novels that much. Ah its one of those, he will do this. Ah yes, I see the twist. its one of those.
Does the Pell Grant cover people in this case?

I had friends who were working class but not poor and they got that for school.
So, the real question is: "How much should we freak out about this?"

If you scroll back a few months to Cloudbleed/Cloudflare we sort of collectively decided that because cache data containing sensitive info (passwords, tokens, whatever) might be accessible for your site using Cloudflare that everything should be revoked, force password resets, etc.

Now we have this vuln, which I'll dub "IOgate" because it's the cool thing to name these. We don't know if this has ever happened before, there clearly were not adequate safeguards in place, etc.

Should anyone operating a service using a ".io" TLD consider everything potentially compromised?
I see this argument everywhere, but, when the application is done properly, the reloading doesn't feel that bad.

Related past threads:

- Ask HN: Are there any solid arguments against SPAs in 2017? https://news.ycombinator.com/item?id=13315444

- Do you really want a single-page application framework?
https://news.ycombinator.com/item?id=12956059

- The Disadvantages of Single Page Applications (2014) https://news.ycombinator.com/item?id=9879685
Hmm... Wouldn't it be possible to address the problem at another level? For instance, when it's discovered that layout properties are being animated, see if it would be possible to create an equivalent effect in the compositing stage, if so, convert the layout position changes to transforms?

I realize that would probably not be easy, but maybe still possible without major architectural changes?
Nah, Slackware adopted PA because bluez now insist on using PA for audio IO.
Podcasts to make you smarter
[EVENT] Hear 4 CTOs share 10 top lessons to learn before becoming CTO
It's great that such a phone exists. People should be able buy a Fairphone, or buy an unrepairable iPhone, or whatever phone fits their needs.

The "right to repair" doesn't give people the right to buy a Fairphone. They already have the right. It removes their right to buy other kinds of phone.
Post-mortem doesn't do much for your current debilitating panic disorder that makes it impossible to leave your home, now does it?

Please. Give us your plan for relief of suffering while we sit around twiddling our thumbs waiting because "the science isn't there."

The history of the entire field of medicine (including psychiatry, which is as much science and medicine as any other medical specialty) is a march from partial understanding based on classification of symptoms to other measures. The brain, hidden away behind bone and blood-brain barrier, has been called the most complex object in the known universe.

That machine and it's foibles is a little more complicated than finding a buffer overrun or swabbing your throat for strep.
Everything described by the fearmongers has to do with too much human activity. How is that not related to nearly 8 billion people on earth?
We are building something like that, for all the fields out there. We've built an interest graph that allows for it to the targeting to be hyper-relevant that really gets at exactly what you are interested in (so what era/region/aspect of history rather than just 'history').

We are launching our beta in the next couple of months, but until then you can sign up on http://shuffle.do to stay tuned. Happy to answer any questions.
I didn't presume anything. Someone made a comment about me full of basically ugly assumption. I rebutted it with actual facts about me. Now I have down votes and a pile of ugly criticisms for correcting misinformation about me that should never have been put out there to begin with.

I think all of that is uncalled for, overly personal and essentially an ad hominem.

It takes more than a one time 45 minute conversation to create and maintain a close relationship. There is lots of research about that.
Or GitHub's wiki