skysight-inc/HackerNews huggingface dataset:
I have more than 100 tabs on mobile. FYI, the indicator changes to a smiley.

It's easy to cross that threshold when you're doing research.
I'd be really curious to hear more about how you set up your tagging infrastructure and model warehouse.
As someone who does professional security audits, I would just like to say that there is no such thing as "passing" a security audit. In fact, most pen testing shops will carefully dance around actually making that claim in writing for a customer, because they know they are going to look bad when a bug is inevitably found in code they reviewed (and it's probably a dumb idea for liability reasons too).

There are certain certifications with falsifiable conditions that can be marked pass/fail. But, as I'm sure many folks here are aware, these are incomplete and often completely dubious. They don't purport to be "security audits".

What a real security audit tells you is that of the (probably 2-4) consultants that looked at a product for a few weeks (probably 2-6), these were the security bugs they found.

That alone contains little information, because the skill level and domain expertise varies greatly among consultants and companies. I can guarantee that if these results were withheld, and they gave the same codebase to another reputable outfit, the set of findings would be very different. There would likely be some overlap, particularly in the most obvious types of bugs, but bug hunting is way closer to art than science.

I know nothing about this project, and my intent is not to create doubt, but users of secure messaging apps should understand what an audit is and what it isn't.

Like other commenters, I was surprised to see 3 days of looking at crypto. It could be that the crypto is extremely simple and uses a few well understood APIs in a straightforward way, so this isn't a guaranteed red flag by any means, but it's a bit unusual.

And like any software, this is a 1 line patch away from being blown wide open. With every commit, an audit becomes increasingly meaningless. Just ask cperciva!

And perhaps I'm being cynical, but I always felt like the "conclusions" section of the audit report has an unspoken purpose of walking back from calling their baby ugly and keeping a decent rapport to ensure the possibility of future business. Not that I think what Cure53 wrote was not genuine, but there are natural incentives to be a little generous there. Again, I'm speaking from experience writing those sections as well.

Edit: Basically what tptacek said.
Glassdoor?
Is co-innovation all about acquisitions and mergers? Or is it all about working together towards something bigger?
I don't know. I have 100+ tabs almost all the times. Recently, the tab groups add on really helped me manage them, but that's going to end too with Firefox 57. I thought Panorama was one of the most useful and differentiating feature of Firefox, unfortunately they never thought of fixing its shortcomings, and since people didn't use it much due to those, they decided to end it. :-(
Jesus, not this bullshit again. It's not vaporware IF YOU CAN USE IT ALREADY. It's already available for you to use on Litecoin. Lightning works, it just needs the services to become user friendly now.
We've just gone live with a grpc-web based application. It's still early days and there are some rough edges, but it's an absolute joy to use and the amount of time we've saved is crazy.
The one thing I took away from your comment is that you are not humble in your opinion.
that's not a general solution.
firms with employees can also have trouble hiding the size of their divisions if everyone's salary is pubic.

this really is pretty key competitive information.
Linus's quotation is similar to Wadler's law:

> In any language design, the total time spent discussing a feature in this list is proportional to two raised to the power of its position.

> 0. Semantics

> 1. Syntax

> 2. Lexical syntax

> 3. Lexical syntax of comments

http://wiki.c2.com/?WadlersLaw
To run further with that same analogy, what if you expected bond rates to keep increasing for 50 years? It would not seem wise to keep your savings in a checkings account for these same 50 years, to then get the highest rate.

Yet that's what most of us keep doing with solar, missing out on a good deal because it gets better every year.
They are going to harm the ecology of seas
Speaking of cross-platform alternatives to traditional Unix shells, if you like Python try http://xon.sh . More compatible and overall usable as a shell than IPython.
To me it sounded like the author had truly believed that advice at the startup stage but now in a large company he saw how those words rang hollow as the employees were no longer benefiting from the companies growth. He seemed embarrassed that his words were being used to justify adding 45 ×70 minutes of commute time to a team that wasn't getting early employee equity
Thanks for posting. This gave me a good laugh:

– What do we want?

– Now!

– When do we want it?

– Fewer race conditions!

@wellendonner
Focus is a matter of deciding what things you’re not going to do. (John Carmack)
As a Haskell proponent I'd be really interested to hear specifically what it is that you'd like to do in Haskell but can't.
> But to deal with a really big list in JavaScript we need tail call optimization. And luckily ES6 has it.

it was never on by default in v8 and it was completely removed recently which makes me sad

https://bugs.chromium.org/p/v8/issues/detail?id=4698#c69
Chatting with the National Spelling Bee Champ
The author's calculations for the capacity of the battery are very wrong and the battery will not last many years the way he's using it.

Deep cycle lead-acid batteries should not be discharged below 50% (known as Depth of Discharge, or DoD) unless you really want to kill them quickly. The author's calculations assume he can drain the battery 100% (35Ah), which while technically correct, will kill his battery very quickly.

Unfortunately the manufacturer doesn't provide any data on the capacity over discharge cycles at different DoD's [0], but I can guarantee the author will significantly shorten the battery's lifespan by discharging it so deeply.

If you want some idea of the effect of DoD on battery health, Hoppecke have a very good chart in their datasheet on page 43. [1] At 50% DoD, the battery will last for approximately 3000 cycles, or 8 years. At 90% DoD, the battery will only last for 1500 cycles or 4 years.

If you want to go for 100% DoD in solar, you're looking at Redox flow or Lithium battery technologies, both of which are more expensive than Lead-Acid.

There are other problems with this setup as well. At $17, the charge controller is very unlikely to support an equalization charge mode, which is required to periodically balance the cells within the battery to ensure a long lifespan. The author would be better off skipping AC entirely and charging their MacBook/iPad from a car charger which operates on 12V. DC lights can also be purchased quite inexpensively. The AC inverter is likely putting out something closer to a square wave than a sine wave, and the low voltage cut-off is far too low to avoid damaging the battery.

This is really a case of "you get what you pay for" and for such cheap components, the system will not perform well or last for very long.

If this sounds really negative, I'm sorry. I want more people to become energy independent, but if you follow the author's example, you're going to have a very bad time. If you are seriously interested in going off grid, you should invest in quality components like Victron, Outback, Studer, Hoppecke, etc. Something like the Victron EcoMulti would be a good choice for someone who wants an easy to use system that's been designed for longevity. [2]

[0] http://www.expertpower.us/exp12350

[1] https://www.hoppecke.com/fileadmin/Redakteur/Hoppecke-Main/P...

[2] https://www.victronenergy.com/solar-pv-inverters/ecomulti
If the books are dense and dry then how we teach them about logic.
I tried to give it a go once and I remember constantly hitting small problems and after two days spent on fighting I went back to zsh.

The most annoying problem I couldn't find a solution for was lack of ability to open majority of applications in terminal - e.g. postgress shell.

Solution I am using nowadays is:

1. Zsh->Emacs shell macro to open file in emacs using emacsclient.

2. Emacs->Zsh by emacs function generating "cd" command to the folder of current file and adding it to my clipboard.
What makes you think salary is a matter of privacy? In a lot of countries, many government jobs come with publicly disclosed salaries. Why do you think a job in a private sector should maintain secrecy for salaries?

Privacy applies to private data. Whether salary should be considered private data is the point of argument here. Nobody is arguing about doing away with privacy altogether. So what is your point?
As far as I know, you pay taxes on social benefits, so it would be listed (as part of the sum) of income/taxes in Norway.
My thoughts exactly. Aesthetically, I love these ligature fonts, and I think it's great if people are using these and enjoying them. But I just know that, if I used one of these fonts, I'd have to mentally convert the ligatures back into the real characters. It would use up brainspace that would be better spent on actually writing code.
So, where is the graph of distribution of incomes?
Maybe it's different in SF but out on the east coast I've seen people be passed for the wrong version of jQuery on the resume, or literally "not enough eye contact". Applying to jobs out here is kind of a crap shoot where you shotgun out to a ton till you get past enough bullshit to be given in person interviews where you can actually demonstrate your skills
Ask HN: Should A.I. be regulated?
Folks like Elon Musk [1] have been very vocal about the need to start regulating AI. I was curious to hear HN's thoughts on this matter?

[1] https://www.theverge.com/2017/7/17/15980954/elon-musk-ai-regulation-existential-threat
for people as disappointed as I was that this wasn't a guide to a perfect mini burger, this is my goto guide:
http://aht.seriouseats.com/archives/2010/03/the-burger-lab-h...
I'm hoping to build a similar system in the next year or two. Biggest difference is I plan on building battery banks out of lithium-based 18650 cells. You can salvage them from old laptop batteries, even dead ones (one bad cell can bring the whole battery down, even if the other cells are fine). 18650s are also used in Tesla's car batteries [0] and Powerwall. They literally just cram thousands of them in there. There are some youtubers who have done tons of stuff with them [1][2].

[0] https://youtu.be/NpSrHZnCi-A

[1] https://www.youtube.com/user/jehugarcia

[2] https://www.youtube.com/user/nocrf50here
My point is that what two consenting adults contracts is part of their privacy unless you're an authoritarian State.
Interesting applications for drones and robots. The small form factor and low energy requirements are the key.
Um BSD existed with source code since before I can remember and I'm old and cranky...
Indeed. Although... I've the jpeg2000 book and it's quite thick, nice read, but no wonder implementation stalls.

And does it work with current browsers?
https://ericportis.com/posts/2014/resolution-progressive-jpe...
What that Facebook quiz is doing to your privacy
How do you organise tabs then? I've god knows how many bookmarks and I've been blindly Ctrl-D-ing since time immemorial, only tagging very distinct stuff and modifying titles if too stupid. When I need to get at sth. bookmarked, typing stuff into the url field in firefox just works.
I think it's more common because employers succeeded in telling employees to not talk about how much they earn. I heard it several times that people got bonuses under the condition to net tell colleagues about it. This puts employees in a situation where also they can loose through wage transparency.
100 is low end for me. My sessions typically have 600 to 900.
And on that, I believe Linus uses 8-wide tabs. You are, apparently, doing it wrong if that causes problems.
> Is there a reason not to have open salary information?

The right to privacy? The right for two consenting adults to contract privately without interference from the State?
"Should array indices start at 0 or 1? My compromise of 0.5 was rejected without, I thought, proper consideration." — Stan Kelly-Bootle

Thanks for putting in that one in. Stan Kelly-Bootle was one of my favorite writers. He recently died, but he was a Brit who wrote computer books and folk songs.

I think people who dual-specialize, in something left-brained and something else right-brained, are better at both. I've only read parts of one of his books, a 90s book about UNIX. It was so clear and fun to read while seeming to break many rules about writing clearly. I'm not sure how it works.
Except most contracts in the private sector (IT, finance, etc.) are not between two consenting adults. They are usually between one consulting adult and a huge corporation, a corporation that can choose to pay a certain class of people unfairly and still survive in business. It is in the interest of such corporations to maintain this asymmetry of information where they can know your salary and all your colleagues' salary but would discourage you from knowing your colleague salary.

If you think salary being private data is the obvious assumption, then think again, maybe you have been conditioned by years of employment in the private sector to believe that salary is private data. In many cultures and in many type of jobs, it is not considered private data.
Ricetta torta al limone una vera delizia da gustare
Shon B and Mari – Gotta Eat
The outcomes from algorithms (not just AI) should be held to the same standards that from humans. Algorithms (and specially AI) can be biased or wrong for variety of reasons.
Well, I find it very motivational.
I learned it back then. Used it for a while as a privacy feature for my phone.
Artificial intelligence suggests recipes based on food photos
https://en.wikipedia.org/wiki/Law_of_Jante

...specifically, 'the penal code of Jante...'
I've been thinking on that topic for about a year now to justify my own behavior and actions.

Free will implies, that there should be genuine "actor", that's behind all one's choices and actions. If you will try to dig down and find your own actor, you soon will discover, that all choices produced by that actor are actually based on your previous experience, so all actions are actually predefined by your own experience.

The presence of genuine actor essentially leads to question "who is behind actor's actions?", which inevitably leads to infinite regress that can't be resolved.

I like to see how modern science there comes close to various teachings like Buddhism, moving from external world (non-self) to internal (self).
Lightmap HDR Light Studio 5.4.1 Crack (Win X64) Full Download
> Is there a reason not to have open salary information?

There is a school of thought that after childhood one should some degree of self control and agency.

This entails the right to privacy. Freedoms like not being tagged like an animal (fingerprints in passports) and such have already been lost.

I think your hypothesis that these lists can be used for better salary negotiation does not work.

Look at the salaries in these countries and compare them to U.S. ones.
For many use cases you can just send streams of serialised data as request response with capnproto you don't necessarily need the full RPC protocol.
The parent advice works exactly the same way whe you talk with people under you or with peers. Altrought they have less power to retaliate visibly, they will listen better when you do what parent suggested.
You should be able to negotiate a better (or worse) salary and there's nothing wrong about that.

Reminds me of Reddit banning salary negotiation because women were worse at negotiating.

Infantilisation of society...
Upvote...I don't see why that should be public. It ruins the incentive to work harder as I bet companies are far more likely to pay everyone the same [no sources on that].
You pay taxes to the government on those imaginary private deals, right? I think mostly the salary thing is about feeling awkward rather than it being about privacy.

Why does your salary deserve to be kept private? I'm trying to think of a reason that isn't some people feel awkward about it being open? If salaries are open I think that would go away and people would be more free to talk about money.

Finally in almost every company I have worked in everyone tries to work out what everyone else is on to better negotiate their own salaries, it just makes it difficult to mention...
I see that you hold the belief that consenting adults willingly working are being forced to do so, I do not share this belief that corporation are forcing anyone to work for them. Maybe you have been conditioned by years of State education to believe that employment does not imply consent between two parties but is a forced procedure. Many philosophers do not agree with that and consider work contracting to be consented between willing adults.
I am talking about human rights, not about U.S. Constitution. I don't think there is a human right to carry a weapon. Confession and not being searched - not sure, maybe the right for due process.

And yes, I mean people should stand for it, of course it's not guaranteed. At least, they should educate themselves about rationale behind human rights, so they wouldn't foolishly trade them away for nothing.
Yup, that's a great example of where a monospaced font helps. I don't claim that proportional fonts are ideal for every kind of code, only that it's an educational experience to try them out, even if just for a while.

Your example is interesting because it combines two different kinds of alignment. One of them I find unhelpful - pushing everything to the right to match the length of the variable name. The other is the useful alignment within the matrix. So personally I would make this minor change:

rotationMatrix = [
[ cos(x), -sin(x), 0 ],
[ sin(x), cos(x), 0 ],
[ 0, 0, 1 ]
]

Now you have the nice matrix layout without having to realign the code if you ever rename rotationMatrix.
Also, they allow duplicates I guess.
"We knew the Hansa servers were in Lithuania, so we sent an MLAT (mutual legal assistance treaty) request to Lithuania and requested if we could proceed with our planned actions in their country. They were very willing to help us in our investigations."

Okayy, this "very willing" part is going to deter me from hosting anything located in Lithuania any time soon
Wow.

Until about halfway through the article I thought this was satire. Sadly, I was mistaken.
It depends heavily on how much code there is and what language it's written in. Also, code auditors can often eliminate large swaths of the codebase with high confidence when it's clear that there is no attack surface, so it isn't always necessary to grok the whole codebase.
Open type variation require existential types. Not the easy types people are used to.
How come emacs shell still does not support input redirection? You have to do

cat file | program

instead of

program < file
Block size is protocol's security parameter. Cap on block size is not artificial. Thought experiment: if block size is unlimited, would it affect security? The answer is obviously yes, so it's not artificial.
Why should how many times you have intercourse per week be kept private? I'm trying to think of a reason that isn't some people feel awkward about it being open? If how many times you have intercourse per week is open I think that would go away and people would be more free to talk about their sex life.

See how it goes? You could literally use the same argument for any privacy concern ever.
> Enabling people willing to act is important though

I think that's the key thing here. Rather than saying "whether you succeed or fail, you're still gonna get your $250 bonus", you're saying "if you try and succeed, you get $500- if you try and fail, you get $100, if you don't try at all, you get nothing."
Could you explain what you mean by "open type variation"? Google's throwing up nothing relevant ...
But, you can do training on a Jetson, whereas the stick is inference only of pre-trained networks
What’s Wrong with Git? – Git Merge 2017
Emacs uses external programs; it supports a multitude of protocols give you this transparent file access.
> So small block proponents are likely to be right in that on-chain scaling is unrealistic, but if the market must be forced by developers to adhere to an artificial limit, I think that in itself implies Bitcoin is unlikely to be able to grow very far as the market is unable to self-regulate.

Apples and oranges. Blocksize trade-offs are related with how decentralized the network is/will be. Off-chain is a way to build layers on top of bitcoin to allow payments to start being only sent between off-chain payment hubs, which at the very long-term will convert on-chain(layer1) transactions into more of a settlement system (instead of payment system).

This, doesn't have anything to do with developers or project governance. Even if the network is decentralized, you cannot decentralize knowledge. In opensource, meritocracy is king, and obviously it will always be like this (so long as know-how is required to solve technical problems).
"Nix [Cambridge Analytica] has frequently talked about the number of individual data-points Cambridge holds on people: factual, attitudinal and behavioural. "We have somewhere close to four or five thousand data points on every adult in the US," he told a summit in New York last year."

"Think about that for a moment: 5000 data-points on about 220 million Americans. Name, gender, birth year, postal code and email are just five items we all commonly supply. Nix claims CA has around 4995 other pieces of information about most American adults."
there is one real life example why your argument is as wrong as possible.

professors in the UC system have public salaries, like any other public employee, and it isn't a linear communist apocalypse for salaries like you think. prof still work hard to move and create departments, etc. and the salaries vary wildly, not just with seniority.

...on the other hand, senate and congress does prove your point. ironically with people elected spewing the same liberal pipe dreams against the very way they get paid and accumulate retirements.
It's about 4 on average.

However, this isn't the same thing and there is no benefits for other people knowing that I can think of; there may be lots of benefits for knowing everyone's salary.
> The non-disparagement clause may have been bilateral. The consideration, in that case, is "we won't talk negatively about you if you don't talk negatively about us."

Cannot offering of such a clause be considered a blackmail?
Ask HN: ServerPilot Alternative for Docker
I'm a huge fan of ServerPilot. it just takes away all the hassles of managing the server and deploying PHP sites, esp. if it's Wordpress.

Unfortunately, they don't support Docker. And from what I understand, neither it's on their roadmap for the near future.

So, wanted to check if there's an alternative to ServerPilot for Docker/Containers?
I have to assume there's a mountain of regulation for established / already-in-the-legislation transportation that would prevent this. If anything, an unproven (safety-wise) hyperloop would have an orders of magnitude harder time on top of that.

(I'm not based in the States, so I don't know, but it seems implausible that this wouldn't be the case).
Classic LED filament bulbs making a comeback
Some of my favourite quotes are from Alan Perlis's Epigrams on Programming [0].

My (current) favourite: "A programming language is low level when its programs require attention to the irrelevant."

[0] - http://www.cs.yale.edu/homes/perlis-alan/quotes.html
> there is no benefit for knowing

I just gave you a benefit, people being more open about their sex life could be a good thing for society. Should we force people to tell how many time they have intercourse then based on your logic?