skysight-inc/HackerNews huggingface dataset:
You have to wonder why they didn't hire a security tester. Just for 10 minutes or so.
Utility companies as well
TIL https://en.wikipedia.org/wiki/Biopsychosocial_model thanks.
Does this not seem like the kind of area where you don't want people writing hacky, proof of concept code?

The idea of people coding up weekend projects on Ethereum, putting them behind flashy websites and encouraging large scale adoption terrifies me, to be honest.
I refereed to rent controls in the sense that the american OP said are causing price increases in SF (afaik this is simply limiting rent increases for existing contracts, which is the default in Germany).

All of Germany is under rent control in that context, and IMO it works compared to exploding rents in the US and other countries (UK, Israel, most places really aside from some of continental Europe).

That's because most contracts specify that
increasing the rent follows the standard
procedure: Over three years, rent can rise
by up to 20% (15% in Berlin), if the comparable
rents in the area have risen as well (which is
influenced by market rate). Ultimately, this
limits the pace at which rents rise, but not
the extent.

This is a form of rent control almost nobody in the rest of the world outside of continental europe enjoys - prices generally rise as quick for current tenants as they do for everyone there: your landlord can tell you tomorrow than the next time your contract is up to renewal (usually yearly), the price will be 2x the current one and if you don't like that you have to leave.
How is it superb if I can't even see building numbers when simply looking at the map?
A practical democracy must be an abstraction of a pure, idealistic democracy. You cannot have millions of people deciding on every issue. Democratically elected representatives are one way we can do this.

There may be better ways of doing things but it doesn't make democracies not democracies.
Then you, my friend, have a copyright issue. There are lots of legal tools for addressing this, and they're all cheaper than wasting your energy trying to counter the bots.

If your free content is the sole source of your online revenue, then your reputation is your business. Nefarious crawlers who rebrand your content cannot, by definition, beat you to market. So you stand to gain much more by writing great content, driving readers to it as soon as it's posted, and filing the occasional DMCA takedown than trying to compete with plagiarists in a game of whack-a-mole.
Combining Technologies with the Internet of Everything
> it is actually winning everywhere

nice try, trump
How Android app development boosts business for the event industry
Compare this to Windows or OSX, where not only are you unable to build packages yourself, but they are installed from downloads you find in disparate places on the web, are not cryptographically signed by people you can trust, and often include spyware anyway.
You can't force people to release an app, but you can incent them. Conduct market research to find out which missing services are the blocking factors for people to switch. Then approach those companies and guarantee a minimum revenue from WP. If the app makes less, Microsoft will make up the difference. Lend Microsoft engineers to those companies. Or contract it out and have Microsoft pay the bill. Or let Microsoft use public APIs to build third-party apps for those services. Don't take a 30% cut of the money users pay, temporarily.

There were many things Microsoft could do, but it seems they weren't fully committed to the platform.
Basically yes, and this is reasonable from a security perspective, otherwise every smart contract would basically have a trusted administrator.

But in many cases you do want some ability to upgrade the code, and then you simply program in that ability by creating a repointable proxy with whatever authorization logic you want.
A sure-fire way to let vulnerabilities go unnoticed and unfixed.
> “Most users who install autocomplete-python close the engine selection prompt, which results in not getting Kite or its benefits”

This type of entrepre-narcissism has to be shutdown hard. How deluded does somebody have to be to imagine that putting a confirm-shaming dialogue in an opensource tool is not Advertising?
i attended a talk on energy use at industrial chemical plants a few months ago - one of the main points emphasised by the academic giving the talk was that industry refuses to invest in deploying any new technique/approach coming out of research until it is demonstrated that the new approach definitely works at scale. maybe part of "knowing" that it works is having something operational at large-scale and running for long enough to help identify and iron out problems that weren't anticipated during design and smaller scale trials. if it costs hundreds of millions to billions to build the thing you want to guarantee that the approach is solid.
> Why didn't they just use css as intended

Too many engineers and not enough actual problems.
Thank you for the long response but I think you are beating a straw man here.

Yes, democratic and market-based decisions are two different processes. If you review my comment you'll notice that I did not claim both to be the same.

Both, however, despite their structural difference, depend on the availability of information. As you normally do not want your decision making process to be a gamble you really need to try to know as much as reasonable about the actual costs and benefits of your potential decision.

Your description of what makes a democratic decision is wildly off.

There is a small group of thinkers (mainly highly abstract process based direct democrats) that does agree that the defining factor is about a majority of people agreeing upon something, however, this is far from an usual position. Most add a bunch of constrains (think everything between Aristoteles, Locke and enlightened constitutionalists) some abolish the necessity of an election (like, for example, Rousseau).

This is why a contemporary analytical approaches would probably start off by marking a decision as democratic as soon as it is validated through the available (democratic) institutions. There are of course also purely output based approaches on legitimacy that claim to be justified through democratic theory, but I guess that is less common.

Those decisions can be anything within the scope of the constitutive purpose of the democratic body in question. Other than you suggested this does not have to do anything with redistribution.

Your description of what makes a market-based decision is wildly off as well.

In situations in which market based decision making processes are proposed, they are universally seen as a sum of heterogeneous and fractional individual decisions dependent on their specific market frame.

A public good is a term that describes non-excludable and non-rivalrous goods. Think of it as the oceans, the atmosphere, classically lakes, rivers, etc.

I'll leave out the part on libertarians; political analysis is not a football game, you don't always need to side with or against someone to make an argument.

My claim is purely systematic and in itself does not affect the ability to redistribute.

However, I wonder: If you fear that a specific redistribution might stop as soon as people get aware of it, does this indicates that you believe people would not appreciate the specific redistributional effect if they knew about it?
GoDaddy vs. Bluehost vs. HostGator: Which Host Wins?
There is no need to solve halting problem in general case. We can have heuristics that do not accept programs they are not sure about and it is programmer's job to make correctness more obvious.
I've tried Kite twice now. Once when it first launched, and once again when I installed autocomplete-python and it persuaded me to give it another go.

So far I have found it utterly unconvincing to the point of near uselessness. It rarely finds anything intelligent to say about my code, and gives a significantly worse view of documentation than Dash (for which I have a hotkey bound for near-instant lookup).

On top of that, I found Kite to use significant resources, there's no way to inspect what it's uploading so now way to ensure you aren't uploading things you don't want to, and the second time I tried it the UI was filled with dark patterns and I found it quite difficult to uninstall (I reverted to just trashing all the files I could find relating to it).
Clean raving: how club culture went wild for wellness
I've done this before. It becomes tedious to maintain, but I can imagine myself doing it again in the future to allow me to do what cannot be done in the common clouds (iCloud, G Suite, O365).

I would love a whitelist-only inbox. I'm sick of spam, marketing mail, etc. I'd like one public email address that catches all the garbage. Then, I'd like a private email address that accepts emails from my contacts, and bounces the rest.
There is a sleeper train up the coast from Los Angeles to San Francisco:

https://www.amtrak.com/coast-starlight-train
Has it? Can you link to it?
I think that the second scenario in your analogy is somewhat creepy too. Why are they trying all of the doors? A person should have a reasonable expectation of privacy in their house, to be able to walk around in their underwear or whatever without someone just opening the door on them.

Edit: Note that in this analogy the keys aren't fully visible from outside and it requires opening the door to be sure that the keys were accidentally left out
Scrabble is an easily solved problem... No AI necessary, just brute force.
I've been using radicale[0] for this for some time, it's a bit quirky with thunderbird but I've had tremendous success with Apple Calendar for iOS and the Contacts application.

And it's using standards (Carddav, Calddav) so you can be somewhat secure in the knowledge that other programs can implement the protocol (or should). :)

[0]: http://radicale.org/

EDIT: I guess I should have read the post, but eitherway I'm going to keep this comment up as a review of the software.
It seems to be interesting..
> We put our lives in the hands of code written by humans every day, e.g. cars, planes, trains, etc.

Except that code is regulated and tested to the degree average eth enthusiast making this point either not aware of, or intentionally omits.
Poland is drifting towards Russia.
Of course there are a lot of technical questions. To answer this one, the logic is distributed and executed on every full node. It's like one big distributed database where a transaction can also create a stored procedure.
@blub can you explain me how it's exactly "spying on you"?

There is difference between collecting information about how many people are using vs whether a particular person is using.

Collecting diagnostic information from windows application failures/how many failures etc are there ever since Windows 95 era.

Similarly, collecting information about how many people are using dotnet core build/test/publish is similar to how Google/Mozilla tracks how many users are running which version of their product and experience issues.

If Microsoft/Google/Mozilla or any other company uses that information to identify a specific person is "effectively spying on you". Until that's not there, the same functionality exists in almost every product. Just click bait article.
We handle it pretty similar at work, to have consistent commands over all repositories regardless of language. Additional targets are

- make docker-build

- make docker-test

which are essentially wrappers around build/test, just in docker.
The "Kite Effect": when a company implements a marketing strategy that does more to deter potential customers than attract them.
I should add, in my experience optimising queries, a time breakdown is generally the first step of many. Flamegraphs are great at telling you where in 1,000 invocations your time is spent, but your execution plan only has ~20 nodes max, and the percentages do that job well enough. At that point, you want to know why it's slow, and a flamegraph representation of those percentages won't help you with that.
>Apple was 5 years ahead of the competition at the time of the iPhone too for example

A highly doubtful statement. At the time Apple released it, there were smartphonese capable of steamrolling over and over, just nobody sold them in US
1. You can only specify that a recipe creates multiple output files (for instance, an output file and a separate index file) if it has wildcards.
2. Temporary file handling is completely broken. You can declare a file to be temporary, so that make deletes it after all the jobs that use it have finished. However, make randomly deletes the files at other times (like for instance if a command fails), and fails to delete the files at other times.
3. There is a complete inability to specify resource handling - for instance, I want to mark that this recipe is single-threaded, but that one uses all available CPU cores, and have make schedule an appropriate number of jobs.
4. If you want to have crash-recovery, then you need to make your recipes generate the output files under a different name and then do an atomic move-into-place afterwards. Manually. On every single recipe.

These reasons (and others) are why I gave up on make for bioinformatics processing and wrote a replacement. I'll release and publish it at some point.
Controversial professor Jordan Peterson aims to start online university
Robots Are Moving in on E-commerce Packing
The Dilemma of Unexplainable Artificial Intelligence
Someone in the comments mentioned that Amtrak's sleeper train travels daytime on the SF to LA stint and the terminals are some way away from the city. So the travel by night advantage is gone.

Amtrak's sleeper cars are also quite expensive when I last looked at it as an option for getting from Colorado to San Francisco. The price compared to a seat on the train was 2..3x or more (but it includes food).
https://m.youtube.com/watch?v=ooldezaZgU0 ...
> The author must not be used to the new spyware-by-default mentality coming from Microsoft. Hard to believe, but they used to sell products a while ago and had no telemetry.

Yeah well you and the author's first clue should have been when you stopped paying for said products.

And in this specific case, it's really not spying, it reveals pretty much nothing about you and help them figure out what is used and what fails.
Better hope you've not left any evidence on their systems then, you know, like a discounted transport pass.
Give all your money to me, and I'll return it million fold in a year. I know it's risky, but you can die tomorrow in an accident anyways, so why not.

Before you write a comment with "why not", apply that to eth first.
I've always found it fascinating collecting fossils.

Of course the rock is millions of years old, but the fact that it has the shape of a shell embedded in it from millions of years ago just makes the fact so much more real.
Systemd got adopted a lot despite being hated.
Have you ridden trains in America? I've travelled almost every Amtrak route across the country. In a country that properly maintains its rail infrastructure, Cabin will definitely lose much of its competitive advantage. In America, however...
As the technology evolves you need more and more people fluent. Most people will never write live code involving million of dollars but it might help people understanding the techno and the code behind...
This is an introduction and as more and more article will be written the learners will be more skilled and aware of security and good practices
> It's like, the USA executes people, china executes people too, so they must be the same.

On principle they are the same, just because the scales are different does not mean the US is in any position to criticize Chinese behavior on that issue.

It's pretty much the equivalent of "do as I say, not as I do" and a very easy to spot double standard.

> Ya, they both suck, but one sucks a lot more than the other.

Murder is murder, regardless of the scale, the injustice stays the same. Let's also put the scale into context [0]

"China, together with Iran, North Korea, Yemen and the US (the only G7 country to still execute people) carried out the most executions last year."

China, Iran, North Korea, Yemen, that's a list the US wants to be on too, really?
From 2007 to 2012 the US executed more people than Pakistan, Yemen or North Korea did.

> Likewise, the USA has corruption, so does china, but the scales of the problems are completely different.

You realize that if you read Chinese media, you'd get exactly the opposite stories about how corrupt the US is?
What does this mean? That all Chinese are constantly lying and all US Americans are always telling the truth? No, it only means countries control the narrative to make themselves shine in the most positive light possible. They do this regardless of what form of government they run, the only thing that changes are the methods they are using.

[0] https://www.theguardian.com/news/datablog/2011/mar/29/death-...
wtf are those guys doing, uploading source code without consent feels criminal, source code with app configs/secrets has ultra sensitive information.

anybody has a list of infected packages so others can quickly remove with `apm uninstall ...`?
Amusingly, not once does the article mention that it's about English-language Scrabble and not Thai-language Scrabble.
Rfd 900x modems for pentesting
There goes my screenshot editing software
i think Rake is one of the various newer re-implementations of make that more or less miss the point of what is good about make.

make is pretty neat if you think about it as a framework to help you compute/derive values from other values. each value happens to be stored in the filesystem as a file.

in contrast, many of the newer build-tool make replacements seem to miss the whole value of values and either push or force you in a direction of doing actions with side effects.
well even if they do that now, there is no guarantee that a future release will remove notifications.

just look at the automotive industry in germany. if you give them trust, they probably will do shady stuff, no matter how good their initial behavior was.

never trust a company.
So I assume you don't use web apps.
That's why you need to get a good education and accessible education on the subject...
I've found Cloudflare's solution to be very inadequate compared to Distil or Incapsula.

Both Distil and Incapsula _did_ have a small number of false positives (showing a captcha to users). We did have to write some code to overcome that.
JavaScript Interview Question – Recursion – Analysis and Solution Using TDD
My impression is that no-one uses Application Insights. Total of 643 questions about Application Insights on SO, either it's the easiest tool to use ever, or no-one uses it.
Had a similar issue with Wolfram Alpha some years ago. I reported a dozen different XSS vulnerabilities to them and their answer was: "We forwarded this email to our legal department.".

So even technical companies can react in really silly ways.
Show HN: Demo Using SodiumFRP with Typescript and PIXI
Libraries do take a while to get right, but I think we can only get them right by making them as libraries. All good libraries I've seen started out as part of a vertically-integrated piece of software, but if there's currently an immature library for x, using that immature library generally puts us further along the path to getting a mature library for x than writing your own vertically-integrated implementation of x.

I'd focus on making it easier to migrate between libraries, easier to improve interfaces, and so on. (I'd argue to a certain extent that's already happened, and that's part of why we're using more and smaller libraries).
Try Greenshot [0] for taking, and editing screenshots on Windows.

[0] http://getgreenshot.org/
BillGuard stopped in the UK and we don't have Mint.com so I decided to write my own personal finance tracker. It's not scalable as I only have scrapers for the banks I use but it was pretty simple to get to a basic setup.
Why would it be considered Web? It is use pretty much anywhere where js is used.
> We cannot allow corporations to take over open source tools.

I don’t know how much I agree with that statement in general. There are several major open source projects with corporate “control” – Mozilla, Google and Apple control/heavily influence Firefox, Angular and Swift respectively and there are probably a dozen others. The idea that corporations are “bad” is a tired trope. Some corporations are bad, some are good, some are in the middle.

But I agree with your actual actual sentiment though – corporate involvement in open source should be as benevolent as possible.
You can try harder too. Law is the law, regardless of your feelings.
For the P plate tests maybe, but that'd depend on the state too.

The way you phrased it makes me think of cops at lights just going around and aggressively throwing gear sticks into 1st.
To me, it looks like Kite miscommunicated but didn't propagate spyware. From what I understand after reading the related issue on Github, it did not do any requests to its servers without explicit user permission.

And I think the bigger problem is that 3rd party plugins are becoming a thing. Now, it's all about plugins, installing dozens of plugins that are difficult to audit before hand. It's like blindly installing software from torrenting sites, but shinier because it has the Github stamp on it.
Miki: Makefile Wiki https://github.com/a3n/miki

A personal wiki and resource catalog. The only thing delivered is the makefile, which uses existing tools, and a small convenience script to run it.
Amongst the other great suggestions you could also have a look at Redis (https://redis.io)
Yea...Windows Phone OS is really reliable (2 restarts in 5 years). I've never felt it underpowered either. Yes, my biggest complaint is the terrible PDF apps. Seriously Microsoft? Full Excel, but no PDF?
To clarify: they're drifting towards a political system reminiscent of Russia today, but they would never ally with Russia. The Soviet regime is still fresh in the zeitgeist's memory.
>what happens if there is an error in the logic?

If you are a big name in the Ethereum community, they will soft fork Ethereum so that your mistake is rolled back.
If only we'd had similar capsules on transcontinental flights — now, that would be something. Otherwise, it is just a bus serving two points, no more exciting than a sleeping car in a train.

Properly sleeping on a flight, on the other hand, feels like luxury.
Well technically you did consent by clicking "Enable Kite". I'm not familiar with Kite but the linked image has a line that says, "Click here to learn more.". I'd wager that it eventually links to a page that explains that all your source will be uploaded to their servers.

Now that doesn't make it any less shady though...
I think it's fair to say that open source has made inroads everywhere. If I were to tell my 30-year younger self what the future looks like, I don't think I would have believed myself. Having said that, there are lots of places where open source is having a hard time. In telecom and medical software for instance. I mean, I can set up a SIP server and inspect the Android source code, but there is a long way to go (like actually being able to build and deploy on a piece of commodity hardware in the case of Android). For medical software, just try to get access to source code for any medical device. You get the thing installed in your body and you can't even look at it.

Like I said, in every place open source has won important battles. The future looks good, but let's not understate the challenges either.
I'd love to hear if other people are using FRP (esp sodium) in their projects. This repo began more as like a testing ground so I could learn, but there aren't many working examples online so I guess this is a de-facto reference for other people too. It would be great to link 'em up if there's more stuff out there and it's just my google-fu that was failing ;)