skysight-inc/HackerNews huggingface dataset:
"While I think there is growing recognition that password based authentication is a highly suboptimal path dependency, we're also stuck with them on the majority of systems/services for the time being."

There is a pretty clear path off of it, via physical token authenticated password managers. The only thing missing is a standardized and well popularized protocol for changing passwords.
You don't need to rigidly and purely enforce rules only from test results but rather also embedded wisdom, defaults and recommendations.

ICMP is a well known gotcha and the only such protocol in its class.

I've personally never seen a fallback to TCP requirement in the wild but you could easily say "if DNS then enable both protocols" as a general rule, and add <received wisdom>.

These are easy to add as policies and will result in better rules than manually configured systems in many cases, if documented. Everyone's happy.
> who benefits from encryption that even law enforcement cannot break?

People who live in countries with regressive regimes where law enforcement can be legitimately dangerous?
Thanks! Appreciate the suggestion. :)
I'm not extremely familiar with Perl 6 to be able to draw a comparison.

From what I know about Python 2/3, it's that you can write maybe 90% on average/in general of your code the same way without much thought about the differences. However, if you do wish to adopt the new features, there's plenty to keep you busy writing scripts for at least a few months, maybe even a year.
I agree here. If Perl 6 however gets anything close to Perl 5's Mojolicious it would be more than enough to switch to it. I haven't used Perl in many years, but it's by far the best web framework I've ever used. It's really thought out well, made all the right design decisions from the beginning and just really great code itself.

But such gems tend to be unique, also in completely different fields. And it probably wouldn't have been possible if the original developer hadn't been involved and gained experience through Catalyst, which is roughly Perl's take on Ruby on Rails.

If it got a bit more press in its early days, outside of the Perl community I think the world of web development could look very different today.

As I said I am not a Perl developer anymore (and don't focus on the web part anymore either), and I am sure there is a bit of nostalgia in those lines, but even though there are great frameworks in other languages, no doubt, there is impressive projects, I still didn't get something that allowed such a kind of rapid development and transitioning prototype applications into production services in such a seamless manner.

I think it's also a great example of Perl being very readable despite all the ugly scripts you find out there - of course also because a big bunch of it being written by non perl developers who just needed to get a script going. Just like with JavaScript and PHP.

It's funny though how the presence of a well done web application framework nowadays is considered the killer application in a pretty consistent way. I've seen that in various languages that weren't really made for web application programming as well. There is obvious reason, as it's the agreed upon API for most applications, however I wonder if this might not bring stagnation and kind of a cycle that only allows a certain way of thinking and developing to succeed, as standards and programming languages/frameworks co-evolve.
NAT is not a firewall or security solution. For one thing, it can be opened with UPnP.
Down-voted for "idiots like you". Name calling does not add anything to the discussion.
Not sure what your website is doing, but here's a quick thought exercise:

If you serve a page in 10s, then you can serve 259'200 pages/month.

render_time page_view/month
10s 259'200
9s 288,000
8s 324,000
7s 370,285
6s 432,000
5s 518,400
4s 648,000
3s 864,000
2s 1,296,000
1s 2,592,000

So like, think 1 million views per month with 2s render time.

This is obviously skipping over a ton of details, but it's a good rule of thumb.
Yeah, I think a parent's responsibility is to expose your kid to things they might like or find fulfilling, but it's up to the young individual to pursue it.

The tricky part is that sometimes you have to push a bit to expose them to something out of their comfort zone. Take learning a musical instrument, as an example.

The first couple of months of learning an instrument aren't a huge amount of fun (for most people). It's legitimately frustrating. IMO, it's okay to push your kid a little bit. For example, make the child take at least 3 months of lessons with two different instruments, of their choosing, and if at the end of that, they still have no interest in learning an instrument, okay, that's fine. We can move on to sculpting or painting or programming or origami or gardening or dance or whatever.

The point is that kids are discovering the world and to a large degree, don't really know what they like or don't like yet. You have to expose them to a lot of things to find something that resonates with them, and at times, you may have to push them a bit, to get past the initial hump of awkwardness or frustration. I think that's healthy and responsible.

That doesn't mean you should force your child to take 10 years of violin when they hate it. I think a lot of parents fall into the trap of trying to force their kid to enjoy hobbies the parents enjoy or hobbies they think their child should enjoy. It's fine to start with those (hey, why not), but ultimately you have to listen to the child and understand the difference between temporary frustration and permanent personality incompatibility with some activity.
Only slightly tongue in cheek: Imagine the focus you could achieve with dedicated personnel taking care of all of the operations concerns for your devs...
Calling this an experimental neutral network is like me calling an opengl demo that renders a few flat shaded polygons an 'experimental 3d engine'.

It's not.

I'm sorry if that sounds harsh, but that's what you have.

There's no point to showing off something this raw: all you'll get is negative feedback about the limited features it has and negative feedback from people who try to use it for something and find that you can't actually do anything with it.

Just hold onto it until it can actually do something useful with it; and as I said in my previous post, I'm not talking some 'abstract' sort of useful thing.

The MNIST dataset is the basic standard task for these frameworks; my advice is focus 100% on being able to classify that dataset, and then you'll have something to show.
> If he stays consistent with what he says about AI, I think he might be successful in deterring people from using useful and reasonable AI for a while.

What exactly did he say that would imply that? As far as I know (and I did watch all the recent interviews), his approach boils down to:

- more open access to AI is less dangerous than it being developed in secret by corporations or governments; hence OpenAI

- suggesting that regulators start paying attention (and explicitly advising them not to start regulating outright; just to form an agency that would "gain insight" into the field)
That's not very listeny or believey now is it?
Ask HN: How do you estimate remotely
Hello,
I have a question to all the developers here who work mostly remote in a software development team and have to estimate some kind of work.

How do you do it? Like what is your actual way of estimating together. I ask because we think about recruit someone who will work with us only from home and I was questioning myself on how we would do estimation.

Thanks in advance!
> But don't you think UI is extremely important in these situations?

Well, yeah, that's why they invented a more compact notation than 207.170.223.70.213.170.133.129.131.136.235.244.33.54.210.133.

> If you sold IPv6 as "it works like IPv4 but with 128 bit addresses" I'm sure it wouldn't seem nearly as daunting to make the switch.

But ... it doesn't seem daunting? I mean, obviously, you seem to think so, but I didn't find anything daunting about it when I enabled IPv6 on my network and servers ~ 15 years ago.

> Regarding the size of the routing table, is it really that much of a big deal? Is it significant in the ISP's expanses? I find that hard to believe.

The current global IPv4 routing table has ~ 670,000 entries, the current global IPv6 routing table has ~ 41,000 entries, distributed over 58,000 and 14,000 ASes, respectively.

Mind you that a router has to do a routing table lookup for every packet, so tens to hundreds of millions of lookups per second for backbone routers. The CAM for routing table storage is one of the performance limiting factors of a router, and the larger it needs to be, the slower and/or more expensive it gets.

> The case I have in mind is what is, in my experience, 99% of the private networks today: you have a single public address, a NAT/Firewall/Router combo and then a handful of private subnets.

There were 6to4 or teredo, for example, which allowed for some of that. But part of the problem is that if you want to talk to IPv6 hosts over v4-only connectivity, you need to talk to some sort of gateway--the IPv6 host itself obviously doesn't have an IPv4 address (otherwise you could just as well speak IPv4), you yourself cannot directly speak IPv6, so ... you need some party that is connected to the IPv4 and the IPv6 networks to translate between the two. If that is supposed to provide good performance, your ISP needs to operate such a gateway. Which means it's not exactly an automatic solution either.

> This is where the migration should be as simple, seamless, familiar and comfortable as possible. This is where people can't be bothered to spend one week understanding IPv6 and reconfigure everything and still not be certain that they won't break something.

Well, for the most part, most end users really shouldn't need to do anything like that. Even less so that with IPv4, really: Your ISP assigns you a prefix, your router assigns addresses to your devices, and everything should just work.

If you actually want to do some fancy network setup or something ... well, really, it's not that difficult. Easier than v4, really.

> This is where having IP addresses that actually look like IP addresses matter.

But they look exactly like what IP addresses have looked like for the last almost 20 years! IPv6 IP addresses, that is ...
Thoughts on Flash Steve Jobs
Not sure if you're trying to be a dick, or just uninformed. So I'll correct you and just assume you're uninformed.

The quote you cited is the beginning of The Declaration of Religious Principle. It a requirement for becoming an adult leader within the BSA. And for the record, is _NOT_ Christian(TM) specif as the rest of the Declaration of Religious Principle reads: "...and, therefore, recognizes the religious element in the training of the member, but it is absolutely nonsectarian in its attitude toward that religious training. Its policy is that the home and organization or group with which the member is connected shall give definite attention to religious life. Only persons willing to subscribe to these precepts from the Declaration of Religious Principle and to the Bylaws of the Boy Scouts of America shall be entitled to certificates of leadership." See (https://meritbadge.org/wiki/index.php/Declaration_of_Religio...)

Any friendly satanist, Dudeist priest, athiest, pastafarian or jedi can be a merit badge counselor:
"To qualify as a merit badge counselor, a volunteer must:
Register annually with the Boy Scouts of America.
Be at least 18 years old.
Be of good character.
Be proficient in the merit badge subject by vocation, avocation, or special training.
Be able to work with Scout-age youth.
Be approved by the district/council advancement committee." As indicated by the Merit Badge Counselor Instructor Guide. ( see - http://councils.scouting.org/scoutsource/Scouting/Training/A...)

As a former scout (an Eagle Scout); yeah the BSA has had it's problems in the past. But they're changing and growing with the times, having finally allowed gay leaders and most recently transgender leaders. While it varies from community to community, the core of the scouting ethos is _NOT_ bigotry. Never has been. It's about inclusion, community, learning, leadership & civic duty.
> I guess you can say it's not needed but then again what is?

There's a difference between "not needed" in the sense that I don't need a calculator when I have an abacus, and "not needed" in the sense that I don't need an abacus when I have a calculator.

> the use cases will be specific to the needs and constraints of the stakeholders

Yes, and people are asking for suggestions of what those use cases might be. If you can't think of any, that suggests we might be looking at an abacus, not a calculator.
Not often, but the times you do need to use those machines are probably the direst of times, i.e. emergencies.
tmux or screen?
I did not say it will; I said it might. And the existence of people willing to play does not guarantee the surrounding market and culture necessary to make a sport the dominant sport in the US. I think that depends a lot on that sport's pervasiveness in our culture, and in particular in high schools and colleges which are effectively our professional feeder system. If less players start going into youth football, and then less players are going into high school and college football, I think less people in our culture will pay attention, decreasing its market size and culture significance. Again, I'm not saying this will happen. I'm saying it might.
Why all developers make the same design mistakes?
You get in early enough, and you'll pretty much be always be up on your investment. I got in on Ethereum the day the announcement popped up on Hacker News that it was added to Coinbase, and the price per coin was $11 then. Even after it's massive 50% crash from it's peak, it's sitting at $200 a coin right now. That's still up almost 20x.

That being said, I didn't have a ton of money to invest at the time, so I'm not rich or anything, and I tend to be a long term holder, but I highly doubt it's ever going to get all the way back down to $11 a coin.

I could have bought Bitcoin when it was $4 a coin, as I was paying attention to it back then, although the infrastructure for it wasn't in place and it was really difficult to buy, so I gave up on it. If I had, I would have made 625x whatever I put into it by now. And Bitcoin is not likely to ever get back down to $4 a coin. There will be buyers for sure if it ever gets that cheap (or the landscape will have changed so obviously that I probably would have sold a long time ago).
Yeah, you are right. Maybe it's even less than something to be called "experimental".

I will devote more time to this and I will try to make you happier with the demo page and further versions.
Thanks, yes it's NK and it's quite a reputable magazine which is seldom wrong, they usually have a lot of first-hand details from archives and industry sources.
I was a bit sceptical about this because any intel was in KGB/GRU hands, and they generally weren't ready to share anything with anyone, even with people working on the space program (according to Boris Chertok and many others); everything was top secret.
Also, law enforcement isn't all-powerful. If law enforcement can break it, criminals can break it too.
Perl is pretty much dead, I don't anyone still using that beside legacy code.
Early proof of stake research in Ethereum
Knock yourself out. But, not everybody is doing the average.
I'm using Lektor[0] as a static site CMS for a non-technical user. It's not super advanced nor shiny, but it does the job.

[0] https://github.com/lektor/lektor
I think the blind spot in your analysis is that you assume the rest of the financial industry is not like this. Cryptocurrencies are just doing rapidly what other stores of value did gradually over the course of centuries. Gold for example gets almost all of its value from speculative interest. This extends to some degree to the collector art and rare wine markets as well.

I also think you're failing to appreciate the benefit of having technologies that allow for a viable grey market. A third of people born today do not have government identification [1], and therefore cannot participate in the legal identity-based financial system. To increase their participation, the "crime" of unregulated commerce has to become more frequent in many countries.

In countries like Venezeula, cryptocurrencies are starting to play a role as a secure (by Venezuelan standards) safe haven for their wealth [2]. All of this activity is criminal according to the Venezuelan state, yet it is undoubtedly beneficial to Venezuelan society, in preventing corrupt state apparatuses from expropriating and squandering the meager private wealth of Venezuelans through hyper-inflation.

It also doesn't take much imagination to envision a future where tokenised finance on the blockchain helps millions of entrepreneurs around the world better access global capital markets. Speculation, which has created a token market worth billions [3], is just the first use-case enabled by this technology to conduct much more frictionless financial transactions. There will be more. I would also argue that this speculation, as chaotic as it is, is helping to bootstrap the industry, just as the dot com bubble did for the internet sector in the late 1990s.

So while I do think there is an enormous amount of hype in the cryptocurrency market, and that many will suffer losses from making bad investment decisions, I think this needs to be put in the context of the speculation underlying the value of major traditional assets, the promise the technology holds beyond speculation, and the capabilities it is already proving to have.

[1] https://twitter.com/NickSzabo4/status/544994985414639616

[2] https://www.bloomberg.com/news/articles/2017-06-15/venezuela...

[3] https://coinmarketcap.com/assets/
>This world is getting so fucked up

it already is. Just visit parts of Mexico
This is very noticeable in London. It's a relative rarity to find a dev that's worked anywhere longer than a couple years. The simple economics of it is that until a certain salary, there is no easier way to ratchet up the pay scale then to use the negotiating leverage of having a job to get the next one on better terms. Meanwhile, the supply situation for devs is such that employers have to accept the situation. I'm not sure it's an employer led effect at all; especially given the size of the SME scene in London.
> Science is about observation and deriving insights and rules from what you see

Is mathematics a science?

How about mathematics within a pre-defined discipline (e.g., doing novel work on group theory without inventing new axioms/structures)? Is that science?

If you include mathematics in the sciences, which I think we should, then it's hard to see how video game development is non-scientific.

(Besides which, the old trope about AI applies also to science. AI is AI until it becomes useful, then it's no longer AI and becomes some other branch of CS. All of engineering is science until it becomes useful, then it's no longer science but some branch of engineering.)

> video games is largely more of an engineering problem that typical science/exploration.

For one, video games are a great way to understand the strengths and limitations of simulation in science. And basically all fields of science these days have a corresponding field of computational science focused on using simulations to better understand the underlying science. So, it's important.
Because it not a helpful comment. It's wrong in a lot of ways and misleading in others.

Like dragonwriter said, having coroutines in your language or a fiber library is not close to the same thing as the language having a scheduler that maps those fibers onto native threads for you. Some of the languages mentioned can't even execute multiple threads on multiple cores in parallel.
The Myth of the Full Stack Developer…
tl;dr: Our capitalistic economy, which incentivized the notion of "maximizing shareholder returns," created an environment in which Companies who are efficient in hiring the right amount of disposable assets. Because of this, employees better be ready to quit when they sense better pastures elsewhere.

It was a good read, and a reminder that we are all subservient to the Shareholders (directly or indirectly). The companies of the previous generation had 3 pillars that needed to be strong: Sense of Customer, Employee Satisfaction, Shareholder support. All the attention is now shifted in winning Shareholder support.

I wish we could abandon this cargo cult mentality that shareholders are the utmost important stakeholders of a company. It's already been discussed that maximizing shareholder value is meaningless: https://hbr.org/2016/09/the-false-premise-of-the-shareholder...
That's very cool, do you have a repo somewhere I could browse?
You seem to be suggesting amazon is more likely to give you genuine merchandise. This doesn't fit with what I've been seeing lately where people complain about counterfeit merchandise all the time.

I find when going to small sites there are lots of signs that they are not shady: they generate own reviews and advice that is more than marketing. A little poking around will tell a lot. And of course I buy with a credit card so I'm protected against loss in the worst case.
That's one of groups, correct.

Who benefits from a financial transaction system that law enforcement cannot censor?
AWS CloudFormation StackSets
Looks good. Craft is simple enough to easily port to Emscripten. Another port of Craft I found a while ago is NetCraft:

https://github.com/satoshinm/NetCraft
If you have to ask: Nothing, that is handled at lower layers.

Except you might want to actually configure IPv6 on any backend servers you run and add IPv6 DNS records so that your client software can actually use IPv6.
Greece Detains Russian Alexander Vinnik for Bitcoin 'Fraud'
True, but this is not really a problem for the user, but a problem for the system. It is reasonable to assume that the user that creates these type of accounts does not really care about the security of the system either.
Or maybe even just tabs?
Noooo, whats next? The real player?
I've run into similar restrictions twice with clients.

For one, we had to put together a homebrewed Twilio-like service that connected to Canadian SIP trunks. That was a fun project and I learned way more about telephony and VoIP than I'd ever cared to :). Super fun though, there's still something magical about making an HTTP request and having your phone ring, and, for me at least, it's even more magical once you know how all the machinery works to make that happen.

The other was pretty straightforward: immigration lawyer who needed Canadian-hosted email. His concern was Patriot-Act-related. Having read the Canadian privacy legislation and the Patriot Act, he felt that he couldn't simultaneously be compliant with both laws if the server was hosted in the USA. Canadian privacy law requires you to disclose to your customer if their data is accessed, and the Patriot Act requires you to keep your mouth shut.
Numenta has been working on this strategy since 2005. Has anyone identified any of their products in wide use?

https://en.wikipedia.org/wiki/Jeff_Hawkins#Numenta
The addition of the burst mechanism to EBS volumes is relatively new. If you have been running on AWS for any reasonable amount of time, the sudden degradation of your disks will leave you scratching your head.

Dedicated IOPS wasn't originally pitched as the alternative to burst disks - it was simply that normal ELBs were not predictable based on peer load, and dedicated IOPS ELBs were.
SEC Investor Bulletin: Initial Coin Offerings, (ICOs)
A person only has so many memorizable passwords that they can hold at a time; the entropy source is very very low rate. Revealing any memorizable password to stupid random sites is itself an antipattern.
I always copy links to Youtube (or other) videos instead of opening them, then I do `mpv --ytdl --ytdl-format best "$(xsel -b)"` via a shell alias.