skysight-inc/HackerNews huggingface dataset:
> The issue is of who to trust, the package maintainer or the package repository?

Interesting framing.

> It is comparatively trivial to steal a strong password when it is transmitted over the internet vs local key material.

"Comparatively trivial?" I don't really understand this. I think you're suggesting that SSL cert attacks are easier than evil maid attacks due to this paragraph:

> Nation states with bad certs (china has done this) can steal your password, npm can steal your password, npm can be hacked and leak passwords, npm can be subject to a NSL and forced to hand over passwords, etc, etc.

Pardon me, but we're so far afield of the actual reality and the logistics that plague it that I decline to continue this conversation. If your adversary is nation states, you need a code audit (preferably several). You can't trust the signatures precisely because nation states are so well equipped to perform evil maid attacks.

It is 2017, evil maid attacks are the reality of the nation-state intelligence industry. We're seeing examples of them leaking out. They're in active use not just in a targetted mechanism, but speculatively! We have evidence intelligence agencies sell comprimised USB keys in bulk near the physical locations targets are likely to enter just to see if they can catch them in a moment of bad opsec.

Honestly this all feels like an attempt to say, "We should use GPG because it is good." Maybe it is. I'm not so sure, given the logistical reality.

But it wouldn't prevent the attack we see in the tweet above. It wouldn't make the root post of this thread correct. And I'm not sure it would accomplish what you're saying.

I'm sorry, I simply don't have time to chase this degree of abstracted hypothetical on a day old thread. I'm writing this final message here as a courtesy to those involved.
HelpCode is solving DevelopersBug's ( Ruby -Javascript - NodeJs - RubyonRails) for this month Free. they are doing a trial test to test. if you have a problem submit.
How to create a calculator application with Ionic framework 3
No, because exchanges in public markets never get to this point. Unless you're margin called, you're not put into a position where you forfeit your assets. Moreover that's still not an ultimatum where value simply goes from the customer to the exchange without any consideration - it occurs because the assets you borrowed from the exchange in the first place have been lost or exposed to great risk.

This is not about a do over, it's about the ultimatum being reasonable. If an exchange declared that you had 10 days to withdraw funds issued by, say, dividends, or you'd simply lose those funds with no consideration or equitable exchange, it would be sued (and successfully so).

Coinbase did not (and does not) need to allow trading in order to disburse the forked currency to existing customers.
If and when most of the heavy lifting in the field of doing proofs will be done by computers, I suspect a new definition of proof will emerge not too far from what you're saying.

Rene Descartes or Isaac Newton would throw a fit if they could see this.
My blog/wiki engine is written in an older version of Hy:

https://github.com/rcarmo/sushy

I'm currently re-writing it in Python 3.6 because Hy has taken a hard stance in backwards compatibility and deprecated "let" (with a replacement macro, but still) and isn't tackling async (both for understandable, but sad reasons), so it doesn't really work for me anymore.

But while it did, I loved it to bits. Python with a LISP syntax is just wonderful, and if someone ever finds a way to add back the stuff I like, I'm more than willing to deal with the quirks.
I started my self-taught career at 29, now 33, I've a full time job as front-end developer.

I switched from sales in the construction area in a different country. I came here with no English, no friends, no contacts.

So I think you can become a front-end developer.

It went like this:

* 29 to 30 freelancing

* 30 to 31 full time at a mid-size design agency

* 31 to Today full time at a big company

Ping me if you need help or advice (if I can provide any) at twitter @_jolvera or email jolvera at posteo.de

Edit: formatting
Sure, but the article isn't about postgres.
This is a great example of why compiled applications with no sourcecode are harmful and prevent advancement.

If the sourecode for Windows Defender was mostly open source, with only critical portions linked in, then it would be possible to improve the portions that integrate the libraries into the system without moving each process used by it into some sort of wrapper.

There is not even a need for the sourcecode to be "free", merely that it is able to be viewed and alterations contributed back to be available to anyone who has paid for Windows.
Apple Pay Is Coming to Sweden, Denmark, Finland, the UAE and More Banks
Really? From what I understand, the number of black inmates in prison is roughly equal to the number of white inmates (about 40%/40%). There is a large disparity in terms of the incarceration rate of people of color, but your above statement is not true.
this is just plain wrong.
I can think of a few reasons:

Bigger marketplace/choices

Convenience - I don't have to wait until the store opens. I don't have to drive around to 10 different stores for 10 different products

Not everyone has has easy access to the stores they need to go to

Price

Time - I can order a pan while waiting for a client to arrive or commuting on the train.

Search and comparison tools

(There's disadvantages too, of course.)
How is this unethical? This is the exact point of these marketplaces - The drivers are saying "I won't accept a fare at these levels", Uber is responding by raising the price (and it's pretty transparent to consumers - The whole point of "surge pricing" is to incentivize drivers that would otherwise not be on the road). The multiplier framework is pretty clear upfront when you're paying more.

This sounds like a fix to one of my major complaints about Uber. The prices are too low. I like cheap rides, but I also like knowing that the people who are giving me rides (and providing me services, selling me goods, making those goods, etc) are making living wages.

And, to some level - This is collective bargaining. This is precisely what Unionists want, without all of the mess involved in actual unions. The drivers are collectively demanding higher wages, and Uber is responding.

On the other hand: There's a good reason we're seeing this pushback. Uber is a shitty, predatory company, and has relentlessly worked to drive down driver wages well beyond sustainable rates. (It's also a shitty company to it's full time employees, to which I will attest.)
A black swan event caused by the phenomena that previously uncorrelated financial indicators temporarily become correlated under stress.

A few months after they blew up, their portfolio was profitable again.
Oh, I was looking at the wrong parent.
Global consumers reaching a better understanding of artificial intelligence
hmmm, is this correct? It seems the real proportion is 39/40/19 among Whites/Blacks/Hispanics.

https://www.prisonpolicy.org/reports/rates.html
That would be incredibly interesting if there is some unknown molecular self-defense mechanism sort of thing in place.
So what? How are we going to learn unless we experiment? I detest the precautionary principle. If we'd followed it in prehistory, we'd have never left the trees: who knows what might be down there?
As far as I know, Uber does not take a cut on surge pricing. The extra money goes straight to the driver.
Shout out to @paultag (Author/Creator of Hy) - he's an awesome guy who has written some really cool stuff.
Great point. I think the problem is that employers often use boilerplate conditions, and requirements are more stringent than the job would require.
This. See my other comment for a sizable Hy example and more info, but the lack of "let" mostly killed it for me.
This isn't Timmy from accounting splitting off from Apple. This is the iPad division splitting off from Apple. If I'm holding Apple stock, I sure as hell expect to end up holding iPad stock in the event of a split.
So are you of the opinion that people who commit major crimes should just be unemployed for life, and no effort should be made to cater to their job search? You don't realize that's a recipe for virtually guaranteed repeat offenders?
I thought they made the announcement 10 days before the fork, not a month.
Heh, you changed it to "Digital Manager of Operations ". Much classier ;-)
Location: Louisville, KY, USA

Remote: yes

Willing to relocate: Depends

Technologies: Javascript, jQuery, AngularJS

Résumé/CV: available on request

Email: gildermcd[at]gmail.com

I am a self-taught Junior AngularJS Dev looking for full-time employment. Although I am green in experience, I can promise that I will work harder and longer than anyone else in order to learn and contribute.
No you're right, it's fundamentally wrong to compare Meriwether with Corzine. But my kneejerk response was to the "entrust your money".
Especially because AWS regions are broken up into multiple availability zones (data centres in the same area). So taking out a single data centre won't do much if the AWS customers have correctly designed their systems for high-availability (ie having redundant instances in other AZs/regions with their data backed up elsewhere).
I've done this before, this is the perfect way to illustrate EVERYTHING about programming, even engineering. Explaining sensors, input/output (keyboard), how it has no way to sense how or whether or not it's even moved forward. The robot just does.
Traditional means of communication seem to be sufficient, between driver forums and whatsapp groups.
Yes, Facebook already lazily loads code for secondary functionality. More details in this comment https://news.ycombinator.com/item?id=14912871
Customers could have sold their BTC for USD at any time and just held USD until after the fork. There isn't any functional difference between holding USD pre-fork or holding both BTC and BCH post-fork.
I'm pretty sure that if we threw a lot of genomes, healthy and defective, to a neural network, and then showed it a genome and told "make it healthy", it would.

So it happens that genetics doesn't have to catch up - we can have this knowledge without knowing it.

And also. People will question genetists' judgement. Some of the changes they're proposing have never passed statistically significant testing. But nobody ever questions neural network.
Not so far, it seems. https://www.spinics.net/lists/dm-devel/msg31482.html

> this target do not provide error correction, only detection of error (such a tool could be written on top of dm-integrity though)
I don't see why that has to be best case. My best case scenario is that humankind has overcome tribal instincts, united around common causes, overcome arbitrary prejudices, and... well basically Star Trek.
"slow down" = great time to start a company
Myself and a colleague are in this same position... we've just launched a store selling physical products, with a 2nd product store (with a completely different product set) launching in a few weeks. And then we're also working on an app that should be ready in about 3 or so months (at current projections).

Our approach has been approaching people or businesses in similar fields or related industries, and pitching the products to them and getting them them to sign up as affiliates. It reduces our income quite a bit and we make very little off it, but instead of us trying to reach the people they know and are in contact with all on our own, we effectively use them and benefit from them doing our marketing. They are keen to do it, since they have a good incentive to do so. Se make it worth their while. The long term goal is building up a brand, and then profiting off of that. In the meantime, everybody wins if they generate sales, but we dont have expensives if there isnt.

And yes, we met with potential affiliates during our lunch breaks, or after hours, etc. A couple were also generated through friends, family, and social group contacts.
> If this large block of people were earning more, they would be spending more

Nothing I said disputed that.
https://www.washingtonpost.com/news/fact-checker/wp/2015/04/...

The US has about 4.4 percent of the global population and about 22 percent of the global prison population. So either we are seriously fucking up as a country and incapable of producing decent human beings, or our entire justice system is broken.

Something needs to be done differently at the systemic level that doesn't involved holding every individual fucked over by the U.S. personally accountable for being crushed under the wheels of the goddamn system.
NASA’s Supersonic Passenger Jet Flies Closer to Completion
@devmpk : I totally get that. I sincerely wish you the best of luck with those other companies. We're not right for everybody, and everybody isn't right for us.

We're working on societal problems that impact millions of lives in meaningful ways. That kind of change doesn't come easy.

We want people who are passionate about our mission and passionate about solving those problems. People who will persevere through the inevitable bumps in the road. When your company is forged in the crucible of the healthcare.gov turnaround, willingness to fight through adversity is deep in its DNA.

For the people not passionate enough about our mission to tackle the code challenges, what good would a phone call first do? We'd just end up using 30 minutes of your time to figure that out and say "No thanks." That doesn't feel very useful or respectful of your time, at least to me personally.

Each solution turned in takes about 1.5-2 hours total of our engineers' time to review. It's a meaningful commitment since we see no revenue for that time. It's worth it to us to weed out those with a "spray and pray" application model right up front, so that we don't keep asking our engineers to spend meaningful time on candidates who aren't really interested in us.

Our hiring process isn't going to be everybody's liking, and we're going to miss out on some great folks because of that. It's just a cost of doing business. No hiring model is perfect including ours.

But, our experience has shown that the cost of deterring the multitude of minimally interested candidates to allow us to put more resources into reviewing the passionate candidates has been worth it. That trade-off wouldn't work for every company, but it's been useful for us thus far.
tl;dr; Only Amazon really benefits, buyers will eat the cost and their experience might be worse. Smaller sellers will suffer the most.

Mostly it let's Amazon hire fewer people in support department - they don't have to deal with the occasional refused return ("I dropped this glass item on tiles and it broke into a million pieces, I'd like my money back. Do I have to ship it back to you?" - paraphrased actual return request)

The only other plus side I see is that customers can ship the return immediately. Not much of a difference as sellers are now required to respond within 12h (7 days a week, including holidays) and if they fail to more than 5-10% of the time (I don't remember what the exact target is now) they risk having their Amazon account closed.

From consumer point of view it's not a good thing:

- it offers no new customer protection. sellers are already required to accept those returns (unless customer shoots themselves in the foot - see example above) and provide a prepaid shipping label (in most cases). Amazon enforces that

- it removes the option seller has to accept a return that is out of policy

- it increases the number of unnecessary returns (and having to reorder). Often a one sentence explanation/hint is enough

- it doesn't make the cost of shipping to customer refundable, unless the customer lies about the reason why he's returning the item. Right now those false claims account for at least 3/4 of all returns (source: my wife runs a business that does part of the sales through Amazon, other sellers we know having the same problem)

- it generates extra costs for sellers. that cost is ultimately paid by buyers

From seller point of view it's not a good thing:

- makes fraud easier. For a larger seller that's simply a cost of doing business that will be shifted to buyers anyway. For a small seller it can be end of business if for example a Chinese company that copied their product decides to make a couple dozen fraudulent returns (not that uncommon)

- removes an option to use your own cheaper shipping label - even sending just a few hundred package a month gets you really nice discounts

- removes an option to use your own shipping label that makes the return safer (like extra insurance or using a courier). ANYTHING customer ships back makes Amazon consider it a valid return - even if it's damaged, something completely different, etc the seller will have to provide a refund. It's next to impossible to stop that refund

- removes an option to receive feedback from the customer making the return to improve in the future
One benefit of the diesel approach is that it's type safe, whereas the pure SQL approach isn't.
> Economics isn't a zero-sum game. People with better jobs spend more money to buy more products

Nothing I said suggested otherwise.
That's an interesting idea, but with my limited knowledge of neural networks and deep learning, don't these things usually need to know when they are "successful?" (i.e. the distance gone right in a mario game or something). How do they not only suss out various options for genomes, then test the effects?
Yep, they screwed up big time.

Since BCC doesn't have enough hash power to mine blocks trading/withdrawal would not work anyway.
>> We expect additional revenue to come from municipalities, who spend tens of billions of dollars annually, when someone is rearrested.

I'm curious - while I agree that it also benefits the municipalities to help former criminals reintegrate into productive society, through what channel do you see expect this revenue to come? I know some tax breaks exist for hiring ex-cons, but dishing out funds to a service like this would be entirely new, right?
Machine Learning Bias on Prison Readmission
No; I'm the author of the Caddy web server. No affiliation with browsers.
It is fair that caution is needed - otherwise we're just a bunch of Qyburns, right?
If you're an investor, do you want to get some pennies back on the dollar, or do you want to get 0 pennies back on the dollar? If they liquidate they can take that cash and pay out something, at least to some class of investors.
in today's culture of the middlemen, Amazon seeks to be the ultimate middleman
It almost sounds like there's an anti-tampering (i.e. counter-mutagenic) system in place we don't understand. Makes sense. Not only is meiosis more error-prone than mitosis, there's also a wide difference in error rates between the sexes (40 to 60% for women and 3% for men) [1].

[1] https://books.google.com/books?id=I1ACBAAAQBAJ&pg=PA9&lpg=PA...
From what I've observed, Vancouver weather is closely correlated to Seattle weather (it's fairly close to Seattle). I haven't actually compared the data though. Similarly, I would imagine that weather in Portland is quite different than the Seattle/Vancouver area. The entire King County area experiences the same weather - Lake Washington probably influences things, but anecdotally I haven't heard anything like "location foo gets more rain than location bar".

Generally, the weather is Seattle is heavily influenced by Puget Sound and the rain shadow east of the Olympic Peninsula (parts on the west side of the Olympic Peninsula are actually classified as rainforest). So we get less rain than you would think and it's fairly moderate.
It won't be that large for long. Only reason why it's so high is the few places you can sell it aren't accepting BCH deposits; the only way you can sell is if you had BTC there prior to August 1. There's a ton of pent up demand to sell; once those exchanges allow deposits, there will be a ton of dumping and the price will fall substantially.
"we don't have the time or skills to maintain these open source components" translates to "we don't want to install a monitoring solution that restarts a service when it fails, or think about design in regard to component failure".

It's such a poor argument. I was a developer long before AWS appeared and I've used so many open sources packages that were profoundly reliable. In many cases it just takes a daemon restart. And while it's not exciting to set up some of that stuff, it's far more tolerable than writing a CloudFormation template.
The DevOps-Ready Security Program
I know python, and last semester I took a class that briefly touched (lightly kissed?) LISP for a few weeks. I have a passing familiarity and I really loved the very small amount that I saw. I'd like to learn more, can you go into more detail on the usage of let and how one would go without it?
Humans evolved to accommodate the frequency of the earth
Automate as much as possible. Payments ? Slap a stripe checkout form (unless you happen to be in a country where Stripe is still not supported) or Paypal for others.

Onboarding: Make it as easy and smooth as possible for clients to get started after signinup. Show them exactly where and how to start.

Documentation & FAQ: Create tons of it. If a client has a question, thy should be able to resolve it through your documentation for the most part. Don't let little simple questions to come to you EVERY time.

Setup a Support Ticket system and only answer via emails/support ticket for questions that cannot be resolved via your documentation. If a client is not aware of documentation, point them to it before answering the same question again and again.

Get a decent smartphone and answer the tickets/email through that. You could even do it sitting at your desk or during lunch break

If you absolutely need to schedule phone calls, schedule them during lunch break and find a relatively quiet place where you can talk. If not quiet enough, tell the client that you are travelling and they may hear background noise. As long as it is not a screeching train, clients won't mind specially if you already told them.

Hustle. Do whatever it takes to get the first few clients except illegal activity of course. You may have to cross a few lines at work (lying about lunch plans etc) but I personally think those are reasonable to do.
Planet Labs – Experimentation in the Open
It's currently dependent on implementing traits for very large tuples, so you could argue it's a language feature we are waiting for (cf. open RFC #1935 [1]). (There was a PR on Diesel to use HLists but it's no longer pursuit.)

[1]: https://github.com/rust-lang/rfcs/pull/1935
That doesn't resemble anything like the business practices of mature exchanges. The best analogy I can think of offhand is a stock split or (more frequently) a dividend. An exchange could not in any universe give its customers 10 days to withdraw its funds or agree to forfeiture.

You don't just get to take customer assets because you sent out an email and gave them 10 days. This is why we have the concept of consideration in the first place.
Apple doesn't have a web of trust. Microsoft and Google do not either. They bless your code for their marketplaces. Crypto is just coincidentally how they do it.

A web of trust implies transitive trust.

I'm pretty sure the same is true of Debian, but I don't know about the others. But these are NOT webs of trust.

What's more, other open source projects simply do not deal with the scale of NPM. The amount of data they move and offer is pretty brutal. Lots of dismissive engineers sneer at the javascript numeric tower and simply do not understand how difficult and perhaps even surprising the implementation of NPM as a platform is, given its scale.
Doesn't matter. The fork occurred, so they can either give the duplicated amounts to their customers or keep them to themselves and who knows, sell all of the BCC somewhere else for all we know. To me, the latter just seems to be unrightful profit for coinbase.