skysight-inc/HackerNews huggingface dataset:
>>And your "only a matter of time" slippery slope has already happened: several EU nations have taken legal action against US-based online retail/auction sites to require compliance with laws against selling Nazi symbols or memorabilia. And I hope you'd understand that no matter how much you might argue "but I wasn't even in Germany", Germany will come after you if you offer to sell and ship items to Germany which are illegal to sell/ship there.

No that is infact not what my "slippery slope" argument is.. No where even remotely close to it

Shipping an item INTO the nation means clearly you must abide by their laws, what I am talking about would be Germany attempting to take legal action because I operate a website that has nazi symbols on it that a german person happens to visit.

>> There is nothing new, radical, revolutionary, terrifying, unprecedented, etc. about this idea.

Seems to me that there is since the US is not just prosecuting people for their direct actions against US Computers but seem to be going after people many many steps removed from those actions that have the thinnest of connections to US Interests. This seems to be new and radical and terrifying from my point of view

Do you support the US in doing this? You seem to imply you have no problems with the current state of affairs
Wow! That's a bold statement to make. I wish I get a chance to make such a statement to a user about a tool I made. A hat tip to you sir! :)
True, but if you "pkg install gnuls" and set up an alias, you can get gnu ls transparently.
Which SSL certificate is best for a multi-domain with multi-subdomains?
> Definitely impressed if this is your first crypto work.

It is. :-)

> A long-running interoperability test between your lib and another.

Already have one for all primitives. Just tweak the parameters to make it run for a long time. The test code is in test/sodium.c and test/donna.c

> Fuzzing. You need to to catch false results, random crashes, stack overflows, etc. Fuzz every input, do it for random lengths (both underflow and overflow).

I'm not sure how to go about it. I already check every input size, from zero to several times the size of the internal block, in my comparison tests.

Of course, all inputs are correct. Incorrect inputs result in undefined behaviour, checking for that is out of scope. (That's why most functions return void.)

> Maybe port it and test on Win, Mac, ARM, MIPS. I find a lot of bugs shake out during ports.

Yeah, I only tried GCC and Clang on my Intel Ubuntu machine. But I did use Valgrind, ASan, MSan, UBSan, and the TIS-Interpreter. I also compiled under various standards: C99, C11, C++98, C++11, C++14, C++17.

> Timing. […] Use a high-precision timing mechanism to catch any unusual spikes

Isn't that a bit overkill? I'd rather manually review the source code for the absence of secret dependant branches or secret dependent array indices. I'm not implementing AES or RSA, the primitive I have chosen were specifically designed to easily avoid timing attacks.

> crypto_aead_unlock has two return paths, it might be better to maintain timing.

No. There are 2 cases to consider: failure, and success. Each path runs in constant time, so timing can only distinguish success from failure… which is revealed anyway by the return code.

> Rather than using int returns, use bool.

I'm afraid bool is a tiny bit less portable than int. I also went with the flow about error codes, which are traditionally int.

> Zero your ctx vars, e.g. a_ctx ctx = {0,};

I'm not sure how to do it portably, with zero dependency.
>>What happens if you're a creator and that $2000 a month stops coming from patreon?

That's no different from your employer shutting down, it happens, people move on.
So, I'm probably missing something but since keybase is built around PGP I assumed that the files I put in my private kbfs would be encrypted with it.

I use a GnuPG "smartcard" (a yubikey) so I'm certain that keybase has no direct access to my private key.

So I've tried "echo test > /keybase/private/simias/secret.txt"

So far it seems to work, the file is here and I can read it.

Then I shutdown keybase, make sure nothing is running and /keybase is unmounted, remove my yubikey and run_keybase again:

cat /keybase/private/simias/secret.txt
test

So, what am I missing?
So does this means that the talks at CppCon are now invalidated and future uses of Djini will see Rust support?
> Possible?

Yes. The legal code is so byzantine that most citizens (and most visitors) are permanently in breach somehow, somewhere: an error in some form you filed, a permit you didn't know you needed, a clause that's very rarely enforced, a law worded vaguely that can be made to fit.

This is the origin of the cliche "to throw the book at someone" - to threaten or exact retribution, by hunting for all the ways they are breaking the law, related to the original arrest or not. It is also why the advice is not to speak to police voluntarily.

Fortunately for most folks the US is a mostly benign state (which is why exceptions are somewhat notable). But this is not a unique US issue. It is only a change of intent away from the widespread persecution of political opponents.

As long as most of us believe a 'political enemy' is our enemy too (like those evil hackers), the state is free to throw the book where it pleases with public indifference or even support.
This varies widely between startups: we are an AI/ML (machine vision) company, so our first hires were 2 AI/ML developers, added 1 web dev (frontend) and 1 backend engineer to build our MVP. Now are a 15 strong team (added sales, customer success members later)
A lot of the issues I've encountered (which were simple card verification errors due to addresses change) could have been easily solved with better Error messages, FAQs and staff training. Instead tickets go into a black hole, you wait 6 hours and get a boilerplate response.
If you sold 2000 glocks to the police you'd be fine.

If you sold 2 glocks to MS-13, you'd have problems.

It is someone without the right customers.
That bit is just a flag which indicates that how the actual signatures on the transaction are done has changed. In order to create a valid transaction you have to implement those changes too, and not all the open source code that claims to do this actually gets it right. And of course, being able to build transactions is just part of what you have to do to support a new coin.
If you take a look at forums for drug users, such as Blue Light, you will see most prefer heroin to fentanyl. Apparently the euphoria from fentanyl isn't as great as with other opioids.
Pretty much all of the major car companies are making fully electric vehicles with ranges comparable to Tesla. (I know about Ford, GM, and Volvo.) However, a lot of the hype with electric vehicles is centered around Tesla right now, much like how the hype for hybrids was centered around the Prius. In my opinion, the Prius is one of the ugliest cars out there, and despite the fact that we have a lot of choices for hybrids now, the Prius is still one of the top sellers. I really hope the Model 3 does as well as the Prius has done, because (much like the Prius did) it will put market pressure in places that there previously was none.

Putting most of the current auto industry out of business by being way more awesome is "good" in the short term, but then comes the monopoly, which is never good for the customer.

And to the cell phone company argument, Look at LG, Samsung, and Motorola, all phone manufacturers that have been successful pre and post smartphone era.
You should buy that person a beer if you ever find out who it is.

Plot twist: What if it turns out that it was you all along! :O
A la Dr Jekyll Mr Hyde :)
My Current Live Guitar Rig Rundown – The Blogging Musician
I, too, have had terrible past experiences with Coinbase and I no longer use them. I now buy on Gemini for fiat -> BTC and use other exchanges for altcoins. That said, I no longer keep any crypto on any exchange, including Gemini. The whole point of Bitcoin is that you are your own bank via ownership of your private keys. By giving them to Coinbase, you centralize the system, concentrate the risk, and create honeypots for hackers. Remember, the government doesn't insure Bitcoin balances like it does with USD in banks and so much Bitcoin has been lost via exchange hacks in the past few years.

Don't let centralized authorities keep your private keys.
#VastuTips for the #Construction of #Building
Ethereum Scam Database
its true,
the very business model of schools is to convince you that you are stupid until at the end of the term when they give you a certificate to say you passed or not to the next level, were they then continue to remind you that you are not clever enough yet, but you soon will be if you follow these rules
Interesting idea. Now you've mentioned it publicly, wonder how long until it happens? :)
Some quick math for an "average" college grad:

- [Age] 22-25: +8

- [Education] Foreign BS: +5

- [English] 90th percentile (108 or more on TOEFL [0]): +11

This amounts to 24 points, needing 6 more to achieve 30. A job offer of 150% the median household income of the state is only +5 points, so the candidate would need a 200% offer. This means, using 2015 data [1]:

- California: $64.5k -> $129k

- Washington: $64k -> $128k

- New York: $61k -> $122k

- Massachussets: $70k -> $140k

The numbers above are, obviously, higher than average, but certainly reachable for excellent software engineers at big companies. (It is unclear to me if other compensation components such as stocks/equity count toward the 200%.)

However, if such candidate reaches the age of 26, earns a foreign MS in a STEM field, or obtains a perfect TOEFL score, thus earning an additional point or two, then she would need a job offer equivalent to only 150% the median household income.

--

[0]: https://magoosh.com/toefl/2015/whats-your-toefl-percentile/

[1]: https://en.wikipedia.org/wiki/List_of_U.S._states_by_income
Game of Throne’s Lens register huge success
The “Game of Thrones” lens was launched in 16 different countries on July 16, the same day as the season 7 premiere was on aired. The actual number of the users that this new sponsored lens has provided for the Snapchat is still not clear.
Wow. Thanks a lot. You just covered all my questions about using nixos.
I was confused about toggles vs packages. And about nix-env for a single user.
Now i get it to the level of trying. Thanks you
I'm not the one suggesting a new-fangled scheme for the filesystem hierarchy. I think whoever is suggesting something hugely disruptive would need to be the ones to defend it. I'm saying, "Hey, we got this thing that's worked for a few decades. Changing it is fine, if there's a real problem with it, and solving it can't be done without disruption."

The person I responded to said the current Linux pattern of "/bin", and "/usr/bin", and "/usr/local/bin", etc. is inefficient (whatever that means). I said I disagreed (as much as one can without really understanding what is efficient about the new scheme or inefficient about the old) and pointed to a change that Fedora has made in recent years that simplifies it somewhat and recognizes that systems have changed (and the way we boot them has changed).

I'm not saying it is more efficient, I'm saying it's not less efficient (again, whatever that means in this context, you'd have to ask the person above me that I was responding to). But, I do find "one application per directory" very messy. My package manager knows where everything is so I don't have to.

This may not be awful. I'm not saying it is bad. I'm saying, "if we're going to change everything about the way we install, manage, update, and use software on Linux", there'd better be a damned good reason for it. It must be a clear improvement. This does not strike me as a clear improvement. It's clever for the sake of clever, without any significant value.

So, tell me why I'd want this. (And, "it's like macOS" sure as heck aint sellin' it.)
And dinosaurs are reptiles, mammals and reptiles are amniotes [1], both amniotes and amphibians are tetrapods, tetrapods are actually fish[2], and there's no such thing as a fish[3]!

[1] https://en.m.wikipedia.org/wiki/Amniote

[2] https://en.m.wikipedia.org/wiki/Tetrapodomorpha

[3] https://en.m.wikipedia.org/wiki/No_Such_Thing_as_a_Fish
Your Name May Literally Change Your Physical Appearance
Just in case you weren't aware, on most distros you can enter "man hier" to get a full description of the filesystem hierarchy.
The "without authorization" bit?
If I went on travel to a foreign country and committed a crime, I would expect to be arrested there. Where the damage was done is the key, not where I was at the time. If I create some malware that takes out UK servers, I would expect to be arrested for that if I ever set foot on UK soil.
> without keeping references/keys to the old ones

You are correct, but this would be a new level of stupid for a leading cyrptocurrency exchange that actually tries to build a reputation and appearance of quality, safety, compliance and being a "legit" service for financial institutions etc.
How about we spend the same hundreds of millions or billions incentivizing those smart people to have kids rather than importing uneducated people because they breed like rabbits? Bringing in millions of people who will most likely be reliant on government benefits while punishing successful people isn't a winning strategy. Only 13% of Germany's refugees have found work, not really helping GDP.

http://www.reuters.com/article/us-europe-migrants-germany-su...

75% will still be unemployed in 5 years.

https://www.ft.com/content/022de0a4-54f4-11e7-9fed-c19e27000...

Instead of spending that money on welfare for uneducated immigrants spend it on paid leave for parents, health care, and better tax incentives for tax payers who have kids. You're basically promoting idiocracy the movie
> leading a secret double life &ndash; as an assassin

These things always make me chuckle
It would be nice to be able to launch it with a blank template as it seems to be flexible enough to work with anything that doesn't need config e.g. Vue (https://stackblitz.com/edit/react-ng1kyn?file=index.js)
Point 4 is the overriding problem. I have never been able to find a color scheme that works acceptable for text on light background and for text on dark background. It is virtually impossible to find a good pleasing and legible color scheme that works just on text on a light background.
> Priority is given to prime working ages.

Isn't this basically ageism, the kind that is outlawed federally?

Perhaps the concern is about the economics of importing people who are harder to provide insurance or pensions for. But for that I could see a requirement for a certain level of insurance. Or a disqualification from entitlement programs for a while.

To go straight to age ranking is disappointing.
>Individuals are free to choose the way they process the information and commentary they receive.

Some individuals fight tooth and nail to silence this idea because they're threatened by the implication that their own choices have any role to play in their misery. Life requires a lot less effort when everything bad is somebody else's fault.
Hypothetical: A Pornhub executive flies from New York to Seoul on Etihad Airways. While transiting in Abu Dhabi airport, they are arrested on charges of obscenity. What would be the reaction in the US?

Factual: In 2006, David Carruthers was arrested while transiting through Dallas-Fort Worth Airport. He was convicted under the RICO act and sentenced to 33 months imprisonment. He was the CEO of the online gambling company BetOnSports, which operated in full compliance with the regulations in the UK and Costa Rica, but accepted bets from American gamblers. Gary Kaplan, another BetOnSports executive, was extradited from the Dominican Republic.

The precedent set in the BetOnSports case is either utterly hypocritical or extraordinarily dangerous. If we give every country the right to impose their laws across the whole internet, we don't have an internet any more. A Facebook user posts a comment critical of the Thai royal family; Zuckerberg is sentenced to life imprisonment for lèse-majesté. A Chinese internet user accesses anti-government material via a VPN hosted on AWS and a Google search; Bezos, Page and Brin are all sentenced to 10 years hard labour for subversion.
Russia and Putin thanks newsweek for making them more famous.
Well, at least they have the best appearance.

As in, UX, UI, Docs, APIs, service design etc. are all top notch. Which would make it probable (but not certain) that the more technical parts are well engineered too.

Coinbase is doing perhaps something similar to what Stripe did for its field of business.
You can use an Android phone without a Google account or any Google apps.

You can even install an open-source replacement for the core Play Services Framework that many non-Google apps seem to require.
Still beta he says
> That's awfully cynical.

If you knew me in person you'd know the cynicism was intentional. I've got quite a bit to start with and double so when it comes to anything involving digital currencies.

> They took a wait and see approach. Would you run your engineering team any differently?

On the contrary, I agreed with it. I said as much the day before: https://news.ycombinator.com/item?id=14915884

> How do you tell a viable fork from the (many) others that have failed? If BCH falls to $10 in two weeks, would you still direct your engineers to support it?

I don't think it's possible to tell after less than a day if it's a viable fork. It's way too early. That's why I'm thinking this is driven more from the perceived cost of lawsuits vs. the development cost of supporting the feature.
> Mostly because of cargo cult

That was my point. If you're familiar enough with HTML to use Arachnophilia (which, if anyone isn't familiar with that particular editor, was basically just the Notepad++ of it's day) then Dreamweaver would just seem excessive. Hence why I'd recommend it for designers rather than developers ;)

> as Dreamweaver produced very clean HTML output.

Cleaner than Frontpage and most of the other design tools out then, sure. But my experience of Dreamweaver around that era was that it's HTML output still needed a lot of manual refactoring in a text editor afterwards. While it was better than most GUIs it was still a long way off "very clean HTML output".

I'm sure things have improved significantly in the last 15/20 years though. But that was certainly the state of things back in the late 90s / early 00s.

As an aside note: I won a Source Code Planet (anyone remember them?) competition one month with an entry I made in Dreamweaver. It was a mockup of a Window 95 or 98 (I forget which) desktop with functioning start menu. I always felt naughty for winning based on something I built in a tool that auto-generates a lot of the code for you but then other projects I released were a lot more credible (eg DirectX games) but far less popular. I guess it just goes to show how little most people cared for code quality even back then.
Not quite like a stock split. In stock splits its almost guaranteed that the total valuation is similar.

This is wild, wild cryptoland. At the moment both Bitcoin and Bitcoin Cash are rising - so a lot of "free" money (at least in the short term.).

For now, two coins is better than one :p

EDIT: allright, Bitcoin Cash has been declining for a few days now. However, it still has quite a bit of value that has not disappeared from Bitcoin's value.
If you replace scientists with coders then what you're saying is that programmers should allow people to see your code at any time, instead of allowing them to release the code when they see fit.

Since she states:

The first step is we need to upload all existing scientific research content and make that digital content accessible to anyone anywhere with the internet. Google is doing that. I admire sci-hub's efforts in this space. Sci-hub's team has done what I am too afraid to do myself.

The second step is we need to record all new information generated by today's scientists digitally.
"With their story set to become a major Hollywood film..."

Has anybody heared of that major Hollywood film?
[BUSINESS IDEA] Muscular exercise
Hello guys,

I find that jogging has much more followers now due to the existence of apps that monitor what we run (how many kilometers, where we ran, calories burned and so on).
I don't think muscular exercise has anything like this yet, at least nothing that automatically tracks exercise like how many push-ups and sit-ups were done for instance.

To answer this, I thought about making a smart exercise mat that could track most of the bodyweight exercise. I explain it better in the following launching page:

http://activit.launchrock.com/

I'd love to get some constructive feedback and see if I should aim for this.
Do you guys have this problem? Do you see yourselves buying something like this?
What do you like more about the idea? What do you like least?
This illusion lasts months: https://en.wikipedia.org/wiki/McCollough_effect
>"Sticks and stones can break my bones, but words can never hurt me". This old cliche is underappreciated in our day and age.

Because it's false. Words can and do hurt people, and it's not necessarily a result of their choices.

You can argue that this harm is less severe, or that preventing it isn't worth limiting speech, but to suggest it doesn't exist is just myopic.
Still 30%-ish away from being an expert! On a serious note, compare that rhythm with our field...
>> The American dream was available to pretty much anyone willing to try it through the green card lottery.

Your odds of winning are something like 0.2%. If you're one of those selected I believe there's still only a 50% chance you will make it through as they select twice as many 'winners' as they have spots available. I applied for about 8 years I think without success. I then stopped after realising I had nothing to gain from moving to the US.

Also, the program is limited to persons from certain countries (for example if you like in England/Scotland/Wales you cannot apply).
Doesn't work with my Chrome 59 browser on Android Nougat
So, let's just put it clearly: suppose someone who is, at the time, not physically present in the US, breaks into a computer system which is physically present in the US at that time. Which of the following do you think most accurately describes the situation?

1. No crime has been committed, because these actions took place on the internet, where no laws apply and no country has jurisdiction.

2. A crime may have been committed, but only if breaking into computer systems is against the law of the country the person was in at the time, and so only that country could prosecute.

3. A crime was committed in the United States, but the United States cannot prosecute someone for a crime if some element of that crime took place physically outside the borders of the United States.

4. A crime was committed in the United States, and the United States can prosecute the person responsible, and has the power either to arrest that person if they happen to visit the US voluntarily, or to extradite that person from the country they're in if an extradition treaty exists between the United States and that country.

The accepted view, for the record, is (4), and appears to be the basis of this case: the indictment claims computers physically located in the US were affected, which gives the US jurisdiction to arrest and prosecute.
Surprised how easy this was without having a job offer.
I agree. And may I add the ecosystem: which third party modules you should or shouldn't be looking at, and if you should rely on them or roll your own.
>What causes this problem? Does CSS not have any modular capability and that is why? Is it global by definition?

It has crappy scoping and modularity rules.
Enterprise Budgeting – A Every CFO’s Success Formula in Cloud
Data Science Digest – Issue #9
Congrats! it looks really good. Can you tell me how do you compute the package.json tree on your servers before requesting unpkg?
Also, are you using AWS Lambda's?