skysight-inc/HackerNews huggingface dataset:
How is the government forcing large companies to censor? I've not come across any instances of this. Pressure maybe, but there's a world of difference between pressure and force. See Apple's refusal to assist in decrypting the contents of their phones.

Personally I agree with the ACLU position on this, but also believe that privately owned publishing platforms should be free to establish their own policies on what they will or will not carry. That's their right as private entities.

Excepting explicit regulation such as common carrier. I don't think anyone is saying it would be OK for the phone companies to cut off KKK members phone service.
It can't be phrased clearer while still distancing themselves from the cause clearly and coherently... unlike other people.

On that same note: Good riddance. Policy and processes are probably in no case ever too slow to take effect. Thanks to Google and GoDaddy for Pavlov'ing me towards reasonable human understanding, and thanks for EFF for making me aware that that there's a problem with "learning" things that way.
Stuck at 1GbE/10GbE and yea commodity will catch up. When $VENDOR is using off-the-shelf chip to do same speed for cheaper they expose themselves to whitebox vendors competition.

If there is no market or government pressure to level-up infrastructure (just optimizing existing network) not sure how $VENDOR will carve out any new revenue.
Raiders of the lost faith (2000)
Elixir is very easy to learn. I suppose at the end of day you would be spending more time designing your architecture rather then language.
Defo throw away PHP man. It's 2017.
I've seen a lot of complaints about Scala's compilation speed (I believe it's either the 1st or 2nd most common complaint), but I've not really had any issues myself.

Could people who have had issues with compilation speed explain their workflow, I'd like to better understand the problem.

For example, here's my general workflow:

1. code in IntelliJ until the feature/fix is complete, and there aren't any red-wavy lines in my source tree

2. run `compile` in an already running sbt session.

As a result, I only find myself "waiting" for a compile a few times a day. And even then, because I'm using the incremental compiler it's usually only a few seconds.

The only reason I run the sbt compile at all is because the IntelliJ compiler is known to be a bit buggy, especially around things like implicit resolution and some of the more advanced features used for abstract programming.

I have seen CI builds take some time, but even then, in every project I've worked on, the complete compile-time is dwarfed by the time taken to run tests.

I'm not trying to dismiss problems that others have; I would love to learn more about them!
This is it. I find myself making backups of my source controlled folder just in case something I do with SVN messes things up. The absurdity of this is not lost on me.
Stop Following the Sexiest New Idea. Find Your Market
id imagine the company has web apps (internal and external). why support multiple stacks for what is not even remotely close to their core competency? isomorphism, for example, is a big advantage for both maintainability, community support, and rapid delivery
The whole score was rendered as one SVG element, until we hit the performance limit. Now we're rendering each row of measures (a stack of staves) as a canvas element, and it performs much better for our purposes.
You're not wrong, but for most sites, there is very little difference between extracting the U2F key and a session key, from the victim's point of view.

Exceptions to that rule include sites that do things like what GitHub calls "sudo mode", where you have to confirm certain security-sensitive actions with another U2F confirmation. This would require more effort on the attacker's side, as they'd have to trick the victim into performing a U2F confirmation. More effort, but far from impossible: simply display a fake login prompt for the victim, but instead of logging in, perform whatever malicious action you want to perform. Session keys might also be less persistent (they're limited to something like 30 days on Gmail, for example), so that's another small advantage if the attacker wants to keep their access over long periods of time.

Still, for the vast majority of sites and threat models, hardware keys aren't a whole lot better. If it's easier to get adoption for soft keys, that might be a worthwhile trade-off. Natively supported TPM/SEP-backed keys would probably hit the security/UX sweet-spot.
Steps for How to Stop Dog Nails Bleeding
Over in Alameda County, within sight of the Silicon Valley unicorns, people have been incorrectly arrested, jailed, and even ordered to register as sex offenders because of software used by the courts:

https://arstechnica.com/tech-policy/2016/12/court-software-g...

This is "move fast and break things" taken to its ultimate logical conclusion.
I haven't ever had to mess with Makefiles, as I don't program anything other the basic shell scripts, but I do remember reading articles in the past that indicated Makefiles can be used for more than just programming.

For example: using Makefiles to automate static webpage creation and image file conversion.
Thanks, that answer actually adds some very important context!
You can probably just compare the budgets...
i have no idea why people downvoted it

Probably because you didn't include the laptop's price. If you spent $300 and it lasts you four years, that's already $6.25/month. Sure you get internet access for free, but so could the author, it's not like you can't take a Chromebook to Starbucks or the library.
There are other projects than just web apps you know.
World’s Biggest Pension Fund Wants to Stop Index Trackers Eating the Economy
Yeah, I find myself starting new things all the time and never finishing most of them. I've used a WIP limit to try to force myself to finish or explicitly dump projects.
Popular Football Sweatshirts – Keeping Up to Date with the Latest Trends
What I'm looking for in a language:

1. Solid mix of functional programming and Object oriented programming (though FP is more important - I'd gladly give up inheritance if I get good support for interfaces and traits instead)

2. Static type checking

3. Good support for efficient immutable data structures.

4. Solid concurrency features

5. Easy cross-compilation to and interaction with JS

5a. Cross-compilation to iOS and Android would be nice but it's not a dealbreaker

6. Good tooling (i.e. IDE-support, package manager)

7. A solid standard library

8. An active open source community around it

9. Said open source community should contain a good web MVC framework (or sensibly pluggable modules to the same effect)

10. A REPL

11. Sensible compilation times

So far it looks to me like only Scala and Haskell are candidates - and it sounds like Scala really struggles with the compilation times. If Reason/ocaml gained more traction it might become a contender. And if I gave up on static type checking then Clojure would be an option. And if I settled for a sprinkling of functional programming instead of having that be the basis, then Kotlin or maybe C#. Any other suggestions?
If it's any help: I use docker multistage to build a barebones alpine docker image. It uses distillery.

I based my dockerfile on https://gist.github.com/bsedat/16cb74ebc8ab0ed61ac598a129b0a...

Blogpost: https://zorbash.com/post/docker-multi-stage-elixir-distiller... (I'm not the author)
I think you're making this too complicated, unless I'm missing something. If your system is compromised, the attacker can steal your session key (from your cookies or whatever else the site uses). That's just about as good as your U2F key, with some defense-in-depth exceptions that I mentioned here[1].

[1]: https://news.ycombinator.com/item?id=15044826
Bob Kowalski at RuleML+RR 2017: Logic and AI – The Last 50 Years
Yes, and this is awesome, but this still ongoing and was not always the case [1] [2]. Following the "shitty code" debacle, Amlogic announced a two year effort to mainline their drivers.

[1] https://github.com/steeve/linux-amlogic

[2] http://www.cnx-software.com/2016/08/19/amlogic-releases-linu...
We do line-by-line code reviews of all changes (high-assurance software, so we have to - but it's worth it anyway.) Some kind of tool is useful, since it allows you to (a) review code on your own schedule, and (b) stores the comments (for later review, if someone is on holiday, so that you can refer back to your initial comment when reviewing an improvement, ...)

That said, code reviewing is a skill (and perhaps a talent), and not the same skill as software development; a degree of training - if just internal and informal - is necessary.

Thorough code reviews take a significant fraction of the effort needed to write the code in the first place; direct tooling costs are going to be insignificant in comparison. (And note that e.g. Gerrit and even GitHub both offer some degree of free tooling.)
The nano is my favorite one as well. It's so unintrusive. Now I hope agl is writing this because he's looking into making these keys more useful. Because right now the usecases can be counted on one hand.
This is a valid complaint. You simply don't design UI that allows to delete a large number of files with a press of a single button. That he didn't have backups is irrelevant. Even accidentally deleting fresh changes is quite damaging. VS Code doesn't say anything about Git, or what Git is. You can't expect anyone who downloads MS software to be a Git expert.
How I finally got job interviews at Palantir and Dropbox
Comments like these are one of the causes of radicalization of young white males on the Internet.
I have the heuristic that I leave decisions for the end of the day, based on what I have done. In fact, this is one of my goals per day, when things are unclear.
You can add

* https://github.com/zalando/grafter

to your list.
... like on usenet that was archived by Deja, bought by Google, and so well organized and surfaced for eternal posterity.
Pretty sure it's different groups complaining.
JAKE PAUL PRANK ON OMEGLE
Those are all valid points but as I tried to address in another comment, it becomes more nuanced when you try and account for various different privileges intersecting. The problem with your point scale for me is that it's fairly simplistic. White privilege might be starting at 0 but as soon as you introduce some other disadvantage, say growing up in an abusive home, you're very quickly in the negative. The same of course holds true for a non-white kid that's already starting in the negative, of course if on the other hand this non-white kid grows up in a stable middle class family with access to a quality education and a safe environment, they can very quickly accrue far more points on the privilege scale than some poverty stricken white male. This is the crux of the problem for me in this debate. I absolutely believe that white privilege does exist, and we shouldn't shy away from confronting it's effects, but we also shouldn't so singularly focus on it that we neglect the many other ways people, even white people, can be disadvantaged through no fault of their own.

From a more pragmatic stand point, I think we need to be more nuanced in framing these issues because it can be rather easy to alienate those who might otherwise be receptive to the goals of a more just and egalitarian society when you don't take the totality of their experiences into account. Again, taking my own experiences into consideration, I usually fluctuate between minor annoyance and outright dismissal when someone who grew up in a stable two parent household that stressed the importance of education, attended decent schools where they didn't have to fear for their safety on a daily basis, lived in neighborhoods where straying farther than 20 feet from your front door didn't mean you where going to get jumped, got to go to college with a bunch of kids from similarly privileged backgrounds and now makes $180k in SV, wants to lecture others about privilege.

Also, I don't want to be dismissive of your list, and I definitely want to be careful in making assumptions about your background, but some of those things sound more like middle class white privilege than plain old white privilege. I know some poor white folk, I grew up around them on my family's first stop when immigrating to this country, and they tend to be afraid of the police, for good reason, and don't usually get let off with a warning.
Perhaps, but then we have effective safeguards over here that the US doesn't have. Particularly, we have a truly independent and non-politicised judiciary. That's a big deal.

We don't have the absolute and uncompromisingly worded constitutional rights of the US, but we're also far less likely to suffer erosion or elimination of those rights in practice that we see in the US. E.g. If the UK government wanted to have National Security Letters they'd just pass a law allowing them to do so. But there's no way the judiciary would allow them to create and apply such letters otherwise, the way it happened in the US. So yes the security state here does go too far IMHO but it's much more explicit and open to public debate and challenge.
3DMark Performance Comparison: ReactOS vs. Windows XP SP3
It is, but it doesn't mean the U2F key is compromised, that's what I was wondering.
I realize I'm risking downvotes with this one, but I think it's worth acknowledging. While Charlottesville was a tragedy, and the time is not right imo to discuss it with the public at large precisely because it was a tragedy and people are still mourning, the event was overall as peaceful as any severely political protest ever is. The deaths and injuries that occurred should not be simply discounted as if the people are simply disposable, but the majority of activists on both sides did not cause those deaths and injuries. Unless there is a major point of information that I am ignorant of, the driver who has catapulted the event into the national spotlight acted essentially in isolation even if his ideology was not held in isolation at the event. He acted heinously, and now is not the time for taking easy solace, but I think there's some merit in the reality that by and large people on both sides were able to demonstrate with the -relative- peacefulness of a generic controversial American protest with orbital counter protests.
the boundaries for freedom of speech will always be tested, and as the document reveals this the first time freedom of speech is debated.. and won't be the last either.

But I for one don't believe there is any serious efforts to limit freedom of speech in America, we're still far from that point :)
The ACLU gets plenty of criticism too. Some people don't support the rights the ACLU defends.
I find it weird when people curse Indian IT companies which were once their employers. Is it not true that once upon a time you were only fit to join them because no one else would have employed you.
I'm curious about the MIT thing. In the 70's, when I applied around, MIT and other top schools made it clear that if you were qualified to go there and accepted, they'd find a way to get the bill paid with some combination of scholarships, loans, and work.
Humans are all different, not everyone can work from home and not everyone can work in an office. That is just the way we humans work. Some love to work in a busy kitchen stressing the whole day and then cook when they come home too. Others can't see a kitchen when they get home.
The comments disturb me:

> Surprising you didn't talk about trusting your gut.

>> I will admit that I struggle with finding a balance between brevity and comprehensiveness. You're suggestion is absolutely right in that I could have put some additional guidance on using common sense and/or trusting one's guts/instincts when something doesn't feel right and it makes more sense to be more cautious.

This seems to be a disturbing trend recently. Inflating people's sense that their biases are not only valuable inputs but actually accurate. This flies in the face of all quantitative studies that show exactly the opposite.

I think the most egregious thing I've seen recently along these lines was a Sam Harris podcast about "the gift of fear"

https://www.youtube.com/watch?v=Uh9OpbJXOHA
How to Find the Best Furniture Stores in Melbourne
Wow, I had no idea YubiKey offered that mode of operation. I had assumed it was purely used as a OTP. Do you know of any documentation for it?
AMD's RX Vega 64's $499 MSRP Was 'Launch Only' Introductory Offer
Yes; at least, I've found myself walking on a numb leg when it seemed urgent enough. Seems like it carries a risk of injuring one's leg, but sometimes that's less bad than the alternative.
I disagree that Elixir is easy to learn, the syntax ok, it's weird compared to most OO languages, but actually using OTP is a real paradigm shift that requires a totally different way of thinking about issues. I did not find that easy at all.

The other issue is that Elixir and Phoenix have become joined at the hip in the same was as Ruby and Rails, and Phoenix didn't click with me at all, coming from the JVM world I really didn't get on with it.

After reading Programming Elixir, Elixir in Action and Programming Phoenix I decided that it wasn't an easy way to make web applications that don't need OTP, and in fact I couldn't imagine a scenario where any web application I would ever write would need OTP (for the whole thing anyway, I can imagine cases where small parts of a larger system could benefit massively from fail fast architecture)

Edit:
I would also argue that designing an OTP based system architecture is harder than just writing a non distributed system and then adding in load balancing or fail over.
> I gave a concrete example, you've asked a hypothetical.

And... I'm done.

You're not arguing from a position of honest discourse.
> But was your standard ticket decades ago, which had the 35" of legroom, three times as expensive?

Yes, more than that, at least inflation-adjusted.
>School with no air conditioning.
But schools are closed in the hottest months of summer, whats the point?
Indeed, also EU member nations are subject to European Court of Human Rights.

Even if the UK leaves the EU, it's not unlikely you'll maintain a relationship to some of that. Depending on how hard/soft brexit turns out to be.
Either your thigh bones are not long for your height (people have different proportions), or you have lucked out with airlines that still have decent legroom.

I'm 1.97 (I think 6'6" according to some random website) and long-haul flights are torturous to me, I always end up with knee and leg pain, and definitely don't feel identified with "the act of sitting down for so long is far more painful than anything my height causes". It's more comfortable for me to sit on a train (good legroom) for 4X hours than on a plane for X hours (whether I can afford the extra time is another story).
Yeah that sounds quite neat, although a massive task I'm sure.
Because 1/100000 of their customers might have JS turned of?
Similarly I remember the first organisation that really tried to get me as a user to care about account security with a hardware token was .. World of Warcraft. Followed a bit later by the use of TOTP in Steam. Banks meanwhile are either stuck in the past or have tried bad proprietary solutions.

Domain registrars are an odd one, because so rarely does one need to log in or do anything - but when you do it may be urgent.
GSoC Project: Making Redox Self-Hosting, Status Report 4
I've never seen a picture of the Cisco CEO, so every time he was mentioned in the article I kept picturing a very put-out Gavin Belson.
In my view the main problem is in sharing those files with others. Other systems may not support those chars or the other users may not be aware of how they are sorted and even how to type them in a search.
UX Writing Techniques: Google Checklist
OK, thanks. So they use a still with low BP resolution, and so there's appreciable higher BP stuff in the product. But doesn't that also make it harder to exclude methanol and other low BP stuff?
Ask HN: Looking for a tool
I'm not even sure what to type in Google.

Let's say I have a commit. I want a tool which analyzes codebase and show all places in code which could be affected by this commit. For example if I change a function X the tool will show all places which depends on a result of the function.

I guess that in Java it could be doable because of its strict nature. Is there anything like this? Or it's an idea for a side-project?
Maybe parent just used that remark as a way of breaking ice and sharing their story?
> People aren't for you or against you, they're for themselves.

Where does bullying fall in your classification?
When I was younger I was like this. Sleep was 4-5 hours per night all days of the week. I had no troubles keeping awake and had plenty of times for coding, playing games and learn new stuff. And a fulltime job on top of that. Not so much any more, I need at least 7 hours of sleep but haven't started realy with coffee yet, don't believe the hype about it :-)
Make is fine, but I think we have better tools nowadays to do the same things.

Even though it may not have been originally intended as such, I've found Fabric http://docs.fabfile.org/en/1.13/tutorial.html to be far far more powerful and intuitive as a means of creating CLI's (that you can easily parametrize and test) around common tasks such as building software.
If he has that large of a codebase, he may be a VS Code newbie and/or a git newbie but he isn't s computer newbie.

Anyone who has anything important on a computer should know to back it up somewhere.
Ah, yes. The key would not be compromised and U2F is safe against replay attacks.
Coming Solar Eclipse
Ask HN: What is the explanation of shadow of moon moving West to East during the coming solar eclipse?
I think you've covered the main options. At a guess: Maybe F# if you're willing to go with a smaller open-source community. Maybe Rust or Idris if you're willing to deal with something a bit less mature with less tooling. Maybe Swift, Crystal or Nim, though I know less about them and their communities seem smaller.
I almost always roll a basic Makefile for even simple web projects. PHONY commands like "make run" and "make test" in every project make context switching a bit more easier.

While things like "npm start" are nice, not all projects are Node.js. In my current startup we're gonna have standardised Makefiles in each project so its easy to build, test, run, install any microservice locally :)
Free Chrome extension for designers to inspect/edit live websites
While OCaml might be the most reasonable in theory, AFAIK opam on Windows still doesn't work. Also its standard library is too minimal for my liking.
Agree... but cloudflare was basically arguing that they should be considered something like "common carrier" because very few companies have the technology and network to build DDoS resistant websites.

I don't know how true that is, but if so... it stands to reason that free speech on the internet could be in danger. But who knows, maybe we'll get better DDoS protection technology in the future :)
You can also go into browser dev tools and untick "overflow: hidden" on the body element css
I wish that Google could start supporting that.

I am not that convinced that it is in their best interest though ..
Last time I got saw numbers on this, non-geeks did not care at all about updates.
It also uses the "local" keyword, which is non-portable.

People like to bash the autotools, but they exist for exactly this reason - they already spent decades working through all these gritty details to ensure the scripts generated are portable. To paraphrase Spencer "Those who do not understand autotools are doomed to re-invent them, poorly."
I have kids, yes. We take care of them together. We both work 4 days a week. She pays the mortgage, I pay childcare.

In a healthy relationship, this is stuff you work out together, not through demands and womb-based bargaining chips.
Part of the problem with this is that on the internet, extreme ideologies have a reach that is impossible and hence manageable in "meatspace".