skysight-inc/HackerNews huggingface dataset:
There is a debate about which public key to pin, and I'm not sure it's settled. It depends on your priorities and the relative probabilities you put on various failure modes.

If you pin your public key, it's easy to switch CAs if the one you currently use goes under. This does happen.[1] But you are in trouble if you lose your key somehow.

If you pin your CA's public key, it's easy to recover from losing your key but you can't switch CAs until your pin expires. You could use the required second HPKP pin to add a fallback CA though.

I will note that this decision is not actually the hard part of deploying HPKP.

[1] https://blog.mozilla.org/security/2016/10/24/distrusting-new...
That's missing his point.

People think that the prices are rising dramatically. He's pointing out that for 3/4s of people those price rises aren't price rises, it's just the person directly paying has changed from the state (i.e. paying via taxation) to the individual student paying. This looks like a price rise to the individual student, but not to the University receiving the payment.
Does this mean that passengers on international flights into Logan can no longer have their devices searched at customs?
Show HN: Collect recipes with ease
The way to look at it, is that browser is a target runtime platform.

When you write code in a team, you optimize for readability, maintainability etc. You spread your code over 5 directories, 50 subdirectories, 3000 files.

When you want to run this in a browser environment, it needs to be optimized for delivery - faster download, less time-to-be-interactive. You need to split your JS codebase as per routes in your app, and load chunks as per user demand.

Not just JS, you'd have to compile and inline your CSS, base-64 encode your images to data-urls, generate image stripes.

Before all these, you'd have to lint your code, and run unit tests on your code.

I fail to see how you can do all these with just a script tag. You need some sort of a compiler / transpiler; and a task runner that gives you a handy interface to these.

The package manager has no dependency, other than the Node runtime itself.

As for arbitrary toolchain, the metadata is codified with semantic versions in your package.json. You're one install step away from downloading all the necessary packages.

One thing I think lot of Node project misses, is to not add which Node version is to be used. It's not because it's impossible to do that - there are two well documented ways to do that (via .nvmrc and "engines" entry in package.json)
Or you get N certificates from different sources, pin them all, use 1, stick the rest in (a) safe vault(s). Even if something really bad happens, you can use one of the other ones until you cycle. Cost of N certificates will be << money you'd lose otherwise, and likely a rounding error in any company's monthly spending. (if it's already live / trading)
Active voice makes it easier to explicitly identify the doer in a tranasaction. Consider

X will record the meeting decisions and supply them to Y

vs.

The meeting decisions will be recorded and supplied.

In any sort of situation where responsibilities must be explicitly identified (e.g. a contract), active voice can really help. You can make responsibilities clear in passive voice as well, but active voice is more direct and less stilted. In situations where the doer is unimportant, passive is okay ('experiment data was logged'), but I still think sounds clunky.

Coming back to the wider point about not being misunderstood, two rules that I apply are the 'make responsbilities explicit' one I've just discussed, and "make sure it is obvious what 'it' and 'this' refer to". As a writer of technical content, you should never make the reader have to work to figure out what you mean.
> “That being said, I was quite surprised to see a few families using paper plates rather than dishes. I’m keenly aware of my culture’s extreme wastefulness and have tried to make efforts to reduce my footprint, which is why I probably was more aware of it.”

It's damn tempting to do it at least a couple days a week if you have kids. Stretches how long your kitchen stays clean-ish without a bunch of work, and is way cheaper than paying a human to come help. Especially effective if you couple it with frozen food that can be cooked in its own container, or a meal that can feed 4-5 but be cooked in one pot with no cutting boards or anything (so, something out of a box). That combo can buy you a day of zero-added-mess in the kitchen, which is so nice when you've got kids and two working parents.

Actually, now that I'm writing it out like this, I'm thinking maybe we need to start doing this like Tuesdays and Wednesdays. I try to consider any possible way to solve household issues and not get stuck on particular solutions, think about our house as an environment to help us get stuff done, that kind of thing, but I think I've been neglecting the possibility of generating slightly more trash as a way of achieving ends. Yet I've considered the far more expensive option of hiring help. Just a couple regular, planned days a week of basically not using the kitchen could give us a perceived lower amount of work and an actual time-the-kitchen-is-clean much greater than the 2/7 it implies. And it's cheaper and (way) more convenient than dining out. Hm....
In defense of virtue signalling (marketing attribution and scale)
I think the way they justify it is that the waiver is "voluntary," e.g. you have to agree to it in a contract.

I personally wouldn't have a problem with that if the contract terms were negotiated by two sophisticated parties. However, the reality is that these contracts are often pro-forma and and "signed" without negotiation in the context of great disparities in power and sophistication. IMHO, the latter is troubling and shouldn't be allowed. There should be a whitelist of a limited number of types of terms that can be included in a pro-forma contract like these, and binding arbitration shouldn't be one of them.
On almost any system, if you use a compiler to build a binary from source code twice in a row, you will get two different binaries. Simple things like using "__DATE__" and "__TIME__" macros in C, or the linker embedding a link timestamp in a executable file header, will trigger this even in the same environment. Moving between machines is even trickier, as __FILE__ and __DIR__ and a ton of other inputs conspire to create changes in the output.

It's hard work to set up a project where you can actually get exactly the same binary over and over again.

I think asking "why is Debian not reproducible" is missing the mark a little - when everything else (Windows, macOS, FreeBSD, etc etc etc) is probably not reproducible, the better question is perhaps "why is Debian trying to be reproducible, and why aren't other projects talking about this just as much" :)
How so? Their CAPITAL, and decent chunk of territory are on the continent called Europe. a couple tens of millions citizens live there. Just counting those would put them in the first ten-ish most populous countries in Europe.
> but the narrative and assumption is that under-representation in university is problematic, worrisome, an issue

Sure, but even if the mechanisms you suggest are assumed away (they aren't) are part of the mechanism of underrepresentation, it would still be all those things. In fact, I would see increasing racial divergence in either the perceived value of college or the rate of application independent of the perceived value of college and extremely worrying signs.

But, really, before people accept the value of explaining the trend toward increasing black/hispanic underrepresentation, they need to understand that the exists; in case you haven't noticed, there is a very powerful (if entirely non-factual) narrative exact opposite is the case, driven by an increasingly powerful political faction, including the leadership of the executive branch of the US government.
https://community.letsencrypt.org/t/hpkp-best-practices-if-y...

https://community.letsencrypt.org/t/official-hpkp-support-fr...

https://github.com/certbot/certbot/issues/1611
I also found the introduction in the beginning quite interesting to listen to. Good summary of the motivation behind Clojure and its design.
What does the MIT license mean in this context? Let's say you use the icons, where should the notice be put?
Depixelizing Pixel Art

http://johanneskopf.de/publications/pixelart/paper/pixel.pdf

I think this paper is very cute and also technically interesting.
Aren't these non phonetic writing systems a great time loss in general? Still wondering if Japan/China/similar would not get a great economical boost from ditching their non decipherable ideograms. Just thinking of the time those poor students spend remembering them instead of learning useful math/history/foreign_language just pains me.
Releasing Brass Golem. Brass Golem Alpha2 0.8
I found flights to Munich on flychecker at 71 €
It used to be that you could buy them as Digital Signage monitors. But for the most part these might now also be smart devices.
What is parsecd?
> You could use the required second HPKP pin to add a fallback CA though.

Or pin current CA + current pubkey? That way you can either change certificate within the current CA or use the current certificate to move to any new CA.
If I had to guess, it's intended to solve a problem in founders' minds -- that of the potential for an IPO process to go poorly. What if investors don't get our culture? What if they're more skeptical of our growth and future plans to improve margins than our VC investors have been?

As such I'd disagree with Levine's suggestion that IPOs are merely annoying drudgery; I think they're a genuine point of concern for founders from a strategic perspective, and that in a lot of cases, the founders are much more worried about successfully executing the IPO than they are about the long-term hassles of running a compliant publicly traded company.

The interesting question in my mind is whether the SPAC organizers are doing this with a specific target already in mind, or whether they are actually going to run a real process to determine which company to buy into. I guess they would have to be transparent with investors with regards to their intentions, right?
> That being said, the constitution has established an independent judiciary which has little limit to what matters it can opine.

I don't think that's actually true. IANAL, but IIRC the jurisdiction of the federal judiciary is quite limited compared to that of the states.
I'm really going to try to opt out hard on most IoT. Polluting nice, simple tools with half-assed software is no way to build good products.
Would you help strangers online?
The problem to me is often their caviler use as torture devices to force compliance. I have seen many used where some calm words or listening would have gotten their way. Now cops just yell commands, often 3 at a time, and use less lethal force as a first resort.
You're not alone in that conclusion - I think you either need to have purchased a home during the last real estate correction or be DINKs (or both) for it to really make sense financially.
Would a monitor do it for you? I've got a 32" monitor that cost about $500, and it doesn't have any smart features whatsoever, not even a video camera. It's not as big as most people's living room TVs seem to be, but it's enough for my taste. If I wanted a really massive screen, I guess I'd get a projector.

This assumes that you've got a small computer handy for delivering content, but a chromecast or a roku or all kinds of other things could probably do the trick for that.
An excellent point. I take some comfort in knowing more people on that page have their finger off of the trigger than on.

The people with their finger on the trigger probably should have never been granted a license... although I am well aware that in many states you don't need to know how to use it to buy it.

Edit: please don't turn that last sentence into a debate about what the license requirements for guns should be. While I think is actually a worth while debate I already feel bad about taking this off topic.
Yes. And the way it answers some questions, it also seems to be going for a more casual, enthusiastic sort of vibe. It wasn't clear to me to what degree the changes apply outside of the female American voice.
Bitcoin: A Peer-to-Peer Electronic Cash System

https://www.bitcoin.com/bitcoin.pdf
(GCP support here)
This is a known bug, I've worked at least a few cases where this happened. There is a feature coming out soon that will allow different maintenance schedules to be set for masters/replicas, which will likely be automatically set for different times. And, once the kinks get worked out, hopefully we'll be able to re-deploy the feature that shifted traffic to failovers while the master is being updated, and eliminating maintenance downtime altogether.
Because what matters is context.

Whether or not Russians fantasize about attacking Berlin has absolutely nothing to do with conversations about tech salaries.

I'd say that in the context of conversations about European tech salaries, Western Russian cities should absolutely be included.
Interesting pictures, but they seem designed to convey "disappointment"

I'd be disappointed too with most of the food, not to mention the anti-social eating arrangements, in many of the pictures.

My personal take-away (ahem) - gay couples (or maybe just friends/family/room-mates) appear to have better dinners. Or better presentation, though in that case I'm not sure whose.
Probably not. Federal power trumps state power.
You mean countries like Germany, Holland or Denmark?

I suggest you google for "fiets met kinderzitjes" (bike with child seats) to get examples of how you can transport 2 small children on one regular bike.

Once the children get older they can get their own bike. If you need to transport more than 2 children, get yourself a second parent or a bike that's designed to take cargo (yes I just called your children cargo).

My mother raised me and my sister on her own, using just a bike.
I had 2 Vizo TVs that I loved. Got a new one and it was crap. The software required me to use a phone app to set it up! It went back to the store. It is pretty hard to find a TV without crapware. The key is to find one that you can setup with the remote and then disable the Wifi/Ethernet.
Goqueue minimalistic workers and jobs for your Go apps
Some prefer the more-charitable, longer-lived term "fiction".
Would this case restrict federal agents?
How about a https://coinbin.org/lbc,btc,eth -type query? (similar to a few stock market apis I've used)
Perhaps not directly related to 'Concurrency' but iirc ClojureScript got released in 2011

https://clojurescript.org

https://www.youtube.com/watch?v=tVooR-dF_Ag (ClojureScript Release)
Pixel-perfect is hard to do in SVG (at least in my experience). You have to be careful to align path geometry to half-pixel values so that whole-number stroke widths end up falling on a pixel boundary. And once you start scaling the SVG to fit a particular view box, that careful placement usually gets trashed.
A custom element is just an HTML element, so it is a part of the HTML standard. If you log the object you can see it has all of the same properties as an HTML element, plus whatever you've extended it with. So all emitting events and event callbacks will behave the same as a standard element (except for any custom event listeners and emitters that you add).
The Hidden Costs of Arrays – Diving into the Ethereum VM Part 3
Customs is a whole different ballgame, federal rules tend to override state laws.
The value of a high-throughput network interconnect slot from your peers is tied to the current value of all the cryptocurrencies the DHT routes, not just the cost of running the server and the physical links.
I think the main thing is that the use case of modifying multiple references at the same time where it is critical that all changes take place at once is less common in idiomatic Clojure than people might have expected.
Steven Pinker goes into this in The Sense Of Style. It's not always better, but you're right that a lot of bad writing overuses the passive voice to seem 'professional', etc.
It isn't flame bait. It was the reason our Dean gave for switching from C to Java. The thinking was that the learning curve for C was too high and the Math/Computer Science wanted to attract more humanities majors to take CS classes.

Introduction to Programming became a requirement and the drop-out/failure rate for non-CS major students was excessively high so the Dean thought teaching the classes in java rather than c would help out those who were new to programming and help them pass these "newly required" classes.
I was able to buy a used 55" Vizio that had become "bricked" after it lost power during an update for $50.

I replaced a $60 board and it was as good as new.

Also, got a 55" Sony for free, similar situation. All it needed was a firmware flash via USB (was very specific as to USB size/format), and it works fine.

None of these TVs are connected to any network, nor will they be ever again (as long as I own them).

Also, I see Amazon has a 43" Viewsonic "commercial" 1080p display for ~$450: http://amzn.to/2iu2cCB. I know, they have a TCL 55" 4K w/ built-in Roku for $50 less.
153 deaths listed after an organized effort by the makers of the weapon that includes coaching police, organizing autopsies, creating a new medical condition that excuses deaths, and paying for & organizing expert witnesses to defend tasers.
Smart TVs are such a stupid idea. A TV should last 5-10 years. The software and chips shipped will become irrelevant in 1-2 years time. Just buy regular TV + crhomecast/firestick/raspbery-pi/etc.
As we speak, Google's OTA Android updates are bricking thousands of $600 Nexus 6P as well and all the press cares about is hyping Pixel 2.
You basically just need a TV that's basically a PC monitor with speakers.
That's a very interesting point.

Writer-filmmaker Errol Morris has written extensively about how there are no absolute truths in a photograph. A photograph, like art, can cover up facts, reveal new truths and distort reality.

So when I view these pictures in a particular way, like you, I too sense melancholy.

But seen in another way, these are little domestic vignettes, filled with pizza, contentment, sitcom laugh-tracks, boredom and some anxiety.

The question is, how do we want to view these photos? What do we want to believe about dinnertime in the USA?
The ice that's melting today is floating ice in the Arctic and Antarctic, because it's subject to warm ocean currents. Floating ice doesn't change sea levels when it melts. The ice that matters is the glaciers in Greenland and Antarctica. Glaciers weren't formed in a day, and they won't melt in a day either.
I don't mean this in a bad way - do you not have a dishwasher? I've long stopped considering them luxuries. The amount of time saved on cleaning is enormous, especially since I cook every day, and I can't imagine cooking even half as much if I had to do the dishes by hand afterwards. The electricity cost is so small it's not worth worrying about, and water happens to be free where I live, but the time saving is the biggest plus.
Eclair - Scala implementation of the Lightning Network
Can't say if it's just me, but I noticed that almost noone (the ones actually sitting at a dining table) use an actual tablecloth.
Thankfully, We don't rank RFCs or make technical choices based on what users appear to tolerate and/or enjoy. Nor do we set ethical laws or guidelines based on what citizens tolerate. Opinions of people trained/educated in a specialized domain will always carry more weight than that of a random person.

But forget all that, on a simpler level, if you do nothing most things stay the same. If you're happy with the status-quo, you're welcome to be silent. Others prefer vocal protest.
That makes sense if police are using stun guns instead of pistols. The concern is that they are using stun guns instead of defusing situations verbally, or using stun guns instead of billy clubs, allowing them to punish/torture people without leaving marks.

You could say our drone warfare technology is creating that same sort of problem. On one hand they are much cheaper and do not risk a pilot being shot down in some enemy country. On the other hand, that makes it cheap and relatively risk free to drop bombs on people, so why not use them all the time?
The fact that JavaScript and the web platform kind of sucks while at the same time being "unavoidable" is why it's so good.

It forced a lot of very smart people and a lot of eyes onto the platform to try and find solutions within the extremely restrictive "box" to these problems.

How do you solve the API issues when you don't control the platform?

How do you solve for perf when things can't be installed?

How do you solve the API when you can't force people to upgrade?

How do you solve the language when you only have one language as a compilation target?

Out of these we got React and other vdom style view layers.
FP paradigms got into the mainstream.

It exposed the mass to newer type system features

We got a toolchain that while complex, can do almost anything.

We got some test tooling that are ahead of other mainstream languages.

And every last bit of these went through tons of iterations (sure, javascript fatigue, whatever), and have had an immense amount of eyes on. You totally can look at any of the things I pointed out and say "Language X did it first!", but no one forced Language X on so many people, while JS was, so these things got a lot more exposure.

In short, I love the JS ecosystem precisely because it sucks so much.
I should perhaps clarify that "just use the win32 api" refers to on Windows. Just as one might use syscall 4/write() on Linux, if one doesn't want to/can use libc printf.

See also, for example:

https://stackoverflow.com/questions/15528359/printing-utf-8-...

https://stackoverflow.com/questions/26106647/c11-unicode-sup...

http://www.cprogramming.com/tutorial/unicode.html

Note; I'm not convinced using utf8 internally is a great idea - especially for a "beginner friendly" language. Playing with anything from palindromes to revise strings and character/grapheme counts and

"d o u b l e s p a c i n g"

strings can be fun learning exercises - that might be easier with a 32-bit (or even 64 bit) representation.

But no matter how you look at it, there's no such thing as "simple" handling of international text.
http://huckcdn.lwlies.com/admin/wp-content/uploads/2017/08/1...

"Wednesday: Brandy and John."
Although never mentioned, you can use pkg-config with buck by embedding your pkg-config command into the compiler flags eg.:

cxxflags = ${pkg-config opencv python --cflags --libs}

Furthermore I don't see the reason why you woudn't use buck for small projects. What makes you think buck is less suitable for small projects ?
As much as I want a FLOSS phone to succeed, I have my doubts. Then again, I'm not sure how all the Matrix stuff works, but if I can't simply give someone my phone number and expect it to just work, I don't see how this can happen.

Can someone explain it more simply? Does it completely forego SIM cards? Will it 'just work', or is it more of a 'we made progress in this area, but not a lot of people are going to find it practical' thing like Replicant?
Musician? I'm looking for beta testers
We have 2 Vizios that do just this. They're still kind of slow to start up, but they work great with our laptops plugged into them. They're also super cheap — got a 48" from Best Buy for $200 and a 39" off Craigslist for $75.
This. Unless the barrel is stuck in the open position and you can see daylight through the other side, always assume the gun is loaded.

Even if you are 100% sure it is not loaded , we are creatures of habit. If you make a habit of putting your finger on the trigger of unloaded guns eventually you are going to do the same thing with a loaded one by accident.

If I'm handing someone a hand gun I always remove the magazine and pull back the barrel. Because even with the magazine out, there could be a chambered round.