skysight-inc/HackerNews huggingface dataset:
This is awesome & good news in every way. A lot of the comments here seem to really circle around how people treat instant message communication vs e-mail and/or being inundated with being a part of multiple Slacks.

If you are blocking co-workers like one person mentioned or muting them, you have other issues (yes, you can mute a user)

If you're demanding or need instant communication with someone, just call them from Slack. Or, alternatively, make sure you '@' them properly & force a send notification. The issue I see is that not everyone is all about real time comms -- some people put Slack on their phone or on multiple machines. Some don't.

Some people claim it's buggy -- I've had far more issues with HipChat just when it comes to displaying on two monitors than I have ever had with Slack.

I saw a few people complain about productivity sinks but the reality is if you want to be a part of a certain group to keep up top of what's being discussed, that's the pulse & one way to do it if you have a large amount of brain power in the room.

Meh. I'm excited.
I've stopped trying to understand why such a buggy product with horrible UX is praised as the opposite. To me it seems the takeaway is advertising/hivemind is still much more powerful and good product.
Smart cities must focus on networks and governance first
I wonder if, in an ironic twist, they try to play the ignorance card and use the breach itself as proof.

"Of course we were ignorant of the breach, we're really just not on top of things, I mean, look at how we got into this situation, and how we handled it! Does that sound like competence to you? Of course not!"
According to https://bellard.org/jslinux/tech.html it's using asm.js since 2015. But at the bottom of the page it mentions wasm, so it's not clear.
And obviously the performance of programs using those language implementations on the same computer under the same workload may be measured and compared.

Why should "different families" of language implementation not be compared?
If they make a big deal out of the fact that they're all friends, it's definitely a red flag.
The concerns about Caddy handling an ACME server outage are not really well founded these days, because:

1) Caddy has the most robust OCSP implementation of any web server. It caches staples locally and refreshes them halfway through the validity period so it can endure days-long OCSP responder outages.

2) Even if a certificate needs to be renewed while the ACME server is down, Caddy can endure 2-to-3-week-long outages of the ACME server because it renews 30 days out from expiration and tries twice per day until it succeeds, logging its actions along the way.

And because Caddy is written in Go, memory leaks like what Apache suffers are much less likely, if not impossible.

(Source: I implemented it.)
Most security standards are voluntary right? Based more on market pressure than regulation. It looks like the Fed is considering a set of regulations for large banking entities, which I assume Equifax would be a part of, but AFAIK the existing regulations aren't very robust and haven't been updated in recent years.
As with any insider trading case, they just need to prove access to the information. So either a witness needs to come forward and say "I told X to Y executive" or they need email/phone records which prove that such information was shared with these individuals.

Unlike crimes like murder, insider trading is not predicated on intent, so proving intent is unnecessary.
Super excited for this, the last one (hackthe.computer) was really well done!
Windows 10 is probably your issue there to be honest. I have issues with HipChat at work on Windows 10 on a Mac. But at home on Linux with worse hardware? No issues. It's literally Windows 10 & drivers.
Hardcore DevOps:Building a Portable Weblogic Client on the CLI
Federal officer: "Why did you sell the stock?"

Equifax officer: "uh.."

They will scrape through all their texts, emails, call logs. Someone will screw up somewhere. If they are dumb enough to provide a "SSN API" - I am sure their texts are a hilarious treasure trove. An easy slam dunk case.
Example:
Public of Andorra gives money to Andorra Programmers to make some cool program that all people need.

Why US Public is allowed to use that code? Andorra's budget is not that big so why people of Andorra should pay for people in States? That's a very good way to not produce Public Code at all.
Run, you'll be there just for the work; fun will be elsewhere and you'll likely end up being a scapegoat when something goes south. Even worse is the combination of best friends and family, i.e. completely clueless people deciding on things by the virtue of being close to somebody.
Also, it took a war to get rid of slavery.

I can understand why a new nation battling off a major world power for independence didn't have a civil war at the same time.

Sometimes, you have to pick your battles.
Yes, it's a warning sign. I don't think anyone should store more value in Coinbase than they are willing to lose.
CoffeeScript did already bound `this` for `=>`. There is also `->`, which is morally equivalent to JS' old-style `function`.
Not really. I've seen plenty of cases where there's, for example, an article about how McDonald's food is full of salt and calories and is bad for you snd yet on the next page you'll find an ad for McDonald's. To actually be as vindictive as Amazon apparently was is quite extreme.
The strawman here is the ticket & fine argument. Great that you can make an argument for how we should handle them, but it's not a productive argument because the goals of tickets & fines and grades are too different. Tickets & fines have (usually and for the most part, I don't doubt you could find some kind of counterexample) one goal, disincentivize the behavior that was ticketed. Grades serve multiple goals (and not everyone will even agree on the relative priority, and the two I mention are not comprehensive): First to measure attained level of skill, and second to incentiveize improving those skills over time. Both of these serve the higher level goal of actually educating students in a manner that results in them being productive members of society. If we acurately measure that half of all students are not adequately prepared we have failed them. So rather than throw around talk of zero tolerance policies, let's talk about how we might change things so that students will be better prepared for contributing to society, which is not well served by instilling in students a feeling of futility.
The Surface line have 3:2, it's definitely a step up from 16:9.
Scared? Or don't think the change in demographics is in the interest of their descendants?
The same trick was used in many Nokia phones. Probably the most extreme instance of this is one HW revision of 5110, where the final RF PA stage consists of single NPN transistor in common emitter circuit connected directly to battery terminals (other HW variants have HP power amplifier IC in the same place, but still, powered straight from the battery)
Ask HN: How can HTTP/2 be used to get GraphQL like performance?
I am new to these stuffs. So as I understand HTTP/2 comes with some improvements over HTTP/1.1. So how can HTTP/2 be used for data intensive request without needing to use GraphQL?
Congrats!

I loved the elegance coffeescript & it was the language that convinced me JS was a reasonable target.

Though I, like many, moved to TS, I use CS every day via its spiritual child es6.
This is why security mono-culture is dangerous and it's in our interest to maintain a diverse ecosystem of security vendors in every area. Security is hard and anyone can have a serious vulnerability.
And that's totally fine! I don't get a chance to use it much these days either.

But for the folks who still do — or have existing codebases — this update is for you.
Big Shift in Media Industry from Big Brands to Individual
> looking into what executives knew

Since it is a criminal probe the prosecutor would have to prove beyond reasonable doubt they knew? It would seem the executives who believed they could officially refute seeing the information would have done this. Some might have contacted their lawyer maybe and asked "ok so I overheard it in the hallway as I was leaving on vacation, didn't open my email or get any calls about it, what do you think, could I slide by and sell".

In general what is the conviction rate for insider trading. It seems in general a hard thing to prove.
It varies, even internally. Officially, yes, it's "package". "GNU Project" (capital "P") refers to GNU itself. "Project foo is part of GNU" is also common. "A GNU project" isn't uncommon informally. On Savannah, they're "projects". The maintainers guide uses both---you can tell what was written early on, possibly by rms, vs. changes that happened later on.
Real-time object detection and deep learning and Python
While I understand the let vs var thing, I wish I could tell the compiler that I promise not to non-obviously reference a local var (e.g. in an eval). Then CoffeeScript could determine it is only written at decl time and could use const. Technically, this could be used for var scoping too in the let vs var issue.

> Keep in mind that const only protects you from reassigning a variable

While I haven't looked, I'd suspect there are performance implications too.
This is possibly because iOS 11 completes the transition to 64-bit[1]. If they apps haven't seen updates in a while, they may still be 32-bit only, meaning they cannot run on iOS 11. We have a handful of apps in this position right now, but clients are reluctant to pay to have them updated.

[1] https://9to5mac.com/2017/06/06/ios-11-32-bit-mac-app-store-6...
(1) Potensi Manchester City Yang Semakin Mengerikan
>And, at the same time, there are no young/anti-establishment people of today of any consequence

LGBTQ spaces and movements? Black Lives Matter? Occupy Wall St and the subsequent progressive upswell which led to Bernie Sanders, an unknown independent from Vermont, to garner nearly as many votes as one of the most well-known politicians on the planet?
Except they don't have an app you can install on your phone/desktop/laptop, last I checked. If I could also join a 'Mattermost' team from the Slack app so everything is centralized, I'd be happy as fuck.
Is your startup making one grilled fish, or a 40-item budget thali?
Oh I don’t even open my work email. That has a 100% ignore rate. If it’s not important enough to Slack or talk to me about it doesn’t exist.

I meant for my real email.

As for my manager taking steps to help me improve that, he’s even worse. Or just has a stronger things-that-are-important filter than I do for Slack. Email is for papertrailing things that were previously agreed upon in person or on slack.
Can someone explain why that library has over 1M downloads over the last month. I'm a old school programmer and i learned how to trim a string starting from pascal. Now we are here, 20 years later and we need an external lib to trim a string? Then there is the security risk and the risk of a bug in the lib, it has happened, a by mistake uploaded lib.
Hey, great. I'd think it would be on par with the x220 or x230 given the same SSD or RAM.

How hard was it to install the LED backlight mod?
I don't think pay-per-item is a plausible model for news, because of click-bait.

Music works well, because you can preview a song, even hear it three or four times, but still want to own it. TV and movies you can have trailers and ongoing series and online reviews to decide which to buy.

But news will always be a leap of faith, and click-bait will always be an excellent (short-term) strategy. If I previewed a song on iTunes, and then bought it, and the remaining ~2 minutes of the song was just static, I would be furious; I would be on the phone with Apple to yell at them.
[IANAL] There's no trial yet, so it's about proving probable cause to go before a grand jury for an indictment.
Revisiting great moments of exploration
When I see that yahoo paid 700 million for his company in 2007 it probably gave him enough fake credibility to hang himself.

Curious was the 700 sale a good deal for yahoo at the time. The article spoke of an initial 40 million or 25 million deal that went sour immediately. That probably gave him enough creditability that yahoo felt it could make a 700 dollar deal because this young guy was a rasing talent.

Those who base decisions on credibility vs obserable fact are cheating themselves. Credibility can be gifted as well as earned. For those who have it gifted you begin to rely on a third party who may have relied on a third party.
i agree that the dependencies are probably unavoidable and probably a net good but... well... just don't forget the system and network security best practices while you quickly put together that project, especially if it's in a public cloud.

btw you should be making $6000 + $1000 or so a month for at least a couple of years doing that, not $6000 a single time. the total lifetime value of setting up an application should be above $30k, hopefully way above, but at the entry level where you are that's a nice healthy number to shoot for.

we bill our total customer base over $6000 a day for this kind of work and it all starts with 'assembling a job' but certainly doesn't end there, or ever (hopefully). good luck buddy!
Do you need both hands to hold such a broad brush?
There are other benefits, like US public submitting bug fixes, Andorra's code becoming a de-facto standard making it easier for them to hire contractors and support, and the fact that Andorra can use lots of open source from the US already. It's not a zero sum game.
Yes, in interviews etc. he's struct me as an "ideas guy" who got stuck on the same idea for 30 years. You'd think in that time he could have just coded the damn thing.
I can't answer for him. but it would seem to me that there is a pretty universal shortage of quality developers, much less superstar developers familiar with your existing codebase. Rehiring him would be a no-brainer.
Funny how you put outright vandalism that would cause hundreds of dollars of loss in such an understated manner (face significant pressure).
That sounds like you’re misusing chaty channels. This is what DMs are for. I’ve had good success with people coming back even days later to answer questions on DM.

Especially when timezones are involved
I understood it wasn't exactly the scenario you described, it's just that the judge gave me partial credit for trying to park correctly.
Yes, the internal tool is called uChat and it's based on Mattermost but Uber heavily contributed to Mattermost to make it scale. More details here: https://eng.uber.com/uchat/
A big part of team cohesion is everybody being on the same page at any given time.

If they are socializing a lot outside of work without you, you will never be in the loop.

In real terms: you will be working on death march projects, your code will be thrown away, you will not be consulted about adopting new techs, etc.

Also: groupthink will be very strong and debate will take place very rarely, leading to hasty decision making and stubborn unwillingness to change.
It's the software equivalent of a double tap.
Program-Transformation.Org
I'll definitely be on the lookout for a better, more native desktop client as I personally find the UI of Riot to be painful. Maybe I'm alone but I find the amount of screen real estate the Riot requires to be obscene.
> This is one of the reasons I really wish there was a decent, widely supported micropayment system for journalism.

Well, to be fair, there is a decent, widely supported payment system for journalism. It's called subscribing to your local newspaper (or the Times, or a magazine). And, depending on your income, this may be a micro payment. The NY Times costs something like 33 cents a day, for example.

It does have the virtue of already existing.
Just buy shares of SPY. It tracks the S&P 500. Keep in mind, returns aren't everything. They have to be considered along with risk. The S&P 500 also has big downturns of 20% or more. A good measure of return to risk is the sharpe ratio. The S&P's isn't all that good. This is why people invest in hedge funds.
Yep, what have the Romans ever done for us? :)

What about, going back a bit, but David Foster Wallace's piece on John McCain's election campaign?
Equifax says cybersecurity incident could potentially affect 143M US consumers
Not addressed in the article: whether the SEC thinks the suspicious trading in Equifax options[1] is at all related to this investigation. People say "well, $1.8M isn't that much given how much stock they hold"; yes, but, if they were trading options as well then it becomes serious money: the profit on the suspicious options trade was $4.2M.

[1]: https://www.cnbc.com/2017/09/08/suspect-trading-in-equifax-o...
This is built-in functionality of Kubernetes (& OpenShift) called Rolling Update [0]/Rolling Deployments [1] and Image Triggers [2].

[0] https://kubernetes.io/docs/tasks/run-application/rolling-upd...

[1] https://docs.openshift.com/container-platform/3.6/dev_guide/...

[2] https://docs.openshift.com/container-platform/3.6/dev_guide/...
Can you provide an example of where it's wrong?
Why would the SEC/DOJ financial fraud resources be spent on the security breach?

We've got the FBI and other law enforcement agencies for that aspect, not that I'm optimistic that anyone will really be held accountable.

From the limited descriptions I've read of the architecture of the Equifax system, someone needs to go to prison.
Facebook Faces a New World as Officials Rein in a Wild Web
I have an x220 still. My whole chassis is cracked, my fan grinds like crazy, my lid has been broken since day 1. the thing is tough even though it's pretty much broken in every possible way it still runs fine and since i have the 9 cell battery as well I still get 5-6 hours from it.

I think might next upgrade might have to be the x62
npm is today about 15 steps behind where CPAN was doing the hight of Perl, have anyone actually tired CPAN on something new say an aarch64 or even good old armv7 CPU, or a excotic new uclib/busybox based linux distro like alpine?

How confident are anybody that a random CPAN package's original maintainer is still actively maintaining anything given the average perl hackers age? and how confident would you be that the NPM repos are going to suffer under less bitrot then CPAN in say 10 years from now?

How confident are you that all major versions of your own code will be either removed from any active package manager or production install or patched for all known security flaws?

And for last the big one how confident are you that all of the fixed version dependencies you add can you make any guarantee that they wont be a big open security hole sitting waiting for anyone still stupid enough to just npm install code 3 years from now?

NPM benefits from still being just before/around peak hype where most of the people who commited to npm's repo's are still early in their careers, at one point it will face the point where most original package submitters have abandoned the task of maintaining them, even if node itself remains around to an greater extend then Perl still does today?

In the linux package management world it have significance when a project is packaged and put into a core repo, as most Linux distributors promise to help fix abandoned code included with the core distribution, nobody in the world of gem, yarn, pip or npm makes any such guarantee and nobody screens new package maintainers before granting them a "name" with commit access to even the degree of Debian or Fedora, which are both fairly open communities.
Unless you feel like you are also going to become best friends I suggest you be aware that it’s highly likely your opinion will matter the least, mistakes by team members will be difficult to highlight, you will be unlikely to get promoted or be acknowledged as being as valuable as the friends. It does depend how many people there are currently; if it’s more than four I’d stay away if it’s less than four you can say to them and think like you are employee number 1.

I’d ask them about the things I’ve suggested might be problematic and if their reaction is anything but thoughtful comments on how to fix such things for you run away.

Finally for me it’d be about the idea, if I was passionate about it I’d find a way to make it work probably but then I care more about the product that’s made than even the people.
"I didn't want to tie up too much net worth in company stock and the stock had appreciated to a point I was willing to sell it."

Maybe not too believable but to suggest they would have no answer at all is a bit naive.
A couple of years ago I was praising them as the most perfect product I had ever used. Every single UX element was on point. Two years later, it is one of the most buggy, frustrating pieces of software I have ever used. Clearly somewhere along the way their priorities shifted.
Is there anything the government has in regards to the storage of SSN? It could be regarded that the SSN is property of the Federal Government, i.e. the SSN Administration. Is there anything where they may have breached federal standards for storing federally owned data?

Edit: for example, there is the fedramp set of compliance rules.
As far as I know you can exgest your data & close the team -- what's the issue with ripping it out again? :)
I was browsing the CoffeeScript docs and everything looks much more concise. It seems like your code would half the size. Have people done real world comparisons on large code bases? Rewrites?
While the malware-ification of Avast has been a relatively slow process, [1] I have never trusted CCleaner, and I also groan when I see friends/family still using CCleaner after all the times I've helped them get out of jams CCleaner caused.

Anecdotally, I've seen CCleaner delete way too many false positives in the Registry, breaking applications, (and people have never heeded it's warning to properly backup the Registry), and worse entirely corrupt Registry Hives, breaking Windows.

The Hive database format of the Windows Registry was built to be read-mostly/write-rarely and doesn't survive well to active surgery, especially not "I run CCleaner once a week with all the options checked". Like I said, I've seen it corrupt entire Hives from too regular operation.

I'm also of the opinion that some of that "Windows slowdown" that these users complain of is a snowball impact of too much Registry surgery leaving sadly deteriorated/badly optimized for reading Hives behind, but that's mostly a hypothesis I have not scientifically proven.

[1] I kind of forgive people still running Avast out of habit from bad old XP days (not everyone got on the Microsoft Security Essentials train as fast as they could, and that was as much a marketing/awareness problem), though as knowledge that Windows Defender exists spreads there are increasingly fewer excuses to still run Avast.
Because one very important application for brain/computer interfaces is prosthetics. If muscles in the hand are interpreting the signals from motor neurons, and the computer reacts to muscle movements, then it's not useful for that. The amputees have motor neurons, but they don't have hands so you need to get the nerve signals more directly.

I don't know anything more than GP with regard to this project, but that's the question they're asking.
Thank you! I love CoffeeScript! It's been so sad to see it slowly fade away in favor of, in my opinion, inferior and uglier things. I -- and many others, I'm sure -- appreciate this update a great deal. I hope I get to write beautiful CoffeeScript code again soon.

To parent post, why should we settle for "good enough"?
It's for me, not for you. Opinion not generalised assumption.
These executives should volunteer to only accept from their sale of stock the value of that stock, 1 year from the date of their sale.

The excess capital, if the stock has not recovered, should be given to non profit charities that support victims of identity fraud.
In coffeescript 1.x fat arrow functions already bound "this", although binding "arguments" is an actual change.

http://coffeescript.org/#breaking-change-fat-arrow