skysight-inc/HackerNews huggingface dataset:
On top of this, updating dependencies is becoming just as important as patching the OS itself, except without the culture of providing non-breaking updates. Often you're left with the choice of having to either upgrade to the latest version and deal with breaking changes or leave the insecure versions in place.

This compounds the dislike companies already have for updating software, updating packages isn't something that's ever planned and budgeted for. A standard enterprise app will be using tonnes of outdated and potentially insecure packages, I've come across some that are a decade out of date with no pain-free update path.

And now it seems that even "systems languages" are heading down this path.
We're there a few zeros missing from the amount Kevin Costner sent him?
Top 16 ML/NLP Books
Sam Ruby converts to Vue.js
How many people live in China? Most news from China on this subject make me think of that Simpson's meme, you know the one: Old Man Yells at Cloud.
Planning has nothing to do with it according to The Patriot Act 2001, however Charlottesville doesn't seem to have been defined as terrorism.
"The USA PATRIOT Act of 2001 defines domestic terrorism as "activities that (A) involve acts dangerous to human life that are a violation of the criminal laws of the U.S. or of any state; (B) appear to be intended (i) to intimidate or coerce a civilian population; (ii) to influence the policy of a government by intimidation or coercion; or (iii) to affect the conduct of a government by mass destruction, assassination, or kidnapping; and (C) occur primarily within the territorial jurisdiction of the U.S."

Everyone's favourite source. https://en.m.wikipedia.org/wiki/Definitions_of_terrorism

However far right violence has a track record of not being labelled as terrorism quite as easily as attacks by Muslims.
https://www.google.co.nz/amp/s/static.theintercept.com/amp/t...
> What do you mean by the "requirements conflict"?

Possibly that such a dead man's switch would require the keys to be outside of your control to some extent - after all, if you die the day after resetting the switch, any infrastructure owned, maintained, or paid for by you might not exist for the switch to fire. If you give the keys to a third-party, you have to trust they aren't reading the contents and that their security measures are sufficient.

It could be done on an ad-hoc basis if you have a trusted third-party (close friend, for instance), but it's difficult to see how it could be scaled into a service. Perhaps it could be split into two parties - you upload the encrypted notes to the service, but they don't get the keys. You pass the keys to a trusted third-party (i.e. the close friend), who can make the notes public by giving the keys to the notes holder, who (ideally) would verify the death via public records. This avoids giving the secrets directly to the friend (in case of disagreements etc.), and you can reverse the decision whilst you are still alive (by deleting the notes).

Also, depending on the nature of the secrets, it does provide an incentive for death.
Still isn't end-to-end encrypted, I think.
That's true. But I also look at Evernote and realize that notes are all Evernote have, and yet look at their stagnation ...
Google’s search bias against conservative news sites has been quantified
> no matter how obscene

Not true: https://en.wikipedia.org/wiki/Mike_Diana

> or political

Also not true: https://en.wikipedia.org/wiki/Treason_laws_in_the_United_Sta...

I'd recommend reading up on these:

* https://en.wikipedia.org/wiki/Comics_Code_Authority

* https://en.wikipedia.org/wiki/Motion_Picture_Association_of_...

* https://en.wikipedia.org/wiki/Hollywood_blacklist

* https://en.wikipedia.org/wiki/Censorship_of_broadcasting_in_...

* https://en.wikipedia.org/wiki/Smith_Act

* https://en.wikipedia.org/wiki/Comstock_laws

* https://en.wikipedia.org/wiki/Censorship_in_the_United_State...
> Fair enough. Let's crowdfund a lobbyist.

That's essentially what nonprofits like the EFF are.
It's very striking, how China's endeavors mimic those from the US's past and ongoing geopolitical stratagems.

US's game so far has been to sell overpriced white elephants to countries in the Middle East, East Asia and South America. This has benefited in the process, a few "bent" middle men, resulted in a massive transfer of wealth from the US Fed to a few select infrastructure/defense firms in the US, all while indebting generations of impoverished people to the whims of the American retainers in WTO/IMF etc.

Inevitably, these countries become the hubs for slave labor under US based corporations, which reap massive profits while paying pennies on the dollar.

... and they say slavery is dead.

It's a pity that China appears determined to follow a similar policy. I find it amusing that the article almost seems to gloat "China is following the Great Britain model. These outdated chinks have no idea how to run an empire in the modern era!".

The world is a very depressing place. Welcome to the Borg.
Ask HN: Would you recommend sharing code between an in-browser app and a CLI tool?
I am working with some image files in a proprietary format. I would like to write a viewer for these files that runs in the browser (using HTML canvas), and a command-line tool to convert the files into a standard format such as PNG (for use in scripts, makefiles etc).

Do you think I should try to share code between these two projects? The obvious benefit of doing so is that I would only need one version of the image format decoder. However, sharing code would limit my choice of languages for the command-line tool - it would need to be written either in JavaScript itself or in some other language that can be compiled to JavaScript.

Are you, or have you considered, sharing code between the browser and a native app in this way? What language (and tools) are you using? Would you recommend your solution?
You mean that every time you write a new project you write your own request parser, your own server, your own web framework, your own database access libraries, etc. from scratch?

Packages taken over include misspelling of urllib. What exactly do you propose as an alternative here?

I'm all for limiting bloat, but your rant here seems completely inappropriate for the issue bring described.
Not necessarily, depending on the method. For example, Apple/Android Pay is stored securely. Raw credit card data may be stored encrypted by the browser and decrypted at runtime or with the OS keychain, although I'm not sure if this is done now or not.
iOS Version Stats
I miss SABLE. I like it better than DDB, but I'm probably in the minority there. It made building high throughput services easy. I'm somewhat surprised it mentioned publicly.
Streaming Torrent Online Hasn't Been More Easier
It may be that our biggest collective luck was that the alarm happened at the time subcolonel Petrov was on duty. He was an analyst, maybe even chief analyst of the unit, he authored the playbook for the officers on duty; being on duty wasn't his main job (source: https://cont.ws/@adviser095/717098 ), he would go on duty from time to time.

Due to his knowledge of the early warning system he was more likely to cast doubt than a regular officer on duty. Several factors looked suspicious: 1) The reported starts (5 in total) happened from a single base in the US which didn't make sense from the military point of view: the US would have put themselves at a grave disadvantage by sending just a few missiles; 2) They had visible light and infra-red visuals on the US territory and none of them checked out and 3) It would have been highly unlikely for the war to start suddenly, without any prior escalation.

Like other officers on duty, he had college education as an electronics engineer and additional 2 years of special training. All this probably helped him make the right decision.

This is not to take away from the importance of Mr.Petrov's heroic personal contribution: he definitely deserves recognition (which he didn't get from the Soviet Army and his own country BTW). Still I would also like to hope that we are all collectively not as stupid as to go caboom just because of the single fluke in the satellite system.
How typical on HN for a Chinese perspective to be downvoted to the bottom of the thread while everyone else flagellates themselves for how "free" the USA is.
Sure, but I don't really feel Silicon Valley housing is a bubble that will crash aside from temporarily. I think the prices will continue to grow in the long term.
Cachet: The Open Source Status Page System
How does using variables before declaring them relate to closures?
Adventures in fault tolerant alerting with Python
Judging from google's track record with android, chrome, and youtube, I'm not very excited for this project. As much as I would love some innovation in the OS world, I find myself hoping that this system does not catch on.

Google has not proven themselves to be a developer/enthusiast friendly company. It feels like they look down on the rest of the world while locking systems behind restrictive(cumbersome) APIs to protect the unenlightened from themselves. Maybe that design philosophy is okay for services/apps but it has no place at the system level IMO.

Who knows maybe the fuchsia team doesn't share that philosophy, but I doubt it.
Petrov's story is a really good example of why employing smart people and trusting them beats procedures and metrics every time. May he rest in peace.
If the notes are encrypted, you hold the keys. If the service held the keys, no one would use it. But that means the notes can't be decrypted upon your death, since the keys would need to be uploaded at that point.
For me, turning the words into actions was the easy part. The hard part was sticking to the habit of doing weekly reviews. I always fail at this after few weeks, and if you don't do weekly reviews, suddenly the whole GTD methodology falls apart on you and you have to start over...
5 Things I Didn't Expect to See While Shadowing On-Call
When you have insights that solve no problems, they are not actually insights worth having.
Mobile Website vs Mobile Apps: Know the Difference
Mobile websites and mobile apps have particular benefits of their own. Thus, it is ideal to choose the services as per business requirement.
Tech companies have highest turnover rate
Actually, the IKEA nearest to me in Berlin was restructured some months ago and got rid of the maze, by adding a lot more shortcuts. They also have signs with a floor plan whenever you could take a shortcut.
You original statement was that it was "bizarre" to say SJ is bigger than SF. But you then went on to say that by land area and population it is, but by some other metric it isn't.

I think the people took "bizarre" to be some kind of attack, but perhaps that wasn't your intended meaning. Certainly using size or land area to call SJ bigger isn't that weird, despite the OMB using other metrics.
Block. Lock-free doesn't imply infinite RAM.
I agree, and this is why "safe" languages like Rust, OCaml, Erlang, etc. are important. It's not possible to guarantee safety under all circumstances, but as software becomes more complex, anything we can do ensure some degree of safety is pretty crucial.
>Secondly for all of the fakes, there is absolutely zero privacy concerns. No fucks given for those that meddled in our election process. They should all be extradited and thrown in our jails.

And how can we know who these people or organizations are if law enforcement can't properly investigate them?
Sure, I'm reclaiming it for future writers.
This is a good example of the stupidity of the normal rules that Hacker News enforces about article titles. I am glad they made an exception in this case. I never would have read this if the headline text had been "Prime Day 2017 – Powered by AWS". I did read the article, because in this case, Hacker News allowed the title to highlight what I would find interesting: the incredible performance of DynamoDB.
From the website: "[Note: I am no longer working on TCC. Check the mailing list to get up to date information.]"
I'm skeptical about these, because each time we've tracked worker productiveness they've worked around 6 hours out of the 7,5 they are paid to on average. The only way we'd get someone spending that much time on news/SoMe is when our workers are bored.

Like an IT tech waiting for a consultant to call back on a priority task or when someone simply doesn't have enough things to do.

We do lose a lot f time to things like chitchat, but I think our overall productivity and happiness require the freedom for people to do so.

I don't think the points of the article are wrong though. We have people who work less than the standard 37 work week at certain periods in their lives, typically younger parents, like 30-34 hour weeks, and they are much more productive and score much higher on employee satisfaction. But I do think the research is a tad thwarted by coming out of American workplaces and that it isn't useful for every office space.
It is also interesting that the thefts seem to stop after they moved to the new wallet software.
A package manager must at a minimum address code security, dependency hell and deployment. A json parser that wgets urls into a folder is not a package manager.

These things must be thought of upfront and cannot be left vague and open to adhoc practices that leak to end users and deployment creating insecurity.

For instance a package should be a package, it should not be a simple class or function that in turn pulls in a hundred dependencies. 10 packages like this can pull in 600 packages all with conflicting versions. This is exactly dependency hell that creates insecure practice as no one can verify the chain and sheer number of packages.

Language developers cannot just sit back and let this happen. Eventually you will pay the price for this kind of shoddy engineering. This should be the minimum required from any responsible language.

And best then if you don't use the system package manager, do not mix up both to create a frankenstein language that multiplies complexity for everyone.

The biggest thing is stop being faddish. Recognize upfront that there are always developers and groups jockeying for influence and creating dependencies on their apps and platforms. Discourage them from hoisting their self serving bad ideas on the ecosystem and multiplying complexity for everyone. Ultimately the language and ecosystem have to develop consensus on robust engineering practices or a wildland which will eventually lose users.
I'm not allowed to say, but I think OVH also runs openstack with the "public cloud" offering, and I think bandwidth are even cheaper with them.
When AIs are making life and death decisions (because there are only microseconds to act), will they hold their fire in the name of humanitarianism? Would an AI have launched the missiles?
> English, Hindi, Bengali, Gujarati, Kannada, Marathi, Tamil, and Telugu.

In all my years of living in India, I've not come across one person using anything other than English. Most people, even in IT, hadn't the slightest clue about how to type their own language into a PC. Didn't stop them from being "proud" of <insert object> though.
#Vastu Consultancy Service ​on Email​ by Dr. Puneet Chawla​
On-Call Horror Story Number One: This Wins the Most Embarrassing Award
This good for Google.

India is already going cashless. There are plenty of wallets and chash-less apps spending money trying to buy market share. Every vendor and their younger brouther has their own wallet app. You'd be hard pressed to find a shop without a paytm or phonepe or whatever barcode at the window.

It's already happening. Google is trying to ride the wave, and the government is trying to ride the Google PR wave!
Indeed.

In context of mental jobs, like programming, I identify at least three things of wasting time:

- coping with stress (I find myself browsing HN when I'm stressed; whether or not it ultimately helps being less anxious after I close HN is debatable, but it helps for the moment)

- it's hard to get into the zone, and in the meantime, life goes on; especially in the presence of focus-destroying distractions (like open-plan offices), it's easy to think about and check up on non-job-related things in your life that are important

- I like my hot tea and snacks

The first two I can beat if I can get into flow (less external distractions help here - like being alone in a room with doors that close); as for the third, I'm sorry, I'm not gonna plug myself into IV for my boss.
I fear this too.

First they try to make HTTP impossible to use (nag pop up) to limit the websites, then they try to introduce pay-per-view model and subscription model.

Welcome back to the pre-1999 AOL/MicrosoftNetwork/Compuserve/BTX/Minitel/etc - closed networks where pay-per-page-view was prevailing - then the free open WWW won, supported by advertising.

The good thing, it only takes other websites that provide the same or comparable content for free.
I wonder how many people make this exact mistake.
crashing economy? come on, can't wait for that, I have been hearing this for 25 years, please deliver it.
Uber was on Hipchat, briefly experimented with Slack, went back to Hipchat, and then moved to our own Inhouse chat based on open source project, starting around the beginning the year.

It was bad the first few months, but except for a recently publicized utterly embarrassing security vulnerability, in the last 2 months it's been working great. The mobile app is now much, much better than the HipChat ever was.
Great Family Card games
Simply don't go to any website you don't control.
> You mean that every time you write a new project you write your own request parser, your own server, your own web framework, your own database access libraries, etc. from scratch?

They made it pretty clear that they get them from a distro repository. Most are much better about managing breaking changes and offering years of security patches (at least to core packages).

> Packages taken over include misspelling of urllib. What exactly do you propose as an alternative here?

Stricter guidelines and auditing should have caught this.
You are fighting a strawman. Either use the system package manager which has already thought about and solved these issues or if you must use a 'home brew' package manager, design a secure one. And if you can't do that limit the circus to developer machines.
Eh... I see the opposite.

China knows better than the west what powers can be exercised on the net.

They've been testing it for a long while and all the old assumptions "the net treats censorship as damage and routes around iT" etc. have been found wanting in China.

As the power of the nation state returns to ascendancy, now with IT firmly under its yoke, I suspect that China will do much better and succeed.

Instead - I think the west is going to end up following China in some format or the other.

Edit - as analogy: the market can remain irrational longmer than you can remain liquid.

Govt can suppress and succeed longer than you expect.
This is imo a backwards way of doing things properly. Binaries should be sandboxed via a .ctor using seccomp and unshare, preferably in their own section so updating or removal is trivial. The remaning issue is "how can you have multiple tools as an all-in-one container"
While this code is "all rights reserved", you do have the right to view it according to the GitHub terms of service. This is not true for Windows.

Alleging that Wine authors have participated in illegal sharing of source code would be a powerful accusation, and the authors clearly want to avoid it.
Where to Find Legit Steroids for Sale in the Online Market
I too am longing for local AI. That way the AIs I interact with can truly begin to learn. From me. For me. Not the same bot learned from all the aggregated Big Data for everyone. Personalized local AI.
Also: Making AI local opens the doors for privacy protection once again, I hope...
I want my bot to protect my data, not feed it to the big coorperations
> I don't need a type system. I don't need "warnings" about converting floats to chars: I know what I'm doing and why.

No, you don't.

Regardless of your skills and seniority (I'm guessing pretty junior with this kind of hubris), there will come a time where you will make mistakes that can be caught by a good compiler. You want this compiler at your side, and the more statically typed your language is, the more robust your code will be.

> Once you're writing programs that are smaller and faster than me, then we'll probably talk

What a strange metric. Assembly language would probably meet these requirements but surely, you would not consider it.
BLUE WHALE CHallENGE – WHAT TECHNOLOGY HAS CREATED
I really never had a problem catching flies and I don't even think I have fast reactions. You just need to observe their flight silently for a few moments, breathe subtly and make your move suddenly, preferably from the back. They are amazing at avoiding hits from the front. Put yourself in the mindset of a deadly, stalking predator instead of irritated house resident and watch those kill counts stack up.
You're showing the sum of all times, but do the times at least look better after the first run (with -Xshareclasses anyway) ?

Depending on how smoothly your experimentation went, you may also have to destroy a pre-existing cache before you really measure it (java -Xshareclasses:destroy) as it could have stale classes in it from an earlier run.

Would you be willing to open an issue with more details at http://github.com/eclipse/openj9/issues so we can look into it?
Uncoiled, DNA is about 2m long.

Hmmm, better not get that kilowatt kicker amp for my baofeng.
> You mean that every time you write a new project you write your own request parser, your own server, your own web framework, your own database access libraries, etc. from scratch?

No, but downloading random code is just insane.

As a comparison, Debian has ~3000 packages, and every single package had an identified maintainer, with its own GPG key, validated in face-to-face meeting with an ID card by three people, an identified upstream, etc. Each maintainer is physically identified, and has passed a number of technical validation steps, explained his motivation etc.

There is also a dedicated security team that can be contacted 24/7.

The system is not perfect, but it provides a good level of security. And this is a project only made by volunteers.
Editorcofing-checker in javscript
Awesome, thanks.

For that kind of money, I am thinking about it for a Yukon commuter car! - so nice not to have to leave it plugged in all day or let it warm up for 20mins when it's -40 !
I just want to say thanx for changing the title.
It's no mystery what's wrong with Equifax to those who have accounts with all three bureaus. Two seconds inside the site will tip you off; hint, it's much higher level than choice of hosting platform. CoreOS is certainly trying to get on the radar here for when the other shoe drops and Equifax starts spending serious money on this stuff. The whole thing seems a bit tone deaf in timing though.
No, there are many assets which are "cheap" to move singlehandedly, yet are not (often) moved that way because of regulation
> And this is why said Lenovo included the crapware and spyware in non-volatile memory that is executed by Windows boot automatically by design, so your reinstallation doesn't work as intended

Could you please provide a citation for this claim?

I've never heard of Lenovo bundling parts of Superfish into UEFI to be installed again if Windows is reinstalled.