skysight-inc/HackerNews huggingface dataset:
You may not owe your users anything, but guess what: they don't owe you anything either. That's how open source works.

Yep, that is how open source works. Note the 'source' there? Anyone is free to charge for compiled binaries. If this compilation has added bonuses (e.g. including plugins) that gives people a reason to pay for that compilation. In any case, those that don't like it can just compile the project themselves.

What exactly do you think was misleading about this move?
Amazon’s red herring
Space Lions: The Story of Twilight Imperium
> It is true however that the type of build breakage potentially brought in by using git rebase will require you to do more bisect steps.

Or leave you with an inconclusive result if the guilty commit also happens to be one of the skipped commits
No. Customs is a subdivision of Homeland Security.
The last time I have been searched for written or published contraband was at the East German border.

East Germany was an all-encompassing state with the desirable (parasitic) jobs being government jobs.

"Western" governments currently expand in similar fashion. Unless someone works in a hot field like web development, government jobs are the safest bet with guaranteed pensions.

The government takes care of its own, inventing useless work for the people on its payroll and sucking dry the productive parts of the population.
> This doesn't make sense, I want it to stay in the same container.

I'd say it's highly subjective and it may vary case per case. Also this would completely defeat the security purpose of this feature.
Imagine someone has opened a "Banking" tab, and want to convert an account number to IBAN, or just convert amount between two currencies. You'll need a new tab for that. But you definitely don't want to do that in the "Banking" session, right?
Comments on Factorial Programs (2006) [pdf]
I don't earn insane SV money but I could buy an iPhone X tomorrow, I save approx 50% of my salary every month but then I don't drive, own a house or have any debts.

My total owed to everyone is <1mth income.

I grew up poor though so my attitude to money is different to most people my age.

If I don't have a minimum of 6mths income in savings I feel vulnerable.

FWIW I won't be buying the iPhone X, my Moto G5 Plus is an ideal phone for me and only a few months old.

I did drop 1400 quid on a Thinkpad T470P though recently - I will spend money where it makes sense.
السعال عند الاطفال اسبابه والعلاج منه – حياتنا الصحية
My guess is the problems here were more banal: the account running apache had too much privilege (maybe even root?), and the vulnerability was left unpatched for a long time (weeks at least). If you can execute arbitrary commands on a web server it's essentially impossible for any architecture to keep your hands off any (or all) data that server needs access to for its normal functions.
Yes, yes and yes. We had this issue on the Neovim project a while ago [1]. This caused us to switch workflows [2] (although I would have preferred the --exec approach that you mentioned).

Also see comment [3] by TheCorey mentioning you can use `git bisect --skip`. However, in the mentioned case with Neovim, very few commits actually built, making the process non-deterministic somehow (it kept going in cycles).

[1]: https://github.com/neovim/neovim/issues/6431

[2]: https://github.com/neovim/neovim/issues/6435

[3]: https://news.ycombinator.com/item?id=15264159
Or well, simply use both. Feature branch, use merge - the feature is an important artefact, and there it is important for the history to show it.

Bug Fix branch, working on a shared branch, use rebase. The branching in those case is a side effect the exact time two colleague committed on the same branch. There is no information you gather from that, it is just a technical blip in the history.

Not quite sure the obsession people have in using only 50% of the tool they have because the other 50% could be misused.

Similarly, digging for a bug in several hundred commits is going to be shit. Hindsight is very deceptive with bug hunting - they always hide in plain sight, if you know where it is, it is easy to imagine "oh, I would have seen it immediately with a merge". Maybe, probably not.

You see that of that kind of overreaction in Management. There is a bug in production, we must introduce more testing, or more testing phase, or change the way we design the around that single experience. But sometimes, bugs just happen.
It's infrared. You can't see it in reality. Just marketing CGI.
I get it. I like it. But man, would that piss off all the farmers in this country.
Thanks for catching that quickly! I don't remember precisely what word i intended to write... but autocorrect butchered it!

I suppose adding "quality control" to my original post would be appropriate as well! :)
I guess this means that the method easily generalizes to any type of object (?)

> Intuitively this feels a bit off, since outputting a discretized 3d model instead of fitting a continuous model has inherent resolution limitations, but the benchmark results are pretty impressive.

Isn't this because deep learning is in fact a type of interpolation?

And another question: are there any techniques based on neural networks that combine multiple images into the most plausible model?
You're right but you lack context about what's wrong with the Caddy change. I wrote up my concerns in detail in the original thread:

https://news.ycombinator.com/item?id=15238969
Our nonprofit needed a cheaper way to send email blasts. So we engineered one
OurMine hacked #Vevo and leaked 3.12 TB internal files, then delete them
Brain-eating amoebas are probably thriving in Florida’s warm
That is the air crash investigation model, which has as a primary goal not assigning blame but understanding causes and what can be done differently in the future.

But in many cases it boils down to "pilot error" and in those cases the pilots (if they survived) see their careers severely limited if they even fly at all anymore.
Out of curiosity, as I have not crossed the us border for a while, what are currently the odds that an average HN reader is required to disclose computer/phone contents? These discussions and news kind of imply that it would be quite common, but somehow it feels unbelievable that it would be that common...
Rescale (YC W12) is Hiring for a DevOps Engineer
Each thing you are listing increases complexity and attack surface.
My thoughts precisely. I mostly use rebase, except when I know multiple commits in my feature branch will cause merge conflict with master - in that case, I save myself the trouble, do a merge and be done with resolving all conflicts in one go.

My ideology is - prefer rebase first, resort to merge if it will let you do the gnarly merge fast. Of course this is because of the development environment I work in where we just don't use bisect and the workflow is different. I also keep in mind that if I work on a different repository with differing testing/development processes this ideology will change.

The first few days I work on any new project(due to a job/project transition), I figure out how I can iterate as fast as I can and see what my time saving points are. How to best use the git I know, on the current repo, is also a minor part of this poking process.
Lady with the logarithm: 4 lessons from Florence Nightingale
I think that deal was done before nestle bought kitkat. Kind of like spiderman movies being with sony instead of disney
> (Is anyone offended that you can’t remove nginx’s Server self-promotional header without an extra module?)

Wait a second. The Caddy developers implemented a premium "thank you" feature that embeds their sponsors' company names in the HTTP headers of the binary distribution[0], and then defends this by complaining that you can't disable nginx from simply printing a header that says "server: nginx"? It's not even remotely the same thing!

I think this was a very poor use of judgement. I don't even see why it's relevant that they asked their sponsors "do you want us to put your names in the HTTP headers of all the poor suckers running the binary builds?" There's a handful of other places that would be way more appropriate for spamming sponsors' names, for example: banner on the website, in the log files, on the download page, in the README, etc.

[0] https://github.com/mholt/caddy/pull/1866
It actually decreases complexity. Updating 1000 VM servers using these technologies can be made automatic. True, it provides an additional attack surface, but the gains of having everything always patched are well worth it.
As someone who was going to switch a few personal projects to Caddy this weekend, and who read through both the initial announcement and this, I am now massively confused by the whole thing and have no idea what users are actually allowed to do.

Is "sudo apt-get install caddy" allowed? Does header advertising mean "Server: caddy" or "X-Advertisement: go to www.malicious.com for camgirls"? Is this indicative of a broader move to stop supporting the open source version? If I had previously installed Caddy through a package manager that grabbed the official binaries, and I updated my system, would I now be breaching an EULA that I never saw? And so on.

Obviously I am not entitled to get anything for free and don't use the software anyway, and I can probably find answers after 10 minutes on the Caddy website, but this seems like a communications issue that might have made people angry - particularly if they thought they would have to immediately migrate back to nginx with zero notice.
You're probably thinking of how it was in the pre-DHS (pre-2001) era? There was U.S. Customs Service and there was Immigration and Naturalization Service (INS). See here: https://en.wikipedia.org/wiki/United_States_Department_of_Ho...
Some populations practice having as many children as they can because their belief system calls for it. They believe they will get more brownie points from a supreme being for that.

So these groups will get more share of the basic income in the next generation and more in the next and so on and so on...
> "Maybe in future they'll think of redirecting any customers via heinz.com, rather than directly to a custom site for a specific campaign."

The mind just boggles that they ever sent customers to a site they had no intention of controlling forever.

Just. Extraordinary.
I just read the release announcement and, while poorly worded, I don't see how it misleads or disrespect users.

OSS is just that : a promise that users may modify the software to their heart's content. They didn't break that promise at all. Care to share why you hold your view ?
The "change takes time" issue does not happen because of technical problems. It happens because of organizational problems. Technical problems with patching are easiest to solve.

Side note: fully tested within hours assumes small stable software. Large software with frequent changes into it needs to be manually tested. If you have microservices, you still have to test whether something important did not broke.
Wes Bos has a paid course that covers a whole bunch of things over at https://learnnode.com/ - it's relatively recent I believe, so should cover some ES6 goodness.
I am not an iPhone user, or ever bought one. But from the perspective of novelty, I would prefer to buy an iPhone x over an iPhone 8, for the exclusive features. Otherwise I'd stick to an affordable and feature-filled Android.
Do you have brown skin and a beard? That will greatly affect the odds.
Ask HN: How to learn Ethereum development (for Dapps)?
What would be an interesting Dapp I could write to learn Ethereum beyond the basics?

I'm the kind of person that learns better by working on a personal project, but Dapps are totally new for me. I see the potential but not really where to start towards a practical implementation.

Do you have any idea what would be an interesting pet project that is not too ambitious, but not too basic?

Pointing to existing projects and/or courses is more than welcome!

Thanks!
The name X (10) kinda reinforces this. As in, "Don't expect next year's standard priced iPhone (nominally the 9) to be as good as this."
There is a difference, none of the other registries are open to the public.

And I'm not sure that any of them would put someone that pees in public in those registries
I Survived the Holocaust Twin Experiments [video]
See my criticism in the previous thread: https://news.ycombinator.com/item?id=15238969
If this is so mission critical why not get a proper Postscript printer with an onboard filesystem for font storage. It doesn't make much sense to run a business on consumer junk.
I travel to the US frequently as do many of my colleagues. I've never heard of such a case. You usually see the door to the interview rooms and last time I could see it while I was in the queue, I believe no one except employees entered it while at least 200 people entered the country.

Not significant but would assume it's very rare. Considering how many people enter the country each day, even a 1:10000 chance would produce a lot of cases.
"That's objectively false. GPL provides more end-user freedom. BSD provides more developer freedom. There's not a single license which objectively and universally offers more freedom."

I disagree. Forcing people to do things is not "more freedom", although the GPL's goals are laudable.

"False dichtohomy. That's comparing rotten apples to ripe oranges.
You either have to compare old GPL to old BSD or new GPL to new BSD.
And as an end-user I would prefer both new and GPL."

Unfortunately, new and GPL is not an option. But this result is what the FSF wanted when they created the GPL3.
While waiting for a better network in every part of globe, we do need local power like you described. But, none of your examples couldn't be implemented remotely, and be more powerful if implemented remotely. We have all the tech to have faster and better bandwidth, it's just a financial implementation problem (i.e. 'some dudes need to have their bank accounts happy' kind of problem).
If this law is applied evenly, I suppose farmers will just pass on the costs to their customers.
It Is Time That We Start Referring to Loot Boxes as Gambling
Yeah I think my point was more that a blanket ban on rebasing is too rigorous. I agree that once you want to integrate B and C (or both into A), a merge is usually the best way to do it - and I think that's what TFA was actually referring to.

It fails to consider the case, however, of rewriting B's history internally, not as a way of integrating with A or C, but as a way of making its commits clear. Afterwards, you'd still do a merge of A into B and then merging B back once you see that's successful.
> Just because you worked at a place with good security hygiene, it makes no difference to the world at large. Everybody else looks like Equifax.

Equifax did have good security hygiene. But they didn't have perfect security hygiene, and this particular gap cost them big time.

Most security incidents are like terror attacks that are averted. You read that authorities in Spain stopped an attack, and it means the system is working and people are safe. Then something explodes in London, and people are hurt, and you realize that there's no such thing as complete security.
When I was interviewing for mid level jobs in Montreal most of the salaries were around 45-75k CAD. At 80k I was the second-highest paid dev in our office.

Certainly there are jobs paying more, but they are far from the norm.
Three weeks freeze twice a year during the most critical time does not sound that horrible to me.

Software developers tend to break system with changes. That is not some kind of mythical rare issue - that happens often (with some vendors very often).
What is the actual motivation for doing these searches?
I think they're referring to the omerta-like man code that keeps people from snitching on bad apples. Although I think that's really tribalism, more than patriarchy.
1.3 m/s² is quite something, quite a bit more than a typical tram or S-Bahn (both ~1 m/s², which is still quite a pull...).
I hadn't heard about that. Thanks for the info.
No pitchforks, but this has sentences straight up from wikipediea article: https://en.wikipedia.org/wiki/Land_value_tax
For everyone patting themselves on the back for how much better they are at securing their data realize that for way over 80% of incidents the attack vector is email and social engineering. Look at Red team exercises of competent teams and try to honestly answer the question would have they succeed with that tactic at your company. So yes having much better practices vs what we see here is very important but will not really help much if you are being targeted by a competent adversary.
Microsoft probably has a separate IP licensing agreement with Facebook. After all MSFT invested in Facebook in the early days, 10 years ago.

http://www.nbcnews.com/id/21458486/ns/business-us_business/t...
Discussed 2 days ago (540 points, 117 comments):

https://news.ycombinator.com/item?id=15240781
~infty / until the mechanical brakes are worn down after the battery is fully charged from driving.
A vehicle (from Latin: vehiculum[1]) is a mobile machine that transports people or cargo. Typical vehicles include wagons, bicycles, motor vehicles (motorcycles, cars, trucks, buses), railed vehicles (trains, trams), watercraft (ships, boats), aircraft and spacecraft.[2]

https://en.wikipedia.org/wiki/Vehicle
> I disagree

This debate has been had a million times.

Every time reasonable people agree you have to choose one or the other.

You can't have both.

I see no reason to re-iterate that debate though. I'd just like to point out that your view is not the prevalent nor accepted one.
Paisley Pattern Wedding Invitations on Behance
we had a web group to great fan fare had all new work area created for them, open ceilings, glass walled conference rooms, and open-plan in general. I am not sure if anyone like it. from lack of perceived "my space" to simple increase in noise. plus if the computer setups are not well planned out it just looks wrong.

for me, it reminds me of one especially bad contract where we worked on school lunch room tables. five of us in a row facing a wall with one phone at the end. amazing after spending our hourly rate what they thought they could save without realizing the impact on productivity if not turn over.

people deride cubicles now but they are last safe haven, just like dogs and other animals, there is a lot to be said from the subconscious feeling you have from the walls of the cube and single entrance
Yep, I use it to keep my feature branch up to date, too.
First of all, its 144% additional mass. But the calculation can be done very simply. If the regeneration efficiency would be 50%, then it needs to weight twice down what it weights going up to be a zero sum game. The regneration efficiency should be higher than 50% (Tesla has over 60%) and it is much more than twice the mass going down than going up. So there should be a healthy surplus of energy generated by going down.
Everything does not include your actual app, so yes it's convenient but doesn't really help that much
The despicable problem with land taxation is that it turns property from owned to rented. It allows for abuses of raising tax rates to drive people off their property. It replaced true supply-and-demand with arbitrary choices by under-informed bureaucrats, which never goes well. It is the core of gentrification problems, driving people from long-occupied homes via taxation because others pay a premium for neighbouring properties.

Never mind the core problem with UBI itself: funding inactivity by taxing productivity.

People should be able to own land outright. Let the poor and elderly and independent keep theirs, without being driven out by overwhelming taxes raised to fund the poor and elderly.
To be even more fair: all Android phones you can buy today have a 'secure enclave'. It's been a recommended feature for Google Play certification since Android 5.0, mandatory since 6.0, and part of all Qualcomm, Mediatek, Huawei and Samsung SoCs for years. In your Android phone's settings, go to Lock screen & security, and look at "Credential storage". Unless your phone is ancient, you will see that the storage type is hardware-backed. My Nexus 4 from 2012 has it.

This is another one of those things where Apple marketing fares much better than their competitors :)
You can now write web apps for bikes and ebikes
I disagree with the fatalist tone. Sure, it can be hard for big, slow moving businesses to take a time out from writing million dollar checks to C-suite executives to spend money on a competent operations and security team. But it can happen and in this case it should have happened.

I don't think "better architecture" is handwavy. If you have old legacy apps that can't be updated and maintained, don't provide them with a path to the public internet. Or front then with some infrastructure and adequate alarms to detect something going wrong.

I think it's reasonable to respond to a CVE with an update to your app or infrastructure within one week. Most of the time rapid testing will be fine as your patching a library or component, like Struts or Tomcat.

These companies are hardly providing 100% uptime, in the case where an update like this needs a rollback, it won't be a big deal. If you have a good team and you spend the money on them.
Hmm. If being drunk means not being able to consent, I don't see how is up to the victim to decide whether it was rape or not. What constitutes a "competent adult" seems to be the problem here, as a drunk person might not be considered a competent adult in some cases. Otherwise, it is tantamount to saying that whether one has committed a crime or not depends entirely on the other party will decide at some point in the future.
How I discovered pagination is not required on Product Listing Page?
> You should use it the other way around

Yes, that's how I thought it was meant to be used.

(At first I got confused reading this article because I assumed that's what they were talking about too.)
Steve Jobs is said to have poured in a lot of thought on how the architecture of the building is supporting work. Steve also had some architectural experience from Pixar. On the macro level the alignment of the architecture with the organization as it was explained always made sense to me.

On the micro level changing from offices to open floor is a huge change. How was that supposed to preserve and foster the engineering culture? Apple is the company where walls and secrets are not accident but carefully designed. I could imagine a part of the organization going to open floor but the whole building?
we are trying to tackle this problem by rewarding people for finding good candidates for available jobs in the market (mostly tech jobs); https://www.ref10.com/
When I was 20, I thought exactly the same. Now that I'm closing in on 50 I love life in the 'burbs. When self-driving cars are available I will likely move a bit further out of the city where I can have more space.
That just isn't true. There is zero reason to believe that men as a class have oppressed women as a class.

Your ideology is just rebranded communism. Which is itself a lie.
Since is advertised as "Open source, private cloud
Slack-alternative"

My first question is: How can I import slack chat history, channels and user accounts?

I tried finding this info the landing page but I couldn't find it.
How is this MAU defined? I would guess possibly any click from Google count as a unique visitor.
I have a really bad feeling about Apple and this building.

Companies tend to have bad things happen when they build or move HQ anyway, and the fetishization of Apple Park is a level beyond.

Even their product marketing is distracted by talking about how awesome the building is. How much time has been wasted in the company on the topic?
How a photographer snapped this tragic photo of a seahorse lugging a Q-tip
It's quick, but it's risky, because testing is manual, you don't have blue-green deploys, etc. So it's not that it becomes painless, it's just that their are circumstances where you accept the risk.