skysight-inc/HackerNews huggingface dataset:
It looks like the code phones home to a server in China:

IP:	121.42.217.44
Decimal:	2032851244
Hostname:	121.42.217.44
ASN:	37963
ISP:	Hangzhou Alibaba Advertising Co.,Ltd.
Organization:	Hangzhou Alibaba Advertising Co.,Ltd.
Services:	None detected
Type:	Broadband
Assignment:	Static IP
Blacklist:	Click to Check Blacklist Status
Continent:	Asia
Country:	China cn flag
State/Region:	Zhejiang
City:	Hangzhou
Latitude:	30.2936 (30° 17′ 36.96″ N)
Longitude:	120.1614 (120° 9′ 41.04″ E)
>I don't know whether to think it is real, or that it is a myth. It's true that tech companies are picky, it's true that salaries are not skyrocketing. Open reqs attract hundreds of unqualified applicants, at least, that was my impression.

Then you should probably hurry up and skyrocket your salaries.
>Combine this with a lack of using floating windows

Floating windows? As if they are supposed to be good stuff?

Floating windows and MDI UIs have been phased out in most OSes, apps and GUI toolkits in the last decades favor for far more stable and intuitive docked sidebars and toolbars.

Edit: Is what I wrote inaccurate? Or it's just fans of floating windows voting this down?
Glad to hear this, I hope lyft uses the funds to get more drivers on board and advertise to more passengers. Lyft is transparent about its cut which is flat 25% while uber is being a total scam sometimes keeping up to 55% of the fare to itself.
Huawei Leaps Over Apple to Emerge World’s Second-Largest Smartphone Company
Still there are plenty of commercial options to AOT compile Java, and OpenJDK is getting its free variant with Java 9 for Linux x64, with Windows and OS X already supported on the Java 10 development branch.

Oracle Labs is also pushing forward their research of meta-circular JVM, which makes use of AOT compilation. Although it restricts it to a "native Java" subset.

http://cr.openjdk.java.net/~jrose/metropolis/Metropolis-Prop...
People who ridicule the notion of FUD causing actual harm, pay attention: this is a perfect example of the chilling effects of FUD on software projects.

Automattic didn't drop React because it doesn't like the license. Automattic dropped React because the FUD surrounding React's license might rub off on them (and WordPress). It's their right to do so and it's in the best interest of WordPress to avoid being dragged into the patent FUD but it's important to understand that this isn't an act of protest against Facebook, it's FUD in full effect.
The problem is with how security is depcited and movies and television series. Cinmatographic Things will always recive more eye-candy value and feature bigger.

So to educated the audience security wise, one would need to raise the eyecandy value of good passwords.
Interesting ....

I really liked DEC's VMS DCL ... and "help" was top notch.
Sounds like sleep paralysis.

https://en.wikipedia.org/wiki/Sleep_paralysis
> baseless and meritless

Are you expert in patent law for you to come up with that conclusion though? I you're not a lawyer then your assumption that it's a perfectly OK patent grant is baseless and meritless as well.
I believe urllib3 is built-in. So if you have installed it from PyPI you've gotten a malicious version.
I was going to be optimistic and assume they tested this on some browser and just forgot about a weird edge case only present in Chrome/Linux. Looks like they probably didn't test the banner/toast combination at all.
Not for me. There is space at the end between the closing bracket and the apostrophe. Maybe you did remove this space when you corrected the smart apostrophes.
The problem is that the vetting process of PyPI is completely inexistant. This has happened many times in the past, the last time I remember they uploaded a few libraries called "bs4" and stuff like that.
Save setup time and effort in your next user testing
Package managers seem to be an increasingly popular attack vector. It's only luck that none of the attacks have been particularly malicious yet. Considering how many package manager downloads go to a server in a datacenter, a widely distributed malicious package could control a botnet with extremely high throughput, or wreak havoc on any databases it comes into contact with.

It's only a matter of time before something like this happens. A big part of the problem is that application package managers, like pip or npm, are far less sophisticated than those of operating systems, like aptitude or yum. It needs to be easy for developers to open source their code, and to mark dependencies with precise commit hashes, but the download also needs to be secure and verifiable. There are many difficult tradeoffs to consider in terms of usability, centralization, security and trust.
I remember one trick to get out of sleep paralysis was to turn my eyes (you're always able to open your eyes and look around) and head until the movement was big enough to snap out of it. Once I got out of it and I didn't move much (like if I just turn around in bed) it could easily happen again. The best way to avoid this is to try doing something that requires concentration, like getting up and do something that requires concentration for a minute and then go back.
The Thought Process Behind Moving to Docker
At night one usually only sees the light's color, not its position.
> What if there is a font named Hack and a language

Then one gets confused between them. Next month a story on HN will be titled "New version of Hack released". That's confusing.

> (which, FWIK, exists as well)?

Yes I know. That doesn't weaken my point!

> Would it hurt anyone to use context to know which of the two is talked about?

Of course. Every time one has to spend effort additionally clarifying one's meaning (or worse, someone else's meaning)causes a bit of "hurt". The more popular the project the more the hurt compounds.

A case in point: all the people on HN who click through to discussions on ML thinking it was about the language only to find it's an article about machine learning, or vice versa.

> In fact if it's "extremely common" then already there's no such concern. Now it just has N+1 uses.

I didn't mean it has N different uses as a proper name. I mean that it's a commonly used word as a non-proper-name that represents one concept or a collection of very similar concepts.

Ornithologists shouldn't call their new font "Wing" and we shouldn't call our new font "Hack". The other way round would be fine.
Podcast:Linda Rising on the Importance of Patterns
Speaking from another metro area, that sounds like what companies do to our municipalities when offering to set up shop. Oh, sure, they'll build an office here... so long as we shovel some free public money down their throat to "incentivize" them to make a profit off our labor.
> How can you be sure?

Don't go down this route. This leads to things like questioning if we can really be 100% super double sure that we landed on the moon, seeing as none of us have any verifiable proof.

Russians were involved in a lot of hacking during the election, and a lot that has surfaced since, like intrusion into power plants, etc.

How do we know this? Because all investigations from the three letter agencies agree on it. Do we have to trust them every time they say they're not spying on us? Or whether they have any active investigations on something? No. But there is no national security or stability reason for them to lie about this. Quite the opposite.

That GP is being downvoted for stating this is disconcerting.
I've been telling anyone who will listen that we need a public social media platform funded by just such a mechanism, akin to similar institutions like copyright registration and the postal service.

Innovation could occur on top of what is a very simple data model and doesn't need the free market to stay relevant.

Our public institutions are what we make of them. If we despise and distrust them they will wither and die. If we encourage and support them they will flourish and we will all prosper together.

No man is an island!
Font detectives who ferret out fakery
>Believe me, people don't mind being in touch and coordinating through more direct means, in fact most people respond more genuinely to it.

FWIW, some do. The only reason I signed up for Facebook was to have an asynchronous medium in which people can "contact" me, instead of trying to meet up, call my phone, text me, etc. I use Google+ for sharing photos/updates with my family while I travel, and LinkedIn for recruiter fishing. I use each of the above at least a few times a week, but always out of necessity; I've set a pretty solid standard of "I may take a couple weeks to respond, but I'll always respond" which is so much nicer than being constantly interrupted by people reaching out through direct means.

Email was nice for this originally, but there's way less friction to contacting someone through FB than there is through email, and keeping social messages out of email keeps my inbox more manageable for productive uses without having to set up and maintain filters.

Of course, YMMV. But just remember not everyone likes/minds the same things. :)
Migration from http: to https: (using Apache httpd and automatic Let's Encrypt)
how likely is it that npm and other package managers that do not use digital signatures by default are unaffected?
This would be interesting, especially if it included sector along with sector. Do all health ins companies have a blue, all oil companies a red, etc..
> WordPress doesn't want anything to do with the nipples of the open source community.

Thanks for that image.
Here’s What Your Identity Sells for on the Dark Web
Water can be treated as a market asset and companies will pump as much as they can depleting the supply for everyone else in the region (this is already the case some places).

In order for it to work out there needs to be a ton of regulations in that market, but once the market is set, they will just lobby it for decades until regulations are essentially gone.

People like the CEO say that it should have market value, because they are the ones that can only see value in markets. The rest of the world does not need to but a price tag in something to see value in it. Also, habitats all around include millions of plants and animals without a dime to spend, a water market will see no value in catering to them, we should just trust these companies with abysmal track record to ensure habitats are maintained?
WHY does codeface not show ligatures? They only have them in the mono space example?

Hack is my second favorite, but just the last year I switched to Fira Code: monospaced font with programming ligatures.

I like the zero being a slash as opposed to a dot but the rest is spot on for me.

https://github.com/tonsky/FiraCode#fira-code-monospaced-font...
You're right. It seems I did remove the space. When I put it back in it doesn't print anything.
Memory Editing Technology
To the point that people used GC enabled systems programming languages to write full OSes[0], but as Joe Duffy puts on his last keynote, winning prejudice is an uphill battle.

[0]- Done at Xerox PARC, DEC/Olivetti, ETHZ, Erlangen, MSR
This to me is the nightmare scenario. Well one of the two, the other one being that a developer of an obscure library I use has their password to PyPI compromised and a bad actor uploads a backdoored version of the library.

Fundamentally, the reason this is different from how thinks like Linux distos work is because Linux distros have maintainers who are in charge of making sure every new update to one of their packages is legit. I am sure you can try to sneak malicious code in, but it isn't going to be easy.

I am not advocating that PyPI (and npm) adopt the same model. That would be too restrictive. But maybe just showing the number of downloads isn't the best way to assure whether the package is legit. Perhaps some kind of built in review system would be nice.
> "...military-industrial masters"

Who are these "masters" if you had to elaborate? CEOs of Raytheon/Halliburton/General Dynamics/Lockhead Martin/etc?
https://pypi.python.org/pypi/urllib3
https://thegeekygaeilgeoir.wordpress.com/2017/09/06/even-rac...
This is something that would have sounded like a conspiracy theory if not reported in a mainstream publication. Amazing what just a little corporate cachet can do for a story.
I think it depends on where nnutter lives, and it also depends on his social circle. Since nearly none of my friends have TVs, I can go months without seeing an ad. (I myself do have a TV, but I only watch public broadcast channels that do not have ads except for their own programming.)
A Year of Instagram Stories: Launching Is the Easy Part
I was using proportional fonts for a couple weeks. A problem I ran into was that in coding styles that I typically work with, you need to align stuff with spaces to match some artifact on a previous line (e.g. an opening paren of a function call). At that point you pretty much need the space to be as wide as any non-whitespace character that might appear there, otherwise things end up looking wrong. This is what basically killed it for me. a) I don't like how it looks. And b), I don't want to have patches bounced over formatting trivia that I don't notice.

(Edit: typos.)
I wonder if it's worthwhile having a check that compares closeness of the name to existing popular packages and if so does some extended vetting.
Comfort can hurt. Automattic is not comfortable with the Facebook license and you say it like it's a baseless FUD but even if they get a 1% chance of going to court against Facebook then they rather not take that risk of litigation anytime in the future. It's a business decision for the long term as rewriting doesn't cost that much for them.
Japan’s SoftBank Wants Big Chunk of Uber, but at Steep Discount
Curious to know something similar happening for Scala.
It's not just proportional. I've used Input Mono as my goto text editor font for many years now.
This library helps you generate some humorous tricks for users with ease
Yep, same here, never looked back.
North Korea fires second ballistic missile over Japan
GraphQL with spring boot
How exactly is it racist, care to elaborate?
Down $20B, Boeing Stuffs Pension Fund with Its Own Shares
Which is why we grey beards just wait for the caravan to pass until the dust settles, then we get back to action and recover our dues.
>Today in Western languages the same thing happens with blue and cyan. Italians will think of cyan (azure) as a colour while the French see it as a shade of blue, for example.

The same thing happens in Japanese. When I describe something that's light blue as "ao," I will invariably get a confused look and a "You mean mizuiro ('water color'), right?"

But to me, a native English speaker, it's still blue.
UPDATE (& TL;DR & Introduction!): Killing Font Book between operations avoids all sorts of errors and weird display issues you'll get if you try to install multiple font files in a single 'session'. Open Font Book from fresh, locate font files in Finder, drag them into it and you'll do everything in one operation, and it will even update to show you what's happened!

> Like what?

Errors about duplicate fonts. Several occasions where dialogs open and close immediately, indicating some kind of problem, but not sure what. Even after going through the "yes, please do really install this font, even though there are 'duplicate fonts'", nothing seems to happen sometimes.

I've managed to install three of the fonts (font variants?) — Regular, Bold, and Bold Italic — but Italic refuses to install altogether.

> How is that in any way "horrible"?

Having to open four separate font files, then click a button each time to actually install them seems like a pretty tortuous process — I'm grateful it was only 4! It would be a LOT nicer if I could just select the files, right-click and choose "Install font(s)" and have it all done in a single step. That's totally aside from all the errors.

Having said that ... pro-tip: drag-and-drop. I always forget that drag-and-drop is sometimes the 'first class' way of doing something on OSX. So the quickest way, I think, would be:

1. Open 'Font Book'
2. Locate files in Finder
3. Drag and drop from the latter to the former

This process finally allowed the "Italic" variant to be installed. I'm assuming it will work with multiple variants at once; I would test that, but trying to remove the family/variants in Font Book just gives me a 'no-op' (after a confirmation dialog).
same here!! I tried them all, MOBAXterm is the best.
In a bid to make mobile shopping even more intuitive, Shopify launches Shopcodes
No, that's not what the article says. It says the fears around the license are something they do not want to have to address within their ecosystem. Wordpress itself is comfortable with the license. There is no fear of going to court.
Coal unions have executed non-union shippers and started shootouts during union strikes where I'm from, back in the 30's - 70's when the town was a coal town. It's anecdotal I know, but it always colors the discussion of unions in places like Appalachia. Also the violence has gone both ways, the government at one time wasn't above plying the strong arm of the national guard against unions.
McNulty: If Snot Boogie always stole the money, why'd you let him play?

Man On Stoop: Got to. This America, man
# Welcome Here! :)

# just toy, no harm :)
What You Need to Know Before Creating a Multilingual Online Shop
> kill and restart Font Book

Thank you! TBF to OSX, it at least says something about general reliability that I didn't even consider this would be necessary.
Thoughts on the Products Announced at This Week’s iPhone X Event
Would be interesting to hear how they arrived at the RethinkDB/Elasticsearch combination over Postgres at the start of the project. It doesn't seem they lost any features after the transition. Was something lacking in Postgres at the time of initial implementation?
The article is not very good, with both factual mistakes and missing important sub-properties

> 2. Array helper functions

`map`, `filter`, `reduce`, `some` and `every` were actually added in ES5.1. Only `find` and the unlisted `findIndex` come from ES6.

Meanwhile Array.from which was added in ES6 goes unlisted.

> 3. Arrow functions

While the reduction in definition boilerplate is great, missing is the very important (and convenient!) fact that arrow functions resolve `this` lexically (as a normal variable rather than a special case).

> 4. Classes

Would have benefited from mentioning the most convenient feature of classes by far: the `super` proxy to calling a method of the superclass on `this` (most useful with constructors): the ES5

<Superclass>.prototype.aMethod.call(this)

becomes:

super.aMethod()

which also helps a lot when moving methods around.

> 6. Template strings

Missing: you can "tag" template strings to invoke user-defined functions on the contents and do intermediate processing and interpolation yourself e.g.

sql`foo ${bar}`

will invoke `sql(['foo ', ''], <value of bar>)`.

> 7. Default function arguments

Missing note: unlike e.g. Python, default arguments are dynamic and sequential (similar to let<star>[0]) so you can define a `function foo(a, b=a)`.

> 8. Rest and spread operators

Actually the opposite for once, mentions that rest and spread operators can be used with object content, sadly that's currently a stage3 proposal, definitely not part of ES6.

> 9. Destructing

Missing notes:

* the destructuring is recursive (you're not limited to a single level)

* you don't have to "[assign values] to variables of the same name as properties" when destructuring objects:

let {name: a} = a_call();

will bind the value of the property "name" to the "a" local variable.

* you can provide default values to the destructuring pattern e.g.

let [a, b=3] = [1]

this can be combined with renaming for object destructuring

[0] http://docs.racket-lang.org/reference/let.html#%28form._%28%... can't use an actual star there because HN comment formatting remains a complete trash fire and thus decides to emphasize half my comment and swallow the mark of the first list item. And still does not print let∗.
> If you are implying there's any doubt about Russian involvement in hacking aimed at the US election, there really isn't any credible doubt about that.

Try posting facts then.
Requiring comments be attached to a real identity invariably does the exact opposite of what it intends to and lowers the quality of commentary. Sure, some people use the cloak of anonymity to perpetrate abuse, misinformation or low-effort participation, but the alternative has a chilling effect on potentially thoughtful commenters who don’t want to become targets.

It doesn’t really get rid of the anonymous abuse or disinformation either, because there are plenty of bots using fake social network identities out there.

The real people that do remain invariably put about as much thought into their contributions as they do into the long-term consequences of associating those comments with their real identity, or are simply so angry or strident that they don’t care.

Without real identities I would encounter islands of reason adrift in a sea of inanity. With real identities, I tend to see the loud and ignorant shouting at (or alongside) bots.
"Communication and presentation matters" is an excellent lesson to send everyone
> Because all investigations from the three letter agencies agree on it.

You may want to verify this.
How First Amendment Battles Are Shaping Up in the Social Media Age
> It's not like it's reading external input and compiling it.

Some games, because of bugs, allow exactly that. User input might be directly executable. That means that static compilation cannot be achievable in general. Either you have different behaviour in the event of such bugs or you have a full interpreter to fall back on.

[1] https://www.polygon.com/2014/1/14/5309662/bizarre-super-mari...
Driver Talent Pro 6.5.53.158 Full Crack Patch Latest
> I you're not a lawyer then your assumption that it's a perfectly OK patent grant is baseless and meritless as well.

...as would any non-lawyer's claim otherwise. Do you call them out the same way, or are you selective about where you apply that rule?

In actual fact, it only takes a tiny bit of familiarity with patent law to see that a revocable grant can't be worse than no grant at all. Many engineers have such familiarity. If you haven't triggered the revocation clause in the PATENTS file, you're strictly better off than with plain BSD, because you have all the rights you would have had before while Facebook will have given up the right to sue you first (for patent issues related to your use of React). If you have triggered that revocation clause, you're exactly where plain BSD would have put you to begin with. So you're either better off or exactly equal. Never worse. Anyone who claims otherwise either hasn't actually read the PATENTS file, doesn't have even minimal familiarity with how the law works, or is spreading FUD.
Thanks for the feedback, Marcus. I'll look into the issues you mentioned.
urllib and urllib2 are built-in for Python 2, and were merged and reorganized as just urllib in Python 3. urllib3 is a third-party module.
Can someone point me to studies that model the effect of replacing all fuel-based vehicles with electric counterparts on availability of things like rare earth metals? I'm all for electric cars and such but have been wondering about the consequences on earth resources since current battery tech is not exactly environmentally-friendly either afaik.
I'd imagine that the fact that the vast majority of the rest of the world uses QWERTY makes it quite useful for the Japanese and Chinese to also use QWERTY despite the minor loss in optimal typing layout.
However, they do say:

> leaning heavily on Haskell in order to fill in some of the gaps quickly.

So it looks like they had to do some work to cover some features from rethinkdb/elasticsearch.
Top 6 Reasons Live Chat Is Key to Your Brand’s Success
How Ridiculous This Year's CES Will Look in 2034