skysight-inc/HackerNews huggingface dataset:
Can I butt in with an aside about how nice F#'s physical unit type handling is? Seriously, that's some nice design right there.
Ask HN: Django REST or Django?
For context: I'm very new to both coding and taking on my own side projects.

I'm in the early stages of making a website (read planning it out and finishing tutorials in Django) and I see a potential problem on the horizon with my current plan.

The current plan to build and deploy an MVP which is literally just an index of links to Youtube. However all the other things I want to do with this site will end up requiring some heavy modification of the DOM which will probably have to be done with a library like Angular/Vue/React. Should I build my MVP as a Django REST backend coupled with an Angular/Vue/whatever frontend to save time later when I go to implement additional features or should I rush to an MVP by just using plain Django and deal with the headache of maintaining the MVP while designing the bigger system?

Any advice y'all could give me would be much appreciated, I know this forum is web developer heavy so I thought I'd ask here first.
Oddly enough it would have been super awesome if dolphin scientists were using sonar to attack humans. Ah well that one stays in the realm of fiction.
>75,000 MPH at atmosphere contact.
In more detail:

For the original FirefoxOS security model, sicking and jlebar rototilled all the security checks in the codebase to switch from comparing origins to comparing (origin, appId, isInMozBrowser) tuples.

Later on, for the eventually-abandoned FirefoxOS New Security Model (NSec), we needed to pass around a signed package id instead. So the options on the table were to rototill the codebase again, or to do something out of band with the cookie service (sicking's proposal).

When I found out about this I wasn't particularly happy with either option, and used my sec module ownership to insert myself into the discussion, and push for a more general approach (i.e. OriginAttributes). Sicking was initially kind of peeved about this, because they were on a deadline, but eventually came around. So we did one more pass of the rototiller to switch everything from appId+mozBrowser to the general and extensible mechanism.

Years later, FirefoxOS is no more, but OriginAttributes are still used to implement Private Browsing, Containers, and First-Party Isolation. Here's to general/reusable solutions!
What does Paul Graham write about?
Typescript has a config option (allowJs: true) that does exactly this -- types where you want them, regular ES6 when you don't. I type things like component Props/State, reducers, global state, and domain models. For everything else I tend to use regular, idiomatic JS.
If it’s plain text maybe but I’ve found as soon as a syntax highlighter or any parser has to run on it it locks up.

2-3mb JS files brought it to a crawl, and I didn’t have many plugins btw.
>> Free Basics puts no obligation on its users to visit or use Facebook at all.

Here is a list of possible ways Facebook can triangulate information about people who are not active on Facebook even without controlling access to the internet:

1. User telemetry based on your browser when you visit any page which has a Like button

2. If you have ever used WhatsApp and deleted it, seeing who has your phone number on their contacts list

3. If you have ever used WhatsApp and deleted it, seeing who has your phone number on their WhatsApp app

4. Being tagged in a photo (that your friend captured) based on a Facebook account which you don't even actively use

5. Seeing where they tagged you if that info is easy to infer from the image's metadata

6. Seeing where they tagged you based on the check in location

7. Seeing where they tagged you, based on the comment they might leave on the photo

8. Seeing who has your email address on their contacts list and associated a name to it

9. Inferring your name from someone's contacts and matching it to the phone number so that

10. They can check if a second person has the same phone number or same email address under the same name or a small variant.

11. Learning about life events which concern you based on other people's WhatsApp conversations about you since they usually mention you by name

12. Text mining of WhatsApp conversations for a list of names which they don't yet have in their database and possibly inferring the relationship type

Now they basically have a "shadow profile" of a (person's name + phone number) even if that person has never gone near Facebook their entire lives. If there are additional details about you in someone else's contacts, imagine how much easier you just made it for Facebook.

12. If you agree that the shadow profile is fairly easy to create once the apps controlled by FB (FB, Messenger, WhatsApp, Instagram) reach a sufficient critical mass, you probably understand that they will collect every piece of information they can and associate it with the right shadow profile.

My guess is, I don't cover a fraction of the techniques they use already (simply because at a certain scale, I bet they identified even bigger patterns that we cannot even see), and the list is already too uncomfortable for someone who doesn't want to have anything to do with Facebook. As a programmer, you probably know that most of these are trivial to implement. Your problem will be "too much noise", definitely not "too little signal". No worries. An eager horde of people are everyday helping Facebook to cut down the noise and increase the signal to noise ratio of their shadow profiles.

Now, imagine what happens when Facebook becomes the primary means to access the internet for an entire region.
But I think therein lies a horrible truth: Manning, her crime, her release, and everything that flows from that, has been turned into a purely political issue. What might have happened had it never entered the political arena? Perhaps a shorter sentence, confinement to a hospital instead of a prison, better care for her psychosis, an assortment of things could have been better. Her commutation was the single, greatest act of political f* you to America. Not even the pardoning of Nixon, or the failures of every single President since comes close to this level of politicization.
so the US propaganda machine has partially achieved its goal even on HN where people are expected (if I am not mistaken) not to take anything at face value.

More to the point, there were no credible investigations, "intrusion into power plants" was fake news, the FBI even hasn't up to this day examined the "hacked" DNC server.
I'm probably missing something here, but the document says that media autoplay is allowed if visitors keep visiting the site and interacting with the video player:

> The MEI score will be computed as is:
> If number_of_visits < 5:
> Return 0
> Else
> Return number_significant_playback / number_of_visits

https://docs.google.com/document/d/1_278v_plodvgtXSgnEJ0yjZJ...

Doesn't that mean some of the worst sites affected by this might still manage to get videos and sound files autoplaying?

Because if you go to a news site, it's quite likely you may end up watching a video about the story.

But at the same time... you don't want the background ads to automatically play, nor do you want said video playing by default on return visits.

Yet this system seems like it may allow the latter two things to happen.
> The takeaway is that limiting predictions aren't useful.

Er ... isn't that rather limiting?
Facebook's Anti-Semitic Ad Categories Persisted After Hate Speech Crackdown
I would definitely read that as a scifi novel
This is a great article, it gives plenty of code examples and explains everything really nicely.
I'm new to Go but it seems like a really well thought out language that doesn't just cram features in there for the hell of it.
Ugh, that sounds dreadful. Doesn't this prevent anyone besides YouTube and a handful of other sites from establishing themselves as video hosting sites? Besides that, adding another hard-to-predict layer to the web is just... bleh. We shouldn't need heuristics to make the web a nice place to be.

Boycotts on website should start becoming a regular thing. I simply don't return to websites that pull shenanigans like autoplaying videos on scroll. If I must, I use archive.is so that crap gets stripped out and I don't give them a genuine hit.
> There are a lot of sites (e.g. Twitter embeds) where turning off autoplay also seems to break manually clicking play as well

Pretty sure this is by design, as Twitter wants that content to auto-play. Forcing a poor experience for people who use blockers and making us white-list their domain seems a suitable strategy.

It's something like Facebook chat in mobile mode. Facebook wants its cattle to install that spyware-ridden messenger, so first they disable chat/messenger in the mobile site (not sure they already killed it, last time I checked there was only a warning; need to create a new bunch of test accounts to check again). As people will fight the change by using desktop-mode in mobile (one of the best features of Firefox for Android), they have a incentive to make the desktop site intentionally unusable in touch devices.
This goes against Apple's Human Interface Guidelines:

> Provide a full-screen experience. Make sure backgrounds extend to the edges of the display, and that vertically scrollable layouts, like tables and collections, continue all the way to the bottom.

I'd prepare yourself to have the app rejected for using this method.
This isn't going to be a problem in reality. Most people will not care about owning their own self-driving car, IMO. It will, in fact, be a waste of the owner's resources to park them, much like airlines do their best to keep their jets off the ground and earning revenue.

Ever wonder why Uber has a higher valuation than General Motors? This is why.
Since you're the editor, perhaps you could correct the caption on the last photo showing your Dad's friend John. "Left to Right" obviously doesn't apply to that photo.
"project gutenberg (wordpress editor redesign)"

That is a spectacularly poor choice of name.

https://www.gutenberg.org/wiki/Main_Page
https://wordpress.github.io/gutenberg/
SDC would not need parking close to the place they drop you of and if you could use the time you spend in the car to work that would mean people with an hours commute would arrive an hour later at work, and people with two hours commute would arrive two hours later at work. In effect rush hour would be stretched out through the day - and as somebody who goes at different times a day, that makes a massive difference to road usage.
I don't think it's a simple problem though. I want my videos on Youtube, Twitch and other similar sites to auto play, without having to click it manually every single time. We get into a whitelist/blacklist situation. The best way is to stick to one way, and allow users to fully unblock a site. Right now, it auto plays but you can fully blacklist a whole domain. I could also see it as everything is blocked and you whitelist Youtube. Maybe even automatically does it if you click play on a few videos.
chicken shit bastards.
> What are the chances that, as an MFA in Music, she has a rock solid background in mathematics?

Unlikely? There is no standard math requirement for music majors, and that's pretty well known.

> Would we be having this conversation if she had no degree? (Of course not.)

Yes, even more so! A chief security officer with no degree presiding over the security of a nation's credit data?! I mean, she's already under scrutiny because Equifax has been hit by three big stories in the past couple weeks demonstrating their absolute lack of concern for security: the breach, the "random pins", the admin/admin credentials.
For the first, you're always at the mercy of the whims of the mods for whatever service you're on. The difference with federated services is that you can move to or even set up a server with different mods. Can't do that with Twitter.

For the second, that's a limitation of Twitter. If you had 10,000 followers on a federated system, you could switch networks and your old followers could just re-follow you there. They wouldn't have to switch with you.
Just about half our marketing team knows how to write HTML and CSS. They learned it because they found out the developers who too backed up to get their landing pages and such done on the schedule they needed.

But those people also know marketing...

I can't imagine finding enough work for someone with just HTML and CSS to fill a 40 hour week. Especially since most content these days is generated by CMS systems and WYSIWYG editors. And there is only so much work in boilerplate.

So to me the problem is not that they are not valuable skills but that they make up such a small portion of what needs to be done.

Although I'm sure at some other companies this is not true.
How does that work? Are they using CSS to render and format it?
Installing these fonts makes Font Book crash on my Mac.
I've only scanned the "how to build" documentation but from what I saw there is only information on producing a test network not joining the public blockchain? Is there a set of instructions for hosting your own "real" node?

(I've not read the white paper or other documentation so the info may be buried in there, I'm unlikely to find time for that in the near future though so asking out of "laziness" in case you have a quick answer to give)
"Everything else my desktop of 15 years ago handled just fine, with 256MB of RAM."

I hear this sort argument a lot. But I never hear of anyone doing it, that is working on a 15 yr old computer for a while. I imagine with Linux it might not be too bad.
That's interesting, but doesn't seem super relevant to end users. I'm not particularly worried about Twitter disappearing, but if I was I'd use the export feature to run backups.
The GigaBoot20x6 bootloader speaks a simple network boot protocol (over IPV6 UDP) which does not require any special host configuration or privileged access to use.

It does this by taking advantage of IPV6 Link Local Addressing and Multicast, allowing the device being booted to advertise its bootability and the host to find it and send a system image to it.

Uh oh. Totally insecure remote boot with discoverability. What could possibly go wrong?
If this shows up in some IoT device, trouble.
The two biggest differentiating features in my circles seem to be:

* less nazis/gamergaters/people who think it is fun to be assholes on the internet (unless you wanna go hang out on an instance that welcomes them, which is probably banned from federating to a lot of other instances)

* you can actually emit a paragraph containing a complete thought instead of a very simple sentence

Being able to hide the bulk of your post behind an arbitrary user-entered "content warning" tag is damn nice too.
Watching final coverage, I didn't notice anyone mention that the crash actually happened an hour earlier - speed of light being what it is, the signal being watched taking around an hour to arrive. Spent some time trying to grok the dichotomy while waiting for "signal lost".

https://10middletonp.files.wordpress.com/2015/09/watchmen-20...
I wish we lived in a place more like the America of yesteryear that only exists in the brains of us Republicans.

- Ned Flanders
Transaction costs are an insignificantly small part of what it costs to run an Uber or a Lyft. Most of their costs go to employee salaries (including developers and customer support) and hosting fees.

I don't understand what using a decentralized currency would really change. Uber or Lyft could very easily add decentralized currencies as payment options in their apps now. It wouldn't change anything about the fundamental nature of the business other than you'd have another payment option. They still have to pay their software engineers, etc.

As for this theoretical decentralized app, who writes it? Who pays to run the servers? If I have a problem with my ride, who is the arbiter?
There was no misjudgement. IPv4 addresses are still running out. Adoption of IPv6 has helped the issue. Some parts of the world are aggressively going IPv6 only. IPv6 adoption has seen a massive uptick in the last year. Check the google graphs.

Also some under-utilized IPv4 address blocks have been recently re-claimed. MIT recently sold off half of its class A to Amazon:

https://www.networkworld.com/article/3191503/internet/mit-se...
That's ME John, not my Dad's friend John. But yes, changing now to be clearer! Thank you!
Optics. Equifax has pretty clearly demonstrated that it does not care at all about security. There was the breach, then the news that their "random PINs" were just timestamps, then there was the admin/admin credentials for an employee portal. It's a pretty bad look.
Well people used to call Twitter microblogging. It was blogging, just limited to 140 characters, which a lot of people though wasn't a huge difference.
The difference is that one is a business and the other isn't. A landlord can deduct depreciation on the building and operating expenses that the homeowner can't.

And the homeowner pays income tax on the money used to buy the house.
I'd like to see what the FBI can learn if given access to the server, currently they have not been permitted access and all reports have come from third parties paid by the DNC. Similar third party accounts not funded by the DNC make claims that directly contradict the narrative portrayed by those who have been funded by them: http://www.zerohedge.com/news/2017-07-10/new-research-shows-...
It was indeed a different era.

Nowadays, people are editing photos, videos, recording podcasts, publishing their own books, all using tools that allow for more complexity than what any professional could do a couple decades ago, all without even having to read a single piece of documentation!
At my university it was the same, but this (second) class has become an optional elective that is cross-listed with the Computer Engineering major and no longer required. So, most CS majors no longer take it. The curriculum has "drifted" somewhat I'd say, to be a bit higher level, and perhaps more useful to people who go on to be developers at the application level.
Then there's other keyboard layouts. (Dvorak reporting in!) :-)
https://news.ycombinator.com/item?id=15254291
I'd be careful reading it: Kuhn is excellent at building narratives, and what is more narrative friendly than revolution? In reality science is far more messy than he acknowledges.

Unfortunately while I think many of Kuhn's observations are interesting, I'm confused what you think scientists might learn from them. After all, the work in question is science, not philosophy of science, and frankly it seems a lot of time like the latter gets in the way of work (see: Popper's radical empiricism). Poetic? Sure. Useful? Difficult to see how.... Mostly his work seems useful for bolstering the credibility of speculative Popular Science articles (or Axios in this case).
The article does not discuss it indeed, but an essential part of behavioural conditioning is to have discussions about why sanctions were applied so that the parties involved do not just blindly fight the system. They need to be part of the system, so if at that time they can argue that the rule is unjust then the rule may be changed or removed.

In the article it was said that although Shep was told to get ready for bed, he said he would read for a bit instead and this was accepted as there was a good reason for it. I expect that this came out of a previous discussion.
Agreed. StackOverflow could make a lovely book with these kind of high quality answers. Stuff's gold.
For security, you should call outbound webhooks using a server dedicated to that purpose, where the main server and webhook caller are connected through an async message passing system such as RabbitMQ. That way you can maintain strict firewall rules on the main server.
> This seems to be blurring a use of "design". Not all design is chrome on top of things.

You're thinking of syntax as chrome. It is more than that.
You just have to keep in mind that you see the highligts of your friends lives, but the average of your own.
So then if you lose a connect to the first server you lost all your servers?
When you have a continuum, most distinctions are to some extent arbitrary, and the simplest distinction scheme is the dichotomy.

This line of thought leads me to wonder just how fixed these categories are. Given two languages, each with two words for colors, such that one word in each language would be used for things we call red, and the other for things we call blue, do they agree on where the boundary lies?
https://news.ycombinator.com/item?id=15253781
Linguist
I think its a valid point, but perhaps throwing these things into a crop was just "an example" illustrating how inexpensive these things are? The researchers aren't necessarily interested strictly in agricultural applications.
The best thing about Iosevka is that it's configurable in so many different ways. You're not limited to a configuration that the author of the font thinks to be the best. The attention to details in Iosevka is also notable (like the alignment of special characters). Iosevka is very balanced: it looks good both in a source code editor and a terminal.
Only one Singaporean is fit to be president
good point, something which is not noted when people talk about such things :)
https://news.ycombinator.com/item?id=15253781

https://news.ycombinator.com/item?id=15227021
I'm not convinced by the Australian farmer.

Microclimates are a thing. Water is not evenly distributed across any sizable plot of land. Being able to tell where the water is (or more importantly isn't) can surely help deploy resources more efficiently.

But, I'm a desk jockey, and hope to never, ever be a farmer.
> In Our Kids: The American Dream in Crisis, social scientist Robert D.
> Putnam describes how, beginning in the 1980s, “the dominant ideas and
> social norms about good parenting have shifted from Spock’s ‘permissive
> parenting’ to a new model of ‘intensive parenting.’ ”

I wonder how much of this is a consequence of increasing economic disparity in the US. In the 70s, there were middle class jobs a-plenty. As long as your kid wasn't a total degenerate, they could probably find a decent job to sustain a happy middle-class lifestyle when they got out of high school.

Now, there is an increasing arms race where more and more over-educated and over-training young people are competing for fewer jobs that pay less. The slope of the income distribution is getting steeper and steeper. Your kid is going to enter a job market with fewer opportunities and less pay, meanwhile they will be surrounded by tons of other kids all feverishly competing for the same jobs.

If your kid doesn't have the right grades to get into the right school to get the right degree and thus the right internship, it's very easy to slip into poverty (and the crippling student debt on top doesn't help).

The anxiety around parenting in some ways reflects a rational observation that the world we are preparing our children for is not as welcoming as the one we grew up in.
> All this does is force me

If you're a programmer now, you're a secondary audience to the masses of people who will program in the future. If the language is going to have the most impact, what they prefer supersedes what you (and I) prefer.

> If there's a good reason for the difference, by all means, go for it.

Of course and agreed. Nothing should exist without reason. Antoine de Saint Exupery etc.
Click to play.