skysight-inc/HackerNews huggingface dataset:
Despite the slow web performance I find web apps open much faster than their iOS app equivalent. This is despite the fact that iOS apps have 100-200MB downloaded in advance while the web loads your binaries and assets on the fly.
The "boring" comment isn't meant to denigrate people's work. Rather, it should be taken as a complement for a job being done well. In fact I've heard the "boring" comment from a couple RH employees myself. So, I think they understand what is being said, rather than taking it in a derogatory manner.
You need to get over this infantile faith that tech is a meritocracy. It’s not, and it never has been. That’s a comforting and self-serving myth we keep telling ourselves.
> But meritocracies sometimes need to take a hard look in the mirror and admit cognitive biases

Getting closer to a meritocracy implies weeding out cognitive biases already.
>Most web apps are built in languages that don't have buffer overrun problems.

This is a very dangerous assumption. The interpreters you use have not been built with security in mind.

Go take a look at PHP changelogs for example.
> "the microsoft office suite for instance slows down every generation despite only having minor improvements and not actually being that different now than from 95"

I can't comment on most of the Office suite, but Excel evolved quite a bit since 95. Tables, PowerBI, Apps for Office, etc... If your needs are basic enough then even VisiCalc will do the job, but new features do make an impact for more demanding users.
There are also legitimate issues being brought up in other political posts but they have been banned anyway.
Installing dotnet for mac command line
Hey guys. I'm not sure this is the right place for this kind of question but I'm trying to figure out how to install dotnet for the mac command line. I've tried brew installing the command and installing the command from the microsoft website but that doesn't seem to install it in the command line either. Has anyone installed dotnet for the mac command line before? How did you do it?
Which popular games are the most mathematical?
Everyone has a different definition of what's good and what's bad about the web. A lot of smart programmers seem to think almost all software is bad. Probably all software that is actually used is not as good "as it could be." Any evolutionary process is going to be like that.

HTTP and HTML were absolutely not designed for many of the things they are used for today. A bunch of really smart people probably could come up with a much better solution for modern usage, and lots of them have tried. But the web has too much inertia (the users are there and don't care about these problems) and, as you say, it more or less works, or can be made to work.

It does seem inevitable that it will be superseded eventually, but how far off is that?
Sounds like you want the capabilities of a tool like Mathematica, MathCAD, or Maxima at hand in your document editor. This part I understand, you would actually DO the math and document the train of thought as you go.

You also want to be able to define subexpressions and reuse them as needed. Is that correct? And you don't want to define those ahead of time? This sounds like the math equivalent of a lazy programmer that wants to use goto and highly unstructured coding practices. You want to write arbitrary expressions and then pull parts of them into other areas of the document without defining them individually. At least that's what I got from your comment.

How about a nice math-document editor with a mode where expressions can be seen as an assembly of previously defined items. Then you could right-click on one and select "go to definition" from a popup menu. That's how the software people do things these days. But if you want to use non-math aware text editors for writing math papers I fear you're never going to get what you want.

TL;DR my impression is that poster wants a very sophisticated math-aware document creating program that has a sort of development mode and display mode. I like it, but am not aware of such. I could also have totally misinterpreted the comment.
Gay terrorists
No certificate validation in "Test A".
Is it? For who?

Do you think people's data would be more secure at the border if

- You kernal-hacked iOS so that it booted into a vanilla account upon entry of a certain passcode, and encouraged people to install your hack from GitHub, potentially borking their phones

- People couldn't be compelled (or face being denied entry) to allow search of their electronic devices

?

What about trying to do everything via a VPN and spoofed UA strings vs. PII being banned from sale, heavily taxed, or a meaningful opt-out existing? Or even just DNT having a legal basis?
Random sampling wouldn't work because it is the essence of cheese/game-breaking to go into rare or weird edge-cases and parts of state-space. Imagine a broken fighting game where you could win by simply executing 'upper block' the entire game; random sampling will be exponentially unlikely to sample a game with all upper-blocks. But if you used a mechanism like self-play reinforcement learning to explore the game state-space, your agents might autonomously discover game-breaking strategies on their own.
Where did I say that it was? I'm saying a meritocracy is a goal.

You also gave nothing to back up your assertion, but again, I'm talking about priorities.
Often for security questions like "what was the name of your grade school" or "in what city was your father born" I'll give intentionally wrong answers for the exact reasons you outlined.
The POSIX definition of a "line" is "A sequence of zero or more non- <newline> characters plus a terminating <newline> character"[0]. I don't think it's counterintuitive at all for POSIX utilities to respect that definition.

0. http://pubs.opengroup.org/onlinepubs/9699919799/basedefs/V1_...
> Programs in the 90s were written in C and C++. C is impossible to secure. C++ is impossible to secure.

Back then the compilers sucked. They would take complete crap of code and still it would work. They were like browsers are today. (from my experience from going through one old MUD code)

Today the song is different. Not only will the compilers warn you of many things, there's even tools for static analysis (and dynamic). So the argument that C (and even the more complex C++) is inherently insecure holds much less weight (just go run old code through a static analyzer, or a normal compiler for that matter).

That said there's only one way to write a "secure program", and that is formal verification.

People that talk with a serious tone should back up their claims, at least that's my opinion.
NATO Military Build-Up in Eastern Europe
I disagree. I would struggle to get many senior dev roles in companies due to gaps in my knowledge (e.g. TDD, Agile or whatever PM style they use). As a freelancer/contractor however I can pick roles that only require skills I'm very good at and can therefore charge senior rates.

NB: This is if you were defining junior/senior based on pay. Hard to tell from your comment if you were.
That doesn't make sense.

Obviously nobody is going to be typing length prefixes manually, so our tools are going to do it for us.

Now we're back where we started where you accidentally inline user content as HTML, except now HTML has the added cruft of someone's HN comment solution.
Is sensitive voter data being exposed by the Catalan Government?
Women in the United States do not have a universal right to health care. Even ignoring affordability, many localities have made it effectively impossible to obtain health care services that are related to reproductive health care.

If these services were a right (even at the level of "you have a right to purchase these if you can afford them") that practice would be illegal and perhaps even unconstitutional.

And this does more than affect women seeking abortions. Many women with hormonal regulation issues cannot get the care and medication they need because access to medicines which are also birth control is not a right. Largely because of religious objections.

Meanwhile men have an unchallenged right to vasectomies. Feel free to correct me, but it appears to be legal and obtainable as a procedure in every state.

We could also point to evidence that there is a practical lack of rights to fair trials in sexual assault cases, but I'll leave that to someone else.
It's worth remembering that in the late 1990s, as Microsoft was facing its own security crisis and everybody hated the Wintel monopoly and how bloated Windows had become, several people put out calls for new systems to replace Windows. This was the era of Java applets, of Linux on the desktop, and of cross-platform widget libraries like Qt and WxWidgets.

What we actually got instead was the Web.

And the reason we got the web was because it was never conceived to be an application platform, and Microsoft crushed the only company who was calling it as such (Netscape) and declared victory, and then were caught completely unaware when new challengers like Google and Facebook sprung up and adopted the web for what it was and then totally ate Microsoft's lunch with it. By not looking like an OS, the web was able to differentiate itself in consumers' minds and not force comparisons to a much bigger, more mature platform until it was so entrenched it was impossible to make go away.

If you want to build a replacement for the web today, your first priority should be to think of something that millions of people will use daily. It can (and should!) be really simple initially - the Web was first used for sharing scientific papers, and then for creating WebRings of band fanpages, and then for porn, and it took 20 years or so before full webapps became viable. But thinking about it from the perspective of how you make a secure, performant, maintainable programming environment for developers is exactly the wrong approach. History is littered with projects that do exactly that and fail to get anywhere.
"Hiring because someone is <insert underrepresented group here>" isn't the goal, IMO, and I think it sounds like your sister's career advisor did her a disservice by describing it that way. I also don't think her career advisor's POV is true, FWIW.

As a woman in STEM, I don't want someone to hire me just because I'm a woman. I want someone to 1) think I'm awesome at what I do, and 2) by the way I happen to be a woman. But I also think it's true that if 2) is a fact about you, it's harder for you to prove 1) than it would be otherwise, and that's not right. My belief is that the reason for encouraging diversity initiatives are that there are lots of talented women (and other minority groups) out there who are being overlooked but deserve to get noticed and hired, and the goal is always to surface talented people to hire, women or otherwise.
I am participating in a peer-to-peer search engine based on free software, http://yacy.net. But I am not sure it can save us from NSA... We have to take political steps against them anyway.
There where webapps being built before gmail. We did Ajax-like things in 1999-2000. But gmail was possibly the first slick implementation.
Your post actually argued we should introduce cognitive biases, and hire unequally.

Framing doing that as supporting gender equality is the Orwellian doublespeak that people are starting to object to -- you can support diversity without supporting hiring on the basis of race, gender, etc.
Objects of Art; Objects of Property
If you can say, “the next 450 characters are plain text and should be rendered as such”, then even if the text includes script tags (or whatever), they won’t be parsed or executed.
https://en.wikipedia.org/wiki/Bow_Street_Runners is a fine read
With the reported performance of the A11 in the new iPhones, my speculation remains that Apple may well be moving to an in-house MacBook (Pro, and whatever) CPU/GPU system.

I don't know what that would mean with respect to system memory. IIRC, I read that the iPhone 8 comes with 2 GB of RAM. But, its predecessor, the 7, doesn't seem to be lacking, despite this.
How did gmail back then differ from hotmail or Yahoo mail? I was using both in the late '90s/early '00s.
>hardware wallets

costs $$$, whereas paper wallets are nearly free

>online

doesn't protect you if your computer is compromised
Slowly but surely we will realize that we are hitting a wall, and that no matter how far we push, or how much we incentivize, things will not change. The whole gender equality movement (and I do want to isolate this from all other identity movements) will eventually have to face the reality of women's choice, and what they choose perhaps will not be a satisfactory answer/direction the proponents of this ideology wish to see.

Norwegian countries are by far more "advanced" in their implementation and encouragement of "gender equality" at the work place, but they've eventually have had to come to terms with certain facts that betrays the whole "gender equality" narrative. You can't force women to choose. Not to mention why isn't there a push for more women working trade jobs like construction, plumbing, underwater wielding, etc. that in itself betrays the entire "gender equality" narrative.

There's a Norwegian documentary exploring this subject called "The Gender Equality Paradox" https://vimeo.com/19707588. It's a good documentary and suggest people view it.
So there are somethings I don’t quite understand about the pro-diversity argument. My understanding of the claim is that companies should want to have a diverse workforce because people of different backgrounds are fundamentally different. Different to the point that without inclusion of all their viewpoints you will fail to optimally solve some problems. It makes sense that if you don’t have enough women in tech your company, may fail to notice opportunities that cater specifically to women.
Still, if women, men and people of different ethnicities and races all have such fundamentally different backgrounds, why would you expect them all to choose the same fields in the same proportion? Furthermore, is proportional representation necessary to achieve optimal gains from having diverse viewpoints?
I, for one, am in favor of this experiment in less government.
It's a great example of worse is better in action: a technically inferior platform winning out because it's better at one or two things that enable virality, which is the only thing that matters when all the money is looking for high growth.

In this case, it's that webapps require zero effort and time from the user to get started with, and allow developers to get the closest to the "write once, run anywhere" dream than anything else (if you're doing a decent responsive design, you can even get a good experience on both desktops and phones with much less effort and no gatekeeping), so the development effort is a lot lower.

These two attributes make it really hard for a native app to compete on growth terms with a webapp, since it has a higher hurdle for users, higher initial development costs to target the same amount of users, and higher iteration costs to ship (and get users to install) a new version. It doesn't matter that it's hilariously inefficient; as long as it's just below the threshold where the user tears their hair out, they're not going to jump ship.
A valid certificate with a hostname matching the server's?

In this case, it's POST'ing the credentials before the certificate is validated.
It exists... it's just rare. I've seen it work first hand in most of my career at trading firms of all sizes.

Though, after leaving the field from extreme burnout (definitely something to be said there), I haven't seen anything that even remotely matches the meritocratic systems in the finance world. It's kinda bittersweet.
Casper went to war with popular mattress review site, then financed its takeover
Today on HN I've learnt about KaTeX, a math typesetting system for the web[1]. As I looked into it, I was intrigued by the names of the two authors, which suggested they are females. That looked odd to me, as I thought typically this kind of project is made by men.

The last time I had this kind of surprise was with Audrey Tang, the developer of Pugs, an early Perl 6 implementation. Turned out she was not born female.

So, just by curiosity, I looked into the authors of this KaTeX thing. To my amusement, I guessed well : at least one of them is a trans[2].

There are certain kinds of IT projects in which women are formidably rare. I can't quite put my finger on what kind of projects I'm talking about, but let's just say it's a case of "I know it when I see it".

At some point we should consider admitting that there is something, I don't know what, that draws men towards this kind of projects much more than for women. And that this thing, whatever it is, may be a reason for the observed gender disparities in the tech industry.

1. https://github.com/Khan/KaTeX

2. https://sophiebits.com/2017/08/26/hi-im-trans.html
I wished the author had taken a more developmental view.

Personally, I think the web as it currently is, has a few shortcomings, but on the whole I feel it can be refined into something quite brilliant.

Also, with regards to the title "it's time to kill the web app", I feel the web app has only just started to emerge as a solid competitor to native. To kill it now would be a travesty! I believe that soon it will replace a large chunk of native apps and the innovation we will see in browser APIs in the next few years will be quite remarkable. I think the USP for the web is ubiquity and uniformity - having a single, uniform platform that runs on any machine while being unlimited in the variety and nature of things it's capable of. There are issues to be addressed (security being the obvious one), but still, to me web apps are a step in the right direction, not the wrong one!!
100-epoch ImageNet Training with AlexNet in 24 Minutes
Most places in London accept contactless payments card payments now. Is this really much better?
> Most likely explanation? He feels threatened by actually-competent lady engineers.

Damore basically said that he thinks that women will never dominate tech no matter how much we try so I doubt that he is afraid of competent lady engineers taking his job. Instead I think he is afraid of losing his current work environment due to diversity programs trying to change it to fit women better. Currently tech caters mostly to men since it is mostly men who work there and not everyone will be happy when we try to change that.
The thing that sucks about this is that there is a spectrum of opinions on this issue, but we choose to categorize people as either progressive or prejudice.

I think the whole "men's rights" movement is bullshit. But last week I was in a meeting and recruiting was giving an update. At the end, our VP said "I don't want to waste our time interviewing anyone who isn't a diversity hire." This is illegal. This is 100% illegal.

The moment you say "hey, maybe we're doing something wrong with diversity hiring" you're suddenly sexist and racist. That's bullshit. We have headcount to fill and I don't give a fuck who you are. That's equality.
If the length is not pre-defined, the input has to be parsed to look for the closing tag. That makes your code vulnerable if the input tricks it into finding the wrong closing tag. But if the length is fixed, you don't have to parse it at all. That would avoid a whole class of vulnerabilities.
For example if they used AGPL software, it would be much harder for them to cheat. But you can never get 100% confidence.
> Write the ugliest HTML you want

Writing correct HTML helps people using screen readers because they can navigate a page using the descriptive HTML elements. In fact, writing correct HTML is probably the simplest and easiest thing to do when it comes to creating a web page. It's CSS that's needlessly complicated and unpredictable.
I find it funny that people are injecting alert()'s into the testing tool -- a vulnerability in a vulnerability report!

cf. https://leakyx.com.
You should move there.
Nice. Equifax also has our employment history, our tweets, our salary info, and sells us protection from the risk they create.

Love it, man. Pretty soon I won't have a job anywhere because of some erroneous data Equifax reports in their background check of me.

I guess my principal source of income in the future will be recycling cans!
"But he still can’t get a clear answer from the building inspector about what else needs to be taken care of."

This is local government at its finest. I deal with this on a regular basis. There are regulations with no clear code; when I ask for a specific contract and list of things to do, I get the runaround - but that doesn't stop them from telling me what I am doing with my building structures is not up to code.
Probably you spent several years at low level programming and you're fluid and productive in that world. In the other hand, I spent my last 10 years dealing with websites and I feel fluent and productive with the web, while I feel frustrated and overwhelmed by low level programming. The web is 20 years of quirks. Low level stuff is 40 years of quirks. If you want send me a message and maybe I can help you with learning web and you can help me with low level stuff :)
when basic fire safety regulations for places of assembly are followed

That's the problem. Not to paint a whole group with a single brush, but improvised bohemian sorts of facilities have a long track record of disdain for things like basic fire safety.
Thanks for the review, now that I've read this, would actually be good to see more reviews for different coding bootcamps
The irony of complaining that native, here portrayed as an alternative to a hopelessly multi-party web platform, won’t let you interject arbitrary parties between a link and its destination…
A vasectomy should not be compared directly to an abortion. It should be compared to tubal ligation.
>Women in the United States do not have a universal right to health care

wait, what?

>many localities have made it effectively impossible to obtain health care services that are related to reproductive health care.

oh. so by framing access to birth control/abortion as "health care", it's now a "health care" issue. that's a interesting way of grabbing attention.

>We could also point to evidence that there is a practical lack of rights to fair trials in sexual assault cases

are you talking about the men or the women in this case?
Also, web is the only widely used and non-corporate/centralized way of obtaining software on mobile. I realize that I'm not a part of big demographic, but on CopperheadOS, opting out of Google Play, I can get software 1. as APK's (only if devs make them accessible, and they come without auto-updates anyway) 2. by F-Droid (which contains only strict FOSS) 3. as web apps. Web sucks in many ways, but at least it makes more or less really _owning_ a _useful_ (flexible) smartphone a possibility.
C and C++ simply weren't designed with safety in mind. Even with a good compiler and static analysis, security-critical bugs will slip through the net that simply wouldn't happen in other languages. It's not so much a question of whether it's possible to write safe C, but whether it's natural or easy. C is unsafe by default.
This doesn't do anything for Bobby DROP TABLE injections, right? The whole thing is a user-supplied slug, there's no source of truth on how long a user's name is. Or am I missing something?
Why wouldn't it be enough?