skysight-inc/HackerNews huggingface dataset:
This still doesn't solve the problem of upstream security,
since it requires clients trust the Quicklisp repository
which is centralized rather than the individual package authors. The chain of trust is now bigger and more fragile.

Quicklisp works by periodically pulling packages from their official (or unofficial) repos into a centralized repository controlled by Xach. Xach then creates a Quicklisp "release" based on the set of pulled packages.

Quicklisp users end up pulling from Xach's repository rather than upstream directly.

This PGP verification update only applies to the second path: Quicklisp user to Xach's centralized repository.

In terms of actual security of Quicklisp, the situation is still not at all good, since Xach is using unsafe methods to pull code from upstream into his centralized repository:

$ git clone https://github.com/quicklisp/quicklisp-projects
Cloning into 'quicklisp-projects'...
remote: Counting objects: 9495, done.
remote: Total 9495 (delta 0), reused 0 (delta 0), pack reused 9495
Receiving objects: 100% (9495/9495), 1.70 MiB | 1.22 MiB/s, done.
Resolving deltas: 100% (1653/1653), done.

$ egrep -R 'git://|http://' quicklisp-projects/ |wc -l
125

There are ~125 projects in Quicklisp that are fetched over unencrypted and trivially man-in-the-middled protocols. Moreover, the centralized Quicklisp architecture is also vulnerable to hacking since it provides a single point of failure.

Suggestions that will provide actual security:

+ Scrap the centralized package distribution model.

+ Quicklisp acts as a metadata/added-value repository and keeps providing releases but the Quicklisp client ends up hitting upstream and not a central repository controlled by a middle man.

+ If upstream sources are insecure (git/http), flag and warn on install by default.

We had a lot of these (the important bits) with asdf-install. Unfortunately, when people started adopting Quicklisp because of the unimportant bits (convenience)
they threw the baby out with the bathwater and ended up compromising on the things that truly matter.

It's not too late to recognize this and pull back from something that will never be secure. My suggestions add up to adding the convenience layer to a model that's basically asdf-install that can pull software from multiple sources.
Where are they using Glamor? Trying to find some code in action but can't search on mobile.
Oh come on. Internet on phones wasn't invented with the iPhone.

In 2005 Palm and Blackberry both had phones with slow, limited but functional browsers. And they had had them since 2003 or so.
5 foolish reasons you’re not using Heroku
Granted. And I certainly think Stephenson is the weaker of the names I'm about to mention.

But I don't exactly remember stellar plots from Gibson (earlier works) or Ridley Scott either. The cyberpunk-influenced genre is essentially defined by everyday troubles, draped with techno-decoration.

Personally, that's one of the reasons I like it. The fusion of slice-of-life pedestrianism w/ in medias res pacing always came across as more believable than any grand opera.

Statistically, significantly rare interesting events are far more likely to happen to a janitor than the King / Queen of the Universe.
For training I've had to use some non-free data, but there's also some free stuff around. The speech from the examples is from SQAM (https://tech.ebu.ch/publications/sqamcd) and I've also used a free speech database from McGill (http://www-mmsp.ece.mcgill.ca/Documents/Data/). Hopefully if a lot of people "donate their noise", I can make a good free noise database.
Even the arbitrage is going to start failing. The housing is insanely expensive in India especially relative to the salaries. At some point most of the people who can leave will leave, because its hard to live there with the salaries they are are getting. You can make more in other countries and the housing difference would not even be that much different.
How much of that is America's doing? If the embargo were lifted, do you still think Communist Cuba would be failing? Its poverty is a result of America's intolerance for different political systems, not the result of those political systems themselves.
Discontinue to provide for i386
* Server classic img/iso
* Desktop live

Oh, they just mean 32-bit x86. I thought for a moment this was Ubuntu killing Linux on the desktop.
Earlier this year I visited Cuba and rented a room from cardiologist and his family.

He explained that the results of the Cuban system are mixed.

On the one hand, literacy and life expectancy are way up since the revolution.

On the other hand, cardiologists need to rent rooms to people like me to afford their simple life.

He recognized the deficiencies of their system, but he thought they were outweighed by the benefits.
Probably an unpopular opinion here, but maybe I'll watch Snow Crash now that I won't have to wade through the awful word vomit "let me prove how smart I am" never-ending-sentences that Neal Stephenson used in that book.

I've also read Cryptonomicon, and he dials it down a lot more in that one (although it's still present), and I found it a lot more readable.
A Tweet by @reactjs:

> We hope the new site will make it easier for you all to contribute improvements as well. We look forward to working with you to improve it! [1]

This was just the first phase of them moving to the new site. They understand that the docs can be better. Maybe instead of just complaining about them, you contribute to them to make them more "noob" friendly, like you are describing.

[1] https://twitter.com/reactjs/status/913797589421629440
Yes. It's propaganda.
>Medical degrees from Cuba aren't portable what so ever. Cuban doctors are nowhere close to what Americans expect -- don't get me wrong, they are perfectly fine performing basic medical services but don't expect them to know how to use any modern equipment or be familiar with modern protocols used in the West.

Haha, what? Look up ELAM. There are ELAM educated doctors living and working in the US today.
Build React app faster than ever before
You said in another comment "Just ask the people that have a fulltime job but still cannot afford a place to live if slavery has ended."

I agree wholeheartedly with that. Let's consider those people, and lets consider some other, mmm, how about Rwandans as well. Has electricity and the radio, cameras and engines increased the liberties of those people? I many cases a lot of those technologies have been used to remove liberties from those people, and sometimes to even kill them.

We have the technology now to meet everyone's need. Right now. We can produce enough food, we can build enough houses and supply everyone with enough calories. What technological things need to happen in order to distribute our resources accordingly? You'll probably say that's not a technological problem, at least not primarily, and I agree. This is the larger point I'm trying to get at and challenge others to address. I don't believe the most exciting future is one that requires enormous technological progress and when we focus on enormous technological progress for the sake of progress, rather than the sake of equality, well then we as a society continue to create a world the mirrors our goals: progress instead of equality.

>Until then, there is no real incentive for people to reduce inequality.

Sure there is, it's called compassion.
> the loss rate for rockets

I wonder how you constructed that comparison such that it seemed meaningful. I'm pretty sure the lesson when you look at the data would be "fly on a man-rated Soyuz, not a Space Shuttle."
I do wish they would remember some of the previous shortcomings, though.

In a way, I feel like security teams have it easy. Just look at whatever vulnerability worked 5 years ago on old frameworks. Solid chance it is easily exploitable on frameworks getting going today.
>Don’t blame capitalism because capitalism would never support the artificial cost inflation caused by government intervention.

What is capitalism other than the system of predominant wage-labour, private ownership of socially productive property (supported by the state), capital accumulation and class society? The idea that capitalism cannot be blamed for the fact that people are required to obey the whims of speculators in the market, to tailor their ambitions such as to maximise wage rather than to pursue enjoyment and the replacement of relations between people with relations between commodities is absurd.

Capitalism "supports" whatever will make a profit; in this case, student loans turn profits. Why would this system of student loans not occur under government intervention? There clearly exist private loan agencies.

To be clear I'm not speaking in favour of the Cuban system, so please don't assume that I am.
I once reported to a department manager who was an anarchist. He had pretty tight control structure in the org without any disregard to hierarchy.
Best WordPress Backup Plugins
x86_64 is still available... I don't know the last time I personally used an i386 image from anything.
I could write a book about this. I am pretty easy to find. Send an email to info at carve|systems dot com (no pipe) and ask for bitexploder and we can take it from there.
You are also ignoring the pioneer spirit. Don't forget that essentially built America. Imagine if no-one wanted to cross the Atlantic because it was too expensive or it was 'unsettled'?

People want to go to Mars. People want to try and live there. Scientists want to go there and learn, and explore.
The doctors are outraged at only getting paid 25% of their billing rate. Back in the '90s I worked with a lot of engineers billed out to customers by Digital at $200/hr who were paid less than $50/hr. They certainly didn't consider themselves slaves.
I agree, this is what I was trying to get at.
How the weak can move big things
> Well for starters it is clearly hyperbole. There is no way Yahoo particularly wanted to be part of everyones porn surfing for example - Tumblr notwithstanding. And you'd find plenty of other niches where Yahoo made no attempt whatsoever to enter.

It's a little hyperbolic. A realistic refinement would add family friendly and having a decent amount of marketing spend and/or user time spent.

> And outside of investment in Alibaba, their involvement in online shopping was marginal.

Yahoo! Shopping was a decent price comparison tool (and Kelkoo was an acquisition of the same in Europe), and Yahoo! Stores was enabling a lot of small businesses to sell online. Auctions was closed in 2007 (except in Japan), because it's hard to be the number 2 for auctions. Yahoo! Wallet was supposed to make it easier to buy things all over the web by storing your payment credentials in one (trusted) place. There was a person to person payment thing that I can't recall the name of.

> Yahoo! Personals was sold to Match.com

In 2010 -- way into the period where nobody knew what Yahoo! was trying to do.

> To me it's a statement that's basically carte blanche for whatever management happens to want right now, but it's certainly not providing focus.

Yahoo may have been focused on the directory initially, but at least by 1997 it was not a goal to be focused -- there was never one thing Yahoo did to focus around, other than the brand. Even the first archive.org capture from October 1996 has links to random things.

> And while I would interpret it as directed towards media, I suspect it did nothing to e.g. clarify to the company whether Yahoo was a media company or a tech company.

Does it matter if it is a media company or a tech company? The real answer is Yahoo is an eyeballs company. Premium services I guess were technology revenue, but services revenue was never expected to be a large portion of revenue for the company (although certainly it was for some verticals). Yahoo's tech stack enabled small teams to build vertical sites that competed with much larger teams. Yahoo's business stack enabled those small teams to sign large advertisers and content deals. Yahoo's network of sites enabled the small teams to start with lots of eyeballs, without huge marketing spends. Building compelling verticals gets the eyeballs to come back. Having a great internet search product that the eyeballs saw as a great internet search product would have really helped with keeping eyeballs.
Not sure what you mean by, "Apple's mail apps are the ones that load images indiscriminately"? I've been using Apple's Mail.app for years on many different machines with many different accounts from different providers, and I have image loading turned off. I've never seen it load an image when I didn't ask it to. Furthermore, it sounds like Gmail will download all images from a mail and store them on Google's servers, which means they're triggering the tracking from those email providers!
True, I actually use Postman in Chrome, forgot to mention that.
> What are you embedding v8 into exactly?

C++ code.

Yeah, I know...

> What happens if I figure out a buffer overflow in v8?

You report it to Google for $15,000. ;)

More seriously, though, this is something we've spent a huge amount of effort worrying about. There are many layers of sandboxing and mitigation, including an incredibly tight seccomp filter, namespaces, cgroups, ASLR, architectural changes to keep sensitive secrets away from risky processes, etc. But we still worry and will continue to add more safeguards.
What about capitalism America where you don't deserve healthcare if you can't afford it? People are dying because of this shit too.
>Ten years ago, so many Americans were making jokes about poor quality Indian code and Indian accents

It's hard to not fall into this trap in certain fields of IT. To the point it's almost not regarded as racist

Though as a Systems Admin, outsourcing is considered more of a joke than anything. The lowest bidding contractor wins, and the people they hire are absolutely abysmal.

If contracting companies did the same thing, but hiring a 100% "American workforce" (or British/Australia/etc), and they did an equally mediocre job, I'd suspect the derision would shift accordingly

There's a lot of smart Indian people. They're no "better" or "worse" than the rest of us. They're just a larger sample size that get tarred with that brush
I find all this interconnectedness fetishism troubling, it breeds interdependence and makes systems less resilient.
If you can lay blame for Mao's famines at the feet of Karl Marx, then why not assign the deaths of the 30 Years War directly to Jesus?
Except for the fact that the cost of collecting tolls exceeds the cost of collecting a tax on fuel [1]

[1] https://news.ycombinator.com/item?id=13817279
Scientists successfully conduct first inter-continental quantum video call
Longer exposure of components to radiation? Deterioration of fuel and fuel-touching components (wouldn't be able to get by on relatively inert monopropellant like on tiny probes, probably)? Best guesses.
Out of five vehicles built, two have been lost. I think you can find sources on those two incidents easily enough.
Sounds like the difference between (e.g. soft-knee) compression and a noise gate.
Esteban's Handy Dandy Guide to Protecting Your Credit
Yes but that is the difference between a loan system and a welfare system, you're not just paying for the services you received, you're paying for the availability of all services (including ones you didn't use) for all people.
Eh, it's a 25 year old well-known book, and the spoiler was "the good guys win".
"Most peered"?

Another day another dubious Cloudflare marketing claim.

Participating in the most IXs does not mean you have the most BGP peers. Simply participating in an IX does not mean that every other participating network at that IX automatically agrees to peer with you. Using AMS-IX as an example:

"Every member or customer at AMS-IX is in the position to peer with any or all other connected ISP's although they are not required to"[1]

And this is pretty standard across all IXs.

For instance Facebook might be far down that chart regarding the number of IX fabrics they peer at but if 99% of of the participants at those agree to peer with them there then they are likely "more peered" than you.

[1] https://ams-ix.net/faqs
Auckland to Vilnius is at least 3 flights and 24+ hours of flight time. Door to door is basically 2 days. Elon please save me.
I like to think of it as a reverse funnel system.
his is a function that returns a function, i.e. you'd need to call atLeastTwo(x)(); to get a result, yours is just a function. in es6 the equivalent thing to what he wrote would be:

const atLeastTwo = x => () => Math.max(2, x);
Fall of Hyperion is the other half of the book. Hyperion is only the first part... They only got divided because the book got too big.
I'd be a lot more likely to get it if it wasn't half-sized, actually. Gotta be impossible to type on that keyboard.
It worked, didn't it? The price of most manufactured things went way down while the price of healthcare keeps going up.

Besides, doctors are service workers. It's not like their jobs will be outsourced or people will start traveling to India to visit a cheaper doctor.
If you're not American you can go to resorts in Cuba. The staff will openly tell you.

It's possible that they are all lying, but the staff said it and the official gov welcomer said it, so it's likely true.
I think a lot of new precedents would need to be set to get a fraud conviction over an ICO. People trade Ether for tokens, not money. So they paid money for ETH, and got the ETH as promised. They traded ETH for SHT and got SHT as promised. Are these ICOs making any contractual promises that ownership of SHT gives holders certain rights, or obligates the team to do work? Because if I was doing an ICO, I sure as hell would not do that.

The SEC statement on this was “Buyer Beware.”
The Colony token sale would have been committing securities fraud
Why you think you should answer when you don’t have answer?

Verbal testing is different than spatial ability testing? Do you see the logic? Verbal testing is separate skills. And spatial skills are different too.

>The most

Completely false.
> the American (capitalist) system in which you need to pay huge amounts for education in order to have the mere chance to get a job that's above sustenace wage

You do realize that wasn't true until about 15 years ago, right? You should be asking what happened (hint: it wasn't Capitalism, it was the US Government's inflationary student loan program). Until the mid 1970s when the US Government nearly destroyed the dollar, you could pay for a Harvard education with a part time job. As recently as the late 1990s, the US had very little in the way outstanding student loans compared to the size of its median income (thus the epic student loans increase that everybody can't stop talking about, ie that's why it's a headline now, because it wasn't expensive before).

It should take you about 15 minutes to do some research and compare the price of a college education prior to the year 2000, versus incomes at the time. Pick any decade prior to 2000 and do the comparison. What happened after 2000? The Bush years wars & spending hammered the dollar, which also sparked the big commodity bubble.

College tuition & fees costs climbed 500% from ~1990 to ~2010. I wonder if that was spontaneously caused by Capitalism; you know, just out of the blue prices suddenly skyrocketed because of Capitalism; or if it was something the US Government did to cause it.

Another hint: how were college costs able to completely disregard income growth and all other restraints for two decades?
You're getting a little defensive here. IBM was one of the crown jewels of American industry. It was an iconic company in its time. The fact that it now employs more people in India than the US is something to ponder. It isn't so much about the merits of outsourcing.

Everything can be done cheaper by getting it done in another part of the world. Should it be? Sometimes the answer is yes, at other times, not.

Imagine for a second that 50 years from today (when say India is in a place where the US is today), many Indian jobs are outsourced to another country. Same thing.
All the recent Star Trek films and TV shows have been lazy prequels or rehashes of the early Federation days. I'd like to see some new Trek, such as transition to a post-scarcity society between ST:TOS and ST:TNG or something a thousand years in the future. I want to see the speculative fiction that Geordi La Forge reads. :)
I would be interested if it had the original hardware.

What are the challenges in producing new C64 (and NES and SNES) with the same hardware? I believe there are a lot of modern Genesis copies using the same hardware.
Camille Fournier - The Manager's Path: A Guide for Tech Leaders Navigating Growth and Change

This is a great ressource to guide you through your journey from dev to team lead, senior team lead and even CTO.

Pretty accurate description from someone who also started out as a dev.

I can relate to his experience. Once a dev I am now head of development overseeing 130+ people.
Note that the Instagram post is a little misleading. “Full Fare economy” is not as cheap as you think, it’s more like what you would pay for business class. So, maybe $3k for a transatlantic flight.
I didn't hit any limit, but since I don't have swap it would likely be oom kills.

The first part of my post is speculating, the second part I ran an arbitrary number and observed resource usage to allow extrapolation, but didn't hit a limit.
Interesting discussion of the legalities. They say they're not doing the sale until they have a fully functioning platform that relies on tokens to function.
I'm on H-1B now, and the process was extremely frustrating. I would love to see what you describe be put in place.
> requiring you to have a strong JS frontend background in the first place

Is that a high bar for a JS frontend framework? Serious question, as it doesn't seem that way to me. This seems analogous to saying "Django docs require you to know python" or "Postgres docs require you to understand how databases work".
For those interested in technically easy webhook consuming endpoint server check out https://github.com/adnanh/webhook
Loss rate for Space Shuttle program was 1.5%

135 missions, 2 lost.

http://www.popularmechanics.com/space/a6611/us-space-shuttle...
being parent of high-IQ children is quite tiresome compare to average IQ children. So you would need a big bang in term of school reorganization and support to parents.
Go out with your friends and have fun. You'll have plenty of time to spend coding in front of a screen :)
I did not recognize any of the game titles. I was around then but I did not realize how different the titles on the C64 were to those available on Sinclair and Acorn computers.

Is this a representative selection of titles from the era?

I would be very interested if there was any correlation between home computer brands and automotive brands. Commodore was marketed in the UK in a way that brings to mind Vauxhall cars (GM).

It is too late to do the data now but in my mind Sinclair was more like Ford UK and Acorn more like a properly engineered German marque, e.g. Mercedes.

Much like you would never put G.M. parts in a Ford but you could put a Ford or GM engine in some other car, e.g. a Lotus sports car, it seems that there were reasons beyond hardware limitations for why some titles never crossed over. Only Commodore users got certain sub-genres, e.g. those text adventure things.
Tech investors in US, Canada scammed out of millions, Ponzi op flees back to Chi
What am I missing that addresses the math?