skysight-inc/HackerNews huggingface dataset:
Yes, that could be an option if this was supposed to be a permanent script. However, I was trying very hard to finish the migration of the deals to the new template and the script was quite big and complex. I didn't talk about the script so that I could focus on this specific part that affected it, but the way some people are judging it's like I had put a lot of thoughts in this part of script. It wasn't the case. This was a minor part of the script. I hadn't thought about using nextval() to create the mapping table when I first wrote the script, so it looked like adding a temporary column to store the old id would be the simplest solution for the mapping problem. I had that gut feeling telling me it wasn't the right thing but as long as it worked, for a one-off script, I didn't really care if it allowed me to finish the porting earlier. Writing a trigger would take more time and code than adding a temporary column, just like using nextval() to create the temp table is less work than writing the trigger. Most people seem to ignore that this was a one-off script that won't ever be used again.

I don't actually regret my approach. It allowed me to deliver the first version for testing earlier and I was able to fix the script later in less than an hour once the problem happened. Maybe other parts of the script were not ideal either, but the migration was successful and this is what really matter to me. It would be a completely different situation if I was writing a permanent code. In those cases I write the code way more carefully and give it quite a lot of thoughts on the future implications.
People who say "an historic", with a hard 'h'. It is because people used to say "an 'istoric", which is correct.

The reason "an" exists is because it is quite hard to say things like "a elephant". Much easier to say "an elephant". Similarly it's quite hard to say "a 'istoric occasion" - much easier to say "an 'istoric occasion".

However since we now say "historic", not "'istoric", it is much easier to say "a historic occasion" than "an historic occasion". For some reason this (and only this) combination has been repeated enough that people over-correct and think that there must be some rule that they never learnt that dictates that it is "an historic". They don't really consider why "an" exists.

Nobody ever says "Tomorrow I have an history lesson."

Anyway, that's about the only 'rule' I can think of that doesn't really have any exceptions.
I've noticed the same thing, but I'm always surprised by it. Particularly with smartphones.

A GPS is basically just a very, very precise clock and a radio receiver.

Why don't smartphones use the GPS clock?

I'm sure there's a good reason (and some probably do), but it sill surprises me. (Presumably it's battery related -- the GPS clock can't be used unless GPS is fully enabled or something similar.)
Does Red Hat have an embedded version? If not I suspect the reason is "Enterprise (TM)"
4 Digital Marketing tips to get quality leads in the current times
Hey HN,
Sitebulb is a desktop crawler for Windows and Mac, specifically designed for SEO consultants/agencies. Me and my business partner have been building it for the last 2 years or so, and we're finally launching it today.

It's main differentiating factors:
1. Scale – it can comfortably crawl 500,000+ page websites despite being a desktop program.
2. Reporting – it does a lot of data manipulation and processing so you don't have to.
3. Visualization – it has tons of useful graphs, including the Crawl Maps, which help you visualise site structure.

Our aim was to give it the reporting capability of a SaaS crawler, with the convenience of a desktop crawler.

Looking forward to hearing your feedback on our new product. Thanks, HN community!
In that example yes, but if I put {% author %} Name {% author %}, a static build system can put the author name centered in the top of the page, or in a signature at the bottom, or in a floating div on the sidebar, or...

In your HTML document, you would need to change the structure manually for each content file, of which you can have thousands.
In the British style what is the rule if the quotation ends in punctuation? Do they include additional punctuation outside the quotation, since presumably the punctuation inside the quotation doesn't count as ending the sentence?

I'm thinking of a sentence like:

> Bill said "I prefer American style."

Would the British write it as follows?

> Bill said "I prefer American style.".
We're the last market-driven field. So most companies take the attitude of "Take your approach. I'll see you in the market". This isn't anti-intellectualism or realism or pragmatism. This is a different fitness function for software. Bug-free programs aren't inherently good.

If I'm building X-ray scanning software I'm going to be careful. But if I'm writing a Slack lunch bot in Coq for anything but the fun of it, I'm making questionable choices.

You know the old saying: "Anyone can build a bridge that stands. It takes an engineer to build a bridge that barely stands."
I believe it is due to an unwillingness to make a concrete statement. A full stop is strong and is equivalent to speech in a flat and confident tone. The ellipsis seems to stand in for short disclaimer phrases like "by the way", "in my opinion", "in case you were wondering", etc.
Few other points which may be obvious but non the less.

Apple is actually uniquely positioned for this strategy, since the do not need to sell your data to companies. They make their money of the devices.

It's probably one of the reasons google has been moving to more and more devices. To neutralize the Apple threat.
actually can only think of one real disadvantage: i travel a lot, and getting all the prescriptions filled internationally is very hard. so a couple times i had to change travel plans just to get new prescriptions.

also sometimes i have to fill out medical forms about stuff i take and that... takes awhile :)
Where did I disagree with the spec?
also yeah it is very challenging to individualize. the problem isn't even the cost of testing, meds and doctors. it is that this stuff does not scale across different individuals. that is the ultimate driver of cost.
There are some valid reasons for announcements of breaches to be somewhat delayed (to assess the scope, to allow for patching a new zero-day exploit, for ongoing investigations...), but, predictably, this leeway is being abused to cover incompetence.
What's interesting is that we've known this in the industry for decades but people seem to forget it at the user interface.

https://scholar.harvard.edu/waldo/publications/note-distribu...

https://www.joelonsoftware.com/2002/11/11/the-law-of-leaky-a...
So much this! Some developers don't realise that informing the user of state provides invaluable information in correcting their mental model of the application.
Show HN: An AWS Lambda function that looks for Bitcoin arbitrage opportunities
The difference is that engineering has to get it right the first time. There is no second try. Most software isn't like that. It gets continually updated and maintained over several years after the initial release.
I doubt that. What sort of fuzzer is going to create an Ethereum smart contract of a very specific type, insert JavaScript into the contract title, insert the contract into the Ethereum block chain, synthesise the correct URL (which doesn't contain any JavaScript) and then detect that data from the backend was emitted unescaped?

Someone else in this thread said, well, serves them right, they should have used CSP, and then someone else pointed out that doesn't work for inline scripts, and there was a reply of the form "only stupid people use inline scripts" although this is news to me, as nearly every website I see uses inline scripts of some form or another. This whole discussion looks like people in denial.

The problem here is that XSS is so easy to create. A jungle of half-broken workarounds, mitigations, static analysis tools, fuzzers etc doesn't change the basic truth that the web is a fundamentally unsound platform on which to do secure coding. Data and code bleed together far, far too easily - by design.
>so that's a straightforward violation of Occam's razor.

I'm probably missing something but I don't get this objection entirely. I've long considered Occam's razor just a thing you can say. It doesn't have any predictive power as far as I can tell. The complex answer is just as likely to be correct as the simple one [1].

[1] http://neuralnetworksanddeeplearning.com/chap3.html
Search for "Occam's razor"
Are you sure it isn't still client-based? Continuum was protocol-compatible with Subspace so was also client-based (and was released when dialup was still popular so it had to be). This Steam version doesn't really look like they have rewritten it (why would they?), so I suspect it is still client-based unless you have any evidence to the contrary.
TL;DR: The innovation here is that you are officially not required to hold the steering wheel. The requirement to keep your hands on the wheel is replaced by a camera that monitors your eyes to ensure that you are paying attention to the road.
Albeit more complex, the main advantage of rust, cyclone like solutions is that their guaranties are checked at compile time.

For a critical application I vastly prefer to get these annoying compilation errors rather than the illusion of productivity now and then getting runtime exceptions in a shipped product.

Be happy to fail as soon as possible.
I can see wireless charging and waterproof devices becoming the norm.

Most people also buy headphones from popular brands rather than attempt to discern on sound quality.

I see quite a few AirPods and Bluetooth headphones these days. I don't think you can discount the possibility.
Why? Humans drive today without any of this, and with much less sensory perception than 360-degree cameras, radar, lidar, ultrasonics, GPS anchoring, and digital maps. What's the limitation on being able to synthesize these inputs and respond to them?
> maintenance is a thing
Yeah, I used to think "home ownership" meant I owned the home, not the other way around.

Speaking as a homeowner, with a garden, fruit trees, and formerly chickens and goats, they're very comparable.

Renting meets the daily housing need, without ownership in the assets that provide for that need in the future.

Buying food meets the daily food need, without ownership in the assets that provide for that need in the future.

Alternatively, people could buy land and equipment/building and develop skills to use/maintain them, allowing them to meet their future food/housing needs.

The key element is that people can choose how they want to spend their resources (money, time, and attention). Sometimes buying is better, sometimes renting is. And yes, people do often make decisions that turn out not to have been in their best long-term interest.
>Time is hard.

I learned that once tried to implement "universal" datetime library for fun and education. There is wall clock, which leaps for political decisions; universal time coordinated which leaps on schedule to ease astronomical differences; atomic time of few sorts; numerous computer clocks; time zones which can go back and forth for north and south, land and sea; non-gregorian calendars and the fact that there is no 0 AD and no 0 BC; that dates were offset for many days few times in gregorian history; special and general relativity errors; and of course integer overflow issues.

I may have missed few points, but still, time is hard.
Technology / productivity / yield increases have massively outpaced population gains, so that hundreds of millions of fewer people are starving today compared to a few decades ago, despite billions of more people.

The new fear seems to be that all this food is actually becoming less nutritious due to increased CO2[0]. It will be interesting to see how this plays out in coming years.

[0]http://www.politico.com/agenda/story/2017/09/13/food-nutrien...
Ah, how times seem to change. My primary criteria for a hire is "they get the job done". All I ever want is someone who can take a task and finish it properly. Most tasks are not about age ('senior developer'), social ability ('social geek'), friendship ('new friend') or even about 'just the code' ('coding ace'). They have a range of aspects including design, organization, communication, documentation, testing, packaging, shipping,etc.

All that matters is 'they get the job done'. I've worked with people I couldn't stand but they got the job done. And I've been friends with people who couldn't finish making coffee. Given a choice, I want to work with the job finishers. When I hear them say "I'll do that", I have absolute confidence I don't have to think about it again.

Unless you're creating a social club for senior citizens, you're missing the point of work.
see https://www.arangodb.com/ and also http://www.w3.org/TR/sparql11-query/
> not to mention that it only works on 'vetted' stretches of road.

To be specific GM is following the NHTSA guidelines for autonomous vehicles, which consider Operational Design Domains in the design process.
This actually comes as a surprise to me. Because they are following most infosec security best practices. A family member works for them in financial consulting. She showed me some of the equipment in her deployment bag including an MFA keyfob, a mifi (never touch the client network), privacy screen filters.

Compared to your average remote employee network, it’s pretty rigorous. And comes with loads of training. I wouldn’t doubt this security breach was targeted as extremely sophisticated. Just casually sending an email attachment would not have worked.
A couple of things that page doesn't get quite right:

> Mr., Mrs., and Ms. all take periods in American English. In British English, the periods are omitted.

Common British practice omits full stops after any abbreviation (not just these three titles) where the last letter is the same as the last letter of the unabbreviated word: so Dr, Lt, hr aren't followed by full stops but Prof., Capt., sec. are. In fact it's becoming more and more common to omit full stops after abbreviations entirely: this is the Guardian's house style, for example.

> British usage dictates a period between the hours and minutes when writing the time (e.g., 10.30). American usage dictates a colon (e.g., 10:30).

Usage varies, but a colon is far more common with the 24-hour clock (e.g. 15:00 rather than 15.00).
Facebook adds feature to find blood donors nearby in an emergency
My cat beats my dog in fights all the time, and he doesn't have any of that training or gear.
>- Those millions of lines of codes usually include a number of Linux kernels.

Yes. They didn't write the majority of the code themselves.

Here is a repository that shows how much opensource software is inside a BMW i3
https://github.com/edent/BMW-OpenSource
The docs are pretty light on the grpc web feature. Is there a sample project anywhere that demos how to do this from the browser?
capacitive sensors detect the driver’s hand(s) on the wheel, eliminating the need to wiggle it to verify control as with some lane keep assist vehicles.
Blender is a funny program, because it can be used both as an example of bad UX - like what you describe - and good UX.

RE bad UX - I agree labels and tooltips are important. Even if I'm an experienced user, I do not remember everything, and in particular I would like to be always able to visually identify that number fields use the units that I think they use.

As for the good sides - Blender is the vim of 3D graphics. It allows you to be much more efficient - after you learn how to use it - compared to programs with simpler UI.

I generally summarize my point like this:

productivity
^ / tools you need to learn
| |
| /
| |
| /
| |
| /
| |
| /+
| /-
| /-- toys with dumb UI
| /-- /--------------------------------
| /---------------/------------
| /--- /------
|-- /---------
+----------------------------------------------------------------------->
time
> The Wallaroo license seems to be non-free, which I think is very unfortunate and a misses an opportunity to be more widely used: (...)

Maybe. But then, if they require you to buy a license when you're using it to make money yourself (and don't try tell me that you can afford to run your hobby project on more than 24 CPUs but can't throw some money on the devs of your tools) then it is no longer "unfortunate" - it's just business.
And don't forget that programmers need to eat too. "Widely used" does not directly translate to "making tons of money".

Bonus points to them for doing it from the beginning, instead of changing the licensing mode mid-flight.
It's really difficult to talk about speed, it's clear we all experience it quite differently depending on our path, so for me I'm here, it was smooth, copy and paste just worked across apps, integration between calendar, todo and email(i think?) just worked, the device form factor, widescreen clamshell with the butterfly keyboard deserves a comeback, imagine the spec you could cram in, for reading and writing a wider screen for me is preferable to a taller one.
Alternatively, in the meantime there are also really great Python bindings for Rust: https://pyo3.github.io/pyo3/guide/ The developer has full access to the Python environment while staying away from memory safety issues and the typical FFI hassle.

There's also a Python package for integration with setuptools.
"Ironically, Deloitte Touche Tohmatsu Ltd. is the world’s No. 1 security consulting group (at least, for now)."

From what I have seen, it really seems that the shoemakers aren't usually wearing shoes themselves. My experience is that the internal systems for example in Big Consultancies are often something that the companies wouldn't be proud to design/deliver for their clients.
This is critical. We should not be pushing technology that further bolsters the power of central authorities, especially in an age of increasing authoritarianism.
How annoying. Especially as several of the Huawei USB dongles support voice over USB.

https://stackoverflow.com/questions/8367864/how-make-use-of-...
I misunderstood the design then. I assumed the XSS was done via an input on the page not an input in Ethereum itself.
I think my first reaction of seeing a Tesla Model S was "that's a nice looking Mondeo". I actually think they are quite handsome in an understated kind of way.

However, my first reaction when seeing a (white) Model X was "that's incredibly ugly".

NB I am in the UK
A diet of eggs from what farm? I don't belive you have any idea how much work it is to gather eggs when birds go to great lengths to hide them from predators. Also, eggs are very seasonal in most places. They are not a reliable food source.
Have you ever tried TDD in AngularJS application? It can be really easy
iPhone X simulator
Even still, the point about sanity after being rejected "all over the show" is very much relevant.

I couldn't agree more that keeping your head in the game when nay sayers and sometimes downright jealous or mischievous characters get you doubting yourself. It is soul crushing.

The psychology of living in startup purgatory is where it's at.
No, we'd write it the first way, even if the quotation ended with punctuation not appropriate to the sentence as a whole: e.g.

> Bill asked "Do you prefer American style?"

even though the sentence, taken as a whole, is a statement rather than a question.
As an example, about a decade ago I was running an eLearning startup.

A more established eLearning company approached us to discuss potential partnering opportunities, and sent over their NDA. Note - I actually read NDA's and other legal docs before signing, to make sure nothing untoward or unexpected is included.

In the above case, they included non-compete clauses (without any limits) specifically so we couldn't compete with them.

Upon asking their (from memory) CEO "WTF?" he was rude/abrasive and that was the last we heard from them.

At a guess, they were just trying a cheap tactic to get leverage over us in some way.
"If none of that succeeds in returning the driver to the task of controlling the vehicle, it will slow to a stop in the lane of travel, put the hazard flashers on, and summon help via OnStar."

I presume they call OnStar since once the car stops in a live lane on the Interstate, the next thing that will happen will be getting rear-ended by a truck.
Is this an article or random ramblings?
Learning from experience isn't science. Trial and error isn't science. There's more to it than that. Of course humans have been learning from trial and error since before we were homo sapiens. But we also explained things in terms of ancestral spirits, angry gods who needed to be appeased, creation stories, etc.

Along with all that learning came a lot of crazy beliefs and practices. It wasn't until science was an actual practice that we began to have systematic naturalistic explanations we could fit controlled experimental results into.
</comments>
>and the ones in smartphones even worse

Oh, I bet my tooth that I can hear my phone playing music slightly faster than usual sometimes. Never experienced that on PC. Maybe it is not connected to RTC and is purely biological condition (never cared enough to test two devices side by side), but if someone experienced that too and has an explanation, it would be great to know.
Observation takes time, age is a quantified time.
Awesome. I am getting so tired of text templating.
Show HN: Yarn – Better Twitter Threads on iOS
If I were to do my thesis all over, I would definitely look at how these people use plaintext/markdown to get things done.

http://wcm1.web.rice.edu/plain-text-citations.html

https://programminghistorian.org/lessons/sustainable-authors...

Good luck!
Effective immediately, the I in IBM is short for International.
Is this sort of passive device practical for applications such as wireless mouse and keyboard? It would seem like a great selling point (similar to Logitech's attempts to make solar powered peripherals)
Hi HN,

Yarn for iOS is a simple utility app that combines Tweets into a unified thread, making it easier to follow "tweetstorms" that end up in your Twitter timeline.

I made Yarn because I found it really difficult to follow threads on Twitter, particularly ones that were partially retweeted into my timeline.

You can select a Tweet from within your favourite Twitter app, or browser, and use the iOS share sheet to open it in Yarn, which will then stitch the thread back together in the correct sequence.

If you have any questions, comments, or suggestions, I'd love to hear them! :)

Thanks!
I haven't used Firebase since before they were acquired by Google. Have they added features that allow you to serve web pages? Do you have some sort of UI set up to manage it or do you just manually update Firebase?
The article was updated. Apparently there were two different XSS at the same time.

One is the exploit I describe above: data taken from the block chain was not escaped properly.

Another is a more "traditional" XSS. It was possible to format a URL such that it contained script tags that were injected into the page.

https://github.com/etherdelta/etherdelta.github.io/issues/14...

The reason is, the data after the hash was not escaped.

Perhaps a fuzzer would have caught that. But a good tool would make it hard to make such mistakes by default. A desktop app would not have suffered from such errors, by construction. The web is not a good tool.
I didn't say you did? You pointed an obvious error. I'm saying, yes, I'm pretty sure we can assume it's been handled already given how easy it is to spot (and the other comment to your message seems to imply it is indeed)