skysight-inc/HackerNews huggingface dataset:
Why Your Google Analytics Isn’t Working (and How to Fix It)
I don't think the choice to continue using Fortran is as well thought out as the author. I work in computational physics and have written a lot of Fortran, C++ and Python.

The predominant issue is that physics codes are typically written by PhD candidates, often with little to no programming experience. The projects can span 3-5 years and continue existing in the physics ecosystem for decades. Good programming practices are seldom employed, and the codes become these massive patchwork ships, leaking everywhere with holes plugged by spaghetti code.

The issue is not that the students aren't smart enough to learn good programming practices, it's that the advisers are not patient enough to wait for documentation, unit tests and so forth. They view good practices as wasted time, after all it's "physics not computer science".

Unfortunately, the path of least resistance is actually to adopt unit tests, write code documentation and generally employ industry programming practices, it's just that this path has a barrier to entry and the benefits are not immediately apparent to older academics who have fallen out of the loop.

The end result is quite sad; students with advanced programming skills are chronically under appreciated in the field. Professors will happily bring them on board as post docs to develop their simulations, but they balk at giving them jobs based on their computational skill set. It is thus no surprise why the computational talent leaves physics and takes careers in the private sector where the union of math skills and programming is in high demand.
Defiance had advanced tech/debris falling from the orbiting wrecks of alien ships.

https://en.wikipedia.org/wiki/Defiance_(TV_series)
Wow! Firstly I would like to say this was one of those rare HN comments which blows you mind away.

Very nice to hear you survived such a bad accident.

>>I am lucky to be alive. It is amazing though how clear you can think in life threatening situations.

David Allen talks about these situations in this talk. In the moments of crises, the brain brings about all its focus to the highest priority task at focus. Its almost like crises commands the best kind of productivity.
Ask HN: Anyone else planning on ditching their phone for a apple watch series 3?
If so, what is your reason?
> Headline suggested to me someone resigning from the company.

Indeed. Quite disappointed with the article.
Here is some information about affected Yubikeys: https://www.yubico.com/keycheck/
You can't preload the whole internet, but by getting the top xx thousand you get 99% of all Chrome users traffic. Its not perfect, but it is very, very effective.
>It is, it really is.

Maybe we have extremely different feeds, but I mostly just see junk updates like: "walking the dogs", "just had breakfast", "just got home from work", "yay friday", "look we are at bar/party/gathering", "argh! mondays suck"

Then there are some random quiz/ad/lottery things. And random pictures of people's kids/pets.

I get much more human interaction out of IRC and Discord, places where you can actually talk and not just like and comment.
Antarctica is getting a farm that can grow produce even when it's -100°F
Out of interest, what apps are you using that are still 32bit only?
Please add (2011). They are still teaching SVN and not git
If they have short, steerable, pointy ears, they might be cats, but it is not a sure method...;)
What Happened to Big Data?
Governments have heavily subsidized combustion engine car makers.
Glassdoor.com contains company reviews by former and current employees, ratings, company information, salaries, CEO approval ratings, competitors, content providers, and more company details. Users can find and anonymously share real-time reviews, ratings and salary details about specific jobs for specific employers.

Now You can Hire A Freelance VMWare Enigneer from : https://www.fieldengineer.com
Worked fine here with only privacybadger... no ads, no nag screens
Is Black PR Really Bad? Inside a Hacker Scandal and How to Benefit from It
You can run it as root, and specifiy users/groups to switch to before executing an app. Though, CLONE_NEWUSER was meant for exactly that - using namespaced without euid==0. Some systems like Debian have a sysctl flag:

kernel.unprivileged_userns_clone

which controls this behavior. Ultimately, it's up to you whether set it to "1", as CLONE_NEWUSER in the past opened many new attack vectors on the Linux kernel. However, I believe that currently the situation is much better, esp. after syzkaller and individual researchers reported and fixed many bugs in this area.
Daniels response can be read here: https://daniel.haxx.se/blog/2017/10/16/polhemspriset-2017

English version(Google Translate) can be read here: https://translate.google.com/translate?sl=auto&tl=en&js=y&pr...

Daniel is a true inspiration and well deserving of this prize, creating a tool being used by billions of devices each day.

For me as an occasional OSS maintainer/contributor, I am humbled to be able to stand on the shoulders of giants and will be forever thankful for him and others being early adaptors of OSS, paving the path for our now thriving community.
Metrorail vs. Uber: Travel Time and Cost
Furthermore by not even attempting to include OpenBSD in some embargo agreement, there's no reason for OpenBSD to not patch as soon as they hear about it. Indeed that's what seems to have happened on the linked 'evidence' about them not respecting an embargo of a linux distro group they're not part of.
Yes, but that would result in them not getting notified for any other vulnerability.
online:

https://keychest.net/roca

https://github.com/crocs-muni/roca

offline info:
https://crocs-muni.github.io/roca/
Full disclosure: I were a product developer at the company (Heliospectra) creating the growth lights for this project during its development.
Facebook Is Looking for Employees with National Security Clearances
Also doesn't it require the attacker to have access to your wifi already? If that's the case, it's a hazard for connecting in a Starbucks or on your mobile service wifi, but you would be safe on your home or corporate wifi (unless the attacker is a colleague or relative!).
> There is ZERO riscv software at all

Really? If you mean software for the RISC-V/x86 emulation you are possibly right. Regarding RISC-V in general however your statement is not true.

Fabrice Bellard has published a working Linux on 32/64 bit RISC-V [1]. There is no reason that we could not expect Linux to run on real RISC-V hardware next year on a SiFive Quadcore.

[1] https://bellard.org/jslinux/
Patrick McKenzie is fortunate enough to not be born in a country that is currently suffering from hyper-inflation neither is he living under a dictatorship that is putting capital controls and deciding how he should use his hard earned money .... yet :)

In other words, "the rest of us" of Patrick's folks do not represent the people for whom crypto is a necessity and not a luxury. So if money is already working for you, keep using it and ignore this fad
Introducing Android Oreo: A New Way to Destroy Your Phone
I'd say it's fair to consider them smart cards even if there's no real physical removable SIM-sized card. The non-U2F-only ones pretend to be smart cards, offering both PIV (traditional smart card) and OpenPGP applet modes. They're certainly functionally equivalent to smartcards for purposes of this attack.
Big pieces of paper are much easier to work collaboratively with than diagrams on than tiny screens, unfortunately. Lots of people still get paper maps and charts for this reason.

The company that makes a cheap roll-up non-backlit e-paper display will make billions if they figure this market out.
Fortunately most access points will be fine, but those performing client functions (eg repeaters) will need updating.
Is it possible to adapt these attacks to HTTPS protocol?
The WPA2 Vulnerability Shows Why HTTPS Is So Important
Federal subsidies in the US started in 2008, while the Model S wasn’t released until 2012.
Ahhh, the Feds.... There is one Variable nobody is talking about. Where are the bitcoins that were seized from the silk road and other drug dealers, etc... As soon as the USA floods those bitcoins back into the markets prices of bitcoin will drop.
> I mostly just see junk updates

See, if you're calling things like those "junk updates", I'd venture the problem is on your end.

> Then there are some random quiz/ad/lottery things.

Those I will agree do not count as human connections.

> places where you can actually talk and not just like and comment.

How is commenting not "talking"? Unless you're restricting "talk" to solely mean "synchronous discussion" which is madness.
Tetris. And I use it probably more (in term of time spent) than Facebook, safari and emails together!
> If you fail once, twice, eleven times. Try again, keep trying, quitting cigs is really worth the effort. Each failed attempt to quit cigs you learn something you can use to succeed in the future.

Been there, done^Wdoing that. Fourth attempt in progress, each time I'm inching closer to be done with this crap for good.

> I don't care for Facebook, I doubt they cause you heart disease etc

Mind disease surely. By receiving constant stimuli and dopamine hits the mind is plasticly shaped to expect regular, immediate, worthless rewards and can't contend anymore with long term effort for bigger, worthwhile rewards, whether physical, social, intellectual or spiritual. IOW it makes you feel like shit for even trying to do anything that matters.
No as I would know about it by following security news?
Interestingly, your inference is almost opposite to the commonly accepted definitions.
The Global Leaders in R&D Spending, by Country and Company
NSF Live Feed for LIGO-Virgo Collision Event Announcement (Begins 10am EDT)
Yep! As a minority, you better hope that (or can convince) the majority values the rights that you use most often (life, due process, etc) over what the majority sees as the gain from depriving you of your rights.

This is fundamentally authoritarian, I acknowledge. But it's reality and believing it's the opposite doesn't do anyone any good.
The support period for an iPhone is at least 3 years of regular patches and feature updates. Most Android phones on the market will have a 'support period' of 12 months if you're lucky.
My point is that the roll-out of updates to Android is unacceptably poor and inconsistent and relies on optimism on the part of the user.

The use of the word hopelessly was probably unnecessarily dramatic I agree but I'll leave it there so your comment makes sense.
How encrypted is your average home network, really?
I remember when I was a junior engineer working on aerospace simulation software (defense contracting). I was primarily writing C++, but we had a large collection of physics algorithms written in Ye Olde FORTRAN that we had to link in.

I brought up a possible rewrite, and one of the greybeards told me that they had looked at that in the past, but the govt V&V process on any rewritten algorithms would have been so onerous that they eventually dropped the idea.

The last guy who actually understood that old code retired about a year after I started there and then things started to get... interesting.

As an aside, for 'new' code, I'm actually ok with the science folks dumping a pile of matlab script on me so I can rewrite it in Python, Java, etc. (rather than letting scientists write production code, which I'll have to rewrite later anyway).
> What do you think the Fed was attempting to do? Or let me put it another way - it sounds like you are advocating there be no way for an agency of a democratic government to dynamically adjust money supply (or interest rates).

You are misinterpreting me. To be more explicit : cryptocurrencies suck for the exact reason you explained (if you look around in this discussion, that's exactly the point I'm making against any cryptocurrency fan) yet saying that current system is working properly is foolish. The recent history (since the 80s) is a good illustration that interest rate isn't a good enough tool for money supply control. And actually it should have been predicted: you have two independent things you want to control (consumer price inflation and asset price inflation) then you can't control them with only one variable. The fed's policy ignored the asset price, and it had the bad consequences I was talking about, but if you chose to control the asset price you'll probably cause deflation and kill economic growth. My take: because it's a system with 2 degrees of freedom, we should have at least two variables to adjust. If the first one is the interest rate, what should the second one be ? I don't know, but probably taxes (On savings ? On capital held maybe ?).
There are many countries which do not have the ability to print money, either because they use another country's currency or their currency is pegged. This usually comes about in order to ease trading (e.g. Hong Kong), because the existing currency was very weak, or because that country is too small to manage its own currency.
Already patched in Arch linux. Just updated all my systems.
That obviously applies to all domains of life, but when it's actually said out loud, it's most often a cop-out. It's very improbably that the current-era languages are at (or anywhere near) the local optima of their respective niches. Sure, you don't want to issue database queries in C++ or write a high-frequency trading engine in JavaScript, but there's still a lot of progress being made, and to be made on every front of programming language development (syntax, type systems, semantics, libraries, compilation strategies, memory/resource management, ...).
> see all the relevant studies about the rise of loneliness and its impact

I've seen a bunch of those studies and in the absence of historical studies, there's nothing to show that it isn't just that people are more open about being lonely now compared with, say, even just 50 years ago.

Also there's nothing to show this is due to the rise in "social media" as opposed to changing dynamics in family structures or the general fuckheadery of politics etc.

> What we do have developed is a bizarro attachment to social media

There are people in there - it's not "bizarro" in the slightest.
It's a bad gut reaction to have for a newer programmer who is struggling to find any solution to the problem at hand.
That's only because you can't see RF pollution. In comparison, it's tidy.
In the last two or three weeks BTC has been down to around 3k USD and is now approaching 6k. It's still massively volatile.
That’s pretty wild. For another good falling from the sky story check out this woman that fell two miles after a commercial airliner broke up in the air[1]

1. https://en.wikipedia.org/wiki/LANSA_Flight_508
A very similar scenario is described in the fictional work, "The Phoenix Project", is it not? There is a smart character who handles every escalation, but nothing is documented, he was the bottleneck, and his stress level was high.

Management had to figure out they needed to handle the escalations, prioritize, reduce the bottleneck, document the solutions, and teach others to fish.

This article seems to be addressing the same issue, albeit a bit more confrontationally. Anyone have recommendations for a non-fictional book on how managers can identify these problems and implement people-centric solutions?
Totally safe, until your local war-driver sniffs out your insecure device and comes back at two in the morning to upload illegal content via your ISP.
Anathem is a great book that explores lots of interesting, fairly unique ideas, and does some moderately original world building. But I always tell people Stephenson (the author, personal favorite) isn't for everyone, and Anathem isn't even for all Stephenson fans, it can be a hard read for many.
What Elon Musk Revealed about ITS and SpaceX’s Mars Ambitions in His Reddit AMA
Because they tend to have big egos (even fighter pilots will admit that ;-) and spend a lot of time telling flying stories.
I was disappointed when I tried to use svd2rust for the atmel-provided svd's. They unfortunately do not provide reset values for some registers, which causes svd2rust to panic.
Perfect is the enemy of good. A large portion of sensitive traffic is protected by HSTS today, and the preload list compresses well. By the time it'll become a problem, we'll hopefully be at the stage where HTTP is treated as insecure anyway.

I'm not certain if uninstalling a browser clears the cache (do uninstalled browsers retain their profiles?), but preloaded sites would not be affected - they're included in the browser binary. Either way, let's not act like there's a massive hole in HSTS because there's a possibility that users might go as far as reinstalling their browser to visit a not-preloaded HSTS-enabled site that's being targeted.
10 European startups with the potential to disrupt the education industry
I understand your point but I don't agree with your conclusion. You cannot assume that human drivers will drive any more differently when there are AI cars on the road sticking to the limit than they already currently do with non-AI cars on the road sticking to the limit. Either way they're still going to want to drive impatiently.

Take learner drivers for example, people sometimes drive worse around them (pulling out in front of them etc) because they simply don't want to get caught behind them. This is even before they've sampled the competency of the learner. The L plate is often enough to make bad drives drive worse.

Thus the only definite way you can argue that AI would slow down bad drivers would be if the bad drivers were the ones being driven by the AI. In which case we are back to the point about whether AI can safely drive a little more aggressively (for want a better description) due to it's greater competency at driving.
Not by a margin that warrants the price difference. Tbh most are negligible and power consumption is worse as well.
Not according to the status page but we are also experiencing it - cannot pull, push and receive a "We ran into a minor glitch." error.

https://status.bitbucket.org/

-- EDIT --

Website: Major Outage
> Also doesn't it require the attacker to have access to your wifi already?

No it doesn't. Watch the video. It creates a clone of your network and tricks the victim's software stack to connect into it.
Just find something that brings bread on the table. Doesn’t even have to be software-related, could be, idfk, gardening.
That's a feasible option on laptops running macOS or Linux, but not for Android clients. Running a SSH VPN (tunneling all traffic) requires root and has a severe performance penalty (which you will notice on your battery). You'd notice it on the laptops as well, but I guess that matters less.

Funny enough, OpenBSD didn't impleemnt WPA(2) for a while. Instead, they were forcing their users to use IPsec and OpenSSH instead.
My point exactly. I can't for the life of me see how Facebook can be so addictive (based on the application itself).

If you're the type of person who HAS to know what other people are doing, then 'yes' Facebook will take over your life.

I'm always so busy (and can careless of the day-2-day of people) that I'm barely on the platform. And when I am, its probably for 5-10 mins every month (unless someone Messages me).

I'm thinking that closing your account may slowdown your addiction, but there are other apps, sites, avenues to be 'in the know'.

Maybe Facebook in this case means all social networking apps?
Wordpress Optimisation Service: Make your site load in 1.5 secs or less
From a comment on the original post:

"Unfortunately Rick rejected months of overtures by leadership. He refused to take time off or allow any work to be delegated. He also repeatedly rejected attempts to introduce free open source frameworks to replace hard-to-maintain bespoke tools. Including the security framework as you mentioned."

Also:

"Another poster blamed management. I agree that the situation that came about was also his manager’s fault. He never should have been allowed to take on so much. If it gives comfort to anyone else reading this, the manager went first because ultimately management bears responsibility, always."
Bitbucket Down - Major Outage
Was able to play this just fine on iPhone 7 Plus
I'm asking for a note about an extremely common performance issue to be added to the documentation. Any database documentation worth it's salt is full of performance notes already. It hardly seems like there's a slippery slope down to... whatever it is you seem to fear here.
> If a significant number of companies waited those 3 months to invest, there would be no deflation.

And little economic activities in the meantime (because all those investment deals wouldn't occur).

At the equilibrium, you'll have zero deflation and a growth which is way below its potential (it could even be a recession, slowly converging toward zero growth). That sounds fantastic doesn't it ?

I didn't understand you two other points though.
Civilizations resorting to killer AIs in desperation to stop your progress.
Yup, very similar scenario in The Phoenix Project.

And thank you for the reminder of that. It occurred to me reading the original article and this reply to it that I may be somewhat putting myself in a Rick situation right now.

I don't have any good book recommendations, but I'd be delighted if anyone else did :)
Avalanche bags work nicely in small slab to medium powder avalanches where you might end up upside down a few feet under the surface and suffocate without these bags. It won't help you with most killer avalanches such as large powder ones (220mph and acting as concrete when they stop, filling your cavities), heavy wet ones in spring taking grass, rocks and tree trunks, and most importantly large frozen slab avalanches that just don't care about any equipment you might have or movements you do (and those often give you acoustic signals before they are ready to go). I've read somewhere that without any special equipment, your avalanche survival rate is that of lightning strike. I guess we see videos only of those survivable ones so we often underestimate the danger.
I'm hoping there will be some opportunities around the 50th anniversary of its release, April 3, 2018. I've actually been waiting for that for years. :)
> Node paired with Nginx has been the easiest to start new projects on, develop on, and it is more performant than the other two.

Very true compared to what I've worked with before too. I come more from a background in backend programming (but typically label myself "full-stack") and recently did my first Node.js project -- getting it live with Nginx took like 20 minutes. That was a pleasant surprise compared to my first experiences with something like Django, for example.
This is a interesting quote, googling it only shows this article, did the person writing the story make it up, or is this actually a saying that "some" say.

“Some days you are the dog and others you are the fire-plug.”
It takes time to understand a vulnerability, create a patch and distribute it.

Please stop confusing slowness with an intent to delay or ignore.
The whole situation reminded me of this sketch:

https://www.youtube.com/watch?v=BKorP55Aqvg

Given the kind of unreasonable demands, people do crack.
It's easy to feel this way while the going is good and your job seems certain. But unions can make the security of your job guaranteed and can help those who may not be in as fortunate a position as you and are more subject to exploitative practices. Your comment just smacks of "I've got mine, screw the others" but unless you're the person on the very top, you could become one of those others at any time.