skysight-inc/HackerNews huggingface dataset:
And with this comment, nothing more need be said on the topic. I don't need to intimately know how most stuff works, I need only know of it's existence and why I might want to use it. If I do need to use it, I can learn about it then.
why is it downvoted? is that a bad advice? why?
>The fact that it's easy is kind of the point.

Still there are IMHO limits, this story appears to me "too easy".

From the article:

>The manufacturing facility looked like a prison. No windows, heavy iron gates, no landscaping. Generally a monstrosity of architecture.

>This facility had armed guards, badge readers, biometric security controls and turnstiles at every entrance.

The above implies that the firm is attempting to have a higher level of security than most offices/factories.

I would have expected that the pentester had to do something more than what she wrote.

I mean, you first put up some basic security/access policies, and later you hire someone to test them.

And I cannot believe that:

>I gained network access and stole several thousands of dollars in physical primitives by picking my way through cheap locks.

One thing is getting access to the premises, another one is managing to be left alone and allowed to have network access, start lockpicking locks, etc.
Social engineering is a lot easier when you have tits
Ignore it at your own peril. I've hit it head to the point of self testing its existence. I was floored by the situations, comments and outright unprofessional treatment I've received while interviewing with the top companies, Amazon and Apple among them. And they are not alone. Smaller companies can be much worse.
The most secure building I've ever been was one of the Giro buildings in Budapest. All visitors must show id and it is checked by professional guards, doesn't matter who you are are. They will call whoever you claim to be visiting and verify. Next you get your visitors badge. You can't get anywhere with it but the given office. Where corridors cross, you have man traps and your badge will only open the one direction you are allowed to go. This was a converted building so they added sliding glass doors to the existing doors and guess what, you need a badge to open any of those. To enter from the elevator to a corridor again you have a man trap. Tailgate that. Visitor's bathroom is outside of the secure area.
Pseudo source - https://www.google.co.uk/amp/s/amp.theguardian.com/lifeandst...

Money quote : “study in the Journal of Applied Physiology found that consuming an isotonic sports drink increased treadmill running time to exhaustion by 27% in recreational runners.”

It doesn’t say what journal though. The key also seems to be isotonic drinks according to that article.
I took a look at that along with the reply we detached, which was https://news.ycombinator.com/item?id=15086980, and it seems to me a fair place to draw the line. The original comment was predominantly thoughtful while the detached comment was predominantly flamey.

These calls are somewhat arbitrary because when a thread degenerates, you can always trace the root of the degeneration further upthread. But moderation is more like pruning a tree than excising a tumor. The goal isn't to get rid of all malignancy—that would be too draconian and is impossible anyway. It's to detach the bulk of unwanted growth.

People can reasonably differ about individual cases, but the principle here ought to be pretty solid for anyone who has read https://news.ycombinator.com/newsguidelines.html and wants to use the site as intended.
Off-topic question: Does anyone know which software the authors used to create the illustrations?
What's the question? So far you've listed two things at not-quite-opposite ends: not applying enough effort to succeed, and not knowing when (or why) to stop.
Seems to be overloaded atm.
The engineering data alone from the flight was worth the risk. What they measured and learned during the flight probably gave the aircraft designers at Douglas priceless insights.
3. Folks who understand business, and know a crappy deal or a hopeless cause when we see one. I believe this is the majority of the so called "risk averse."

I'm 53, and consider myself to be in the first and third categories: I'm certainly willing to jump in and produce, and I'm not afraid of hard problems, but I can see when someone's trying to lure me with empty promises, or who is taking unnecessary business risks.

We also respect you enough to have a frank conversation with you, which could be unnerving if you're accustomed to interviewing people who have been trained to tell you what they think you want to hear.
Google Page Speed scores sometimes give bad advice that can actually slow down page load speed. I just focus on load time and the experience of the page loading. I sort of wish Google would kill the tool off or give it more context. Instead they just have a disclaimer at the bottom that says it's a recommendation and doesn't take into account experience...but try explaining that to a client. Any static site is going to load fast though, it's when you have to make database and API calls when things get hairy.
Back end Developer
Hanging on for 400 years hardly constitutes not having knowledge or desire how to survive there.
Wouldn't a simple timestamping of documents work in this case? Either standard RFC 3161 service or publishing document's hashes on Bitcoin (via OP_RETURN transactions).
AlphaGo Zero beats AlphaGo
Thanks! I use a python lib (feedparser) for parsing the RSS.
People can barely tell the difference between two pictures if you pause for a second between showing each one. Being able to tell that two voices are the same after hearing them days apart, once on a phone? I doubt she has to worry, unless she has a distinct accent.
Herb Sutter has a proposal for metaclasses, which involve running some compile-time C++-like code. I don't think it would stretch to this, but it's heading in your direction.
Great story. Those animated gif's, every paragraph, were killing me.
what about Zopfli/brotli?

Gzip compression benefits taper off in benefit after the "7" setting, IIRC. Brotli at higher settings compresses better, but you'd want to do it static as opposed to on the fly (at higher/highest settings)
PyScripter 3.0.0 released
Fish user here! FZF works beautifully with fish, no plugin manager needed. `brew install fzf` gives you the option to install scripts for fish if it's your shell (IIRC).
No, it's not open source at the moment.
Any examples of the bad advice that would slow down the page?
The Gemini PDA is another such alternative in development: https://www.indiegogo.com/projects/gemini-pda-android-linux-...
So what is this? A big PR piece so we'll feel all sorry for 'that poor Google CEO that's got such a tough job'? (first paragraph, he talks about how he's "not good at multitasking", and some things are "difficult".)

At least, that's what I'm thinking after reading the article. it kinda makes sense, too, that Google is looking for a bit of a breather after this much coming against them. Still, I think the stuff they're dealing with is pretty much what they asked for.

- ads next to "unseemly" youtube videos: this is their core business, and in every other place you buy ads it matters where those ads are placed and who sees them and in what context. This problem is exactly what Google is expected to solve.

- gender inequality: this seems to come with the territory. every other CEO in the US, not to mention North America & Europe (etc.) is dealing with this too.

- staff protest about Trump immigration policy: the CEO was on their side. In his words, "the fight will continue." He doesn't get to say this is a headache he's got to deal with when he takes that kind of approach.

- a big regulatory fine. From what I've heard, it's almost impossible that Google wasn't rather careless in letting this happen. 'ask forgiveness, not permission' seems to be a mantra that Google follows, and this seems to be an instance where they're now asking forgiveness.

- and finally, Google is 'too big' and people are worried about its power. "boo hoo, we were too successful."

[sources for everything are in the main article or linked from it]

Deal with it, Sundar Pichai. You've got the same job every other CEO has got, and the same pressure. Buck up.
Copy does work really well, that's actually where I've began again. Scrapped what I had. My method currently is taking all my raw data (folder of CSVs) and doing the following.

1. Create psql tables exactly how there are in the CSVs.
2. COPY all the data into each corresponding table.
3. Create NEW database/tables with the schema I want (only including the columns needed and proper names).
I'm thinking this is where your materialized view comes in to play.
4. Magic?
You can always not accept such clients. Why make life harder than it already is?
I'm a big fan of open platforms like mastodon and Gnu Social, and even i acknowledge that twitter and facebook may not be fully replaced any time soon...But the world is big enough for all to co-exist. And, just because mastodon won;'t replace twitter/facebook, shouldn't stop us all from playing/working on it.

Also, my bet on what platform will (eventually) replace IRC is matrix; see https://matrix.org/#about

Of course, that's just my opinion.
GitHub repo: https://github.com/pyscripter/pyscripter
Many facilities have valuable physical objects, paper documents, and material that could be vandalized and become dangerous.
I tried to use this a couple of times, but had a difficult time choosing a community. They seemed to mostly appear the same, so I chose based on activity and uptime. But apparently those instances were largely in languages I didn't understand. The "filter out these languages" improved it a bit, if I go through and check every box except english (slightly unintuitive, there, as most people will know few languages and want to select what they know instead of what they do not know) though not completely. It seems to work better with 'local' than with 'federated' results, which can mean cutting you off from the global community if you limit yourself to local.

I wouldn't mind seeing a guide to various popular communities to choose what to pick.
The Mac build should be coming in the next two weeks. We're just tweaking compiler parameters to make sure Intel GPUs work as well as they should.
In my office complex, we have a bunch of security guards who _check_ badges of people who enter the building (My building houses about 8-9 companies). If you don't have a badge then the guard calls the office you claim to be part of to ensure you have access, and then issues a temp badge.

A couple months ago, I forgot my badge at home, but didn't want to go through the hassle of getting a temp badge, so I flashed my driver's license at the guard (which is roughly the same size as my ID badge) and he simply waved me through.

I told my colleagues this, and since then we have a silly game where we try to get in using ridiculous cards. Most recently, we have people who have flashed blood donation cards (a card that acknowledges that you donated blood on so and so date), a credit card and a folded bookmark and successfully gotten into the complex.

While this is a running joke, really goes to show how lax manual security can be (Especially because once you are on my floor, you can easily tailgate your way into my office).

TL;DR Most of our security systems work on implicit trust more than anything else.
There's a world of difference between remember some bullshit trivia about how to do fast matrix multiplication, that requires some esoteric algorithmic or mathematical trick, and 'implement a data structure that does X'.

Yet, when blasting interviews, I have found that people tend to conflate the two.

I agree that 60 minutes on a whiteboard or a laptop is not the best way to ask someone to solve a coding problem. Homework is worse, though. Maybe 90 minutes is a better time slot.
Taser Company Ignored SEC Emails Because They Were in a Spam Folder
To be precise: Overhead does not pay salary. Overhead is only for a subset of indirect costs associated with the project as a whole (e.g., it takes place in a building, with staff and janitors and lights). PI salary must be specified as a direct cost on awards.

Second, there's theory, and there's reality. The reality of funding, even for soft-money faculty, is that schools tend to be (recognizing that not all fit the mold) a little bit flexible about how they calculate these things. Money comes in, salaries get paid, and the bean-counting happens at a slightly more fuzzy level of abstraction. The exact requirements on soft-money funding are typically negotiable, and in many cases, can be pooled across multiple researchers to create a bit of a backstop in the event of temporary funding drops. The tuition fees that your advisor's grants brought in will usually be split between the university and the departments in various (ungodly annoyingly complicated) ways, but it's fairly common that the department -- who pays the salary -- sees some fraction of indirect benefit from grad student tuition paid.

So I agree with your statement as phrased: "directly to him or his salary", but there's a ton of indirect money flow in universities.

(Source: I've had the ... mis? fortune of serving on some of the finance committees in the past, and discuss this issue regularly with colleagues at other universities, including those at medical schools.)

But as a non-me source, here's Wisconsin's definition: https://www.education.wisc.edu/soe/about/leadership/committe...

"Other types of soft money may include generated program revenues and flexible internal monies such as those funding credit outreach timetable courses." -- your tuition was generated program revenue.
In Brazil is extremely common, at least in the south: during the summer you can buy cold green coconuts pretty much everywhere, but specially in the coast; I used to drink it almost daily.
From working around the Supreme Court in my early days in Washington, I think this paragraph is a better explanation:

"In interviews, former law clerks for Supreme Court justices, including some who argue cases before the high court today, said any errors were surely accidental, produced by talented and devoted people doing complex work under daunting circumstances."

As I've been told by people who were clerks, the Justices don't research, or write really anything, especially the longer-serving Justices. Clerks make mistakes. It's not an indicator of the Justices themselves, as this article seems to be hinting at.
SPARCs could (and can still) be had from Fujitsu too. But it’s essentially a dead ISA at this point unfortunately.
My iphone 6 is probably on its last legs. The X phone is too expensive and not available anyway. The 8 isn't that much of an improvement on the 7, so if I don't want an X, I'll probably save money and go with a 7. Sluggish sales for 8 are not surprising.
7 Iemesli, Kādēļ Uzņēmumam Vajadzīgs Biznesa Plāns. – Cityfinances.lv
I'm not necessarily disparaging it, rather pointing out there are clear and legitimate features of the category "religion" that ideologies like atheism don't share.
The Multiverse Is Inevitable, and We’re Living in It
https://mathstodon.xyz/

Is geared towards math topics. That made the rounds here earlier this year.

https://news.ycombinator.com/item?id=14564624
Yeah, i don't always log into mastodon directly (I usually engage via my Gnu Social network)...but when i see this happen - although rare - it shows empty for about a second, then populates things. If you're not seeing stuff after a second or 2, that's weird.
but you need that double colon button
We can throw out options for a long time, as there is no perfect choice. Ren went with `none` as it is standard Rebol and Rebol's designer thought about it long and hard.
I hate marketing
It's blindingly obvious (to me) that the cops are just disabling the cameras before doing controversial things. I find it extremely surprising that nobody else seems to believe this theory.

As another commented pointed out downthread, you can hear them on accidentally-recorded video saying things like "We're still red here! Be careful!" when planting evidence/stealing stuff/whatever.

Disclaimer: I think both street protesters/identity politics activists and the police are basically run by assholes.
Thank you, that was a thorough response.
I'm confused, there's no private property laws to prevent farm animals from grazing on non-farm property? Nor is there crown land to build national parks with giant forests? An effective farm lobby wouldn't be able to affect either of those things in almost any other western countries...

The problem doesn't seem to be the lobbyist but some strange lack of fundamental laws, if the government can be coerced into allowing this to happen by industry.

Unless you're saying the farm industrying (with grazing animals) controls a massive amount of land? They say only 1% is tree covered, I can't imagine they own such a large amount that they can't find any significant amounts of land to plant trees...
A very basic example: if you had a large site, you can raise my Google Page Speed score by inlining all CSS and JS, but that would be stupid because it doesn't take into account the next page load and caching. I've seen some render blocking optimizations slow the overall page too. Getting rid of query strings is nice, but sometimes you need it for cache busting and other things, but it penalizes your score. Even Google's own tag manager/analytics scripts lowers your page speed score when they are on the site.
That's theoretic talk. Try doing it in practice and still get things done / be able to maintain the code / see the forest for the trees.

But I have a feeling that we are lacking a bit of context here. Some people seem to focus on web-application style of programming (understandably) where you have lots of trust issues. Whenever data is carried across trust boundaries it needs to be checked (this applies to integrity in general, of which null safety is just a small part).

(On the other hand, deserialization is not about validation of function arguments. Deserializers should assert integrity on the spot before calling into deeper nested functions).
Ask HN: Would you pay for a feedback widget?
I wonder whether people would see potential on a system that allows to create user targeted feedback form widgets, easy to plug-in, with metrics and rich mashed analyticis dashboard so end users could add them easily and study easily what their users think.
It would be nice to see what people here think
Solar drone capable of quasi-perpetual flight tested in the Arctic
You’re testing a process end-to-end and identifying places where the policy is either too cumbersome or ineffective. Sometimes it’s a training issue, sometimes their processes just suck and need to be changed.

Physical access is enough to do a lot of damage. You could drop a 4G wireless sniffer hidden in a wall wart. You can grab someone’s password off a post-it note and then fish the RSA token out of their purse when they go to the bathroom. Now you’ve defeated 2FA and have network access from the outside. Just metasploit/nmap scan, find a vulnerable system and you’re in business.

Check out the Bash Bunny — it’s a quad core attack platform running Linux. It looks like a USB drive, but emulates a whole bunch of different USB devices (keyboards, cameras, displays, etc) paired with attack tools to break into the system.

Basically, if you get network access, there are almost certainly vulnerabilities somewhere. Imagine someone like the CIA who buys 0-day exploits by the hundreds — physical access makes total pwnage inevitable.
That's pretty much standard for any social network. Facebook, Twitter, Pinterest, Tumblr, they all just have a front page inviting you to join and/or log in. And a not-insignificant chance of flat-out refusing to show you a specific post someone linked to unless you're logged in.

If you scroll down, the default home page will show you a tiny snippet of the timeline - but it only shows the "federated" timeline, made of public toots from every other instance this one knows about, instead of the "local" one of public toots from this instance, which maybe kinda defeats the point of being a sample of what you'll get if you join this particular instance...
Tech firms to lobby for immigrant 'Dreamers' to remain in US
Targeted-Individuals
It would be nice to cross-reference with only open science links as well for understanding key principles elsewhere. Nice initiative.
This seems to be missing the point. The court doesn't make "incorrect" decisions because it cites incorrect facts, it makes decisions the reader finds incorrect and in some cases happens to cite incorrect facts in support of that. In the very first example, does anyone think that correcting Alito on the frequency of drug testing in the private sector would have changed his vote? No, he'd just have removed that sentence form his opinion and found the same way, because he doesn't personally find drug testing to be a violation of privacy in the way the plaintiffs do. That's not a factual decision.

The decisions are made, ultimately, out of personal conviction. If you want judges to issue decisions you agree with you need to arrange to have those slots filled with judges who agree with you.

Courts are political entities and always will be.
I lived on that in India while traveling. Cheap, good and easy to get.
There is no difference between how your post looks and how the original article looks for me using emacs-w3m.

If anyone wants a no-bullshit web-browing experience, I recommend it.
Culture: Game Over – Gamification's origin in SV, its power and consequences
Not to mention that you don't have to worry about it harboring any pathogens, if you're getting it straight out of a coconut. Which is an advantage in places where the water supply is otherwise dubious.
Did they put that in writing?
It depends.
More than a thousand I'd guess, why do you ask? I use a 'magic touchpad' (first generation, a bit of a battery eater) with some stationary machines. The thing works, sure. It is rather big which - in my opinion - is not all positive. The clickpad-function can sometimes be handy but one annoying thing about it is the fact that it takes more force to click on the back side than the front, this due to the way they implemented this function. Touch gestures are not really my thing as I tend to use the keyboard for those things reached throgh gestures - maybe I need to add that I use a tiling window manager?
For C++ theres also 'GN' from Chrome, that is inspired in Bazel, and generate ninja build files.

You can also specify a toolchain, have custom actions for asset or code generation, etc..

GN itself is in C++, unlike the older build system for chrome 'GYP', and it produces a binary tool, that can process meta build file with a syntax very similar to Bazel.

https://chromium.googlesource.com/chromium/src/tools/gn/

https://chromium.googlesource.com/chromium/src/+/lkgr/tools/...
Novell Netware actually used DOS as a glorified boot loader. Also, there was at a point a small DOS program that acted as a Linux boot loader. It brought you from a DOS prompt straight to a Linux virtual terminal without reset. I think SuSE shipped it for a while as an alternative means to launch their setup, but memory fades.
One odd thing I bumped into is Google speed suggestion "complaining" about leveraging browser caching, but it reports Google Analytics as an offender :-/

https://www.google-analytics.com/plugins/ua/linkid.js (60 minutes)
https://www.google-analytics.com/analytics.js (2 hours)
Considering ~60% of the use cases for build.rs is wrapping C/C++ builds I'd love to know exactly how you expose metadata for that ;).
Not only safety but so they could say they beat Boeing.
This is when it goes well. You get caught a lot.
I've tried that as well, but you need a brotli module for nginx. No problem if you're using Docker, but I just used the mainline distribution of nginx on Ubuntu 16.

I'm curious if brotli's decompression is still fast on high compression levels. This is the case for gzip IIRC.