skysight-inc/HackerNews huggingface dataset:
The paid article I can at least choose or reject on the face of it from the headline.
Gophers tend to roll their own and forego larger frameworks.

Piecing together libraries can absolutely be daunting, but once you get a starter app built your productivity will go way, way up.

I'd really recommend this (paid) course at https://www.usegolang.com

It walks you through pulling in different libraries (Gorilla Mux, GORM, etc), gluing them together, and structuring your code in a maintainable way.

A couple of other folks have mentioned Buffalo. It's a great ecosystem for building applications quickly, but I would strongly urge you to go through gluing the packages together yourself first to really understand what is going on underneath the magic.
Which is horribly naive, because there's nothing that prevented your RAZR from listening to you, other than the good intentions of Motorola.

First, you need to answer this question: can you trust the device maker?

If the answer is "yes," then both types of devices are fine. If your phone says it doesn't listen to you when it's not supposed to, it doesn't. If your home assistant says it doesn't listen to you except some dumb routine to check for the wake word, it doesn't.

If the answer is "no," then both types of devices are bad. If you can't trust a home assistant not to spy on you contrary to what the manufacturer says, then you can't trust a phone either.

It's possible to trust one and not the other if you distrust a particular manufacturer. But I haven't seen anyone saying "I don't trust Amazon specifically, but I'd be fine with a home assistant if it was made by Company X." It's always a blanket "why does anyone ever allow anything like this into their homes?"

To be clear, it's the "newfound" I object to. There's definitely a privacy conundrum here, but it's an old one, and 99% of people have already decided they do not care.
Who gets to decide this? As I understand it, it's the board of directors that put together a compensation committee. It's not like they are spending your money. They're spending the shareholder's money.

If only you owned stock in CVS or Aetna you'd be able to make your voice heard.
iPhone X: A New Frontier – MacStories
Star Wars and when Design became a requirement
Very cool project. I’ve done similar things with yubikeys before, having it built into the hardware is great.

Can it also support a pin to go with the biometric auth?
I am not defensive, even though it might sound so, you see I am not German, in fact, my grandfather did flee Nazi Germany. I believe they deserve credit for how they are handling their history.
Nobody does blindly anything. We make choices, and that is my choice. I trust the Republicans in Congress, and I am happy with their legislative agenda. Let's respect each other choices, and not denigrate anyone for being politically blind. We all have brains, personalities, education, and we all deserve respect.
>They are un-interested in any semblance of reasonable governance, it's siphoning your money to their backers in the most direct and aggressive fashion, plain and simple.

They are uninterested in your view of reasonable governance. Reasonable people can and do disagree with things like net neutrality.
Get Tor while it still lasts. And just about anything on gnu.org's ftp servers.
Thoughts and reflections of re:Invent 2017
I think this is just yet another symptom of outdated mindsets. I think people should have the ability to study advanced topics beyond the direct market benefits. Though maybe they also have to learn some core, marketable skills. It’s important for people to see there’s more to life than a paycheck and a cubicle. If society only ever studies the immediately financial, then we risk missing opportunities for short term gains.

One such would be computer science. Until computers came around the underlying algorithm and associated fields were pure math. If people hadn’t been able to study pure math then there wouldn’t have been an entire wing of mathematics available for CS.
2 camps:

USD 814M accumulated over a year, legit vs not legit?

You don’t really need to think hard, who is these 30 mil, 30 mil deposit? If you divide by a year, they need to have an average 2.2 millions of deposit a day. That’s just to Tether. That’s a lot. Just moving these amount of money in any country will put your account in question.

Will you do it if their T&C doesn’t guarantee withdrawal? A bank actually need a govt to issue deposit insurance for it to work? People are depositing 2.2 millions without any deposit insurance, with shady T&C?

I mean you can believe in it, but I’m definitely skeptical.
By that measure taking a job is unethical because it takes away a job that another might perform...

Yes, working for an industry that does harm to people is unethical. However, the censure that is deserved is proportional to the the "status" of the position they occupy in the industry, e.g. CEOs > Professionals > Blue Collar > Part Timers. Its not just the influence the different people have on the industries or companies they work in, its also a function of their autonomy. A lot of people have little choice but to take whatever job they can get, because they have other obligations as well: to their selves, to their families, and to their communities.
Just another fine example of why gizmodo is an awful news outlet.
Well, the precise criticism you're making is a bit unclear to me but I'll try to respond:

Modern proof of stake systems have a concept of "finality" which I think is what you're referring to when you say "checkpoint" (older POS systems also had a more traditional checkpoint concept, but I assuming you're arguing against modern implementations)

In order to determine whether a block has "finality" in a POS system you need to either (A) have a computer running regularly on the network to determine finality on your own or (B) trust a third party to give you a valid finality designator.

So it is true that you have to trust a third party with these systems if (1) you haven't connected to the network for a year or so or (2) you are launching a brand new node.

Of course, with bitcoin #2 is also an issue since there's no way you can install bitcoin software on a new node without getting it from a trusted party.
https://www.google.com/search?q=2^256

You're off by about 68 orders of magnitude; it's 2^32 that's approximately 4 billion.
Or stick to something that works for you and keep using the same tool over and over again.

No one is forcing you to use the latest bundler / tool / programming language.
Let others experiment.
You’ll be happy to reap the benefits of their work when something mature comes out of it.
Could you give us an impression to what degree a trustworthy comment period matters legally in the agency decision-making process?

I believe many people consider the comment period a PR gimmick with no relevance, but I got the impression that it is legally required to some degree. If so, is this a substantive requirement with actual protective powers against agencies deciding arbitrarily, or just a veneer of rationality and transparent easily neutered?
> Congrats! The world still needs plenty of professions where the pay sucks and college is required (teachers, civil engineers, LPNs), that are arguably far more useful/noble/whatever you want to call real value.

Shame on you for working in tech and not a more noble profession. I recommend that you resign from your job next week and become a high school math teacher.

(I got a job in tech because I feel it adds the most value to the world so I'm not a hypocrite)
> Quadriplegia

Damn, and no VC went into that huge market?!
Flying Kitten to Rocket Kitten, a Case of Ambiguity and Shared Code
Cool project. It seems like the only way for nodes to mine on the same chain is for them each to use different ports. I tried to use different IPs on the same port, and it didn't work.
Actually Singapore has a similar program. The Singaporean government pays tuition for some students for them to finish their higher education abroad. After graduation, they come back and work for the government full-time for a couple of years in exchange.
What's your point?

You think I should keep my opinion to myself or something?
Timing update here: I'll be on to answer some questions between 3 PM and 4 PM ET. Thanks all!
> It might help native Android apps get to the performance of native iOS apps,

I'm curious as to the performance differences of Android and "native" iOS apps. Their primary languages are both compiled down to native machine code and they're both garbage collected. Any performance differences that exit would appear to be minor. In fact, considering the iPhone CPU's are about twice as fast you would think this performance gap would be greater, yet it is not. Now, I realize speed tests between these platforms isn't an accurate metric in measuring app performance, but it is interesting nonetheless how an Android phone with a CPU half as fast can so easily beat the best of what Apple has to offer.

https://www.youtube.com/watch?v=qARozmOb9PY
Today, Deployments is only for users of Bitbucket Pipelines. However, there are plans to add API for third party CI tools like Jenkins and others.
'99 little bugs in the code, 99 littles bugs. Take one down, patch it around, 117 little bugs in the code'

i prefer Win10 over Win7, btw
No sarcasm. I suspect this kind of bureaucratic sideloading might be the only way to get these changes done. One further: if the Fed starts an index fund and distributes the dividends equally to the American people, do we suddenly have UBI tied to the national GDP? If that index fund gets large enough that it owns a significant portion of the economy, do we have distributed control of the means of production?
> What makes this decision arbitrary or capricious?

Disregard of the integrity of the legally-mandatory public comment process is, in and of itself, strong evidence that there is a violation of procedural rules governing regulation.
Having the government step in and pick up the tab isn't as ridiculous as you think. The majority cost increase (65%)[1] of higher education in the US over the last couple decades is due to a systematic defunding of government support for schools. It would be nice if we started investing in our country's education again.

[1]2015 Study by the New York Federal Reserve - https://www.newyorkfed.org/medialibrary/media/research/staff...
Everything you look at was built by engineers, don't be so quickly to dismiss your own people
DC's I-66 express lanes debut with $34.50 toll, among the highest in U.S
I'm considering switching (in fact I just registered for the FastMail trial). I'm especially interested in the ability to use catchall addresses with a custom domain, which would allow me to give out an address like <hackernews@mydomain.tld>, and thus determine who shared my email address if I start receiving spam at that address.

This is partly possible with Gmail, as you can use addresses like <myname+servicename@gmail.com>, but not all sites support emails with a + in them.

What differences have you noticed in your year since switching? I'm especially interested in any downsides. My biggest worry about Gmail is the lack of privacy from Google.
Also, at some point you are going to be asked to do something you know is effed up.
There isn't a "reasonable" party, the Democrats could have made this a law making repealing it difficult. They found the to give ISPs billions of dollars, and to legalize spying on their customers though.

Both parties are a joke, voting for either is an awful choice.
I personally think any battle to prevent widespread adoption or use of always-on listening devices is fruitless. The only option is to provide safer alternatives with the same functionality.

My opinion is that the proper way to deal with the privacy implications of this are to come up with better alternatives - open-source voice assistants and entire ecosystems that do everything locally and that are easy to setup by Joe Shmoe. More in-depth auditing by security experts to see exactly what data is being sent from these devices back to their servers. Privacy laws that will take a company down and send people to jail when violated. Encryption on everything that can feasibly be encrypted.

The truth is that I have succumbed to the utility of my Google Home (and the enormous amount of fun I get from having it interface with Home Assistant), but I'd like to be a part of whatever the front line is in making sure these are as privacy-conscious as possible.
Its similar to when blizzard had two games to market "Heros of the Storm" and "Heart of the Swarm" (HOTS). The are taking up more and more of the search space for the phrase "Go" so if they have 10 products that say "go" and a competitor has 1 product then a search might just bump that company away from ever being known and as long as the confusion still takes you to google, google will take that burden.
Ask HN: How are you monitoring source code for secrets?
I've been researching Static Code Analysis and available implementations. One feature that'd be nice is flagging of secrets, API keys, and passwords. Amazon Macie mentions this as a use case but appears only to work with data in an S3 bucket [1].

After browsing available AWS products, nothing sticks out to me as an obvious solution. I saw Sonar but their TypeScript support appears to be less effective - which is expected to some degree since it's originally a Java tool [2].

Is there an AWS solution to this? Or do you have a recommendation?

Thanks.

PS - this would of course be in addition to our existing code review process.

1. https://aws.amazon.com/macie/?nc2=h_m1

2. https://www.sonarsource.com/products/sonarqube/
As I posted elsewhere in this thread...

The majority cost increase (65%)[1] of higher education in the US over the last couple decades is due to a systematic defunding of government support for schools. It would be nice if we started investing in our country's education again.
[1]2015 Study by the New York Federal Reserve - https://www.newyorkfed.org/medialibrary/media/research/staff...
I think you may be confusing npm with something else? npm is a package manager, and it does run as a command line tool. Similar to how apt-get is the command-line frontend for a package ecosystem. npm also includes npx, which allows you to directly run any command line utility in the npm ecosystem without installing the package first.

Try running `npx ember-cli` directly in your terminal.
I doubt that Drumpf was ever destitute when declaring bankruptcy.

Students get off easy as far as assets go. they don't have any yet, so there's nothing to get rid of.
The comedian recently pilloried did his acts with consent, and did not do them when denied consent. The value of the consent, given he’s a comedian, is certainly up for question, but his acts were also not obviously illegal.
I dont think thats it though.

i think its something to do with the breeding
Motels in the US can be extremely cheap, maybe $30/night. This makes a month comparable to a low-end apartment - but the advantage is that they are highly transient - as long as you've got $30, you've got a bed for the night. No contract, no lease, etc.

Moving into an apartment usually requires a month (or more) deposit, potentially a credit check and employment verification. There's a growing precariat in the US who cannot provide this, so motels provide a solution in a society that operates on free-market principles and has little social safety net.

"The Florida Project" is a good film that dives into this part of American society a little bit. As an immigrant who started out in this country near that run down part of the US-192 in Florida, it's spot on.
What about Algorand[0] or Proof-of-Delay[1] or Proof-of-Activity[2]?

[0]: https://people.csail.mit.edu/nickolai/papers/gilad-algorand-...

[1]: http://stevengoldfeder.com/papers/BGB17-IEEESB-proof_of_dela...

[2]: https://www.decred.org/research/bentov2014.pdf
I wonder if there's a reasonable way to normalize the value of stock incentive packages, such that they only become worth outsized amounts if you actually outperform the other companies in your sector. That way, they can't just ride a bull market to a massive payday, and similarly, a bear market doesn't automatically destroy their compensation.
I'm not suggesting (at all) that you use them over FastMail, but GSuite also supports catch-all email addresses.
IBM SPSS Statistics 24 Crack and License Code Full Version Download
One idea I've seen broadly recommended if you don't want to run your whole tech stack & all environments (Test & Prod environment servers/DBs) in the cloud, i.e. as a DockerHub container or something, is to instead use WebHooks or CURL requests to call localized Jenkins CI within your private/local network to then kick off final builds/deployments to real environments that way, after the initial build succeeds and possibly even a throwaway environment gets spun up and tests pass in the Cloud.

That can be done using either the built-in Jenkins API https://wiki.jenkins.io/display/JENKINS/Remote+access+API or "Trigger Builds Remotely" Build Trigger option (which basically uses the same mechanism with your own Job-specific token/key). Nice feature is that BitBucket Pipelines supports "environment variables" to enable securely storing Jenkins API keys or tokens that let you securely tunnel through corporate FW rules and the like:
https://confluence.atlassian.com/bitbucket/environment-varia...
mp4s aren't HEIF. but this feature is certainly pre-lude to Safari supporting HEIF in the browser.
Containerizing Databases at New Relic: What We Learned
If we lived in a Bitcoin future, how big would the blockchain have to be?
So their plan for getting people who better understand their (likely best) practices for admin is to share their knowledge of how to administer a system like theirs?

That's actually pretty interesting, and loads of respect to them for it.
"- Had the company declined, the CEO would have gotten all the blame and been crucified. Can't give blame if you can't also give credit."

And he would have been given a golden parachute worth far more than most of us will see in our lifetimes. His family wouldn't go hungry or homeless. At the same time, many employees will get laid off, and their families will have a very real chance of going hungry or homeless.
Also, there's no reason that such packets would have to be sent immediately. It's totally possible that, during times when a wake-word is not utilized, they could still record, compress, and delay transmission of recordings until a less conspicuous time (middle of the night, weekend, following a reboot, or in tandem with the next 'expected' transmission).
I use aliases (FastMail's term for custom addresses that go to the same inbox) for that reason. They work very well, and I've never had any problems setting up a new one on the fly.
He is most likely saying that Windows 10 does not have a more significantly inherently secure design. That is, Win10 is not less likely to have security issues than Win7.

Whereas what you are pointing out is that when issues are found, they are left unfixed in one of those OSes. That's a different thing.
It's easy to understand, I just don't get why do I need it for anything but Git development. I mean I was perfectly able to be productive with Mercurial without the single shred of knowledge of it's internals. True, I've learned them anyway, but because I _wanted_ to, not because I've _had_ to in order to be able to do anything beyond these 5 commands mentioned in every git tutorial or understand what git output actually means. And, oh, these internals actually are leaking abstractions, multiple episodes. "You had one job" ©
I've wondered about the spectrum of behaviors/relationships that exist in PR. This article describes one end of the spectrum: straight-up pay for play. What is the slightly-less-outrageous behavior? Do big PR firms take people out to expensive lunches or get them floor seats at Knicks games (much like salespeople woo potential clients)?
I was only kidding! That being said, thanks for the warning I'll be more careful commenting in the future.
Because mining is dependent on the rate at which information can propagate across the network. If a mining pool is able to hear about the next block 1s sooner than another pool, it has a significant advantage when blocks only take 12s to mine. If blocks take 10min to mine, that 1s is less of an advantage.
How's the spam filter compared to Gmail?
How does blockchain technology keep people from copying the ebooks? Why would anyone care about an abstract idea of ownership of an eBook that you could read without owning?
Please elaborate on how short blocktimes render a distributed ledger more centralized.
Precautionary Principle.

Likelihood of a problem x the cost of the problem happening = how much you should worry/care/act

When someone asks 'how sure you are' about something and you say 'really sure', unless you pull out a slide deck with numbers and graphs, that's an emotional estimate, and has no bearing on the precautionary principle. We naked apes get tripped up by this because we are used to dealing in social interactions, where your intuition works pretty well. Statistics, not so much.

You loan your friend your car when you're pretty sure that they won't wreck it, scratch it, make it smell like pork rinds. A business is not your friend. There's no social capital at play. Without that social capital you would never lend your car to a business. You don't owe them the benefit of the doubt nor do you reap a non-monetary benefit from doing so. Only when there is such a benefit (community building, networking, etc) would you even consider doing so.

I have certainly defended companies in forums because I felt they represented some part of a world I wanted to live in. That's my social capital in that case. The best way to predict the future is to create it, and I had a small part in that. I participated.

But in this case if you're wrong, instead of losing out on a toy, or a pillow that is always the exact right temperature, or a fridge that always has chocolate milk in it, you're going to lose money, face, and probably that world you hoped for. There's been enough shenanegans that the confirmation bias that kicks in if Tether is allowed to continue to grow and turns out to be a pyramid scheme has a real potential to have deleterious effects on the whole concept.

How willing are you to back Tether if it means there will never be a similar company that is actually legitimate? What are the objective odds of that outcome at this point? If you really want this world, you should be demanding transparency from everyone you support in this space at this point.
Net Neutrality has a specific meaning, and is supposed to protect against one specific mechanism that would undercut the internet's openness.

The fear of Non-Net-Neutrality goes far beyond the usual "there's only two ISPs where I life and they both offer the same deals".

It's something in completely its own category of nefariousness because they could be as anticompetitive as they want, and the market could not solve it.

That's because the injured party isn't their customers, who could take their business elsewhere, or at least loudly complain on the internet (if they have any).

It's someone not part to the ISP<->customer contract, namely that unknown video startup in Nantucket, or the e2e-encrpyted messenger app your friend Lauren is working on. They're going to be forced into paying ISPs if they ever want to reach the ISPs' customers. And there's no risk to the ISP, because nobody is going to change ISPs for some startup they've never heard about.

The result could be ISPs capturing almost every cent of value created by new startups. We will also have a fractured internet, because small companies will have to negotiate contracts with every single ISP. Also want to reach those 500,000 people in eastern Montana? That'll cost you $2,000 per week.

Anyone not living on the US coasts, and people in other countries, will constantly run into "HTTP Error 469: go suck a bag of.."
Russia Banned From Winter Olympics by I.O.C