skysight-inc/HackerNews huggingface dataset:
> ...we don't have much data to judge, but the little that we have such as this article indicate that dynamic typing has a non-negligible negative impact on the above.

In my own experience I see it on a spectrum: there are design decisions you can avoid by using dynamic typing that give you speed in the small that start to show their absence in the large. Savings on inputs (quicker coding), tend to evaporate as complexity grows because you're using so much time analysing outputs (the system), to determine behaviour. Every bit of up-front work saved gets amortised across issue after issue, and runtime testing during development, and increasing stagnation in high-level architecture.

For me the ideal is the type system of Haskell with the linguistic power of Haskell and the type inference of Haskell... only on a mainstream platform I can convince management to use.
Companies under 250 employees can avoid most of the impact of the law. I think it's kind-of well designed, because it affects the companies who can afford the compliance work.
> There is now too much money in it, and the money directly translates into interest to keep Bitcoin running and succeeding.

Like tech stocks in 1999? 2007 subprime mortgages?

> It's going to be the new gold

You mean my dentist can fill my teeth with it, I can give it as a shiny necklace to my girlfriend, I can use it as a conductor for my stereo? You mean it's actually something I can use?
Assume a site has two accounts "user122" and "user123". When a user logs in with "user122" and a password and it does not work: What happened? Did the user mistype the password or the username?
Banned in nicknames, not chat - so people don't pretend to be an official representative of the developer, obviously.
How do you remember old comments? I remember that one now, but would've had no way of referencing it.
I wrote this: https://github.com/tqh/efi-example
It's using the linker script and headers from GNU-EFI. Also check Zircon bootloader https://github.com/fuchsia-mirror/zircon/tree/master/bootloa... It is Googles UEFI loader that works on x86-64 and arm-64. It's quite new, and has it's own linker script.
Try throwing Putin into prison.

That's the kind of threat model at stake here. Another Putin emerging. And this one may be much less predictable.

If Satoshi were around, his opinion would carry weight. He's the spiritual leader and mysterious benefactor, the only person to have ever solved the byzantine generals problem with sybil resistance. If he spoke, people would listen more closely than to others.

In fact, people are resisting change mostly because they want to stick to satoshi's original vision. So he is speaking to us, in a way, by saying nothing. That's him communicating his vision to us, and us agreeing with it.

If he were still around, he might very well say "I only did that to ensure the network stayed healthy! We still have an endgame to think about! The miners will eventually run out of coins to mine, and it's in our interests to continue the status quo rather than degenerate into that world."
It‘s easy to google how Shazam works now, since they exist.

I‘m pretty sure that googling for „audio fingerprint“ or „algorithm for recognizing a song“ wouldn‘t have gotten you the answer in 2002.

You need to know the maths if you want to invent something new. If you just want to reimplement existing stuff, maybe you can get away without it.

(Inventing new stuff is actually pretty rare for programmers. I don‘t think I‘ve actually invented much, despite having worked as a software developer for more than 15 years...)
The solution is relatively simple.

1. Email and password for login. Don't tell the attacker which is correct.

2. Email and password for registration. On registration send confirmation email. If user is already register attacker would need access to their email. Access to email is game over.

So now an attacker can't see which users are registered with your service and you've protected your customers privacy.

Extra points if your code is aware of timing attacks.
A large part of the argument behind the `suburban ponzi scheme' lies with the up-front profits made by municipalities when building these suburbs.

There are a few other things.
Firstly, network effects could also be seen as requiring the `ponzi scheme' to keep growing.
That is, in order for the suburb to pay for itself, it needs to attract other suburbs.
Obviously, this does not immediately apply to network effects due to more business.
It should be noted that commutes suck and that having large suburbs starts to require large commutes to get to work.
Thus for sufficiently labor intensive business, there are inherent issues with the suburb network effects.
It is hard to say where this threshold of `sufficently labor intensive' lies though.

Secondly, there is an issue of gradual density increases.
In the suburbs, it is a lot harder to upgrade the house on a lot to say a three-story flat. Besides tough zoning laws, there are HOAs to content with. Even more troubling is parking. Because suburbs require a car, such flats require a lot of parking.

Finally, there is a simple argument that more gradual growth that works via a mix of density increases (i.e. building up, or just putting more houses on a lot) and a slower expansion of the city is plain better.
This of-course no longer argues that suburbs are a `ponzi scheme' but if this model is more sustainable than suburbs, it is kind of a moot point whether suburbs are sustainbable.

The argument that this model is better than suburbia is more difficult, for it is inherently comparative. Notably though, this makes the argument `suburbs cost more than they bring in locally' relevant presuming that suburubs have the same network effects as the proposed model of growth.
To a first approximation, this depends on the quality of life, and the ability to grow to match demand.
The application doesn't know if the username you entered is actually yours or someone else's.

You could provide the correct password to your account 'test', but not 'ttest'.

The server just tells you to check both instead, it's more semantically correct and offers some security improvements with user enumeration.
> Seeing how many people that use google products on a daily basis, I think you are mistaken.

I did add that I think google looks for a balance and was right not to hire him. I understand that their requirements are different from a lot of other companies. You probably overlooked that part and it might have seemed as if I thought it was unimportant at google, which I assure you is not the case. :-)

The second part is indeed a good point, there's a subtle difference and you are correct indeed!
I like this idea. I only need to keep 10 years and almost never need to retrieve anything. So if I use 10 boxes I can just throw away the oldest.
I've been on the WSL track for a while. I've found that when I live in a Ruby/Node/JVM/Clojure world, you'll run into all kinds of problems related to shelling out and handling paths that are bugs caused by all the developers and most of the community running on macOS or Linux. And I don't blame them, you can't test on all platforms, and all the languages seems to have APIs that allow these kinds of bugs to happen (representing a file system path using the fabulous data structure "string", for example).

I ended up selling my Surface Pro 4 after a year.

WSL is an amazing piece of tech, but due to the issues with windows compatibility of the software I use and run, I had to run it inside WSL. And since I use IntelliJ, that means the IDE has to run inside WSL, too. This worked fine, by running vcxsrv (an X server) from Windows. But then, after a windows reinstall, it suddenly stopped handling high DPI (retina) properly, and all the xorg apps where tiny. That's when I decided that I'm not gonna embrace a platform where I have to hack and slash to get the basics right.

I hope Microsoft works on bringing an official x server implementation to WSL. It's amazing tech, and I want to use it, but for now, it's too premature.
This is arguably a lot more than I need. I'm a hoarder in that I have every email I've ever sent or received (bar junkmail), and every piece of paper I've ever received.

Most of my paper is now scanned - I think I have two boxes left in my garden shed. I don't bother with OCR because search doesn't help me when I don't know what to search for (e.g. invoice for a jumper I bought in 2010 - fashion labels rarely call their jumpers jumper).

And so I rely on meta data. There's not much out there in terms of open-source tagging software, and even less in terms of an open tagging approach. I ended up with tagspaces, which is a web app packaged up as a native app. The approach to tagging is good (tags appended to file name), but the app is abysmally poor. Slow - waiting up to 30 seconds for a pop-up menu to appear. It assumes tag-based searches work in only one way.

The intent is to write some native apps to solve my biggest problems. For now I'm still trying to clear the backlog of un-scanned paper docs (not going to get this done for me, because privacy). I tag important stuff, like employment contracts, mortgage agreements, passports and birth certificates...

Hope to have everything done by the time I cash in my chips. Might make for a useful dataset for someone somewhere some day.
sent :)

https://raiblocks.net/block/index.php?h=4F72435F9D0A73F99514...
When calculating the capital needed to live off the interest, you need to subtract inflation from the interest, as 1000$ will be worth less and less every month. What you need to survive is "equivalent to 1000$ today", not "1000$".
The application knows unless it some app written by someone who is starting with programming.
sent :)

https://raiblocks.net/block/index.php?h=5025D11BB7D6211F76E4...
Read the article. It's debunking that exact argument.
You and parent poster make for a wise conversation. The closing sentence — telltale signs of a speculative bubble — can be read for BTC, one to one. Brilliant!
> It's going to be the new gold.

Well it has all the negative of gold...
Our ability to produce material goods (even in the supposedly hollowed out US manufacturing sector) really is greater than at any time in history. We aren't crashing into any growth limit when it comes to infrastructure.

The problem is that taxes have been cut and costs like pensions have gone up (both in absolute terms from things like favorable contracts and life expectancy and in relative terms because of the tax cuts).
sent :)

https://raiblocks.net/block/index.php?h=3C9BBE9655759513C7FE...
True. Unfortunately so far only "gaming laptops" come with gtx 1080 graphics cards as far as I know. Another option would be to get something like an HP Zbook with a Quadro P5000 card. That should give you performance in the same ballpark as the GTX 1080, but with a much better built laptop. Unfortunately we are then talking quite frankly stupid amounts on money.
I've once tried to sign up for some site (I can't remember which) which went through with the usual successful signup, please check your email text. The email I received however was something along the lines of 'you already have an account with this email!', which seems like the best way of doing things.
However, Ronald Wright reported that he had said it, see the "Disputed" box at the end of the Wikiquote article.
EDIT to add: FWIW, it's an insightful aphorism independent of who said it.

https://en.wikiquote.org/wiki/John_Steinbeck
Only one file
React Native Easy Statistics
Something is fishy which is why they released this info just before the holidays so that the general public forgets about it soon.
You read the article. Author backtracks at the end.
Google fights fragmentation: New Android features to be forced on apps in 2018
sent :)

https://raiblocks.net/block/index.php?h=8348F83B34BA91CDE23C...
In that case one not unlikely ends up with an anti-pattern known as The Distributed Monolith, which combines the worst of both worlds.
I'm with the OP on this, I've experience with Java, C#, Python & C++.

I'm a big fan of rapid prototyping with Python to map out problem domains, and once the domain has been mapped properly, rewriting in a statically typed language if necessary.

Python is much better for prototyping than the other langs I've used. Because the syntax is almost pseudocode, and the duck-typing makes a lot of design patterns and boilerplate obsolete, so I can dedicate my headspace to the problem at hand.

Right tool for the right job, as they say.
Is this possible to detect despite external factors (variable latency etc)?
Thanks for your words of support. The experience has been surreal for me.

What saddens me most is that in a sense, I'm one of the lucky ones: I genuinely don't have any connections to Iran. I might be able to complain and have the policy reversed on people like me.

But what if I did have connections to Iran? What if I had immigrated at 22, and still had Iranian citizenship? Or what if I never got a chance to immigrate, and still lived in Iran? In that case, I would be totally rejected by a world that justifies official discrimination against me, in the name of enforcing sanctions that are deemed necessary to achieve geopolitical objectives.

The worst part of it all would be knowing that the world at large considers me expendable, and would accept policies that lead to my discrimination as a lesser of two evils.

There would be no way out if I were in that position, because the quality of mine that is discriminated against is one I was born with, and complaining wouldn't help, because most people would just say "tough luck". When the crowd thinks you deserve to suffer because of what you are, rather than what you've done, it's a crushing feeling. I have a taste of that now and it's terrifying.

Regarding racism and discrimination in Canada: I agree that there is much more of it here than people generally perceive. I do think Canada is less racist/discriminatory than most countries, but the difference is not as big as commonly believed.
It went down to about $12k in some exchanges, so far...

While what you say has been true in the past, one thing has changed since the last ATH of Bitcoin... Wallstreet is now involved.

Also, it looks like some exchanges are temporarily locking the value of Bitcoin and other currencies at certain steps to control the drop?

https://www.reddit.com/r/CryptoCurrency/comments/7lch2d/coin...
It's just "NSF International", the name is a tip of the hat to the old name rather than an acronym.
Things I learned building a new search for FT.com
I had my HK iPhone serviced in the UK, but this may be down to different bands for different models?
You can download it
> Is there any link between data science and cyber security?

There's... a company around LA area that does cyber and data science. I would think they apply data science to logs and such to figure out abnormality. Likewise if you count email spam detection as a cyber security thing.

For cyber security, take Network+ or just grab a Network+ book. I believe that's where you should start first in cyber security.
This marks the fifth time Bitcoin has "plunged" over 30%... during 2017:

https://twitter.com/charliebilello/status/944048619174457344...

The only real difference is that because Bitcoin's value is now so high, even comparatively small dips are massive in USD terms.
> it occurred to me that they probably are hosting this site with github but are using their own domain name

That is exactly what they are doing, and in itself this is not at all a problem.

But presumably the link worked for the original poster, so either there is a dynamic DNS problem (we are being sent to an address that serves the .github.com certificate an not the "right" one but he was sent somewhere that does have a certificate for that name) or* someone is resigning content and his machine is set to trust their CA certificate. This latter cause could be normal/expected (his company having a MiTM policy for regulatory monitoring reasons) or his machine could be cracked by an external entity.
None of your explanations/examples counter the fact that you could also declare your anonymous-func just above your loop in a local, ie. `doit:= func(item...` and then simply `go doit(item)` in the loop. You get: a leaner terser loop to later have to read through, no iteration-scope "gotcha", no need to elaborately spell out explicit shadowings for what are naturally semantically really func "args" already/anyway, at worst identical cost (or better)..

But well, guess it comes down to subjective stylistic preferences here =)

> So that even if "do something" throws exception… err… panics… the file gets closed.

Your defer as placed in your above example is already scheduled to run always, even on a later panic. (After all, how else could one `recover` from a `panic` if it wasn't for `defer`?) I don't see the point of the double-closing at all here..
> What sells is software people actually want to use.

That's one part of it and mostly b2c. The other part is well marketed software people have to use. Majority of people aren't exited about using office. Nobody wants to use windows. There may be a single lunatic who's excited about using an accounting package. Yet, more copies will be sold every day. And once they're established, their UI/UX can break in any possible way. The app sales won't slow down - training sales will go up.
As always, Matt Levine said it best:

I'm not sure I agree that he "isn't joking": Just because you actually do it, that doesn't mean it's not a joke. (Perhaps it's a "prank.") If you are rich enough, you can joke about sending a car in a rocket to Mars by actually sending a car in a rocket to Mars, which makes it funnier.

(https://www.bloomberg.com/view/articles/2017-12-04/bank-back...)
Mp3 نبيل العوضي
Show HN: Network Monitor for iPhone and iPad
Boeing Seeking Deal with Brazilian Aerospace Titan
I'll write my own GUI layer from scratch.
> Question: why bother organizing papers?

Because being organised makes you more effective. With your 'throw it all in a box' system, you have a high barrier to finding documents in the future and this discourages you from doing so. However, with a more organised approach you are more likely to retrieve specific documents.

One example: Some mid-priced electronic device breaks a few months after you buy it. You might weigh digging through all the paperwork versus shrugging your shoulders and throwing it away. I would go straight to the warranty document and also look at my credit card issuer's warranty/returns policies(if any), and I would return the item for a replacement or refund. No biggie, only a few minutes work and I as a consumer prevail in exercising my rights.

Sounds boring but I believe it is definitely worth making the effort.
The address you sent me is invalid, are you sure you copied it correctly?

You can read more about the coin at this website: https://raiblocks.net/, or on its subreddit. There is some "PoW" involved but it's used to deter spammers, and it's not a key component of the protocol. Since there are no fees, there's no tangible economic disincentive to deter someone from spamming the network. Thus, before sending a transaction you have to solve a small problem that takes a couple of seconds in commodity hardware.
I for one blame Long Island Iced Tea
sent :)

https://raiblocks.net/block/index.php?h=267DC5FB1CF52F526DE1...
VeeR Launched on Oculus Rift – VeeR VR Blog
Really interested in this. There are very good reasons we moved off the gold standard, and I've never seen a really convincing argument why we would change our minds.
How can it? It passes the pair to some auth API and gets just a yes or a no back.
Strong towns has a whole section dedicated to this issue [0].
Sadly I couldn't find a decent summary. I think this article of the site [1] is the closest thing.

[0] https://www.strongtowns.org/infrastructure/

[1] https://www.strongtowns.org/the-growth-ponzi-scheme/
As the article pointed out.
AMD Open Source Driver for Vulkan
Assume a user got their username or password wrong. What is more likely, they got their username wrong in a way that happens to be the same as another user, or they got their password wrong?
A Zero-Math Introduction to Markov Chain Monte Carlo Methods
You can be held hostage for your digital wallet just the same as for your bank deposits.
It knows if it doesn't exist though. This whole thing is about sites that say "Username or password is wrong" when they know the username is wrong because it doesn't exist!
>> Honestly, I think tenacity and an ability to learn and move quickly are the most valuable engineering skills one can have.

I agree. Nowadays the information is abundant and so easy to reach. One only needs to be able to understand and learn. From there, sky is the limit.
When this two lines get close enough it could mean the end of Bitcoin is near
For somebody who also have no life (like me):

https://en.wikipedia.org/wiki/Company_of_Heroes
Yup, the protocol isn't battle tested. Some stress tests have been performed, but that's nothing compared to actual real-world use. As in any experimental technology there are several premises that are assumed, hopefully, with good reason, and if any of these fail it might be fatal. For raiblocks, it might be vulnerable to certain types of sophisticated attacks (check the paper for more info), and more info must be gathered. Also, the cryptocurrency isn't anonymous, packets are sent unencrypted via UDP.
Sigh, BTC fanboism sounds so much like 70s scammy cults, it’s annoying.

Folks, you’re so blind to the risks and obvious manipulations it’s heart wrenching, but the stupid dismissiveness of anything else — and the arrogant superiority complex that comes with it — makes me want to invest in popcorn.
sent :)

https://raiblocks.net/block/index.php?h=7C76610AC8A381103C55...
If the application already knows then the person using it is already authenticated.
Ruby Weekly: Best of 2017
sent :)

https://raiblocks.net/block/index.php?h=61BBA2A59538F4C05C39...
Best comment for naysayers.
https://raiblocks.net/block/index.php?h=F19E66CE2EC090923F26...
And parent comment's perseverance in propagating knowledge to educate bystanders even given the improbability of literally any return for himself.
sent :)

https://raiblocks.net/block/index.php?h=DB13B9D6BE67B6753C9B...
Android app entwicklung
http://mooc.fi/courses/2017/cybersecurity

"Cyber Security Base with F-Secure is a course series by University of Helsinki in collaboration with F‑Secure Cyber Security Academy that focuses on building core knowledge and abilities related to the work of a cyber security professional. The course series is free and open for anyone to attend."
sent :)

https://raiblocks.net/block/index.php?h=AAFDC0F404BFE33CCF81...
Transaction fees skyrocketed to $55...
Having a decent IDE would basically solve the "no internet" problem, as it'll have code hints for the standard library of your language(s).

Having common sense would have prevented the event that caused the whole problem.
Most people store passwords in their browser, which already makes the answer not that obvious.

For a rarely used web site, I honestly would have no idea if I registered as bonzini, pbonzini or bonzinip. Now my surname isn't particularly common, but smithj and jsmith might be easily confused.
>Instead of “leaning on them”, you can submit patches

Do yo know that he has the right skill set or the time to maintain the code for years to come? Do you know that the effort would be economically viable for him like it could be for AMD or perhaps Google?

If not then I would prefer if he didn't submit a patch, because he would be wasting everyone's time.

Sometimes the best contribution you can make to an open source project is to express your interest in particular features so that those who really can submit a patch know that there is demand for it.
Emacs has Tramp, and you can do the same thing!
No; in the SB case, tablet battery is being drained while connected to the AC. This is counterintuitive and undesirable (imagine you have a gaming session, then commute).