skysight-inc/HackerNews huggingface dataset:
Elm would deserve a mention too. One of the very few sane frontend development approaches.
It's nice to know someone can express a dissenting opinion, and still be reasoned with, and not downvoted into oblivion.

Oh. Wait. That's par for the course on HN.

God forbid you think anything different from the hive mind. If you do, you're not welcome here.
I also wrote up an analysis of the top 1M robots.txt files:
http://www.benfrederickson.com/robots-txt-analysis/

I ended up analyzing very different things from this article though, so this article was still pretty interesting to me.
This is so obviously partisan that I stopped reading after a few paragraphs. I don’t care what Scott Adams thinks about politics, or what he thinks I should think about politics. His argument boils down to: “lolol you lost, shut up and get over it”. There’s nothing constructive about it; it’s just gloating. Fine, we live in a fucked up democracy where people like Trump can get elected. I hope he works out because if not then we’re fucked... all of us.
I am a decade long VisualStudio user but since .NET Core I switched to VS Code. I cannot understand your complaints at all. Tooling is nice and sweet under VS Code and from the command line. VisualStudio has so much irrelevant bloat that they rewrote even their VS installer to simplify it. For .NET Core the whole experience is very similar.

The second class target is also not accurate. Azure (the future of MS) runs 60% Linux (afair) which makes .NET Core on Linux their primary target.

Give Microsoft and the .NET community a break. They achieved a lot in three years. The vendors other than the .NET team (including the rest of MS) just need some time to adopt their libraries (I am looking at you Amazon).
It is a fallacy that it takes a lot of time, like saying QA is worthless because it too takes a lot of time. Just like it's easier to fix a bug when QA finds it before a customer does, it's even easier to fix when a developer spots it in code.

If you think you stop making coding mistakes after a few months (well, or ever), you're kidding yourself.

I've never got into an argument over code style in a PR, and it seems like if this did happen I'd be looking to fix deeper problems in the team. I've had comments in open source PRs asking me to change something, but that's part of getting into a new code base. The right style is there one that's there, so unless your PR has the sole purpose of specifically changing the style, you should comply with existing style, no arguing.

Anyway, there are lots of other pros:

A reviewer might suggest a better way of doing something, helping others learn, and likewise will pick up new techniques from the code they're reviewing. This applies to even the most senior, experienced person in the team.

If a new library is brought in, it can be checked for conflicting versions or overlap/redundancy with an existing library, and license compliance.

Noticing simple things like hardcoded parameters/constants, unchecked config or input values, spots with potential unhanded errors, among dozens of other problems.

Unrelated changes are usually caught. Even if it's fixing another bug, I'd argue it's better to do separately with its own issue, because otherwise it gets lost when you go to build release notes or a change log.
Now that’s a really interesting idea! Add in a bank of shielded frozen embryos and sperm and yes, I can see your point.
To be fair, FormState problems could get pretty bad. By default, large apps would be posting back several hundred KB on each click (sometimes even in the low MB range). With AJAX, it was better, but still not in the acceptable range for non-intranet apps. There were always mechanisms by which competent developers could work around these problems, but for the most part, those would mean that you're fighting with the framework and not working in a particularly idiomatic, WebForms-y way.

In retrospect, I'm not surprised MVC gained popularity so quickly.
What if two weights are equal, the python code will also sort by name as well ;)
I specifically go after sites for archiving that block the Internet Archive in their robots.txt file.

The Internet Archive is also modifying its policy on retroactive blocking using robots.txt, although I don’t have the blog post link handy at the moment.

If you’d like to mirror certain Internet Archive contents, every item is served as a torrent.
There's no reason that people can't transact in cryptocurrencies directly, qubex. Remember that the economic problems caused by the Gold Standard did not result from people transacting in gold -- they came about because there was a fall in aggregate demand. Governments embraced hoarding/austerity in response to their own budget problems and that starved the global economy of general liquidity.

As long as all crypto purchases require an exchange of fiat for crypto the total amount of fiat in circulation never falls. It doesn't hurt if people transact in non-fiat assets (that may be preferable in many cases given the efficiency gains involved). Sure, the growth of alternatives to fiat may lead monetary authorities to reduce the amount of fiat in circulation, but all that is really necessary to prevent deflation is that prices continue to be denominated in fiat and that fiat continues to be acceptable as legal tender.
Yes.

To guarantee complete rust-safety, modulo LLVM bugs, do not use any Rust code that has unsafe blocks in it (this includes any code that has memory allocations, such as Vec).

Less strictly one can refuse to use code with unsafe blocks that has not been thoroughly vetted by experts. Things like Vec may therefore be used depending on how strict one's definition of "vetted by experts" is, but rolling one's own "unsafe" block code is not allowed.

I write rust-safe code all the time using the second standard, even though under the covers it's littered with unsafe.
> it is exactly people's awareness of how much it costs to own and drive a car in terms of money and mental peace that drives them to use services like Uber.

The point is that its far less profitable than it seems,
is very stressful, and has variable (unstable) income which further adds to the stress. See for example Uber The Game [1] based on real life examples.

> I don't see anyone complaining about how maids have to, oh my gosh, clean houses.

Well, of course they don't complain about that here. That'd be offtopic.

Part of the problem with issues like these is that if they don't affect you, why bother caring? Reading about it? Investigating the issue? You're not a maid, so why would you bother? You not enough on your plate as it is making your own deadlines and taking care of your family and and... which creates apathy.

I happen to know that regarding maids, and I won't speak for all hotels, but I happen to know from a series called RamBam [2] that at least in 2016 the Bastion and Ibis hotels in Amsterdam, cleaning service profession ("hotel maid") was 1) very stressful 2) paid by amount of rooms being cleared 3) a very low amount of minutes per room is being accounted 4) if you don't make it (setback of any kind), tough luck, you get paid less or you gotta work longer. Its a job you would only get if you can't get any other, and you desperately need the money. The company who hire know that, so the employees get exploited.

If that's still the case, if its more widespread, I don't know...

Cause what happens all too often in situations like these is when companies have shady, illegal, immoral behavior they resort to ostrich politics until they get exposed and it causes public uproar (in US, as a foreigner, I could think about say, Consumer Reports, or a John Oliver broadcast, or news about X in regular media). Then they start with damage control, but not necessarily with real steps to solve the issue. Just the symptom that the public perceives. Examples of damage control could be empty promises, solving the issue of the specific complaint of that one user, more empty promises, a bunch of excuses, some technicalities or pseudo-intelligent speech, yet more empty promises and excuses, shifting the blame, and all kind of other fallacies. It precisely describes what Uber did until a big change occurred (they got a new CEO). Heck, I've seen Uber employees exercise damage control on HN! Another good example is the #metoo debacles where people deny the allegations until the proof stacked up too high.

[1] https://ig.ft.com/uber-game/

[2] https://nl.wikipedia.org/wiki/RamBam#Seizoen_5 (see 5.2)
Why wouldn't I just use React at that point? Same behavior, less complexity.
Here is my personal take on this:

I have worked personally in numerous occasion with Uber's security team. I have helped them with many security issues and they have always been open to securing vulnerabilities, listening to hackers to make a change and even pay good payouts.

There are couple of things I want to point out to the author here:

1) You said that if these were Duplicate reports, they have to have a report number assigned. If you use HackerOne application frequently (which it does not look like you do), a report number is only assigned if it was submitted by another hacker. There are situations when internal findings are also on process on being fixed.

Uber treasure map is simply a guide. If you find something that is bypass of what they said they have, does not mean its an original finding. I work at a company where we have our own security team breaking applications every day. Sometimes hacker submit similar findings that our security team found before. In such cases, if it is a low priority issue, it will take time for us to fix because we do not prioritize it. In that case, a hacker will get a report marked as Duplicate with no report number assigned.

For the first three report that is exactly what happened.

2) Personal attack against a employee of a company will not help you anyways. You went after an employee just based on your degree. If you look closely in the industry, it is the matter of experience not degrees. I have worked with colleagues who are way smarter than me in the field and have way more experience. I never judge them based on their degree.

3) I am still not sure about your reflected XSS bug. Were you able to get a XSS actually execute? Seeing reply from Rob makes me thing you probably found a valid xss that works on an old browser. In addition, you also said you gained access to internal uChat: "I’m also able to bypass the Uber OneLogin SSO portal, resulting in source code disclosure from their internal uChat employee messaging system." but you did not prove that anywhere in your blog so I don't know if that is legit.

To conclude, considering the recent media attention at Uber due to security mishaps that occurred before, it seems to me that you are just looking for a media attention. Your title first is clickbait because 3 of your reports are duplicate so I am not sure why you expected any bounty.

To make this clear: I am a hacker in the community and an active participant in Uber's bug bounty and also in HackerOne. I have never seen Uber be unfair to hackers in the platform. Hell, to even encourage hackers, they started to pay 500 on triage.

That said, I am looking forward to your comment on this and would love to see your discussion on my points listed above.
Could be that the plans or companies offering coverage in her region have changed from year to year? While I wouldn't call this being "dropped" others might.

Another possibility could be due to fraudulence during the application process?

But yeah, grabbing at straws here.
Very accurate and precise.

Just one thing: MS is fighting AWS and GCE :) not Azure :). Well on the other hand, who does not remember the old org chart. Who knows.
Tesla becomes most popular automaker in Norway
This is awesome. Thanks for sharing :)
Emulating three buttons on a trackpad (or touchscreen) is hard to do right. I don’t use mice on my laptops.
Genuinely curious about this - why would the price swings in this case be worse than with uber? With enough drivers, I would expect prices to reach an equilibrium that depends on time of day/day of week, with highly rated drivers charging more. And even if the price swings were larger than uber's, wouldn't the prices be more optimal since they would be set by individual actors with more local info about the cost of providing the service?
Clearly doesn't help his case, but it's not really material to whether they should pay out or not. Why didn't they disclose the one that most everyone here agrees was an obviously-qualified-for-payout vulnerability?
You underestimate the sense of poor people who just need a quick ride up the street or are desperate to get to a job that's on the verge of firing them for their lateness because the public transportation has failed them time and time again.
The old British term for a cab is a Hackney Carriage
Sounds like that deserves a bit of caution. They were "hiring like crazy" not long ago in Berlin, I guess those jobs would have lasted less than a year:

https://twitter.com/justproductjobs/status/83132760282459340...
https://twitter.com/BetaListJobs/status/829744239852548096
https://twitter.com/BetaListJobs/status/824655808680095753
https://stackoverflow.com/jobs/130465/android-developer-f-m-...
From the comments and the article. it seems HackerOne cares for security researcher and white hat hackers insofar as they attract companies to their platform.

I guess their apathy makes sense from a short-term, bottom-line perspective, but it still seems a little unseemly.

Is there a better alternative to HackerOne for the security community?
Lack of trust. There not treating you as a professional.
Two weeks is perfect.
My wife's doesn't have a match per se. Instead the company contributes a lump sum annually that amounts to about 5% of her income. She wouldn't have to contribute anything to get this money and it doesn't count against her annual cap. It is accounted for separately from her contributions, so might technically not be a part of her 401k.
That's not the same thing, you've sorted a list of objects, we're looking for a list of tuples of `weight, name`)

In answer to your question though,

sorted(((k.weight, k.name) for k in some_list), key=lambda x: (-x[0], x[1]), reverse=True)

appears to work. This does use a non-obvious trick, but being more explicit is a smidge difficult, since the key function is called only n times, as opposed to O(nlogn) in the C# example.

Alternatively, you can use

sorted(sorted(((k.weight, k.name) for k in some_list), key=lambda x: x[1], reverse=True), key=x[0])

Which is more like the original example, and if you're doing it in place, you get

outs = [k.weight, k.name) for k in some_list]
outs.sort(key=lambda x: x[1], reverse=True)
outs.sort(key=lambda x: x[0])

Python's builtin sort is timsort, so despite sorting the list twice, this will still run in approximately NlogN comparisons, not 2NlogN.

You could also manually define a custom comparator, ie

lambda s, o: (s[0] > o[0] * 10 + s[1] < o[1])

and pass it to `functools.cmp_to_key`.
Not all drug addicts commit crimes. There is certainly a place in society for people who fill their void(s) by using drugs. You do need to be careful though, not all addicts are crimeless.
In the US, at least, they milk the prisoner's families every way they can. Charges for phone calls, web-to-paper letters, commissary items, and so forth. They also withhold basic necessities like soap, toilet paper, toothpaste, etc, to drive up sales. And, policies like 2 meals a day (instead of 3) on weekends. They even take the first $100 of your prison account for health care charges. It's an embarrassment for a first world country.

Combined with the now ubiquitous cheap online background checks, one felony is enough to ruin your life forever. You end up being dependant on family members for life. The justice system in the US is built around some Puritan idea of punishment, with no notion of rehabilitation.

Source: Am one of those family members supporting a felon.
A lot of the tooling is reusable. Profilers, debuggers, build tools, libraries all work.

And IntelliJ IDEA has been doing a good job with its support for multiple languages, having great support for Scala, Kotlin, Groovy and JRuby at least. There's also great support available for Clojure built by a third party.

Yes, I think you get most of the advantages of Java. There's a learning curve involved for Java developers of course, but it's very incremental because the underlying platform is the same and this matters.
What do you expect from a company who's motto is "always be hustlin" !?
“I was grossly over-trained. I was just anxious to get out there and fly. I felt very comfortable ... It got so cold my teeth were chattering and I was shivering, but that was a very minor thing,” he told the Daily Camera in Boulder, Colorado.

https://www.theguardian.com/science/2017/dec/23/astronaut-br...

Astronauts are definitely a different breed.
How so? In my mind templates and JSX are equally complex from a user standpoint. In fact I'd argue that JSX is simpler because you don't have to invent slots -- it's an obvious side effect of using JavaScript to generate your structure.

Just reading about slot and slot-scope makes me think Vue's reputation for simplicity is overblown.
If you are interested in trying out an alternative, please let me know.
Why is it better than say 1.5 weeks or 3 weeks?
2 weeks is sometimes too much.

It's a free market.

And you just got outbid.

If you paid way above market, then consider it an insurance policy against employees dping this.

The employer can offer an "Early Resignation Notice Bonus". Say give an extra $X per week of notice.

Put your money where your mouth is. I hate it when employers create a contract and then have employee sign... and then they are surprised that the employee follows their contract. Duh!
Surely it isn't that surprising that the outcomes of two different experiments can end up providing the exact same information?

In fact this case can be inferred from the fact that the Beta distribution is the conjugate prior distribution for both the binomial and negative binomial distribution. There are many more distributions that have the Beta distribution as conjugate prior to one of the variables (in fact it's pretty much all distributions with a factor p or (1-p) somewhere).
My experience is that you will find many cs and math people among car enthusiasts (At my university almost everyone involved in motorsport is math/science/eng.) From the other side, you will find a smaller proportion due to the wide variety of people who work in tech nowadays.

I don’t think the majority of students who study cs have an obsession any more. It has become such a public and large field that you can hardly expect that to be the case. cs pays more, so it will be more “diluted” (of car enthusiasts) but also an enthusiast of both is more likely to be in cs than eng for the same reason.

In my case, I have always been obsessed with cars and then taught myself cs afterwards.
Duplicate of https://news.ycombinator.com/item?id=16000606
I personally prefer Vue because it is approachable and easy to adopt. I believe that if Vue embraces PWAs in a pragmatic way that performs and is accessible, it will be top for a while.

At the moment, PWA is not a viable replacement for some cases, but it’s about to explode to everyone.
Why? Pharmacists have specific training and this is part of their responsibility.

If a pharmacy tech did this it would be scary. But an actual pharmacist?
Freudian slip. I'd say Microsoft is fighting Windows, these days :))
And in a few generations probably evolve to build further resiliency for the subject radiation/gravity/air pressure conditions.
Do not forget Anders Heijlsberg involvement in that little thing that TypeScript is :). I am also a big fan.

To be fair, you should also mention Anders involvement in the thing that J++ was, and the Sun vs MS settlement.
>If you are close to landing a new job, let your manager know and ask them how much time they will need.

This is awful awful awful advice. It’s not your problem how much time they need. It’s not your responsibility to let your employer know they should start searching for your replacement, especially when nothing is certain for you.
> Well, your comment seemed a nitpicky objecting-to-everything-they-said

Well, yes, I guess I was objecting to everything they said. But not because they said it, but because it's a bunch of terrible arguments.

> and tiresomely missing the point at every turn.

Such as?

> From the initial pedantic "Please distinguish proof and evidence."

Well, except that it's probably not pedantic, as their argument probably hinges on that fallacious equivocation.

> Do you talk to your friends like that?

Arguing in public is not talking to your friends.

> It's already headmasterish and snarky.

Which invalidates the argument how?

> It's not clear what you're asking for.

If you think that I am misunderstanding your(/their) argument or you see a flaw in mine, I am asking for you to explain the error in my reasoning.

> But you move on after 5 words to dispatch the next offending sentence

The offense is something that you choose to see, not something I said.

> like they're a succession of pesky bad guys in a kung fu movie waiting to be swatted down by our hero.

Are they not?

> I don't think the comment you were replying to was a model of clarity; the quote is a paraphrase of a paraphrase of an argument in James' The Will To Believe. I'm familiar with that essay (not one of his most impressive) so maybe it was easier for me to hear what they were trying to say.

Well, I don't know that essay, so it's possible that I am completely missing the point, in which case, feel free to explain. But then again, I have heard arguments of that form more than once, and so far whenever I looked any closer, it boiled down to the same flaw in the reasoning.

> But "WTF?!" etc isn't helpful.

Helpful for what?

> Objecting to every sentence like that doesn't even begin to address what they were trying to say.

Well, OK, what were they trying to say, then?

> Anyway, all of this seems obvious, I think you know this, I'll stop here.

You think that is helpful?

> Your comment read like you didn't care about what they were trying to say, just to knock them out of the water with any available weapon, which you seem to think you had done.

So, my goal was to knock some person I don't know out of the water regardless what their argument was? I'm not sure that makes sense ...
> safeguards against the services going “rogue”

Safeguards...LOL. We’re not even permitted to ask what they deem to be secret. Congress has fully abdicated any oversight, notwithstanding the occasional theatrical performance. Frankly, they’re probably scared. Lindsay Graham recently warned a sitting president he had better not cross the FBI.
It’s fascinating to see this story pushed repeatedly and fail to get traction. It has been posted a few times here on HN, as well as in other outlets.

“Why am I hearing this? Why am I hearing this _now_?” Regardless of the truth or anti-truth of a particular news story (such as this one), it is useful to ask myself these meta-questions.

It is also useful to ask another meta question: “Assuming this is true, why is it failing to get traction?”
Not the most informative headline. "He has written many books, but this may be his most important." I firmly doubt it. The story is an ad for a book, Deep Thinking, about computer chess, and in it "Kasparov uses his unrivalled experience to look into the future of intelligent machines" something he appears eminently unqualified to do.

Karpov said that Kasparov doesn't love chess, he loves himself in chess. That's a bit harsh; he does appear to love chess a lot. But I know what he means. After a while, Garry's endless self-glorification gets very tiresome. Everyone likes talking of themselves I suppose, but Garry takes that to an impressively noxious level. But, like he himself often says, he was probably the greatest player ever, and those qualities were part of his success.