skysight-inc/HackerNews huggingface dataset:
Memeois is a personalized approach to memes, a combination of social experience and unique meme-ing features:

- Find new memes every time you launch the app. We use Machine Learning to understand memes that you’d love and display an endless Feed of fresh memes to browse whenever you launch the app.

- Search memes by keywords or categories. You can type “India” to view all memes that mention India or say “Hey Siri, search dank memes on Memeois.” We use AI to index each meme to search through inside text and identify visible themes and objects.

- Modify existing memes using the built in meme generator or create new memes from templates. Each meme can be edited to make your own and we also offer an increasing choice of templates to work with.

Besides these exclusive features, Memeois has been designed with special care to iPhone X and iPad Pro integrating iOS features like Face ID / Touch ID authentication, Today Widget to view memes from lock screen and much more.

I hope you found it interesting! I'd love to hear your feedback / suggestions.
Is our life a simulation? Interview to Elon Musk
My "mnemonic" is that # means prefix, because every shell script starts with a shebang too. From this I can deduce that ## means longest prefix, therefore % and %% means suffix.
You can exfiltrate data a number of ways though. DNS requests might be one obvious method.
Quite a few. E.g. ssh definitely was not, Rust was not, TeX was not. But these were mostly second-thought projects of the "let's now finally do everything right" kind.
Getting access to SSH private keys might be an issue.
Anvil has been on my to-check-out list for a while, I think it's really impressive what you guys have done.
Any app can access e.g. Dropbox directly, no? It'd just have to "display" it as a filesystem. Probably too much work..
I can't believe that you came to that conclusion after trying them both. Try comparing the config files for Swarm and k8s for the same system, the former are much shorter and simpler.
With npm 4 things went south and never came home to us. We use macs, pcs, linux machines and nowdays we fear `npm i` like the plague. I don't care if it's the registry, the executable, the stupid packagelock.json, node-npm version mismatch or an installer script, the endresult is frustration.
iOS apps can access third party services..
Easiest solution without infrastructure imo is to vendor node_modules as a git submodule.

(Of course it's even easier to just add node_modules to the repo but that is messy).
I think you can use curl to accomplish that for many apps. That’s the secret sauce of Workflow.
Why is it rated “age 17+”?
Yea. And the name is very similar to MacOS’s Terminal.app which is developed by Apple. Might want to update the title to reflect that it’s third party.
It's cool, but are there any practical uses for this?
I thought Apple significantly relaxed the rules on running external code inside an app. Pythonista is pretty powerful these days. So I'd be hopeful a full shell with scripting support could make it into the store (still sandboxed, of course)
It reminds me of this article, Everything is Broken. Perhaps a house of cards becomes solid architecture through the test of time..?

https://medium.com/message/everything-is-broken-81e5f33a24e1
> Is there a valid defense for a platform whose security relies on the unanimous cooperation of a widely-scattered developer base?

The defense is staged deployment and active users. This obviously depends on the blutness of the malicious code.

If I may assume easily noticed effects of the malicious code: A dev at our place - using java with maven - would update the library, his workstation would get owned. This could have impacts, but if we notice, we'd wipe that workstation, re-image from backup and get in contact with sonatype to kill that version. This version would never touch staging, the last step before prod.

If we don't notice on the workstation, there's a good chance we or our IDS would notice trouble either on our testing servers or our staging servers, since especially staging is similar to prod and subject to load tests similar to prod load. Once we're there, it's back to bug reports with the library and contact with sonatype to handle that version.

If we can't notice the malicious code at all until due to really really smart activation mechanisms... well then we're in NSA conspiracy land again.
At the moment I am still working as a 3d graphics programmer, as a freelancer. I probably wouldn't do that except that I have some bills I need to pay off quickly—or I'd only do it part time. What I'm trying out for now is working for a little and saving money, then not working for (anyone else for) a while while building whatever I want (sometimes pursuing business ideas, sometimes things that are more like art projects). The work I've taken has also been sharply slanted toward more interesting + laid back, rather than more money. Not sure how bad it would be if I went in the other direction...

I think my ideal would be to at least for a while go back to the grocery store where I used to work (3 days a week, 10 hour shifts), while working on other projects in my free time. I've found this works best for me because it necessitates regular physical/social activity which is important for balancing the other work...

G'luck!
> an on-peen private dependency server

SURELY you meant on-prem, right?
"Have you ever noticed that anybody driving slower than you is an idiot, and anyone going faster than you is a maniac?" --George Carlin

I think the software version of this is: any system with more structure than your program is an over-engineered monstrosity, and any system with less structure than your program is a flakey hack.
There are over 700 comments on this issue on GitHub. It is turning into live chat room.

https://github.com/npm/registry/issues/255

Be part of the history :)

EDIT: there are now over 1100 comments/memes.
U.S. dramatically increased searches of electronic devices at airports in 2017
I’d caution you against ever visiting the websites of Microsoft or Google.
> advertising cannot be one of them because both mediums have it

Advertisers used to be in the dark about which half of their money they were wasting.

That let the media guys (journos, etc.) get away with some stuff.

No more. Delivery is the word.
True, but I wasn't advocating doing silly things with dangerous animals. I was replying to a comment suggesting that their presence indicates that ..

> Inhabiting Australia is a testament to man's arrogance

.. whereas the stats indicate that the dangers in practice are minimal, and the measures to obviate them are largely obvious, easy to implement and almost universally observed.

Rare's the week I won't come across a brown snake or redback. Never's the week that either is the most significant danger I face.
AWS has GuardDuty now which can monitor for this type of traffic for pretty cheap.
That's a scary scenario, and all too possible.
> grep cpu_insecure /proc/cpuinfo && echo "Patched" || echo "Unpatched!"

That command checks for the "bugs: cpu_insecure" entry in /proc/cpuinfo. However, that line only appears in some of the kernel versions. Recent kernels will have either "cpu_insecure" or "cpu_meltdown" (the name has been changed), while for instance the 3.10 kernel from CentOS 7, which has a backported version of these patches, doesn't even have the "bugs:" field.

And it's that 3.10 kernel which has all the workarounds (both for Spectre and Meltdown), while the more recent kernel has only what's been upstreamed, which so far is only the Meltdown workaround.

It's a mess.
I've been thinking that it's a good idea to do that lately...
Not the OP, but here's their hackathon presentation as well: https://www.youtube.com/watch?v=w-RN0EkxWxA

(Disclosure: I'm one of the organisers.)
https://www.theverge.com/2016/3/24/11300840/how-an-irate-dev...
Weird means unusual, strange.
My person impression is: not really at this time. But it's a pretty amazing proof of concept, and could grow into something immensely useful (a full local shell). I'm really glad this is open source, so there is the potential for people to contribute more substantial functionality.
So could MS-DOS ;)
And then there were five.

Moon walkers still living are Harrison Schmitt, Buzz Aldrin, Alan Bean, David Scott, and Charlie Duke.

Is there any chance we'll have another person on the moon before these guys are gone. They're all in their 80's now.
There's Blink (blink.sh) already for that use case
Ha, what an excellent timing with another related story on top of the HN: https://news.ycombinator.com/item?id=16087024
>I'm Australian.

Probably explains why you have a disparaging attitude towards indigenous knowledge.
It says on the next line: "Unrestricted Web Access". The App Store rules say if you can use it to download arbitrary web content, it's gotta be 17+. Otherwise, age restrictions would be pretty much meaningless.
Glad to see the developer who reserved the name was able to put it to good use. Almost all built-in MacoS app names have been taken on the iOS store [1].

[1] https://judge2020.me/rmTqJ5XV.png
tldr: genetic analysis shows that parrots and falcons are closely related.

And... that's about it for this article. Here's one that's more in-depth:

https://www.theguardian.com/science/2014/dec/11/birds-evolut...
> "...modern fiction, particularly English-language fiction, has moved in the direction of the televisual, anyway. Much so-called literary fiction is evidently written with an eye to an option for film or TV adaptation."

These statements (and therefore the points which follow) lack evidence and do not align with my anecdotal experience, which suggests to me some selection bias (likely from both myself and the author). I would be deeply surprised if a great enough portion of books are 'written with an eye to [a TV adaptation]' to cause a significant impact on writing quality and style.
That's not true in a whole lot of industries. Many (!) small shops simply can't choose the cloud because of various reasons (regulations, for example).
Check out pythonista. It can do many of the things you are talking about, except in Python!
I am very surprised that a package manager of this calibre and impact abstains from best practices when it comes to authentication through code-signing. Other package managers are miles ahead of NPM. For example, Nix, which uses immutability and hashing to always produce the same artifact, regardless of changes of the sources.
Or you know, just things far away moving at normal speeds, like also happens with sound. The sun for example is not physically in the place it appears to be due to the 8 minutes of light travel time and the fact it moves about one diameter in two minutes.
It’s a drop-in replacement CLI tool. Let’s not be dramatic.
> And you'll find it difficult to turn "Forget" into a file extension.

I must be missing something, but wouldn't .forget be the file extension you're looking for?
Living Free (2016)
Ah keychain, of course :) Thanks for pointing that out.
Great idea! Definitely calls for aliases, though.
Inside the Leviathan: Microsoft’s Corporate Culture (2000)
am I the only one who thinks this could be more than a coincidence?
A part of me wishes all websites were like Berkshire Hathway [0]. No javascript. No jquery. No bullshit. Fast, legible, and unpretentious.

At the same time, we also love creative expression and individualism/branding.

Perhaps we've swung the pendulum towards the latter, which caused it to spin out of control in utter unpredictable chaos. Hijacking keyboard in a browser should NEVER be allowed. I don't care about any reason.

[0] http://www.berkshirehathaway.com/
What's the performance like, compared to Electron?
>I don't know if the fd is wired directly to the command's stdout or whether the output is written in its entirety to a hidden tempfile first; the former sounds more natural and efficient.

Nope. <() and >() is equivalent to creating a named pipe with mkfifo and writing to it:

tmp_pipe_dir="$(mktemp -d)"
mkfifo "$tmp_pipe_dir/pipe"
make-input >"$tmp_pipe_dir/pipe" &
process-stuff --file "$tmp_pipe_dir/pipe"

That's the whole point of it, so that the data can be consumed in parallel with the producer.
CleanMyMac 4 Crack and Product Key [Latest] 2018 Download
> Any plans to include ssh and/or mosh?

I saw this mentioned on a blog that I read only last night:

Blink Shell: Mosh & SSH by Carlos Cabanero

https://itunes.apple.com/us/app/blink-shell-mosh-ssh/id11567...

It’s $20, so I haven’t tried it yet. UI looks good and reviews seem positive. I am not affiliated with the app or dev.
Also note that the “light’s reference frame” is not a meaningful concept.
The term "nazi" is not simply mildly offensive, there are likely legal implications if you want to serve users in Germany.
https://www.theregister.co.uk/2016/03/23/npm_left_pad_chaos/

left-pad was a package to, you guessed it, pad a string with n leading characters. Personally, I've always just written my own 2 line function for it (something like `function pad(s, n, ch) { return new Array(n - s.length).fill(ch).join("") + s; }`), but a bunch of packages either directly or indirectly depended on this left-pad package, so they all broke.
I read both, and I can confirm that meltdown is not fixed by the microcode update alone. But I'm confused by intel claiming a fix for all three variants of exploits: I would have realistically expected a proper fix for meltdown, but it seems that intel can't really fix it in microcode.
From my understanding they’ve always had one, but until npm@5 it wasn’t safe for concurrent access (side note: Maven still isn’t) and was prone to corruption. I think they’re making their way toward true offline cacheing a-la yarn, if they haven’t done so already.
Swap is activate pretty late in at 5:59 and you can clearly see there isn't much disk activity going on.

A barebones debian installation should be using < 50Mb at boot, so a custom gentoo could be <40Mb
There‘s a company named „Wix“, which is German for „masturbate“. I really don‘t know why they don‘t use a different name in German speaking countries. Maybe it‘s not a big deal, and people can deal with the fact that words mean different things in different contexts?
We self-host Artifactory. If our internal instance goes down, it's always possible to fall back to the public registry of language (NPM, Maven, pip etc). It's far more unlikely for our Artifactory and the public registry to go down simultaneously.
Can anyone explain why the npm registry still exists if it cannot guarantee that uploaded packages remain available? The current state makes it pretty useless as a reliable source te base software on because you never know if you're able to build it again in the future.

They should take a good hard look at NuGet, which does not allow packages to be deleted so builds are guaranteed to be reliable. Still doesn't hurt to locally cache packages with software such as Klondike.
(2007) Is C++ hurting Mozilla development?
Found this recently. If I understand correctly, it interestingly lines up with the very early stages of Rust.
You should be using the --frozen-lockfile flag in any production build system.
The Byrds, Turn! Turn! Turn!
gotta have priorities.
> New Geometry Representation might be a fine name for a new format, but you're not going to use its acronym.

I might... the acronym doesn't ring any bells and a Google search doesn't show anything special (if anything, it already shows a bunch of other things - including companies and organizations - using the same letters). What is the issue?
Counterfeit Fire and Fury enters top 100 on Amazon.com
I’m pretty sure they’re referencing the Byrds song and not the Bible directly:

https://m.youtube.com/watch?feature=youtu.be&v=pKP4cfU28vM
I'm building an editor like this right now. I'm wondering where you see the benefit of using a canvas for the timeline rather than html elements?

Would you be able to share any details?
The CryptoKitties Genome Project (part 2) – On dominance, inheritance and mutation
Time to switch to Nginx with a FastCGI cache. ;) (If the timeout is set to a couple of seconds, you'll serve thousands of simultaneous requests easily.)
Isn't linking the step which needs the most memory?
I ran FreeBSD 4.x on an original Pentium for several years from 2000-2005ish. Slow compilation of the world and ports, but it ran fine.
yarn is one of those things coming out of the JS world that is actually really well made. yarn, typescript, react; say what you want about js fatigue, these are rock-solid, well-tested projects that are really good at what they do.

A major reason for the high toolchurn in that ecosystem is how many of those tools are not designed from the ground up, don't quite solve the things they ought to, or solve them in really weird ways (due to the low barrier of entry partly). But that doesn't mean all of it deserves that label.
That's what Google says, which I thought was based on a "clever look" at Last-Modified or explicit dates in the article. However, the articles mentions Windows XP, which I think wasn't known until 2001. So Google might have just picked the only parseable date from the page.

Edit: After about 5 minutes curl answered: Last-Modified: Mon, 27 Dec 2010 20:40:54 GMT (which is unsurprising given the web.archive.org info showing amends of the page)
If I understand it correctly, Spectre only works within a single address space.
It’s not that the points outside the light cone don’t exist. It’s just that each point represents a “spacelike displacement” rather than a “timelike displacement”. If you like, you can think of any point outside the boundary as happening simultaneously to the spacetime point at the vertex of the cone, if you just pick the right reference frame.
So that's why my "npm install" on Heroku randomly started failing.
For psilocybin it looks like the more powerful experience means more pronounced and longer lasting therapeutic effect:
"Reductions in depressive symptoms at 5 weeks were predicted by the quality of the acute psychedelic experience."
https://www.ncbi.nlm.nih.gov/pubmed/29119217

And there are more and more studies about the mechanism of psychedelics such ad psilocybin and LSD coming out, essentially telling the same story.
the comments are literally making my Saturday
The issues with the NPM Registry are not technical but management issues and decisions not properly thought through.
You need to run dist-upgrade or some other variant that will install new packages to pull in kernel upgrades. The reason is that each new kernel is its own package, depended on by (in the case of Ubuntu for example), the linux-generic package. apt upgrade wont install new packages, dist-upgrade will.

other options include "apt upgrade --with-new-pkgs" or using unattended-upgrades to automatically install them.
Yes, if your company has Artifactory or similar. I think most of these outraged folks are just memeing.
It isn't quite the same. You don't pay a video streaming service for your connection. You pay for a connection and optionally use it for a streaming service.

You pay for TV to watch TV, you can't do anything else with it other than view it.
Webview – A tiny cross-platform library for C/C++/Golang to build modern GUIs
Final Cut Pro 10.4 Crack Download
Show HN: Trial-And-Error and Generating Floats with Increasing Detail
Ah, good point. Though that's a bit like using .hackernews instead of .hn.
Multi-master? Kubespray supports multi-master deployments now.
Looks like it requires iOS 11
I don't see Adverts online anywhere, I have no control of that with TV?
I love archive.org, so.. so much.
I still enjoy listening to my Clockwork Orange soundtrack that I got for my 16th birthday. I used to listen to it all the time when doing math homework. Good music for concentration.

My fave track being 'Theme from A Clockwork Orange (Beethoviana)'.
Why would I google a very idiosyncratic phrase that next to nobody except you is using?
My Thoughts on Working Remotely, One Year In
Fantastic read. Before reading the article, I assumed there were many HN readers who were extremely proud about their Raspberry Pi being invulnerable to Spectre or Meltdown
Seems like a lot of work to get a supposed 10% agent efficiency gain, and the article is silent on whether this translates to improved customer satisfaction. If anything, it seems like this would further exacerbate the tendency of high-volume scripted support to be unable to deal with anything that's not the common case.

Most ML in support implementations I've seen, including the one in my team [1], focus more on providing solutions directly to the user so they never need to talk to an agent in the first place, which (if successful) provides far large efficiency & user satisfaction gains.

[1] https://youtu.be/bFHk2wUaCCs
Eh, i like desktop development and i make desktop apps for 20+ years. Before i got Windows 95 i was even trying to make my own DE for DOS in Turbo Pascal and before that in GW-BASIC :-P. I love the desktop.

Web stuff on the other hand can die in a fiery death, as far as i am concerned together with mobile stuff they are the source of everything wrong with the desktop today :-P.
I doubt they did it out of a desire to better serve users in Germany.
> I was here.

> We made history! Fastest issue to reach 1000 comments, in just 2 hours.

> cheers everyone, nice chatting with you. 17 away from hitting 1000 btw!

> Is GitHub going to die with the volume of comments?

Kind of disappointed the NPM community is turning github into reddit right now.
Does that backend use nuget for dependencies?
Sounds like good hygiene, though it seems burdensome if everyone must do it or seriously risk infection. Ideally there would be at least minimal sanity checks and a formal process before a package can be claimed by someone else.
To be completely fair, it isn't exactly drop-in. There's new commands for a bunch of things, mainly around adding new packages locally and globally. I led the yarn switch effort on my direct team and had people coming to me weeks after asking how to do X because of the different commands.
Same here, but 2x LG 5K monitors.

1. Stopped using clamshell mode (laptop lid closed) and that has helped.

2. Downloaded the LG firmware update for the monitors. Updated both monitors, also seems much more reliable.

(10 day uptime, up from about the usual 12 hours)
Node seems OK. NPM OTH is pretty sketch.
Drag&Drop (Graphical front end web development framework)
On top of that, they way countless packages are used everywhere is potentially exploitable: https://medium.com/@david.gilbertson/im-harvesting-credit-ca...
No - you don't need it to be swarm aware at all.

All you need to do is create a docker service out if traefik/nginx/haproxy/whatever and bind the ports of the service to type "ingress". From then on, all traffic is internal - and you deal with it normally from one docker service to another.
So you'd rather Hacker News was an app correct? I sure don't.
NPM doesn't make the package names unavailable after removal???

EDIT: That would be a massive security problem!
Obligatory xkcd:

65 years

Number of living humans who have walked on another world

https://xkcd.com/893/
Ask HN: What are the cheapest yet reliable forex/commodities/indices brokers?
Thanks for the correction, Robert! Now I'm curious where I got that notion.
Not "standard", but there's definitely a couple solutions for this. We tried one at my work but it seemed a bit flakey.
How do we tell how much snow fell in a storm?
Sorted integers compression with Elias-Fano encoding
I just threw up into my mouth a little.
Oops that’s the asterisk (star character) that HN interpreted as italics. In hacker news formattingnmy two examples are

`!*` and !gi:*
No and most likely there won't be. It is still thought that psychedelics can trigger or worsen schizophrenia in those people - it is certainly possible, though nobody knows - and all studies will try to play it on the safe side and exclude them. Remember these are still Schedule 1 illegal drugs, so anyone trying to get them rescheduled wants to avoid controversy.
Right, that's what I meant. The command is run in a child process with its stdout writing to the pipe. The script gets the read end.