skysight-inc/HackerNews huggingface dataset:
> a website just shows your username already and you have to fill out the password and can't use hotkeys. (I am looking at you google)

I don't know about mobile (especially Android), but at least on Google's authentication page, even though it only visually presents the username field, the password field is already there and is filled out by 1Password.
That's not the only point of the article I really disagree with:

> Here are some values that often work as natural keys:

> login names

This makes user names static. Which would annoy people if they change name (eg marriage, gender change, nationalization change (Chinese name vs English name)) or they just want to update their online handle.

> email addresses

Same problem as above. What happens if someone wants to change email addresses (eg they used a work one and changed jobs, or they got a new email to combat spam on the old one, or a new email address to reflect a name change (see above))

> mac address on a network

This makes more sense than above, but MAC addresses can be spoofed or even just used as a proxy, so you would need to be careful that the information you're uniquely storing against the MAC address is intended to be unique. Most use cases that immediately springs to my mind wouldn't follow his unique rule but I'm sure there will some examples that do.

> (lat,lon) for points on the earth

That might work if you also included an elevation point as well but office and apartment blocks (for example) will often have different tenants at the same latitude and longitude coordinates.

> Some people seem to struggle with the choice of “natural” key attributes because they hypothesize situations where a particular key might not be unique in some given population. This misses the point.

Actually no it doesn't. That's entirely the point as it demonstrates good planning and future-proofing rather than setting arbitrary business rules that are hard to rectify if and when you do run into those particular edge case scenarios.
I ran a Russian Erlang community site for years, I know pretty much everything there is to know about what's happening in Erlang space. I also worked with Erlang professionally.

Despite Erlang's and Erlang community's claims to how good the language is, it is not that good.

While Erlang (and it's community) where telling everyone how far ahead in the future it is, other languages and platforms (especially JVM) have caught up to it, and moved way past it.

It's nearly impossible to implement anything on par with Hadoop, Kafka, Kubernetes, <countless other distributed frameworks/tools/libraries etc.> in Erlang because for every little thing you can think of you need to build it from scratch. Even Erlang's claim "build massively scalable distributed apps" is a sham: out of the box it cannot handle more that ~80-10-ish nodes[1]. In today's world Java (and Go, increasingly) trumps Erlang in nearly every aspect and claim Erlang might have.

There are so few and far in between systems that use Erlang under the hood that it leads me to believe they are mostly flukes and isolated tales of success than proofs/representations of the language's strength.

[1]
For reference, see RELEASE project. Also, http://www.dcs.gla.ac.uk/~amirg/publications/DE-Bench.pdf, https://arxiv.org/pdf/1704.07234.pdf etc.

Our website runs on 75 nodes, with geolocated microservices, distributed database access, log aggregation, metrics, parallel deploys, etc. etc. etc. It's a huge overkill, and we're gonna scale it down :) But it was just so easy to do it. All in Python, Java, and PHP (!).

In all of Erlang's ecosystem you couldn't find a collection of tools that let you do 10% of that. And you would have to start with writing your own distribution layer on top of Erlang to handle those 75 nodes in three geographical regions.
I think it depends on the amount of business that you want. I do freelance as a side job and only have a few clients a year that give me an extra ~10-20k of income. I mostly do web scraping, data science, data management, and teaching (workshops, taught a couple university classes, adult education)

Networking events and word of mouth from other clients have been about half of my work, and the rest just sort of email me out of the blue based on either my LinkedIn profile or a book I wrote.

I don't blog, I don't have much of a professional website. The book I wrote is fairly popular, but I find that the people who email generally haven't read the book (although they might have bought it... to see that it's real, I guess) but they find me through that.

Will agree that cold outreach doesn't work at all unless you're doing it on a massive scale (and then you're just a professional salesperson...). I've done it, but it's literally never worked for me.
I've followed some videos on f#, rust is just one of those things i keep hearing about and want to look at why it keeps coming up in forums and i actually assumed it was just another functional programming language. Dropping into https://www.rust-lang.org/ I see that's not the case but im still interested, I look forward to getting rid of my ignorance in that area.
So, until when can we build firefox and run it, in chrome?
I'm not sure what's involved there. Do you have more detail, like a good blog post, to read about how to do that?
The space bar code and "secret word" portion together are the same across all sites. If your password is compromised on two or three services, the attacker has this constant portion, and the remainder of your password is a simple substitution cipher encoding the service's name.
This worse than what I expected
...which the browser convenietly provides, hence my suggestion to use it, targeting webassembly and webgl.
Saudi Arabia opens their archeology, architecture, and luxury to tourists
This is a pretty poor response to the parent's arguments...

>Now you have signups, instead of installation

How are these mutually exclusive? Plenty of desktop software requires a signup first. And plenty of webapps do not require a login.

>Only Linux end users have to care much about dependencies

It's rare to find a game that doesn't start by installing DirectX, Visual C++ Redistributable, and more.

>You're kidding right?

Modern browsers have powerful sandboxes and always-active updates to address security threats. Sounding indignant isn't actually making a point.

>Sure, if you only target one browser your code will probably work more or less the same on that one browser on at least some of the OSs it runs on

Browsers are very standardized these days. It's very rare that I write code that doesn't work cross-plat immediately.

>There aren't any walled gardens in PC Destkop land worth talking about, other than maybe the package repositories of Linux distributions.

And on mobile? Remember we're talking true cross platform here. Apple's App Store has far more limitations than you'll run into on the web.
McAfee's weekly coins
Former NSA hacker reversed Kaspersky antivirus to turn it is an espionage tool
I already see plenty of obfuscated JavaScript out in the wild. Script names have opaque GUIDs and slugs, and the code itself is inscrutable: defining single-character constants and recombining them later, dynamically constructing scripts to be dynamically injected into the page and then run, etc.

I would like to believe that this is done in the name of performance, but my gut tells me this is done in the name of keeping one step ahead of the ad blockers.

As it stands now, I feel that I as a user have no defense against tracking and fingerprinting except by monitoring and controlling access to the DOM at the level of individual operations. I am afraid this is only going to get worse with WebAssembly. "Audit the code yourself" no longer a viable solution except for a handful of experts.

On the bright side, perhaps WebAssembly will lead to fewer ways of interacting with the DOM, which could make it easier to detect malicious/undesired interactions.
Hello together,

John McAfee launched the so called "Coin of the week". This means John McAfee tweets a coin every week which has great potential.

We build this site to collect all his coins (also ICOs) so you don't have to search for them on twitter. And your get some further information for each coin with link to it's website and whitepaper. We hope you like it! Suggestions are welcome!
> GTX 1030 this $70 card's performance to value improves greatly. It has the same performance as a AMD 480.

Are you confusing it with the AMD RX 460? The 460 is similar to a 1030.

An actual AMD RX 480/580 is far, far ahead of that. It's closer in performance to a GTX 1060.
If you need performance, and portability, and something that can be more easily maintained, for example QT is the only way. Power tools that are graphics heavy, or music applications, or anything that requires heavy multimedia lifting, you're not gonna do that currently in the browser.

Maybe this will change in the upcoming years though also, I have a feeling the client/server bridge will be getting closer and closer as we reach more performant ways of loading code from the servers but executing natively on the client/computer/handheld/phone whatever.

Also, WebGL compatibility is still far away from really doing any production apps (I mean, to reach a state where you can guarantee your app to work on at least most computers people have). Many platforms/GPUs/driver combinations just point out blank refuse to work, or the browser has blacklisted problematic combinations, as these can in reality cause crashing of the whole OS and computer, this has happened to me many times while developing WebGL applications.
I'm not talking about locking the table. I'm talking about locking a table resource.

https://dev.mysql.com/doc/refman/5.7/en/innodb-locks-set.htm...

Quote:

"While initializing a previously specified AUTO_INCREMENT column on a table, InnoDB sets an exclusive lock on the end of the index associated with the AUTO_INCREMENT column. In accessing the auto-increment counter, InnoDB uses a specific AUTO-INC table lock mode where the lock lasts only to the end of the current SQL statement, not to the end of the entire transaction. Other sessions cannot insert into the table while the AUTO-INC table lock is held; see Section 14.5.2, “InnoDB Transaction Model”. "

If you have a long-running statement, it can block concurrent transactions. I've seen it specifically with 'load data infile', IIRC. We had to go through some painful migrations to remove auto-increment on some fairly large tables when we started seeing this.
قناة 24 سبورت
Google is running Fuchsia on the Pixelbook
Yes - and for each of these examples, there would likely be still a single "object instance" managing these devices (e.g. "Display" module). Or two entirely different modules ("Headset" module + "Screen" module), again each having only a single "instance".

The concept of instancing is inappropriate to most situations. The things that we have more than one ("dynamically many") instances from are typically dead data, but then again these are typically managed in a single pool. (That's "tables", again).
> It has the same performance as a AMD 480.

Yeah I don’t think that’s true:
http://gpu.userbenchmark.com/Compare/Nvidia-GT-1030-vs-AMD-R...
This will go on until one day a large enough government admits that moon landings back in the 60s/70s were filmed, instead of real.

The large majority of people here are based in facts instead of religion and dogmas. As a fact-based society, we should be able to look from a distance and re-evaluate the facts with a colder perspective.

From what I observe, every year we are either 5 year away from settling on the moon (or Mars), every year there are nn reasons why it didn't happen (loop and repeat since the last 50 years).

Very few doubt the fact that selfies of astronauts smiling directly at the sun are possible (without injury).

Very few wonder why the first landing was a success, right on the first try even as other agencies (SpaceX) iteratively fail on the first runs.

Very few ask why the the original recordings don't exist any longer, only botched TV recordings.

The effect of radiation outside the earth shield is simply too strong. We have always sent animals during any space milestone before humans. Look up what happened to them, if you can find the records.

I'm an engineer. If possible, would like to see humans on the moon during my lifetime. Instead, we are taught that the sun orbits around the earth and burn apostates on the public square. We can do better.

Happy 2018! :-)
Google is now testing its mysterious Fuchsia OS on the Pixelbook
DHH has the coolest desk and home office I've ever seen: https://www.instagram.com/p/BcnPtAwlAKe/?hl=en&taken-by=dhh7...
Check out the rest of the house too, amazing.

I think some people have this image that Basecamp and DHH is some scrappy bootstrapper fighting the establishment. But really he is living the life that even most successful "exited" venture fueled founders wouldn't be able to attain, and he's just saying there's another (perhaps even easier) way.

As I build my company, DHH + Basecamp, Jan Koum + WhatsApp, are my role models. Maximize the revenue per employee, not the number of employees (cough Twitter).
I expect that a majority of people would be very uncomfortable at one of these work-related parties. Beyond the man/woman power asymmetry there are a lot of other groups of people that would exclude themselves from these events, but that may be the point.
150k sounds way low for the Bay Area you can get that in other much less expensive metro areas.
Proud to be a paid user of PIA. It's a privacy-protecting just-works VPN with plenty of endpoints, nice chrome plugin, and Android app that does what it says. Thanks for your support of Linux Journal.
Technically you can, but if you have a Green Card application you have to restart the 12-year process over again.
> “In Delhi, you can’t become an important man without pulling some kind of fraud,”

This is not only a problem in India. We need to stop dealing with companies that have bad ethics or values, so that they go out of business. Do not work for them and do not do business with them. Sure you might lose money in the short run, but we all win in the end.
Infographic/Poster: Making Images Accessible
Did you mean something else? After a quick look a 480 has around twice the performance. Nearly bought a 1030 ;)
Meta-Decentralized Crypto-Currency
I do basically the same thing, and have for years also. My only frustration with this is that with some sites, due to arcane password restrictions, the algorithm either isn't implementable, or is only implementable in such a way I won't remember. So 90% of the time the strategy works great, and in 10% of the time it fails due to idiosyncracies of the sites involved.

I hate the stupid restrictions sites place on passwords. There should be almost no restrictions.
Why is what you have not a "small business?" Is that phrase just not sexy enough?

Being a stable bootstrapped small business is more worthy of respect than being an unstable underfunded startup, in my opinion.
Algorithms and Tools for Machine Learning in JavaScript
Mac Mini - TDP too high.
iMac - Lots of space for CPU + GPU.

We all thought the whole reason of sticking a dGPU close to CPU was because of space, hence a Notebook type machine. But if anyone could enlighten me why I want a desktop with Integrated dGPU rather then CPU+GPU combo which is likely cheaper, and easier to cool down.

Not to mention you are stuck with KabyLake 4 Core instead of the newer Coffee Lake with 6 Core.
Even if non action would move thing to the public domain. How would you know? It seems to me that the uncertainties would still remain.

As you say it might even be unclear who to talk to. How would I protect my self from liability? I mean we’ve had free software licenses of various kinds for quite a few years now, and lawyers are still uneasy about the whole thing.
Well, arguably the total number of working H-1B visas (including extensions while waiting for a green card) (and working H-4 dependents) is the more relevant metric.

That number is not tracked directly, but it's about a million or so, all at significantly higher wages than the median US personal income of $31,099/y.

https://qz.com/949589/the-h-1b-visa-cap-tells-you-very-littl...
I suppose unmanned in that context means 'not sharing the risk of the battlefield by being there' or something.
The Algorithm is a great solution - breaking the pattern would require password leaks from 3-4 different sites, and a human to spend time puzzling over it. For automated bots the passwords look unique.

What's your solution for annoying sites that require changing your password every 3-12 months, and not reusing previous passwords? If eHunterG8 becomes eHunterG9 and then eHunterG10, how do you remember the number you are up to?
Employing a few citizens/green card holders, doesn't mean it's not about money - it just to satisfy regulations, so you can keep getting h1b's approved.
Most of outsourcing companies now moved to having small offices in US. 5%-10% are employed in US, while the rest is outsources, such models with few employees onsite just helps to outsource more.
They need driverless, conductorless subways/trams in enclosed tubular right of way with passengers entering from one side and exiting from the other, via offset doors.
Think of the days when you had elevators with operators who were paid for pushing the floor number for you - (a carry-over from the cable-pull hole in the wall days when operators were needed.)
These trams were killed by the wages of the operators, in much the same way that modern subways are ruined costwise by the wages of the drivers and conductors who each have hourly wage costs of $50 or more = large ticket costs and avoidance to car use. In effect opportunists grabbed all the $$

In the moon race, NASA is so burdened by legacy wages and other costs AND the fact that Congressional opportunists grab the money that NASA was prevented from that course.
the fact this thread got over 100 points without a comment or discussion proves what I suspected.

most of us are observers when it comes to this tech. sure, there is some quick tutorial to build a "learning model" somewhere or read an article to grasp what is being discussed...

but when it comes to contributing something remotely significant, we got nothing.
whether it is due to lack of resources (giant datasets and computing power) or lack of knowledge and experience to even theorize something plausible.

this is even more frustrating knowing how important of a role this tech will play in the future.

being a passive observer is not enough.

I'm looking forward to 2018 AI summary.
I tend to respond obnoxiously to comments that are themselves obnoxious. If you check my history on both Quora and HN, you'd see that I am much more active on HN than I am on Quora. I tend to use whatever medium gets the job done. Best tool for the job and all. When you actually start submitting things at all to HN, send me a message so that I can learn from the best as to what the "proper way" to do things are.

The post got a lot of views, so I would call that a success. Not sure what point you were trying to make there.
I was a big fan of Creativity, Inc. That was my most gifted book this past holiday season.
As a workaround you can just take a screenshot (although that could get cumbersome with large diagrams).
This, a hundred times. An insane amount of work has gone into making something like Ableton Live. The general idea that applications should cost something in the range of 2 - 30 usd is ridiculous, when you compare it to any real world physical examples.

For example any instrument costs much more than that, and the same time could have gone into developing the software and building the instrument. Or heck, any handbag or fashion item can cost a ton of money, and people are ready to buy them, but when software actually costs something close to real value produced by that software, people get pissed these days.

I blame the iOS/Android markets that have created a biased and untruthful image for the costs of developing software. You can't expect to make a living from developing software that costs 1.99/2.99/9.99 unless you sell a ton of those, and most never do, but this market has effectively changed the mindset for normal consumers to get things either free or for a price of three cups of coffee.
Wow - I just love this! Thanks very much for the info - feels like a new pair of shoes for 2018 (coming from 15 years of omnigraffle)...
How to Run a Sprint Planning Meeting for a Happy, Productive Team
Wow, that smart resize tool is awesome, and makes this a good tool for roughing out dungeon maps. :)
PostgreSQL is the DBMS of the Year 2017
Yeah, I'd really like to see that statistic corrected for long-term prescriptions. Or better yet, controlled for diagnosis.

Following that link, we see that patients issued 30 days of opioids via multiple prescriptions have a 30% chance of one year use, but patients issued 30 days up front have a 45% chance.

Interpreting that as evidence for shorter prescription windows looks like unproven causation to me. There's presumably a reason some patients get 30 days as their initial dose, and that's not being controlled for.

The study suggests that since only 1% of patients got strong and long-lasting opioids, prescriptions for chronic conditions must be rare, but that seems wrong twice over. First, as noted in the article, 10% got tramadol at some dose, and may well be chronic patients. Second, recurring health issues are overlooked; a patient getting 30 days of opioids up front may not have a chronic condition, but might well have a recurring issue that leaves them needing subsequent scripts.

More broadly, we seem to be attempting to control opioids on the supply side in particularly foolish ways. It's already known that major problems include over-prescribing doctors and dosage cycles that produce withdrawal, but attempts to treat the problem focus on restricting well-meaning prescribers.
There is also a bug when you press a key during freeform drawing on Firefox Nightly. It doesn't properly set the active character. Works fine on Chrome though.
I look at stuff like this and wonder why I'm reading it because I'll never use this language.. but i'm glad it's here for people who do!
A pen.
PyDev of the Week: Lynn Root
> A large majority wouldn't need a car, and could instead use Uber-like services for the last mile.

They wouldn't need it, but I bet that majority would still want it.
Actually, I probably wouldn't count network error handling, because you can probably use something like vaurien - https://github.com/community-libs/vaurien - to deterministically mimic bad network conditions in an integration test in a fairly reasonable amount of time.

Also, integrating that tool would probably have applications beyond a single story so even if the change takes 5 minutes and making the test work with vaurien takes half a day, it's probably still worthwhile.

Assuming that no tool like vaurien exists, though (and there are plenty of scenarios out there where you'd have to build it from scratch), building the test scenario could become prohibitively expensive.
To expand a little on your last point: one of the guide lines I try to follow is expect your system to be successful. If your club is popular then it will eventually have two people with the same name. Don't waste people's time by putting in artificial constraints that will eventually become invalid.
Air traffic control is difficult and gets more difficult with more planes in the pipeline. At very least we can safely assume that reputation of unsafe airfield is very unprofitable.
Again, can you name any study that found a benefit with a non-laughable p-value?

If nobody can, then one just has to conclude they are indistinguishable.