skysight-inc/HackerNews huggingface dataset:
As others have said countless times on the original thread: new packages from different users should never have been allowed to replace the missing packages.

Even if a package is removed as malware, a user should never unexpectedly download the work of a totally new author that they haven't vetted.

Some of the protections should be done on the user side, but that's no reason for NPM to have dangerous policies.
To clarify, I don't think this is improper use of the upvote mechanism, I was just hoping for more engagement with the comment feature of Hacker News, given the 7k click thrus.
Why not compile and run the code during the interview? IMHO it should be way faster than writing stuff on the whiteboard and will save the interviewer the trouble later.
how did that work out?
Be upfront about your curiosity, otherwise it falls apart pretty quickly if you have a deeper conversation :) What you want to focus on is learning about the space and the players, not pitching them a solution.

I tell people that I am interested in the space, and am in listening mode —> and what do they do? Tell me more....etc etc
Not likely.

Aspergers is not about a disinterest in social interaction, it is a "blindness" to the unspoken "rules" of social interaction. Most kids will given just a bit of time pick up the indications in body language etc that means one has hogged the ball and should pass it around. And aspie will not, at least not in the instinctual way that most humans do.
Java has taken a couple different shots at this, going back a decade or more, and the newer option is currently enabled in Java 9.

Some background: https://stackoverflow.com/q/8833385/149138
Can you go to a fiat bank and ask for a million dollars to be put in a suitcase?
It is too late to worry about going first. A great many countries have already stepped up.

Recycling isnt much help. Putting a few meters of solar on your roof is far more important. Not taking a first-class flight to vacation on the other side of the planet is also good. Installing an entire roof of solar, and making sure your grandparents vote against the coal lobby, that's the best anyone can do atm.
> If you did the same for the top 250 stocks by market cap you should significantly beat the market with the same methods

Nonsense. If it was so easy to beat the market, I assume you're leveraged up and exploiting this opportunity?
Why Node.js comes with a client for a for profit company is still baffling me. NPM team has proven time and time again they are not competent enough to handle this responsibility yet they are given the free ride by the Node.js foundation.

Node.js package manager SHOULD BE COMMUNITY OWNED/DRIVEN
If the user knows exactly how the hashes are generated (I believe a random salt would prevent this), it could still be used to better target an online bruteforce, though other defences such as rate-limiting should still kick in.

If, say, you submit a password with a hash that starts "b94", if the database doesn't use a constant time comparison, you can use the timing to figure out that the stored hash also starts with "b94" (statistically, given network etc. delays involved), meaning you can pre-filter your submitted guesses (i.e. bruteforce offline and only submit guesses that start "b94").

It's definitely a edge-case thought (and probably not worth worrying about unless you don't salt/rate-limit requests). I also don't know if the number of requests needed to determine the timing would actually be less than just making random guesses outright (intuitively it seems so because even if it takes a lot of requests it shrinks the search space at each step).
OpenBSD didn't respect the embargo a few months ago with the wifi issue, no surprise that they weren't told about this up front.
“I'll believe corporations are people when Texas executes one.” — Robert Reich
> This is a piece without substance since it basically says "Oh hey, competing chips actually selling to customers have some issues. We promise we'll be better when our lab designs finally end up in your hands. Trust and fund us now!" We'll see.

I think they're fairly clearly stating that the licensing and community arrangements around RISC-V make it an excellent testbed for high performance mitigations to these problems.
> Hmm are you sure? I've read the fractal of bad design many times.

Yeah, I'm sure. And so have I. Maybe you should stop reading it to reinforce your prejudice and instead take a look at PHP 7.2?

> non programming language for non programmers, who suffer stockholm syndrome from all php abuse...

Hating PHP is almost like a bad meme. Obviously it's doing something right otherwise it probably wouldn't be as popular as it is. (Same can be said for Javascript, I guess.)

Your personal feelings about the language are pretty much irrelevant. The Fractal of Bad Design article, however, is actually spreading misinformation yet people with an axe to grind keep referencing it because it fits their agenda, hence why I react whenever I see it referenced.

Here are just a couple of examples of where it's flat out wrong and/or completely outdated. There are plenty more.

He's left in things that were fixed long before he published the article — e.g. the new array syntax — but that doesn't stop him from saying stuff like "Despite that this is the language’s only data structure, there is no shortcut syntax for it; array(...) is shortcut syntax. (PHP 5.4 is bringing “literals”, [...].)" Keep in mind, 5.4 was already out when he wrote it...

Not to mention the whole section on "missing features" where he basically enumerates things that most certainly doesn't belong in a language's core but in separate libraries or part of a framework, and —
surprise! — those are all available in both libraries, frameworks, extensions, etc.

"There is no threading support whatsoever." pthreads have been stable since 2013: http://pecl.php.net/package/pthreads
You have no idea how this hurts. I worked for crypto company for 20 months, but due depression did not took any crypto.
This is the first time I find myself wishing Hacker News were Reddit, just so I could proffer you the gold you so acutely deserve.
(Anecdata warning) They're all pretty bad at making financial decisions.
How many "common people" do you know? In my experience, many love to complain about all the little inefficiencies at their jobs, company policies that don't make sense in the field but that are officially mandated anyways, waste where the same work has to be done multiple times, departments that are not allowed to directly talk to each other, and so on. Then there is the general awareness of things in their industry (like the size of a German Christmas market business).

Of course this knowledge is not hard to get. You just need to do their job 8 hours a day for half a year or so ... or you could have a quick chat where they get to vent about their job and you learn something new. (You don't even need to have kids for that to work.)
Damn, you lost me at no caffeine.
You have a good starting set of questions. Every time you have a question—dive in and find an answer.

E.g. "what is the role of hashing in python?" Googling finds some unrelated stuff, but then on first page there's http://www.asmeurer.com/blog/posts/what-happens-when-you-mes... which at first very cursory skim seems informative.

Repeat for each question.
Ironically, more comments about your meta-comment.
Thanks for the input.
It picks randomly from the list; if the coin is not listed at that time it chose another one until fits.
"Oh Nooo" error is returned when cryptocompare api fails.
I'm probably going to be downvoted for being rude, but this is a pretty demented and parochial question.
Let's also not forget the huge amount of work women do successfully for our society that is unrewarded and unpaid.
Sarah Silverman’s powerful response to a sexist troll
I got the feeling that he meant the self-diagnosed types?
Why? Nobody has ever thought that a society where only men can be kings must mean that all men are kings.
I recommend checking out the snowy plover before they disappear from the west coast! https://en.m.wikipedia.org/wiki/Snowy_plover
This discussion isn’t about profiles per se; Miiverse was essentially a game-visible https://en.m.wikipedia.org/wiki/Oekaki forum. It’s the drawings that are worth preserving, being actual acts of artistic creation.

I mean, you could still compare this to things posted up in a bar—but it’d be the doodles people have made on their placemats. Some of those placemat doodles are genuine works of art, you know!
> I remember reading in a similar article that many "classical-liberal" types think that the wage-gap between man and woman may be caused by the fact that woman are naturally less competitive. Meaning that they are less careerist. This is of course a failure of meritocracy, in the same way that charisma often trumps skill at a job (which is the big problem for anti social men).

How is this a failure of the meritocracy? To me, this is the meritocracy working correctly and succeeding. A competitive person will naturally work harder to improve their skills because they have a greater desire to be the best. In a true meritocracy, you'd expect them to outperform less competitive people.
Statement on saturday’s npm operational incident
Is it true that admitting to being from outside the Bay is shameful, prevents making friends (!!!), and hurts job prospects?

If so, I feel even more lucky to be outside that culture than I ever have before.
Compare him to Picasso. Picasso never said "I had to pay the rent." He never considered earning money with anything other than painting. When he had no money he lived in friends' apartments. He faced and accepted poverty and hunger. Picasso did not compromise. Same with Van Gogh. Paintings on their own have no value. Buyers pay for the life story of the painters. The more heroic is your life the more expensive your paintings. Painter's job is to market himself in order to create a life mythology. This guy just painted. He did not create a myth around his life.
Very few things on Hacker News are such that you can directly download and install them; I don't know why you'd have that expectation. Anything from a full app to a code snippet to a cool article that has nothing to do with tech is welcome here.
Very little or none. But it’s easy to get carried away in the client with things like card number validation, detecting the card type based on number, date drop down picker for the expiry date, animation library for showing when it’s processing, etc. Let alone leaving in the standard includes like Google Analytics, tracking URLs, A/B testing tools, etc.
That's a horrible system for $3700 dlls. You can easily shave $1k off if you're smart about shopping for the parts. Also, assuming you're not going for OSX (apples and oranges I know), a thread ripper would be a much better choice for a CPU.
The pitfall of the digital assistant
We are being defeated in a digital war – but there is still time to fight back
What is worth of 1.000.000$ of BTC

= $1.000.000 ...?
Show HN: Create beautiful charts with one line of Vue.js
Most of the places I've lived, especially in the bay area, psychiatrists were completely incentivized to prescribe as much addictive and known to be ineffective medicine as they could to keep the patient dependent and coming back / paying. There was no incentive for and few of them were interested in actual non-drug therapy. Some were actually hostile to the idea of non-drug therapy or reducing/stopping the medicine I was on at the time. In addition, in the US, there are many reporting requirements that require psychiatrists to report certain things said in meetings with patients to officials. One can end up in a mental hospital with the cops searching their house by simply saying the wrong things or saying the right things in the wrong way. This just begins to scratch the surface of why psychiatrists are not like other doctors. And lets face it, many doctors in general are not that great at their jobs in general--a job where one mistake can mean the difference between life and death. Having anxiety about seeing any health professional, mental or physical, is hardly an unnatural or abnormal reaction. Then you get to costs, health insurance, etc. and it gets even easier to see why people would be deterred from seeing mental health professionals especially psychiatrists.
Related Question: How does one get counseling or other kinds of services like that if one is legally barred from doing so as part of their job? (gov job, so, yes, actually true)
Seven Things I Learned from One Year of Blogging
Internet Shutdowns – An Explainer
You make it sound like filesystems are so vulnerable. They aren't.

The chances of memory failure ruining data are extremely slim; lower than for hardware failure. If you care about your data, back it up.
Agreed. 6 is misleading as well. Seems like fodder for more mistakes, if anything.
It often comes with demonetization. It's especially a problem for people who make YouTube content for a living. Much, or possibly even most, of the income for these videos comes in a short burst when the video is first uploaded. This initial time can make up huge portions of a person's income.
And KDE, IIRC: system settings, input settings, keyboard, advanced, compose key.
In 20+ years that bit eluded me...
Shorter sleep related to difficulty disengaging f. repetitive negative thoughts
I can't help but wonder whether this is all just a show, and not addressing any of the core issues that are needed to fix this

That´s exactly what is going on.
It does and I'm well aware of it. It proposes settling on an idiom rather than a new instruction, for a very common sequence.

Very nice and very clean when done as they propose with this RISC ISA.
> All of this is probably just an inherent flaw in human cognition, and likely unfixable, without some kind of attempt at species-wide genetic engineering that completely reconfigures our co-operative behavior.

The rationality community would argue that this is solvable through education, perhaps even that it is a symptom of poor education.
I worked at several crypto companies, but since they were all nascent startups in Canada I wasn’t being paid enough to actually afford to invest any money in crypto. :/
I don't think this article had advice per say on relationships, just a shallow shallow glimpse into what they view as love and the process of getting into it
Can we teach a computer to predict when we'll die?
Correction: hyphen is U+2010, not U+2008 (which is punctuation space).
The usual cycle is that they party year 1, start looking for an affordable house year 2, and move out of SF (or get very lucky into a home) in year 3-7 after having met someone they'd like to have a home and child with.

I left the bay area midway through 2017, but up until that point, I saw those same patterns in play as usual.
Yes and no.

This is a PHP Fatal Error, which will cause execution to stop. But the compiler doesn't compile the entire file in the same way you'd see with other languages. Any code in a PHP file _before_ the type error will still execute just fine, but when the PHP engine hits the error it will fatal and throw a TypeError (along with a stack trace, depending on the verbosity of your configuration).
gerber dime has to be the Worst I've had,and I've had a ton.
Mate, you've got some broken images on your homepage.
> But the actual read from is allowed to occur, even if the "access denied" signal is given. Which allows the read to effect the state of the data caches. This was likely done this way as a performance booster, because this would allow speculative instructions to also perform cache pre-fetching during their speculation window.

Why is this? Is it because the CPU doesn't know ahead of time what is valid (because it depends on the "outcome" of instructions in flight), or is there something I'm overlooking?
Please use "cryptocurrencies" rather than "cryptos". Thank you.
> From-Congress is an attempt to collect letters sent by representatives to their constituents.

How?
Is there any automation?

How do you source the letters, and are they available on some .gov resource typically?
I got that error by putting in NMR manually into the URL in another comment here from January 31 2017.
The upside here being that societal evolution seems to be accelerating, just as nearly everything else.
yeah, that's what i suspect.
> tend to not engage well in the conversations that facilitates equality by building mutual empathy.

I think you hit the right spot right there. I always baffled me how little empathy hardcore leftist display for other people experience
If you want to fix the bias issue, take the top 250 from a year ago and choose randomly from them.
I don't know how we'll view psychology, but I believe we'll look back at a number of psychological illnesses and realize that they're a result of our environmental factors much more so than they are naturally-occurring diseases. ADHD is a prime example. I believe modern life is highly over-stimulating us and a sizable subset of our society has trouble coping. Was ADHD a problem before the advent of TV, cell phones, the internet and our 24/7, immediately-available society? It's possible that people used to just go undiagnosed, but I believe it just wasn't as much of a problem as it is today.

Concentration is a skill that can be practiced. I've struggled with it myself and have found that meditation is far more effective than medication in dealing with it. Moreover, when I do retreats or backpacking trips where I'm cut off from the digital world, all my concentration issues disappear. It's made me believe that modern psychiatry is myopiclly focused on identifying and treating symptoms and largely ignores the avoidable causes of those symptoms.
Heh, I'm not sure why you think its a fixed price. They're probably showing you the lowest sell order on the order book.
A person is not the same as a group. You want some individuals punished for what other people did. There's no justice there.
State v. Allen
That's not the normal experience – try uninstalling any extensions and check about:healthreport.
For me, I will often find the smallest actions I can do that will advance a larger task and the momentum is enough to push me.
This seems like a good use case for keybase.io. They've implemented their own proof of concept messaging system, but I have yet to see any third party integrate with the service.
Here's an exercise for the reader. Record a short video of anything, and ensure that the soundtrack is of you playing random notes on any instrument of your choosing. Then, upload the video to YouTube, and count the number of minutes before you receive the inevitable copyright infrignement claim.
Short term thinking distorts economic policy
> This, in spite of a family insisting I was the greatest.

Some would argue it's because of your family insisting you were the greatest, in part.

>At some point I decided if I had to work at anything, I didn't want to do it. If I couldn't immediately answer the question, I felt [it] was just stupid and it wasn't worth my time.

Yep, you are a smart, great person. Your family loves you because of all of the smart, great things you do, in part. If something is hard and doesn't come naturally to you? It must be something stupid and not great. So don't worry, you are still smart and great, and people still love you. Don't try anything hard.

I'm obviously being facetious, but according to some experts (though not all, not even most), that emotional dynamic is encouraged by praising kids for their intelligence or abilities, instead of effort. I don't know how much I believe it, but that type of weird insecurity does seem fairly common among intelligent people who were extremely precocious.
If you live in the Bay Area, hang out around Union Square in SF this week and strike up conversations with the people in suits hanging around in the hotel lobbies / coffee shops / bars. This week is the JP Morgan healthcare conference, the biggest healthcare investor conference in the world (with a strong emphasis on biopharma), and a great chance to learn more about biopharma

I personally believe that biopharma is the most interesting sector for entrepreneurs right now, and am currently writing a blog post to explain why (hope to publish it tonight or tomorrow). If interested, I can link it here once I'm finished.

One data point of interest: in the first four days of this year, biopharma startups raised a total of $1B (compare this to the $1.9B raised by AR/VR startups in all of 2016). this was across 16 companies. $673M of this was Series A rounds (in 9 companies)
While this is acceptable for the average application, Meltdown and Spectre should have made it clear to even the last idiot that shared infrastructure is. not. suitable. for security critical applications. Especially not for critical cryptographic applications.
"At this rate most major cities will have to be abandoned in X years."

"Meh, dinosaurs have come and gone. The Earth will be fine."

"...To combat this, we need budget. Starting this year, your tax will increase by five percent."

"Murder! Fire! Revolution! How dare you!"

...happens all the time.
Here+Are+Some+Reasons+You+Might+Be+Constantly+Tired
Analog Man in a Digital World
Regarding the question in the 1st topic: (https://shipilev.net/jvm-anatomy-park/1-lock-coarsening-for-...)

"
for (...) {
synchronized (obj) {
// something
}
}

…​could it optimize into this?

synchronized (this) {
for (...) { <----XXX----
// something
}
}
"

The answer would be no in general, I think, since it is unsafe.

Moving the entire loop into the synchronized block would make the statement marked XXX above, i.e. "for (...)" execute inside the synchronized block, which has the potential to change the semantics (for example, the statement may include an rpc, and we don't want to make that rpc under the lock).

The earlier optimization of

synchronized (this) {
statement1;
}

synchronized (this) {
statement2;
}

to

synchronized (this) {
statement1;
statement2;
}

is safe.
Wow, really? I've gone from regarding Firefox as a complete also-ran that I would never use unless necessary, to making it my default browser. Quantum is significantly faster than Chrome on my machine - it does eat more battery, but I feel it's worth it for something this fast & smooth. It feels like I got a new computer. (I'm using a 2012 MacBook Pro with 16GB RAM, still on El Capitan.)
Do you think these factors commonly affect both men and women? Or that these are more valued in Japan? This list is appealing to me, but it does seem to be describing something like the best possible characteristics in introverts.

I would be interested to hear what the other factors are.
I think you somewhat underestimate the complexity introduced by decoding x86, and working with the resulting μ-ops.
http://heartbleed.com/
Using a branch predictor to start execution of a branch is speculative execution.
What things are infinite (2016)
I've noticed the speed of deployment as well. Any idea why it's that slow?
Who on Earth would write "Python2" in their resume? I have "Python".
This article is misleading at best; I would not recommend it to anyone, much less to a beginner.
I think its more about the balkanization of American discourse rather than any particular group doing this on their own. There is an excellent comment by @stupidcar outlining this as part of this thread. Its worth a read.
I carry an Opinel everyday. They are great for the following reasons:

- Traditional french knife with a rich history

- Cheap (from $ 8)

- Mechanically very simple

- Lockable

- Many sizes available

- Stainless steel and carbon steel available (I prefer carbon because I like the patina)

- They can't be opened with one hand which would make it illegal to carry them publicly in Germany

The biggest disadvantage is the untreated wood handle. It can swell up if it gets wet which makes the knife harder to open and close. Some people deep fry the knife to make the wood water resistant.