skysight-inc/HackerNews huggingface dataset:
Blow for Bitcoin as Visa freezes users’ debit cards
Why does the magic mouse have fast charging but iPhones don't?
I mean this in the kindest possible way:

You're taking what I wrote too literally, and thus missing the point. What I wrote means: if the only Python you know is 2.x, it might close off opportunities for you in the near future.
In my experience (not the original commenter), people like to talk, especially when the subject is their expertise. Just approach people in a sincere, hearty way.

It is a slow process, but when you're in that "listening mode", you get to hear about their (and their industry's) day-to-day challenges, problems that they encounter, and their current answers to those problems. They might not give you their whole financial records, but the insight you get is far better than what you'd end up with after searching the Internet for an afternoon.
> Or point folks to some notes from an updated version of the class.

I would love to get updated version of notes.
Python 2.7 is currently supported. It's not a great idea, but at least defensible, to still be developing against it today. But the moment it becomes officially obsolete and shops have to justify paying special support contracts to maintain it, I think it'll become very hard to explain why that's a good business decision.

There are valid reasons for using 2.7 today. I think it's professional negligence to not at least be planning for the inevitable upgrade to the current version. Honestly, it's almost never as hard as you'd think. The most common hurdles are str/bytes incompatibility, and 3.x only reveals those problems where they already exist in 2.x (where the code is quite possibly not working as expected but silently passing wrong data without warning you).
Show HN: Capculator–Simple calculator of potential market caps of any cryptocoin
Thanks for sharing, that's quite interesting IMO.

I don't see it as a knock against XMPP, just an interesting tidbit of information and an example of a wide-spread use case.

Moral opposition to drug use is irrelevant here, people want to get high and will find ways to do so, I think the usage of XMPP in Eastern Europe is a great example of why cryptography is important, and why everyone should have access to encryption.

The fact that telegram is used in Eastern Europe for drug purchases is very interesting as well.

It's a good thing people know how to use XMPP and can use it at will for anything they wish, including online drug purchases. Which are going to happen regardless of moral opposition, encryption centralization/decentralization, etc.

Like it or not it's a valid use case.
Yeah, you make a good point. I'm not outright rejecting keeping your secrets close, but it doesn't instill a lot of confidence for me.

After left-pad I think we'd all like to see a strong, well documented methodology to keep things like this from happening again. The broad strokes can't be any more clever than what the rest of us would expect, so why not at least provide a basic idea of what you're doing and then we could trust the system a bit more.
I've had ECC RAM once, it failed and ECC caught it before it could damage any documents. ECC memory also keeps a log of how many corrections it's made. In a long running machine that gets hot there _are_ bit flips and they _are_ significant. Especially if you're spent days working on a video file and don't have the technical skills to fix it in a hex editor.

I've also had memory issues on non-ECC machines, it's a lot harder to diagnose and much more frustrating. ECC memory should be standard in modern machines IMO.
That's true, but we're talking about computers here. Computer chips don't use TTL, they're all CMOS, which uses FETs (MOSFETs to be precise).
> claim that patriarchy is a misnomer because it's bad for men too.

Nope. What I wrote that it is perpetuated/enforced by both men and women (arguably by women more than men) and has both negative and positive effects for both men and women.
We have cancer in social media, called facebook and youtube.

Please, get rid of it by using any other provider for videos, emails and your family status updates.

They are straight line to CIA and other government spy organisations.

Please leave them asap.

This cancer isnot worth to save it.
Yes but not without giving them a few days warning.

Typically the most you can get out of a major branch of a national chain on a moments notice would be $100,000 max. This changes a lot at the regional level and based on the individual bank and the amount of risk they have from robberies.

My credit union couldn't even let us withdraw $20,000 in cash when my business needed it.
When I’ve worked trade shows for my company, I’ve often met visitors who are just exploring the market. Being up front is good. Keeping out of the way is a “real” customer shows up at the booth is appreciated.
Pakistan Documentary – Explore the Beauty of Pakistan – Top Tourists Places
https://news.ycombinator.com/item?id=16077873
JNR (and JNA and cffi) strike me as unsafe due to the lack of type enforcement. Systems like this let you call any random pointer as if it were a C function of any type. That usually works, but sometimes doesn't. If you're lucky, mistakes make your program blow up right away. If you're unlucky, you get impossible to diagnose memory corruption.

I'd much rather write conventional bridges and have the system check that I'm right.
Sell HN: Do you have a side project you want to sell? (2018)
I loved the old Sell HN thread at https://news.ycombinator.com/item?id=5803374

Are there any new/other projects up for sale? Also feel free to post updates on projects you've posted in the previous thread.
If I was managing npm-using systems, this press release would not put my fears to rest. They need to publish a full review of the contents of packages replacements that were uploaded (even if just for 5 minutes), and publish those replacements in a safe form so they can be reviewed personally by any concerned npm user (any user - not just those who downloaded the replacements through npm itself).
Outside of Linux, is there any point to ASLR in a provably memory safe kernel like sel4? Like, I get the main point is to stop ROP gadgets, which obviously aren't an issue when you can't corrupt memory. Are there side benefits though?
Am I missing something in thinking that a reasonable solution is to temporarily block downloads of potentially malicious packages? Why remove them?

EDIT: or better yet, don’t allow people to download the update, just keep users on the old, ostensibly safe version until everything gets sorted?
I agree with you that attributing this view to a whole group is likely to be neither accurate nor particularly interesting. Plenty of feminists and others seem to be waking up to the conclusions made by this piece.

As much as I believe you that most people furthering this view had the best intentions, that does not stop us from critically inspecting if this idea is a good one when applied in real life. In practice this has turned into what the article describe, and I believe any claim to the otherwise is at this point only of rhetorical interest. Are you claiming otherwise, and if so how do you explain the mob-like behavior with no due process?
Thanks. Too late for me to edit.
Not particularly. We do it all the time when the free market misses some context. I see no major difference between a carbon tax and an affirmative action policy.

In both cases, the naively optimal action misses some important context, so the system is then tweaked to modify the outcome to take the external factors into account.

Do you have any alternative that isn't isomorphic to affirmative action?
Digests: non-technical summaries of research papers
Apple Joins AV1 Alliance
iPhones do have fast charging, see Power and Battery on https://www.apple.com/iphone-8/specs/

Also a magic mouse has much lower power drain, so the same amount of charge lasts much longer on the mouse.
iPhones do have fast charging, but the mouse takes waaaay less power so a small amount of charging time gives a large amount of usage.
> we should consider that the time has come to revive the country’s traditional approach to monopoly. Since the Reagan era, antitrust law has operated under the principle that monopoly is not a problem so long as it doesn’t result in higher prices for consumers. Under that framework, Facebook and Google have been allowed to dominate several industries—not just search and social media but also email, video, photos, and digital ad sales, among others—increasing their monopolies by buying potential rivals like YouTube and Instagram. While superficially appealing, this approach ignores costs that don’t show up in a price tag. Addiction to Facebook, YouTube, and other platforms has a cost. Election manipulation has a cost. Reduced innovation and shrinkage of the entrepreneurial economy has a cost. All of these costs are evident today. We can quantify them well enough to appreciate that the costs to consumers of concentration on the internet are unacceptably high.

With the current deck of politicians, it is highly unlikely that anything will be done to address this
I disagree. Actually I am not a big fan of decorators since for me they tend to obscure WTF is going on in other people's code I'm reading. However, I quite liked the section "Decorators for verification" -- I hadn't seen that use case before and it seems handy to me.
So what if we blow up Earth? Even if we would blow up the sun, the Milky Way will be fine, and so will all other galaxies around us.

No worries. ;P
SubVirt: Implementing malware with virtual machines [pdf] (2009)
"Dear diary, here is how I repeat what thousands of people have been saying about Facebook/Google/etc. for years."

I am wondering how someone seemingly oblivious to what Facebook is can be a successful investor.
> Especially if you're spent days working on a video file

And didn't keep a backup. Most serious software will make incremental copies to avoid that problem too.

Seriously, hardware failures are just as likely.

ECC is useful, but isn't worth it for the price unless you actually can't be fault tolerant in any way.
“Fixing yourself” automatically fixes the “Facebook problem”. Because then, Facebook will be completely irrelevant to you.
Thanks for the correction. Indeed, OpenSSL is not under the GPL.
The builtin golang.org/x/crypto/acme/autocert [0] package manages SSL for you easily through Lets Encrypt.

[0]: https://godoc.org/golang.org/x/crypto/acme/autocert
Even in your examples I don't think the 'dynamic' part is negative.
yes, but because of the performance drop, people would have to buy more expensive cpus that run at higher frequencies.

"Checkmate"
-Intel.
Yes. Turbocharging increases mpg not by increasing thermal efficiency, but by allowing to use a smaller and lighter engine. A lighter engine means less mass to accelerate, therefore less energy to spend. A smaller engine means less internal friction so less energy lost. However this theory works well if you actually don't use the full power that turbo gives you, or you use it only occasionally. These engines have great advantage in lab mpg tests, but in real dynamic driving the advantage diminishes. The main problem is that by adding a turbo, you need to decrease the compression ratio of the engine, which decreases thermal efficiency. Another thing is that turbo needs some energy to be powered, and also has some of its own energy losses. This is not free.
Machine Learning Will Revolutionize Content Discovery
Why cesium? Why not tritium? Or any other of the thousands of radioactive isotopes?

Heck, the decay of an excited electron is unpredictable by heisenburg’ Uncertainty principle (delta(E) delta(t) > planks constant) which means any excited state, including an excited e-h pair can be made into an RNG
We'll review your resume
Hi! I run Daily Coding Problem with my co-founder Marcel. We have extensive experience interviewing candidates and being interviewed at a lot of tech companies.

For a limited time, we're reviewing resumes and giving detailed feedback for a handful of people applying for software engineering jobs. We know what gets resumes seen by recruiters and what impresses hiring managers. If you'd like to make your resume more effective, send it to us here: https://dailycodingproblem.com/resume-review

Thanks!
A lot of other early transistor logic families operated with such "unusual" (for today) signal levels too.

One wacky thing in IBM's transistor computers is that they would alternate NPN and PNP gates. This avoided an extra transistor in each gate to shift the voltage level back. So you'd end up with one gate using +12V/0V logic levels and the next one using +6V/-6V.

This technique was used in three different transistor logic families, each with their own voltages. So there were 6 different transistor logic levels, plus other miscellaneous logic levels (e.g. 48V relays). IBM's old computers were a crazy collection of different voltage levels.
Yes, and mega-tasking. Slide 3
It would be nice if people agreed on the correctness of said statistics, the interpretation of it and which statistics to talk about in the first place. One in four get sexually assaulted, the pay gap, opinion of Muslims about sharia low, they are all statistics but people don't even agree whether they are correct or not.
> The problem isn't that "well-meaning members of the community" decided to upload packages. The problem is that when their system decides that a package shouldn't be up it completely removes the package, as if it never existed, and allows the namespace to be reused immediately. Those "well-meaning members" should not even be able to hijack packages this way, as it means the people who aren't "well-meaning" can also do it.

Hasn't this been an ongoing issue with npm since pretty much its inception? I remember reading articles about this vulnerability and the hijacking of packages that were taken down temporarily years ago.

How has this not been dealt with systematically yet?
it's beyond disingenuous and flat out dishonest for npm to say the integrity of the packages was never jeopardized. within minutes there were reports that packages had been replaced with questionable and malicious content.

https://news.ycombinator.com/item?id=16087079

this is probably a good indication of how a much more serious security event would be treated by the organization.. just sayin
You still have to define the procedures to use with the protocol using language features - like decorators. For example: http://spyne.io/docs/2.10/reference/decorator.html
Only 8x PCI-E 3.0? That's a little on the low side for a regular card, not to mention chips on the same interposer, no?
The questions are not the problem. They are a variation of the Socratic method and are super useful - when used correctly - for checking your understanding, and following where the author is going to go next.

The problem is that the text is full of grammar, spelling, and punctuation errors. There are missing words, confusingly run on sentences, etc. It's an unnatural read because it hasn't had an editor.
And literally it means "a lightning strike"
Just because there are real reasons to have ECC does not mean you are going to experience them, let alone experience headache because of them.

Software is fault tolerant. Small memory failures can be trivially tolerated.

ECC simply isn't worth the cost, especially for workstations.
A Tale of Two Bitcoins
There's a difference between people who come across or read Reddit, and those who actually post and participate on Reddit. The Average Joe is usually part of the former.
A lot of large organizations will happily waste expensive employees' time to save a few hundred in equipment.
How do you treat addiction when abstinence isn't an option
> I think labeling or delineating women as 'vulnerable or marginalised' and ignoring their unique qualities and idiosyncrasies is robbing Peter to pay Paul. Acknowledging that women are 'vulnerable or marginalised' shouldn't remove their individuality, you can easily have both

I'm not at all sure about the "easily" part there. Humans cognition seems to be very prone to substituting stereotypes in place of individuals with unique attributes.

While I personally agree with your point, the popular media seems to be incapable of making arguments that require holding two separate opposing concepts in tension with each other. The mainstream media monologues on these issues are usually simplified to a childish level.
I think part of the point is you wont need a GPU (at least that's the idea).
So I sent those quotes to Richard Stallman: - https://news.ycombinator.com/item?id=16081602 (this thread's original message) - https://news.ycombinator.com/item?id=16081712 (the parent) - https://news.ycombinator.com/item?id=16081700 ("Stallman is the hero we don’t deserve")

With some encouraging sentences to keep on making the world a better place.

He felt honored. He asked me to post this for him.

"Now that you recognize these problems are real, how about joining in the work to fix them? See gnu.org/help for a list of many different kinds of work that we need (programming is just one of many), then pick one and help!"
The root of the problem is that a dependency can be downloaded and installed from only it's minified/obfuscated form, and without any verification that the code matches what is in the non-minified/obfuscated codebase. This is just exploited through people being dependency-happy and that no one really verifies that a package isn't doing more than what is advertised.

This same problem would exist if any server-side dependency repositories allow for code to be delivered in a pre-compiled form without any verification, similar to npmjs.
Please read my comment, before trying to read my mind. I'm telling you what it looked like from the outside. Nobody ever cared for the internal politics of Mozilla; what we saw was a wobbly org that looked anxious to build anything that wasn't their own browser. I didn't say the OS was responsible, nobody cares if FxOS ended up making choices that the browser should have made or whatnot. The problem was not FxOS; FxOS was a symptom of an institution that had lost its way before the OS was even in the picture.

> they are still playing catch up on the desktop market

It's not the sort of wave you turn in a month. 57 is a big release, give it time. It had a massive surge of good press, which is a good sign. If they can come up with developer tools that can beat Chrome at something, they will see numbers go up.

> totally irrelevant on mobile.

They are making inroads on Android, which is the only market they will ever play into. iOS will only be cracked open by legal coercion. Anything else is wishful thinking.

> But they have enough money to last years

Mozilla is not just a company, it's basically a public institution. Their role is to champion a view of the web as an open utility, not to be the most popular widget maker. They don't need bazillions of money to do that.
> that covers only half of my email usage at most

Yes, I guess that is the way forward. Split email into a set of different applications. Maybe one of them will take over the rest at some point.
I mean.. I wouldn't trust those benchmarks at all.

It does seem like good news for AMD though!
This article is from 2006. It's interesting but I'd hazard a guess that it's hardly relevant to what Google is doing now.
I reject the claim that "believe women" has turned into what the article describes, except in alarmist circles. The reactions to different accusers I think sides with me on that. Consider Weinstein vs. Franken. Reactions we're very different, in part due to the political nature, but also because the Franken accusations are less extensive than the Weinstein ones. Alarmism like that article misses the context that Franken chose to step down, prematurely in the eyes of many, whereas Weinstein has denied and fought this. Had Franken reacted like Weinstein, he'd still be in the senate and likely free of any major repercussions.

What mob like behavior and what lack of due process? Do you mean that people are seeing legal repercussions without due process? Or that private entities are choosing to disassociate from people without due process? In the second case, what standard of due process is necessary?

Are you suggesting it is morally wrong for me to disassociate from someone if I witness them committing a heinous act, because due process has not completed? If not, at what level of certainty is it morally acceptable for me to disassociate from them?
I "fixed" myself many years ago. I have sinkholed everything-FB. I suggest to anyone that wants to use FB, do so for 10 days, locate the ones they want/need, and then continue their dialogues in a more meaningful manner away from FB and whatsapp (also FB) and keep their comm channels open, without the cancerous environment of FB, with all their tests and manipulation tactics.
This is where public policy, international agreements (with teeth), and other such things come into play, as they have the potential to modify the dynamics and incentives driving the harmful activity.

Not that this makes it easy...
yeah, that's the one. thanks for clearing up any confusion that i might have caused by not reproducing your post verbatim.

anyway, gender roles and gender expectations.
I think those are all improvements in Python3, even if they can be a hassle to fix:

1. Lots of legacy code incorrectly treats strings and byte arrays as the same thing. If you're dealing 100% with all ASCII all the time that might be mostly OK, but it's the wrong model for anything involving Unicode (which is pretty much everything now).

2. Modes are defined on Linux and macOS at least as uint32_t. -1 isn't a valid value of that type.

3. That bit me a few time. I've accepted that `def foo(a, b_and_c, d): b, c = b_and_c` is an alright substitute.

4. I like the new version better. `'a' > 5` doesn't even make sense and the 3.x way avoids accidental nonsensical comparisons.
Search for 'tax' finds one instance:

> This allowed the platforms to centralize the internet, inserting themselves between users and content, effectively imposing a tax on both sides.

Sadly this does not contain the obvious fix: tax ads.
I've never used pinkie before. But according to its GitHub page, there is no version 2.0.5:

https://github.com/floatdrop/pinkie

It seems that someone took over the package during its absence from npm and deployed a version 2.0.5. Maybe to avoid any malicious takeover. But there is no version 2.0.5 anymore.
NASA Buys 3 More Russian Rocket Rides at $75M Each