skysight-inc/HackerNews huggingface dataset:
yeah, but... same for any code. A team of coders who don't know javascript will create buggy, insecure Node apps. There's nothing about SQL as a coding language that creates this.

It's more that modern coders are used to not having to learn SQL and trusting the ORM to do the thing for them. So when they encounter actual SQL (usually because they need to break the object <-> table mapping) it's all scary and weird.

Back in the day, of course, we had DBA's (DataBase Administrators) to make sure that application devs who didn't know enough SQL to not make a mess of things, didn't actually make a mess of things. And yes, we hated the DBA's because they were always telling us our SQL sucked. Great training though.

So, yeah, your point is valid, but there's a better solution to that problem: hire a DBA
Yes its pocket money for google, but also it said the following

>>The commission ordered Google not to impose restrictive clauses with immediate effect in these agreements.

plus, I am guessing this will encourage more people/companies to pursue legal action against google if they don't do anything about this.
I mainly read the comments, rarely the articles themselves. (That's not to say that I don't read articles in general — I do, but I mostly find them via Twitter.) Usually, I'm much more interested in what the community has to say about a given topic or issue than I am about the object-level news.
Case study in cryptocoin market manipulation:

https://pastebin.com/RdRAULtT

https://pastebin.com/1NTTBCXM

https://news.ycombinator.com/item?id=7126153
Foobar2000 is a nice and customizable/skinnable audio player also.
So suddenly people will see lots of websites as insecure. This way they will stop paying attention to this warning, and when they will find a really insecure website, they will just use it.
I get what you say. But are you, let's say, a Catia ISO programmer who has been thrown as a leader of a project team which purpose is to buy some piece of a tier software/project that will automagically cut your programming time by half?

He may be an engineer, whatever that means, but still: the average joe in that position will not spend a single second on thinking if he expects the solution he's buying to work for a reasonable lifespan. He's been thrown in a project, that's all. If you force him to state a requirement on the expected lifespan, he will surely say 'Well, as long as possible seems good to me'.

Disclaimer: statistics applies here, of course some people will care, but I'm speaking about the 80%, if not more.
> Filter again and be okay with missing something.

Yes, this is key. You just have to accept that there is vastly more interesting material in the world than you can ever possibly digest. Then be very discerning about what you pick.
I was thinking along these lines, but with more of a BallonFest '89 flavour to it

https://en.wikipedia.org/wiki/Balloonfest_%2786
I personally think that all stock advice is bullshit; if anyone had a working strategy, they'd use it and it would get priced into the market, making it worthless for the next guy.

but my favorite investment method is 're-balancing' between non-correlated asset classes. Set X percent of your money in equities and the rest in bond funds, for example, then if stock rises vs bonds, sell stock and buy bond funds until you are back to the same percentage.

The idea here is to force yourself to (slowly) sell into bull markets, and (slowly) buy into bear markets. I think that's the closest you can come to "buy low, sell high"
I also think that it's interesting that one of the main texts that this article applies to is King Lear, which also takes inspiration from the Book of Job, a contemporary Elizabethan play called Gorbuduc, prior versions of Lear ("Leir"), and the Cinderella story, among others. Generally, it's interesting to look at how Shakespeare inverts, changes, or fuses his sources: Lear is, like Job, an intensely ordered play that motions towards disorder, and like Job it contains a menagerie of animals referenced incidentally -- Shakespeare alone elevates this to a thematic discussion of "nature," which in turn also provides him a rich vein of material, since "nature" (i.e. mother nature, order, human nature, etc.) and "natural" (i.e. legitimate child, fool, unvarnished truth) had multiple meanings that provide thematic offshoots for the play. All of which is to say that the key isn't just what sources the plays but what Shakespeare does to transform his source material.
They meant replacing the cert fingerprint in the app that’s using cert pinning.
I would have nothing against it, if browsers just disabled Javascript on plain-HTTP web sites. I do it anyway by default, enabling it on domains where it serves some useful purpose. Treating non-HTTP content as untrusted makes absolutely sense (though I don't think that HTTPS really makes a https://random.l33t.site/ a trusted source of anything).

The old simple plain-HTTP plain-HTML web is still useful and practical for showing text (don't care much even about CSS - HTML 3.2 is perfectly suitable for showing readable information). It seems to become a victim of collateral damage in the pursuit of "better web", which is sad.
Nobody said it would need to be secure?

If you can get control over the computer attached to the equipment, you already won. You don't need to exploit the web server.
As a manager I’d probably advice against picking programming unless you love it.

I would definitely advice people to learn programming, but not necessarily to aim to become programmers.
My browser can show a 26 year old web page (http://info.cern.ch/hypertext/WWW/News/9211.html) just fine, and I have all reasons to assume that it'll be able to do it also after 26 more years.

If I write my own client software, that's far less likely to be the case. Writing your own is exactly the thing that you should avoid if long-term compatibility is important, sticking to open standards is a much better way to do that.

Using your own example illustrates it perfectly: if I had a 30 year old device running a Gopher server, that would be usable and I would easily be able to get a client running on a modern computer/OS - but if it needed 30 year old custom client software, then porting it would likely be a quite nasty project.
If my reading is correct, the violations were only for a period in 2009-2010. Whatever change of behaviour this ruling might have induced, it had happened a long time ago.
Show HN: Reactive form front ends with markdown for python
It's very absurd that Google is being fined for what it puts on its own website.

> The DG also recorded that Google was not required to pay any monetary consideration for its house ads which gave it an additional competitive edge.

Yes, it doesn't make sense to give money to yourself.

> Google shows two types of commercial units in India: shopping units which display ads for product offers of merchants; and flight units which identify flight offers for a given destination.

It shows ads to make money to pay for costs.

> Third, the search intermediation agreements prevented publishers from using search services of competing search engines.

I have no idea what this means. Any ideas?
I try to limit myself to things that actually pertain to me.
That's why I like this article. It helps train the non-rational part of the brain to relax and not panic sell even after the rational part is well settled on an investment process.
> The equivalent would be that you were building this device in 1987 and you embedded a Gopher server on it. It'd still be accessible today but users wouldn't be very happy about how they access it.

By using firefox 56? I'm not seeing the issue.

> As another user said, you own both sides of this problem so write your own client software.

Running 30 year old DOS software is a lot more painful than accessing a Gopher server. Is that really the comparison you want to make?
GitHub vs. BitBucket vs. GitLab
Maybe the whole U.S. is becoming bimodal, geographically.

I also think that the software "productivity" is in fact "multiplicative". That is, more software written means more complexity which takes more SW engineers to maintain. I actually think that there might be too much software. This is similar to lawyers, who can generate more work for other lawyers (supply generates its own demand). Weapons also have this property.
From Houston myself—I’ve mostly seen feeder roads refer to the roads with ramps alongside freeways, not the ramps themselves. Since moving, I’ve seen them called frontage roads elsewhere.

https://en.wikipedia.org/wiki/Frontage_road#Texas
but for users of NAS type devices, we've gone from an easy http web page to change the config to needing to install a custom certificate and change the localhosts file...
Any specific technique or tool you use to manage all this content?

I am medically handicapped. I spend a lot of time convalescing. HN helps minimize the degree to which I go stir crazy while doing so.

I don't recommend it as a method.

I know from long experience that the assumption is that those doing a lot of X are overachievers to be emulated and their perceived accomplishments to be aspired to. Such perceptions aren't necessarily accurate.
Secured.fyi – Ranking the most secure and private software tools
Hi HN! As the title suggests, I made this tool that ranks the most secure and private email, backup, VPN, cryptos and communication software :)

It's all based on a Google Sheet, which updates the website automatically when the spreadsheet changes: https://secured.fyi/edit

Couldn’t find a good comparison overview like this, and want to see if enough people are interested in it, because I would like to spend more time on expanding the data set, and add more categories.

I wrote a medium post here that goes more in detail on how and why it was made: https://medium.com/@fredrikaurdal/secured-fyi-ranking-the-most-secure-and-private-software-tools-how-i-created-a-powerful-ranking-1f8a37913169

I'd like to monetize this by offering profiles with premium features, instead of relying on annoying ads.

If anything is not working, suggestions for improvements, what you love and hate is all welcome :)
In the US, my salary was about that (6250 USD/month) straight out of university 12 years ago, but of course I only had 2 weeks paid vacation. I did get bonuses, but no pension.

IIRC taxes are slightly lower in Germany too. After putting the maximum amount into a 401(k) (self funded, pre-tax retirement) and paying taxes, I took home around $3500 per month, excluding bonuses.
"For years, the company took advantage of a loophole in tax law so that it did not have to collect the same sales tax as its brick-and-mortar competitors. "

Literally every single customer who bought anything from Amazon was happy about this.
Trends that will drive change in the energy sector in 2018
Please don't get my hopes up!
OMG why are people so blind and autistic about this. I thought I was helping, both the author and other people who came along. Just sounded entitled. Will try not to make that mistake again. Too many people here unable to take things in a non-autistic way. Ah sorry. You see yet again I have a lot to learn about supposed HN cultural norms. (Sorry, am fed up with people picking on me about this.)

edit: Ahhh hehe I just noticed the title is now "Julia v0.7.0 Release Notes"! When I commented yesterday it was "Julia Lang v0.7" I think. So I've been wondering why on earth the comments about 'Release Notes', and the late commenters must have been wondering why the earlier talk about 'Lang'. So.. there was confusion. That makes more sense of why people were getting weirder and weirder about this—false assumptions. I learnt something, hopefully the people lecturing me about not understanding how HN works learnt something too. Apologies not expected, but that would be lovely. p.s. Yes, the new title is much much better!
> yes net/http is nice but there's no router, there's no orm... yes database/sql exists but you know most everyone uses... yes html/template is nice but we're all...

Three fallacies of dependencies: https://www.youtube.com/watch?v=yi5A3cK1LNA

> what modern web app could you write with just the stl?

Lots. You just have to change your frame of mind.

> i know that's not really possible at all because of strong typing

Once you realise the above, you also realise that most of the time you don't need all that fancy stuff and you just write super boring code that works.
Don't use Facebook or Gmail. It's not that hard.
That probably explains why patio11 is the only thing I ever read on Twitter.

I have no idea whether I follow anybody. My only interaction with the site is to go to https://twitter.com/patio11 from time to time, scroll way down to the last thing I remember having read, then read up.

I can't understand why they don't have a simple way to sort things in the order they were written. But then it's possible that I'm the only person who reads it this way, so perhaps it's unreasonable to expect them to build a feature for me.

I try from time to time to read other people's twitters. Even tech people who are interesting here and on their blogs. It's unbearable.
That's what I understand. But why could they go to the FISC? This means to me, they can do foreign surveillance _legally_. The German equivalent, the BKA, could of course do foreign surveillance as well. However they can't get an official approval to do so (that's task of the BND). It'd be outright illegal.
This is how we are doing it in webpack, i think rollup can alias as well:

webpack.config.js

alias: {
three$: path.resolve('./three.js')
}

and a local copy of three.js

// Only export the things that are actually needed, cut out everything else

export { WebGLRenderer } from 'three/src/renderers/WebGLRenderer.js';
export { ShaderLib } from 'three/src/renderers/shaders/ShaderLib.js';
export { UniformsLib } from 'three/src/renderers/shaders/UniformsLib.js';
...
And as it turns out, modern war is not just about having the best toy but the one the market can produce and replace reliably.

We knew this once - hence the F16. But it has been forgotten, while there are F16s still flying!
We just tried Instacart on a free trial; the only substitution was very reasonable and all produce was excellent. It will be interesting to see if that experience was anomalous.
I read it once and have no idea what point they are trying to make. Are they saying, be it reinforcement or punishment, either way its an exercise in futility?
No, there's no preconfiguration needed, it's just a username/password account. You choose the network, then the OS asks you for your user/pass, then you're connected.

It's the router that connects to the RADIUS server, not the device directly. And some routers have one embedded, so you don't even need to configure that, it "just works".
I also use Pocket - each evening I go through my RSS reader (HN is included) and click what looks interesting, I skim the article (10 secs) and if it indeed looks interesting/useful/valuable I save it to Pocket and I add a label. Labels help me to revisit Pocket in a more systematic way and I also re-filter Pocket from time to time.
Fine by me
ESCORT ZANA – ESCORTS – ESCORT ATHENS – ESCORTS ATHENS
> People don't seem interested in monetizing their connections.

I think people would be happy to monetize their connections if it wouldn't piss off the valuable contacts who are worth monetizing. Unfortunately, that isn't the case.
Most RDBMSes won't let you use a column alias in the same scope as it is defined (pretty sure the SQL standard itself doesn't specify that it should be allowed). You can get around this by using a CTE.

Also, optimisers aren't stupid, the actual sum() function will not be recalculated.
I'm not the person you were answering but I subscribe to similar utilitarian views and must say, if it wasn't shunned by society to the point of risking to take a beating, I wouldn't mind wearing a skirt in summer. In fact, I already do wear some plain beige skirts at home because I find them far more comfortable than pants and the airy feeling is nice in hot climates.

It's far too dangerous to wear a skirt outside as a man so I wouldn't do it. I as a person don't care much for clothing beyond physical well being/comfort/utility but society is very judging and a times very dangerous for certain choices.
Also: definition of 'loophole': a tax rule I don't like.
If the wood ends up strongest with 45% of the lignin removed I'd try to engineer a species with a lower lignin content to begin with. So-called 'weeping' varieties (Weeping Willow etc.) get their specific hanging shape from a later onset of cell wall hardening due to delayed lignin deposition so those might be a good start.
"These are just some areas that governments could help with that could potentially help people achieve more of what they want in life without infringing on what anyone wants to do with software."

Governmen should get involved with whether or not YouTube autoplays the next video? Are you serious?

Out of curiosity, what do you think government should NOT be involved in?
I was not aware there were theories about Shakespeare's identity. This is very interesting, thanks.
There seem to be a couple of major similarities between software development and other jobs with bimodal incomes:

- You do a job that is, in many cases, a company itself. Lawyers, doctors, and developers can all start independent operations since the product of their work, or the service they provide, is monetizable in and of itself.

- There is a very significant skill gap, often driven by enthusiasm at least as much as intelligence, that people rarely transition between.

Compare these fields against something like electrical engineering. There the skill itself is generally a part of a product, rather than a marketable skill in and of itself making independent work difficult. And I don't know that many electrical engineers, but I'm unsure how big of a skill gap there is and, more importantly, what percent of engineers manage to transition upwards in it. If one electrical engineer is, more or less, the same as another - then you're going to see that reflected in income distributions which I would expect look more bell curvy weighted mostly by just years of experience.
Angular 5 HTTP Form Inputs and RxJS
Every field is working to automate their field with the help of software. For which you need software developers.

Right, but let's be clear about our terminology here. Automation in mechanical/manufacturing isn't being done by CS grads with skills in RoR employed as software developers. It's being done by MechEng graduates armed with FORTRAN compilers who write a lot of code but don't consider themselves to be developers at all.
WPA-Enterprise is a way to authenticate users, not a way to distribute logins/passwords. Am I missing something about it?
وظائف موظف مبيعات
Check out Talkyard: https://www.talkyard.io/blog-comments. It's like Disqus but open-source, or hosted serverless (I'm developing it).

You can add custom CSS (although some HTML class names might change, right now).
Maybe better for employee's health. >95% of people shouldn't require an elevator working in that building. Being forced to walk 5 floors instead of taking the elevator can have positive effects
How to Build Your First App in 7 Steps
I guess I misunderstood you before. You're using the portal to provide passwords to the users? How does that work?
Which you can't use across multiple customers if you work at an IT-consultant company :(. I guess you could make it open source, but then you still would have to convince every team you join to adopt it.
I'm not familiar with the larger EU market, but I would guess that German IT salaries skew low as well - and yet I regularly meet freelancers/contractors who can ask for more compensation than most traditional employees ever could.

Collecting that data and adjusting for the fact that contractors have to deal with more taxes and insurance, but less restrictions about vacations, seems impossible.
Reverse proxy were usally not routed through the Internet, only a local network.
Digital Humanist sounds interesting, what does it imply?
Just to be clear, I don't think he deserves less than that when working.

I'm saying that I think he'd be probably happy to be paid half of it and continue his project. Similarly, seen from the donour point of view, there will probably be many that think: "I earn 30% of that per hour, why should I donate for such egregious salaries?"

Now, to answer your question:

I have no idea, the way you phrase it, it certainly sounds as if consulting salaries are the same?!

If so, I believe you but I believe the percentage of companies willing to pay 150 per hour for a local is much higher in Western Europe and US than in the BRICs or Eastern Europe.
Why don't these companies like GrubHub and Uber just hire the people as employees but with 100% commission based salary? What risk do they take?
good but the fine is very low
>an ecosystem destroying highly invasive introduced species.

So.. a bit like white people? :| (disclosure: Aussie here)
The question then is, what is the optimal latency to recognise improvement or decline? Could deferring judgement help with combating this observation?

Then also what magnitude of praise or negative feedback elicits best results?

Essentially this could down to finding out the optimal training schedule for humans. (Like for neural nets or classifiers.) And this is similar to adversarial training. You have to consider both the trainee and the trainer (discriminator).
Q6: Ranking has an error, or I misunderstood.
It says "Order by: ranking, name" but in truth one should not order by name!

Anyway, overall very nice!
How does it find discussions at Facebook about a certain page?

What if many different people at Facebook have started different separate topics about the page? Which of the discussions does 2-cent then choose?

What if I am not friends with the people who discuss the page at Facebook, then will I still be able to see the discussion?
This client only works with some version of Debian. I am using flatpak https://flathub.org/apps/

and it works (flatpak run com.remarkable.reMarkable )

It takes about 400Mb since it downloads many libraries.
Offer them fake warm targets, looking human enough. So if you detect drones, sound a disperse alarm and inflate a group of warm blooded dolls.
Then hope and prey.
I think you're projecting.
Sure, there might be overreaction. I'm saying we don't need to worry about criminals or terrorists using them any more than we do conventional weapons. Of course people will still worry too much if it's on the news, just like 911.