skysight-inc/HackerNews huggingface dataset:
Even when using integrity checksums, you have to be careful not to update them to match the malware, like brew did with Handbrake a while ago: https://github.com/caskroom/homebrew-cask/pull/33354
For me this is actually a reason to use React even if Vue might be more appropriate. I fear that the 'front-end ecosystem' is still a bit too much in flux to settle on a framework as relatively opinionated as Vue.

What makes React both nice and complicated is that it's really pretty bare-bones (even with Redux), and as a consequence a lot of the stuff you learn with either be useful for JS programming in general, functional programming, and UI building in general.

For example, I've been working on a little command-line tool in Elixir, and a lot of what I do in the view/render code is very much like React and what I learned by using React.
Just yesterday I was talking on hangout and my Android tablet restarted multiple times. When it booted up I saw graphical artifacts during boot even before I opened the app.
Apparently there is this strange idea that only UNIX devs are developers.
the point is the kickbacks your employer gets from the administrative fees
It’s not uncommon to freeze 3rd party libs. Do you want a 3rd party provider to have access to hot deploy to your website?
That literal sentence? But if you watched the first video, at the 3:25 mark it is mentioned that there is barely any air exchange with the environment (I'm gasping for air at the thought of it), and at 5:45 you see a heater in front of a window, which implies using air as the medium of heat transport[0][1]. Hence, convection heating.

Look, I don't know the Passive Housing standard, I'm inferring based on the information given in the video and article. If I'm wrong, don't just say "this is incorrect", tell me what the standard actually is.

[0] https://www.youtube.com/watch?v=zXV_RqAUbho&t=3m25s

[1] https://www.youtube.com/watch?v=zXV_RqAUbho&t=5m44s
When will the JavaScript community learn to stop trusting 3rd party code downloaded over the internet?

Given that the majority in the JS community probably have it enabled by default in their browsers, probably never...
I'm one of those who prefer HTML/CSS/JavaScript to Java applets! It is interesting that MS for a while heavily pushed JavaScript and dynamic HTML in order to undercut Java...until they belatedly realized they had creating something which was just as bad to the Windows lock-in.
I have never really coded in C# or in the .Net platform, but I remember when it came out.

I always thought that prior to C# 1.0 being released, the Java language was stuck. There was no generics, annotations, enumerations, for/each loops or auto boxing which made programming in Java not only painful but dangerous (especially with the lack of generics and for/each). I personally, never considered anything before Java 1.5 "good enough".

I was always under the impression that these language change were in response to what C# and many of these language concepts were practically copied from C#. Is this actually the case?
One more cool idea: setting translucent Phase Change Materials (PCM) directly against your windows. PCMs are wax-like material that have a high latent heat of fusion (energy it takes to change the phase of material i.e solid -> liquid). Because latent heat change occurs at a constant temperature, the PCM acts as a thermal storage when solar energy or ambient temperature increases, and then releases the heat during the evenings.

At my (architecture/research) office, my colleague coded a 3D FEM to model the way this interacts with different geometries so we could investigate how to regulate the thermal storage capacity of a PCM surface. I'm fascinated by PCMs, although he seems to think that the resulting temperature dampening is too little[1] to have broad application in architecture...

[1] Liquid -> gas phase change has a higher latent heat of fusion and might be a way to solve this I think. It would require larger volumes, or a way to safely contain higher pressure, but similar to fridge or AC systems, this should provide a couple of orders of magnitude greater heat storage.
It's a feature when you consider what the intended goal of the system is, which is not to help you fund a comfortable retirement.
Proto deserialization does not drop unrecognized fields. There was a change that made proto3 do this, and that has now (thankfully) been reversed.

https://github.com/google/protobuf/issues/272#issuecomment-2...
One interesting bit of context that the article didn't mention is that the population of towns/cities/urban areas in Oklahoma grew on average 11.29% in just five years. The state has been seeing both a large move from country to towns and a decent net increase in total population.
They know. They want to know if the management knows.
If traffic flows from the pod network to an external network NAT is involved, as the Pod network is not routable.
There was a hardware issue, Toyota told their engineers one of the boards would have ECC RAM, but went cheap and used non-error-correcting RAM, but that wasn't the primary issue. After the court case ended, the code was subjected to static analysis by various researchers and a litany of problems were immediately found. Race conditions, uninitialized values, lack of fail-safe structure, spaghetti code, etc. I read a much better summary article awhile back that talked about automotive industry standards for embedded design and the working environment at Toyota (where developers had no static analysis tools, and didn't even have access to a bug tracker), but this article covers some of the points. The software was definitely at fault in many of the cases that killed 38 people:

http://www.sddt.com/Commentary/article.cfm?SourceCode=201311...
Isn't this literally out of 'How I Steal Your Credit Card Number' playbook?
Straw man. I don't know why you think it's silly to diversify into less volatile asset classes for retirement purposes. Returns aren't everything, risk matters.
Yep. It's fairly recent too. The patent is from 2015.
I figure if you're gonna use BEM, you might as well just go for CSS-in-JS these days.
Let's assume your worst-case scenario comes to pass, and politicians decide (or are influenced) to outlaw manually-driven vehicles from public roads.

There seems to be some confusion around HN about politicians signing/voting for laws and the people just magically acquiescing because a hundred guys decided it was for the best.

There's consequences for everything and the people can push back hard if bureacrats aren't thinking clearly.
Bitcoin on Ethereum blockchain? It is not satire
CryptoBitcoin is a blockchain game where users collect and mine "CryptoBitcoins”.
CryptoBitcoins are a collectible, decentralised, non-fungible set of tokens planned to be traded on an internal marketplace using Ethereum (ETH) smart contracts to generate (mint) more unique CryptoBitcoins. There are 21 million unique collectible CryptoBitcoins, the same amount as real Bitcoins. However, no two CryptoBitcoins are exactly alike, and each one can be officially owned only by one person on the Ethereum blockchain.
The uniqueness of each CryptoBitcoin comes from its distinct visual appearance and inherent attributes (“alloys”) stored in the smart contract. Because CryptoBitcoins are tokens on a blockchain, they can be bought, sold, or transferred digitally. The various CryptoBitcoins can be treated as a “traditional collectible” that will be tracked on the blockchain.
Players can use their collected CryptoBitcoins to create new coins and unlock rare alloys. Two digital CrytoBitcoins can be mixed together to create an entirely unique new collectable with its own “alloys attributes” and name. This aspect is called “minting”.
With 21 million different coins available the ability for collectors to generate interesting collectable coins by crossing them will be almost limitless. CryptoBitcoins are based on the ERC-721 protocol which has huge potential for other digital collectibles and online games.
In the digital world of cryptocurrencies the idea of digital collectibles is oddly compelling. CryptoBitcoin has potential to be an interesting platform with a mobile app for game play and trading. The CryptoBitcoins can be bought, sold or minted to create new CryptoBitcoins. With its unique Ethereum address only the user has ownership of their coins through private keys. The concept is interesting and unique with enough novelty to attract digital collectors.
www.cryptobitcoin.io
The Hitchhiker's Guide to the Container Galaxy
Need to reply after one day, but I read the sample, figured out an environment for Haskell using Spacemacs and bought the whole book. Because of your link, I decided to be proficient with Haskell in 2018. 2016 was the year of Clojure, 2017 Rust and now Haskell.

Thank you in advance!
What is most interesting about the South Sea Company, is that they didn't actually produce anything. They had rights to send one ship to Spanish ports for trade in the new world, but the ports would turn them away because the port authorities didn't want them/didn't believe them. Vs exporting oil which now heavily used.
Me too, development is mostly done in .NET, Java and C++.

Software that needs to be deployed on UNIX systems is usually written in Java.

All the scripts that I need to access on both systems are written in Python.

I rather make the best use of the tools each platform offers.
First, I think you're thinking of tax evasion, not money laundering. If company B's money is illicit, it doesn't become less illicit because it's used to buy art.

Second, it's not quite as simple as that. Company B will have to convince their auditors that this painting is indeed worth $100,000, and Mr. A might also be asked to explain how it is that a company that might otherwise owe him roughly $90,000 suddenly became so interested in this particular, and very recently much increased in value, piece of art.

Bottom line, this strategy depends on not getting audited, and there are much simpler strategies that work perfectly well under such circumstances.
I only noticed recently as they seem to have gotten even more aggressive about it. I often watch things fullscreen at 4K at my desk(49" TV being used as a monitor, it's basically 2x2 24" monitors) and 1080p streams, like Amazon, still look great but recently Netflix took a nose dive in quality and I couldn't figure out why. Using the Windows 10 app instead of my browser fixes the issue.
Do you also remove the patches Microsoft gives to those projects?
I consider it a fun challenge to work around the obstacles that are in place. I also use a private tunnel to get around all the web filters and etc.
Not downloading/installing questionable content.

Turning on controlled folder access if you're paranoid about ransomware. Not much else really. I haven't noticed any viruses / slowdowns / malfunctions this way.

Don't install antiviruses, they're basically malware created to fight malware. Windows defender in Windows 10 is enough.

Keep your device updated.
Those memory limits are independent of and orthogonal to SQLite, but I totally understand the frustration.

https://www.html5rocks.com/en/tutorials/offline/quota-resear...

https://developer.chrome.com/apps/offline_storage
"like a tumbleweed rolling across the road. Then it will do something completely unpredictable, and people will probably die."*

<sarcasm>
Seems a small price to pay for progress. We lost 37,000 people to auto accidents in 2016. I wouldn't be surprised if one or more of those deaths involved a mis-identified tumbleweed.</sarcasm>
This is a great case in support of the comment you're replying to.

You have superior knowledge of 1 particular company because you're operating in your domain of expertise. An average consumer will have no idea what Nvidia is, what they do, and why they should invest in it instead of index funds.
These things generally aren't unique, and so it's relatively easy to establish a market price, and flag it if something suddenly sells for a lot more than that.
Take a look at the BoE calc that someone else did in this thread, it might shed some light on what is possible.
That is interesting. I've had to run building energy simulations where I spent a lot of time running through similar scenarios while trying to figure out set points for an automated natural ventilation system. It went pretty much exactly as you describe, if you don't catch that heat gain at the right moment, the interior temperatures can get caught increase to a point where opening windows won't exhaust the heat anymore. Since I was working on a completely passively ventilated building at the time, that meant the heat gain would remain, and if there would be a gradual positive feedback loop over the course of a couple of days meaning everyday the interior temperature would get a hotter.
BitGrail hacked
Three Awesome JavaScript Conferences and Workshops in 2018
Meanwhile, in Windows 7 - https://imgur.com/eOYRWCJ

(yes, I troll, but I swear I'll submit a pull request for this to Ammonite eventually)
My point is that the publisher of the index does have more discretion than you claim they do, they are not entirely passive and rules-driven. Even where they are, they do change the rules from time to time.

They are also trying to please a number of people who depend on the index, not all of which are retail investors buying ETFs.
I switched from Hyper to Terminus, cause Hyper was working somewhat randomly in regards to various shortcuts/autocomplete/special characters/special keys.
Was hoping this would be about porting some of the features from desktop Linux over to Windows. I have to use Windows at work and it feels like I'm missing an arm everytime.

Mainly because Windows doesn't allow keyboard shortcuts to be rebound and the defaults often require two hands, which with the mouse normally in my second hand is really annoying and not particularly fast.

Other things I'd like:

- Ability to bind clicking the left and right mouse button together to middle mouse click (allows you to just click in the middle on laptop touchpads).

- Tabs in the file manager.

- Workspaces, in a usable form. Windows 7 doesn't have them and it's not legal for us to use Windows 10 on anything that's connected to the internet. And when I do use Windows 10 / Server 2016 in isolated playground VMs, then its implementation makes me feel like some old person who forgets about applications that they have open, because there's no indication of other workspaces existing, nor the applications in them. The shortcut for switching between workspaces being one of those two-hand-shortcuts also means that checking workspaces to see what's in them is not viable.

- A functioning search. I do not understand how you manage to make basic system search as broken as it is on Windows.

- The dream would be a tiling window mmanager and an actual functional terminal.

I know, this is not achievable without third party software, which I can't really install for security reasons, so yeah, this is unfortunately a pipe dream.
If you're doing an interview over the phone or in some other context where the interviewer can't see what you're doing, you should NOT just look things up on the internet without first asking if it's ok. That is cheating in every interview I have given. It's unethical, and you really don't want to start off a job having tricked your peers into thinking you know more off the top of your head than you actually do.

Testing what people know off the top of their head and testing how well people can look things up on the internet are both legitimate things to test in an interview setting, and I've done both types of interviews. One big downside to letting people use the internet is that it tends to slow down the interview significantly and it adds variability unrelated to the skill of the candidate (e.g. maybe you got unlucky in your search terms and found an unrelated/unhelpful result that took up a bunch of time). In many cases, it's better to get a sense of which concepts the candidate is already comfortable and experienced with, which isn't something that should require the internet. (I tend to avoid tests of knowledge in the first place, but I think they make plenty of sense when hiring for a specialized role.)

It's also naive to think that (for example) someone who hasn't heard of CSS specificity could be just as productive solving a specificity-related CSS issue than someone who has solved a bunch of specificity-related problems in the past, as long as both of them have access to Stack Overflow.
> any executable code appearing in a header file might end up existing in multiple copies throughout the executable

that's why the keyword "inline" exists.
If you had read any of the links I posted you would not say that
Why Don't Babies Smile from Birth?
In principle, sites should be secure. In practice, putting an implicit bug bounty on every widely-used Javascript library does produce more exploitation.

I think you missed an opportunity to engage your parent comment more productively.
BitGrail lost $170M because only client-side validation was used
Wholeheartedly agree. In a democracy the government is your government.
Riot is impressive, especially for something so new. Equally impressive is how trivial it is to create plugins to bridge to other protocols. For example: https://github.com/ImmanuelBaskaran/Hangouts-Bridge/blob/mas...
> Was China ever really a communist state?

There are few if any states that actually consider themselves to be communist. China considers itself a socialist state that is the middle of a long process of transitioning to communism. The ruling party is named the Communist party because of what its stated end-goal for governance is, not because of their current methods of governance.
You're saying, "if you're going to short-term trade, you should use your 401k to do it in preference to any other funds source", right? Because there's a way to read this where you're saying "the only way you should trade with your 401 is short-term".
Valid concern.

Translucent Databases covers this.

http://wayner.org/node/46

http://a.co/97iqrM5

TL;DR: Various clever ways to encrypt records, organized for fast & easy retrieval, uncoverable if the key is lost (or deleted).

Also: We should always encrypt all (demographic) data at rest.
I use uMatirx and it’s given me a pretty good lesson on how much stuff sites load from 3rd-parties. Many sites need me to play whack-a-mole to get them to display - which 3rd party sites do I need to allow to get the content to show up.

I’m really torn by this sort of thing.

On one hand, when many sites use jQuery (for example), there’s huge benefits (bandwidth, speed, etc) in having it loaded from one location relatively infrequently and cached for many pages. This is exactly the promise of shared libraries, just on a much wider scale.

On the other hand, why aren’t web site operators delivering all of the code that is needed for the site to function? If they want all their users to execute that code, why aren’t they willing to serve it themselves?

I’m not sure what the right answer is, but this incident is a pro for pulling in all of your dependencies. The limited data plans that a lot of people have are a big pro for hosting libraries centrally.
I've been having this argument constantly at work. Everyone loves our SPA, but they still want to be able to hire really cheap front-end devs to do maintenance. Having back-end devs do MVC and designers doing CSS and light interactivity is a totally valid model, but doing SPA requires specialist knowledge.

I understand why business people are reluctant to view front-end as a real engineering discipline from a cost-perspective, but trying to get a SPA for a JSP prices is silly and unrealistic.
> C++ enterprise code looks mostly C with C++ compiler

This seems to be the dirty little secret of C++ programming. It seems any corporate site that decides to go serious with Object Orientation also decides to do Managed Memory, and switches to Java or C#, and lately maybe even Go.
Not only is it not illegal, but the whole idea of public trading markets depends on people doing it.
Because they wanted to decide for themselves
I believe that behavior is in the minority of people. Perfectionism is much more complex affliction than simply striving for perfection.
You can make a ton day trading, but the edges don't last long. I've seen several cycles of this, and it's worse than knowing the latest javascript fad. The markets change, approaches change, and techniques change. On a positive note, you really only need to hammer on an edge and succeed once to buy more than enough time to develop the next one.
Is America having second thoughts about free speech?
I don't expect US to move a finger on the issue - all major players are american. However, something like USB charging was imposed by the EU with great success, ending a massive source of e-waste and proprietary cruft manufacturers imposed onto consumers. For EU, the economic motivations to force american companies open to European competition would be very tempting and the consumer benefits significant.

The takeaway from the USB success is not to design a new protocol by committee, rather pick a mature open standard - for textual chats there are several mature ones.
SRI[0] is still a fairly new technology with lacking browser support. I expect its usage to grow, but it's worth keeping in mind that the use of SRI does not matter at all if the client doesn't support SRI.

0: SRI - Subresource Integrity https://developer.mozilla.org/en-US/docs/Web/Security/Subres...
Bitcoin Private Fork Aiming to Make Bitcoin Anonymous
But passive doesn't mean that the rules never change, it's passive as opposed to active, not passive in the sense of static. There might be some kind of miscommunication here or something.
v-model in Vue is not exactly two-way binding. It is just syntax sugar for passing the value as a prop and setting an event handler for the “input” event. It looks like two-way binding but has none of the gotchas.

I agree with you point btw.
A Scandinavian economist once said to Milton Friedman, ‘In Scandinavia, we have no poverty’. Milton Friedman replied, ‘That’s interesting, because in America, among Scandinavians, we have no poverty, either’ (quoted by Kotkin, 2009).
Pkg_add vs. https
If you don't mind my asking, what X server for windows are you using? And, what is your display resolution? I've had good default font rendering with VcXsrv on a 1366x768 display, for example, but the same configuration is almost illegible on 1600x1200, presumably because of the higher dpi.
Is that why 99.9% of the finance industry is about investments in which two days makes an enormous difference?
You mean an open version of https://priorart.ip.com? It has even been difficult to have an open, pubic database of US law.

If an open database existed, ML/AI and blockchain could reduce the burden of finding affected parties to help challenge patent applications.
Yeah, front end devs.
Read through the entirety of https://decentsecurity.com and follow the advice. That's literally it. I've been using Windows (alongside Linux and recently MacOS) since the 3.x days and the last time I've had any kind of security issue with Windows was getting remotely infected by the Sasser worm in 2003.

The major points of vulnerability nowadays are the browser and the user. Secure the shit out of your browser - aggressive adblock, disable/click-to-play all plugins, no unnecessary addons. As a user, educate yourself about the realistic threats. Download software from reputable places - if you're used to a Linux package manager, this will take some adjusting but it's not difficult. When you're installing something, actually read what it's doing and think, don't just click next excitedly. I shouldn't even have to say this, but don't open email attachments unless they're from someone you know and you're expecting exactly what they sent. Let Windows install updates automatically and reboot when it asks. Keep your other software up to date - something like Chocolatey (https://chocolatey.org) might help, but that has its own security upsides and downsides. Turn on Windows Defender and let it keep itself updated.