skysight-inc/HackerNews huggingface dataset:
SQL Injection is to my knowledge not a problem if you use literally any query building method but string concatenation.

Any sane SQL driver offers queries with parameters and at work and in private I enforce the usage of parameters in queries entirely. If I find myself needing string concat anyway then I will do it very carefully and isolated from user input.

That mitigates SQL injection.

I also see no benefit in breaking it up into multiple schemas or pushing authentication entirely into SQL. At best that means you complicated the database definition unnecessarily and secondly it means your database gets raw password strings which is contra to what I learned about password security, namely that the raw password does not touch the DB or the DB driver or any DB related code. Ever.

I also don't see how engineers dumping the DB and then accidentally leaking it is a tangible risk. I'd put that on the bottom of my list of things I have to worry about when I verify passwords.

Not everyone works with PG either or even MySQL or there is no possibility of setting up functions or triggers in the database.

>If they don’t get someone that catches a SQL injection or something else silly in a PR it’s nice to know we cant possibly bleed our password hashes.

Which is totally irrelevant if you properly secure the application, do proper code reviews and don't put juniors under pressure to push out code at all costs.

Pushing crappy code because deadline is asking for it. End of story.
Qatar won the STAT Trade Times ‘international cargo airline of the year’ award
This question falsely presumes that the government's military is not also fractured by whatever is causing the militia to revolt. The military is made up of citizens.
You don't actually need a wheel. Just a counterweight and a cable.

It's unlikely a full g is necessary, anyway. A half would do well.
I presume you have reliable sources for those claims?
Does the optical input for the amplifier only suport AC-3? Why don't manufacturers use a more naive patent-free method that might be slower? Are they really starving for bandwidth enough to justify the cost of an AC-3 license? Even uncompressed PCM times 6 channels could easily be transmitted over USB 2.0, and I was under the impression that these optical formats were even faster.
No One Out of 5000 Players Could Finish This Game. Can You Finish It?
Even if a founder does not have all these documents put together, having a simple checklist like this to know what they're missing is pretty valuable.
Not sure where you are going with this. Shorter times for financial crime? Why? And what does any of this have to do with file sharing?
We should just rename him Tom Swift:

"Tom Swift and his Subterranean Launch Tube"
>Foreigners cannot become citizens even if they marry a native Chinese and contribute to their economy.

Well, there are a "whopping" 1500 new naturalised citizens since the passage of 1998 citizenship law :)
I didn't know you guys having the problem. I use windows 8.1 I am able to download (incognito mode) through "File >> Download". I've never used Mac can't say anything about. It's up to you guys and all my startup lists are available for download.
AMD Gets Zen About the Edge
>JDs frequently pay off their student loans by ~4-5 years into their practice

I think your information about the cost of legal degrees and the prospects for new lawyers (on average) is woefully out of date.
For the same reason the Coalition of the West, currently doing everything it can to perpetuate World War Three in the Middle East, gets away with its heinous activities: out of sight, out of mind.

Nobody cares about oppression until it directly effects them, and these days: by the time you're effected by it, its too late.

I'm less concerned with suppression of human rights in China than I am with the Imperialist destruction of civilisation that the West has been engaged in, all over the Middle East. But! That does not mean I'm not concerned about China, as an individual. Its just that there are worse things to worry about than China.
I'm not sure above over-fitting. Rather, it's a form of hysteresis.

Trauma typically creates an outsized fight/flight response which overwhelms your executive.

Your conscious awareness and actions emerge out of a competition of different systems. With trauma, the executive fails to compete.
> And they get psychological care very often.

...Should they not? I mean, granted those sentences seem awfully lenient, but unless their sentence is life or death, they're going to get out eventually, and we want them to be less rapey when they do, right?
Ask HN: I can't see my posts
Looks like I'm a bot.
It wouldn't collapse for those that did not gamble, why should they pick up the tab? What later stops the gamblers from gambling again once the non-gambles pay off their debt, other than outright ban of gambling. Then replace 'gambling' with any voluntary risk vs gain activity.
How to write a Discord bot in Python
Lenovo Sees Expanding Market for Dense Water-Cooled HPC
In a democracy it is the role of the free press, the courts and elections to defend against government overreach.

Do you really believe that the 20,000 to 60,000 estimated [1] militia members in the US is what is defending you agains government overreach? There are more than 1.2 million people in the US army (with a $600 billion budget) and 120,000 federal police officers [2].

Another point to consider: democracies outside the US, that don't have 'well-trained militia of free people', seem to be doing just fine. In a number of metrics that you can consider as a proxy for government overreach the US is actually doing much worse than average: number of people shot by the police, number of people imprisoned, number of (innocent) people executed.

[1] https://en.wikipedia.org/wiki/Militia_organizations_in_the_U...
[2] https://en.wikipedia.org/wiki/Law_enforcement_in_the_United_...
If I may rush to the commenter's rescue: Darch addresses your issues with NixOS by combining a familiar set of tools (Arch Linux) with stateless architecture. Its a fantastic welding of extreme package availability and best-in-class documentation with declarative dependability.
Are we still saying piracy loses money for somebody? Even after the EU paper about it?

Why is it so hard to believe research?

https://juliareda.eu/2017/09/secret-copyright-infringement-s...
A banking centre seeks to reinvent itself – Tales from the crypto-nation
"The average individual American is worth $388,000 net, third in the world behind Australia and Switzerland."

Do you have a source for that? That's certainly not the average American across all demographics.
What has happened with all the studies about launching to orbit after being dropped from a jet at high altitude?
Student loans aren't good to lump with the others because the interest rates on the government loans can be obscene. I know someone who took out student loans from the government during very low interest (2012) and they got 6.8%.

With the expected stock market return below that, it's probably better for most students to just pay off the debt.
But then why do you need the militia?
Better view the parent of that post: https://news.ycombinator.com/item?id=16438849
I keep getting added to MLM and Pyramid scams, someone just enters my email a few times a week at midnight or 3am so they must be from another time zone. Is there a way to block that user?
Genetically engineered maize: a meta-analysis of 21 years of field data
If you’re thinking of going with the iFrame path, you’ll have to make the whole iFrame a form. You’ll be competing directly with Gravity Forms. And they are huge, while your only competitive advantage is a feature they can implement in less than 5 minutes.

I’d love to see you make it work and make you money, but I’m not convinced yet.
“Do you understand what I'm saying?"
shouted Moist. "You can't just go around killing people!"

"Why Not? You Do." The golem lowered his arm.

"What?" snapped Moist. "I do not! Who told you that?"

"I Worked It Out. You Have Killed Two Point Three Three Eight People," said the golem calmly.

"I have never laid a finger on anyone in my life, Mr Pump. I may be–– all the things you know I am, but I am not a killer! I have never so much as drawn a sword!"

"No, You Have Not. But You Have Stolen, Embezzled, Defrauded And Swindled Without Discrimination, Mr Lipvig. You Have Ruined Businesses And Destroyed Jobs. When Banks Fail, It Is Seldom Bankers Who Starve. Your Actions Have Taken Money From Those Who Had Little Enough To Begin With. In A Myriad Small Ways You Have Hastened The Deaths Of Many. You Do Not Know Them. You Did Not See Them Bleed. But You Snatched Bread From Their Mouths And Tore Clothes From Their Backs. For Sport, Mr Lipvig. For Sport. For The Joy Of The Game.”

― Terry Pratchett, Going Postal
You cite a single article, which goes against the past two decades of experience, where illegal downloads have decimated much of the entire music industry.
In the video, both LeCun and Manning argue convincingly that this is not the case. LeCun believes that in some idealised future that is stil far away, priors will not be necessary. Both seem to think that, right now, you can't do anything completely from scratch.

I wonder what examples you have in mind btw, other than self-play.
Read the comment. It's a great example of why understanding the difference between mean and median is critical.

Imagine a room with 100 people. 99 have $100 in savings, 1 has $1 billion. What is the average wealth of the people in that room? What is the median wealth?
I guess this is a good place to plug the fairly new bash completion support for Nix (including Nix 2.0)[1]. For those like me who can't stand using a cli without completion.

[1] https://github.com/hedning/nix-bash-completions
My economics professor used to insist that colleges don't prepare you for a job because if they did, then McDonald's University wouldn't exist.
It's far more nefarious to steal $1.00 from a million people than $1M from one.
Hdm/nextnet: pivot point discovery using NetBIOS
I Made a Harry Potter Monopoly Board for My Friend’s Birthday
I have a bit of background on rotor systems. That TsF-18 is puny compared to other rotational systems. See below.

Largest Centrifuge:
Regarding the largest centrifuge in the world, perhaps the TsF-18 in Russia has a large diameter but the JET Tokamak [1] flywheel spun a 775 TON rotor at a speed nearly 6 times what is cited for the TsF-18. The Tokamak's centrifuge's provided over 3.8 gigajoules of energy. To provide a more intuitive sense of that energy, 3GJ is equivalent to a 100kg mass traveling at 7.7km/s [2].

Fast Flywheels:
OakRidge National Laboratory [3] achieved over a 1.4 km/s tip speed and that was back in 1985.

Large Vacuum Chambers:
The Large Hadron Collider[4] is a vacuum system over 5 miles in diameter although toroidal in nature.

1: https://www.euro-fusion.org/fusion/jet-tech/jets-flywheels/
2: https://www.calculatorsoup.com/calculators/physics/kinetic.p...
3: http://www.guinnessworldrecords.com/world-records/fastest-ro...
4: https://en.wikipedia.org/wiki/Large_Hadron_Collider
Cryptocurrencies have made it easier than ever to channel large amounts of black money out of your country.
And since Switzerland is the world's favorite place to hide money, it is no more than logical that it embraces this new vehicle of black money transport.
Tech talent trends in Banking and Finance sector
to have a theory is to argue that such and such is the case. that's the sense of the word i took from gp's reply.
> Interesting interface design problem.

And so Don Norman (of The Design of Everyday Things book fame) is at it from UCSD: http://www.cogsci.ucsd.edu/~norman/
I'd be interested to see which kind of abuse. As stated in my comment https://news.ycombinator.com/item?id=16442242 I am not knowingly participating in abusing behavior. So, if its not voting rings initiated by me, would it be voting rings initiated by others? Or posting topics which are mainstream on HN?
Without pointing a finger, I will say I would be really surprised if this discussion - and HN in general - was not subject to a discourse control by paid state agents (sophisticated trolls) from China and elsewhere. Assuming that it is, what can we learn or do to miting such influences? Asking for independent source to all claims is obviously the first step.
That's called a rebellion, and it's rebellion for a very simple reason - cultural genocide by the CCP.
Thank you all for your thoughts.

Thank you for your submissions soon your startups will be added to all relevant lists.

Anyone can add their startup by https://docs.google.com/forms/d/e/1FAIpQLSezN1Ipnj9GrFPGYqAg...

Startup lists by "Location" are coming soon. Keep checking for more lists and updates on your favourite one https://drive.google.com/open?id=1-CjBzfvjlKROXpnuFWiIwxrDyi...

Pankaj
Same with me. However, rules may have changed over time and I am only slowly accruing karma.
Tunnel between the Fulton St transit center and the Oculus.
https://www.alltop.com/cryptocurrency
Diana Woon of Wecruited aims to help students find part time jobs easily
Every industrial nation started by copying the British. The European countries and the US did it in the 19th century. In the 1960s/70, everybody joked about the Japanese copying everything. In the 80s, South Korea was known for cheap copies of electronic devices. It is/was only a matter of time for China to move from copying to innovating.
I don’t get why people think IPFS is only a volunteer thing. The same way bitcoin quickly evolved from people mining on laptops to professionally run datacenters, so to will providing resources for IPFS.

Filecoin will allow people to monetize making content on IPFS available, with the ability to prove the content meets certain availability guarantees via smart contracts.

Making content available via IPFS will become the new way to mine cryptocurrency.

It’s all in the white paper: https://filecoin.io/filecoin.pdf
> OpenBSD has a reputation for not respecting embargoes, even as recently as the KRACK wifi thing last year.

Stop spreading this FUD. OpenBSD developers were allowed to make the patch silently, they contacted the KRACK researcher and he agreed to this. HE CHANGED HIS MIND LATER, after the patch went it and he started blaming OBSD and spreading bullshit.

>Note that I wrote and included a suggested diff for OpenBSD already, and that at the time the tentative disclosure deadline was around the end of August. As a compromise, I allowed them to silently patch the vulnerability.

https://www.krackattacks.com/#openbsd
Kylie Jenner wipes $1bn from Snapchat with a tweet over redesign woes
This, [0], appears to be the conclusion of the investigation that resulted in the bill, which contains a suggestion for a law.

[0]
(Swedish)
http://www.sou.gov.se/wp-content/uploads/2017/01/SOU-2018_6_...
>I've heard other variations of this story that stated that OpenBSD simply had the fix ready first

Why dont you reach to the source?

>Note that I wrote and included a suggested diff for OpenBSD already, and that at the time the tentative disclosure deadline was around the end of August. As a compromise, I allowed them to silently patch the vulnerability.

https://www.krackattacks.com/#openbsd
My thoughts exactly.

Some time ago, I asked how to integrate NixOS in an existing infrastructure managed by Chef/Ansible.

I was told I was wrong to even think about that and that Nix is a better system.

Well, wrong. If you have a few thousands servers with a system, you cannot ask to migrate all to a new system without some integration with the old one first.
Free Compact One – A Free WordPress Theme from CyberChimps
https://github.com/Polymer/lit-html There are some unofficial (pre 1.0) benchmarks flowing around and it is VERY fast.
Same goes for hyperHTML.
dupe: https://news.ycombinator.com/item?id=16439534
The Fallacy of Success (1909)
Yikes! Thanks for letting us know.

Edit: should be fixed now.
Wow that was a great read, thanks!
lmao, you sure know what you're talking about, the music industry is just in tatters these days huh
Hmmm... lovely idea, but in practice what I'm getting is a bunch of 404s. The internet is a library with a bunch of books missing...
> I was expressing an idea that i thought was related to what we where talking to. Sorry.

Now I'm confused. How is your theory related to the article? And I would really love to discuss your theory itself as I already heard similar things before from somebody else in a discussion.
One thing the U.S. (and Europe) still deal very well is branding and messaging. Most of our electronics are designed and made in China, but they are still branded and sold by western countries. The U.S. is still adept at manufacturing brands, lifestyles, identity, and "cool".

While China developing it's own technology was practically inevitable, it will be far more interesting when they begin influencing what people want.
Also, i can have a Pi from any number of stores.

Most of the other boards are either direct from manufacturer, or via some kind of specialized store that can set any markup they like.

That said, i would love to see some kind of mobile device built around this.
It's a studio monitor yes... They also often called reference monitors.

A studio/sound engineer needs to hear the full range of frequencies when mixing and working on a track.

If you need more low end than what a set reference monitors can reproduce that woofer in home pod is probably not going to do better.
How, exactly, does that happen? Do dozens of Intel people all get together in a conference room?

So an Intel Project Manager comes into the room and says to a bunch of Intel's CPU designers: "the ghost of Andy Grove says we have to put a backdoor in for the NSA. They want it to be obscure. What they want us to do is to speculatively execute instructions across the user/kernel protection boundary. But wait ... don't allow the effects of those instructions to be easily visible. After all, it is nominally a protection boundary. Instead, just make sure to disturb the CPU cache. NSA can then easily observe cache timing changes and use that to read kernel memory. That should be good enough for NSA's needs. But, boy, won't people have a meltdown if this ever becomes widely known?"

"Oh, and by the way, top Intel engineers, you must keep this secret 'forever'. You can't tell anyone outside the company. You need to keep this on a 'need to know' with all your fellow design, verification, and test engineers, whom you must swear to secrecy. You can't anonymously leak this, or the NSA will find out and send you off to Gitmo for rendition. Mum's the word."

"Also, guys, there's no point in putting in this backdoor for a single chip. We must carry this backdoor forward to every new CPU design team that we bring on for every new CPU chip Intel makes. Sure, some chips are designed in Oregon and some in Israel, and some may even be designed in cyberspace. But we'll be sure to keep this backdoor in all future implementations. We need to let future CPU architects know that they must forever honor this promise we made to the NSA."

Yeah, that could have happened.

Or, more likely, out of the 1,000,000 design decisions, big and small, that go into creating a modern CPU which has literally billions of transistors, nobody involved thought this was a serious enough concern. If they thought of it at all. Because, ultimately, they get paid for shipping functional silicon rather than for worrying about information leakage in every possible corner case.

If this were so simple, why didn't someone figure it out before? Meltdown is mostly Intel, but the similar Spectre exploit affects Intel, ARM, and AMD. And has for many years.

Are all the engineers at all of those companies in on this backdoor? Or was the backdoor so diabolically clever that only the "CPU architect cabal" at these companies the only ones who needed to know?
In my (possibly naive) view, the board members of a foundation are just the executive branch of that foundation and are obliged to act according to its statutes. A good example might be the "Nobel Foundation" (https://www.nobelprize.org/nobel_organizations/nobelfoundati...): It was founded in 1900,has outlived its creator(s) by a large margin, has been steered and managed by several generations of board members and continues to fulfill its mission. For me, this IS an autonomous organization in the sense that it is autonomously steered by the "smart contract" that are the statutes of the foundation and that no one except the government of Sweden would be able to dissolve it (and even they would first need to introduce changes in law to do so legally). You can of course argue that a DAO on the blockchain is not subject to the law of any state, but on the other hand a pure blockchain organization would probably not be very useful if it doesn't have any embodiments in the form of a legal organization that can operate within the law of a given country (there still could be cases where a purely virtual organization could create value by e.g. providing a commodity like Bitcoin).
My thoughts exactly. I think many of the posts here are from people who are not designing for manufacture and are just looking at the specs like it's a small standalone computer like the rpi.

It looks pretty good to me. Havent had to use those high density connectors before but assume its straight forward enough.
Ada is used in Crystal Reports scripting language which it was why it was hard to learn for Visual Basic developers.

GNAT is free but not the same as commercial ADA languages that need a $10,000 use license per user.
> It certainly reads like "it" was to mean "the aptitude package manager" to me.

The aptitude package manager is the package manager for the Debian operating system. It is for managing packages that make your OS run. Unless you're defining multiple repo versions in your sources.list and using apt pinning, it typically gives you one version of the latest supported software. Other distro/OS package managers do the same. Even Homebrew for macOS deletes older versions and makes them inaccessible. NixOS' package manager does the same here. This is very typical. Portage is an exception.

Separately, Cabal is a package manager for development dependencies for the Haskell programming ecosystem. This is what you should use for setting up such a dev environment. It is specifically developed with this in mind.

Asking your OS package manager to additionally manage the ecosystem of every programming language you may want to develop in seems a bit out of scope, no?

> NixOS has clear room for improvement, but, unfortunately, some of the devs are adamant that it cannot - worse: should not - be done.

Your definition of "improvement" seems to be to handle use-cases it isn't intended for and for which there are specialised package managers, likely introducing huge complexity and spreading resources thin. This seems like something that could also be a disimprovement.
Google adds businesses to RCS messaging platform
There's no line between bad and Hitler - the Nazis were bad because (in naïve, coarse terms) they crossed the line between bad and good.