skysight-inc/HackerNews huggingface dataset:
I have 2 very naive questions about graphql. I am not trying to poke holes or antagonize, I just want to learn.

1. First one is, if graphql is a query language - why not use an existing query language that many people are familiar with already?
Eg instead of doing "query{ users(limit: 10) }" why not just send in the request's body "SELECT * FROM users LIMIT 10;" Or an ORM like query and have the server execute that (after of course parsing/sanitizing/normalizing it first)?

Why do we need one more ORM like language/abstraction on top of already our language abstractions? If my backend is in Postgres and ElasticSearch, can't I just have the client shoot sql and ES json queries instead? Why the new language?

2. How does it secure against the client trying to make super heavy queries? I always find it funny (and it is a good lesson) when an intern writes an ElasticSearch query that tries to return a 300gb JSON object back to the browser and crashes everything in the process (not production of course). I 've read that GraphQL has built-in checks for timeouts and query complexity, but if I am able to write optimized and highly performant SQL is there any guarantee that the GraphQL layer will output the same results?
Good news: https://stripe.com/blog/india-private-beta

We have a lot of users from India, and they use Paypal to receive payments :) Please shoot us an email if you need help with anything - hello [at] buymeacoffee.com

Cheers!
Things your Grandma said while knitting ... never:

> The function is feasible for machine knitting if its Reeb graph has an upward planar embedding.
develope Dota 2, support the Dota 2 tournament scene, work on Artifact, work on Vive...
HTC is close to releasing a wireless module for the Vive. Combine that with their next-generation headset, with the screen-door effect mostly gone and much higher resolution, and I think we'll have something.

Still need the sensors, but those aren't that large.
As a new user to vim, I’ve started adding the keybindings to my browser. Really enjoying that keyboard lifestyle. I can see this being pretty handy.
I believe them because that's my default position, and I don't see enough evidence to believe otherwise. A poorly-incentivized rogue employee sounds perfectly plausible. But I don't think something like that happens without some culpability on the companies part (poor incentives, lack of oversight), which is why I'd like to see them take responsibility for that.
GOP tries to block state net neutrality laws and allow paid prioritization
Freenode permits I-lines for multiple users from the same IP. Have you looked into that?
+1 for dropwizard; Spring is too big, dropwizard is just right. I've always preferred JDBI over JPA too.
• garys guide <- best resource
• inside startups
• hackernest
• warby parker, etsy many others
• code driven are good
• aws popup loft
• most wework spaces have events.
Circumcision/male genital mutilation in South Africa
https://news.ycombinator.com/item?id=15778631
Amygdala and the tendency to regard the social system as legitimate&desirable
Would be nice if the data wasn't buried in PDFs.
Skaffold maintainer here - most of us are also minikube maintainers and we have a bunch of ideas on how to speed up this loop. Keep an eye on this repo:)
To bring it a little closer to home for HN, there was, at one time, a big controversy with Sun Microsystems and cosmic rays creating memory errors on their servers. https://docs.oracle.com/cd/E19095-01/sf4810.srvr/816-5053-10...
Absolutely.

1. For one-time payment needs. Only your most loyal followers are likely to go through a sign-up process to pledge a monthly payment. Buy Me A Coffee accepts payments in less a minute, without no commitments or friction.

2. Showcase your goals, and comments left by other supporters.

3. Shareable link, and a much friendly solicitation for support.

4. Multiple payment options. We currently support Paypal, Stripe (Patreon use this) and very soon - Cryptocurrencies too.

Hope this clarifies. Cheers!
Apparently, they signed them incorrectly.
Right, so eventually they'd block every major organization and then it's practically the same as abandoning XMPP federation. Commercial incentives just don't align with XMPP, that's the underlying problem.
Hope you are okay friend.
Your comment makes me think of beanie babies during the bubble. They hardly seem like securities, or do they? Your definition implies they are if there are folks assuring you they will go up in value. Also less cray example, old cars, classic records, guitars, art etc. Is a van gogh a security? An antique first printing of moby dick? Thanks!
Not in the target demographic, but it certainly looks interesting. Over the years I grew used to CSS, and generally find it's good enough for my needs.

I find it incredibly refreshing to see you guys openly point out use-cases where the tool might not be a good fit.

Any plans to license the layout engine? If you decide to go down that path, I'd ask you to consider allowing free non-commercial usage. I probably wouldn't consider paying for a library unless I got to try it first, but if it's a good fit it can be well worth the cost. e.g. At my previous job we ended up buying a Highcharts license by my suggestion, since I'd had positive prior experiences and it was a good fit for our problem.

Here's one complaint I have with some designers: they always design for the perfect scenario. They don't consider what should happen when a value is too long or short, as well as what should happen when dealing with an empty collection, or worse, a large one. Having a way to specify all those kinds of variations would be absolutely amazing.
I’m aware, but the licensing implications for highly elastic environments are suboptimal for both RedHat and Pivotal at the moment.

Thus, I continue to wait for the big 3 cloud providers to figure it out. Unrelated, but seems like an opening for Linode or DigitalOcean.
That's a nice sentiment but that isn't how laws work.
I guess I'll bid farewell to the Slack communities I've been participating in. I'm not interested in using a browser or installing additional software for chat.
Translytical has become synonymous with real-time
I had a bunch of tests fail at the start of this year because someone had hard coded 2017 into the tests.

Fortunately it was a problem with the tests, rather than the code itself, but these things do happen.

At my old job, we had a bunch of tests fail when daylight saving ticked over. For some reason, some things were using local time, rather than UTC. We also had a test that would fail if the minute was the same as the hour.

Time is hard
> You move your cursor in the code and it reads you the line.

That's somewhat similar to how ed works. You choose a line number or range and print those lines to the screen.
Matt, if you read this, I am so sorry for your loss. My heart goes out to you and your family.
display: flex;
justify-content: center;
align-items: center;
What do you use instead of Slack? I'm a blind developer and find it usable enough, but I'm also on a fairly small team with out a tun of slack traffic.
Hey Jacques,

Do you have any more info on the idea about identifying commonalities between filesystems?

I work on Skaffold and really want to speed up builds.
The issue is that Subform is 3x the price of Sketch (which lets you keep your current version when your license runs out) and 2x as expensive as Figma Pro and Framer.

Subform is in beta, and the others are finished and offer free trials.
Postgres has great support for non-sharded HA.
I'd like you to find a way to get an alert when it's done without having to press the button first.
Magnetic field reversals happen on a completely different timescale than solar minima/maxima. Reversals take a long time to happen: ~1 to 10 ky. Quick on a geological timescale, though.
I don't think Hindi's phonology is more complex than English, but it is all explicit in the character set rather than implicit in the etymology. (The voicing difference between "this" and "thistle" is my favorite example of this, even beyond the fact that we're representing one of the most common consonant sounds in the language with two characters.)
Comprehensive Guide to the Boulder / Denver Startup and Tech Scene
Please Embed Bibliographic Data in Online Documents
> This seems to be the reason bike sharing doesn't take off, for example.

Citibike has pretty good coverage in NYC, though it's a dock-based system and not a "leave it wherever" system that's been working less well in other cities.
No. We've definitely mentioned out loud things we've never searched for or even entered into a phone or computer, either before or afterwards, and they've shown up in our ads within hours. It's happening at least once a week now. I'm confident it's not any kind of cognitive bias, and that it's just FB spying on us through our mics.
TC39 considers renaming flatten and flatMap to smoosh and smooshMap
Tangential question, but does anyone have any idea why, based on the first graph in the article [1], NASA's allowable radiation limits for women are so much lower than for men?

[1] http://spaceweather.com/images2014/06dec14/missionduration.j...
Don't let perfect be the enemy of good here, replacing doughnuts , chips, bagels and pasta with say black rice or boiled potatoes still has nutrients benefits. Just choose something with an incrementally better nutrients profile.
New Jargon never stops to appear. Anyone knows what's the difference between "translytical" and "HTAP"?
https://en.wikipedia.org/wiki/Hybrid_transactional/analytica...
It doesn't contradict anything, it just lowers the probability of being right a hair (For the extreme few APTs who would bother with such trivialities), hence the "attribution is bullshit" -- you can't ever know.

However, that does NOT contradict the simple fact that various APT groups do absolutely use the same tried and true TTPs get get in, gain foothold, and persist. They evolve them over time, but you'd be foolish to think they entirely wing it each time, using a chaotic set of techniques. They establish patterns, and you can absolutely build a signature off of that.
To answer your first question, GraphQL allows the client to safely declare exactly what data it needs based on the GraphQL schema.

We don't want clients to be able to arbitrarily execute server side SQL queries, that's dangerous and unsafe. Which is why REST is even used as an abstraction over the backend in the first place.

The problem with REST is that it's not very adaptable. Any time a client needs a slightly different payload, either an entirely new endpoint has to be created on the server side or you have to version the API to handle evolving use cases.
That puts the blame on Oculus, but the blame really should rest on Microsoft for enabling and enforcing a signature mode that shouldn't exist at all.
Investors Back IoT Startups--Showing More Caution About Where to Put Their $
This is radical! It seems to be in line with two British studies that associated both conservatism and tendency to fear with larger amygdala. I understand that personality characteristics associated with brain physiography is heretical among American psychologists. Personally I know nothing about the subject and would like to hear informed opinions.
Leaked internally... to Facebook employees...
What Is It Like to Live Alone on an Island for 30 Years?
One big factor: traditional brokerage/investment accounts provide records of all stock transactions, including the cost basis and precise gain or loss. This typically comes via the 1099-B. It's straightforward to report and file taxes in this manner (relatively speaking).

Even the more legitimate exchanges in the US (ex: Coinbase) aren't currently providing these types of records. You may be able to export a list of trades, but often cost basis is missing. Or if, for example, you've moved coins through various exchanges, or traded one coin for another coin (say BTC to ETH), before converting back to fiat currency, it's very difficult to figure out how to report everything. There's no 1099-B.
Writing your own, general-purpose build system is a hard, multi-year project (spoken from experience[1]).

[1] https://build2.org
The article seems to be mostly about:

"My startup has grown and now has gatekeepers, how do I use them effectively?"

You mention that this is a playbook on making enterprise sales. I think that's slightly different, ie:

"My startup is selling to an enterprise that has gatekeepers, how do I work with them?"

Within your own organisation you have a relationship with the gatekeepers, but as an external startup / salesperson you don't. Do you have any extra tips or thoughts on that?

Does it mean you must simultaneously sell to both the gatekeepers and non-gatekeepers?

Or sell to the non-gatekeepers and show them how to cross-sell to the gatekeepers? Can they do that bottom-up or across their business, or does that need to come top-down within their business?

Thanks.
Use barman http://www.pgbarman.org/
> Not the above commenter, but Google Earth VR is like something out of a sci-fi film from 20 years ago.

google earth VR and the opportunity to show it to my friends was worth $350 on its own.
Birth defects
I've been subscribed to your newsletter for a long time - years, I think - and it's wonderful to see your hard work pay off!
Thank you so much, Konrad. Glad to welcome you with a coffee!
P.S Your platform fee is waived.
Ex-Comcast employee here. Just to try and help crystallize some things

>replacing the modem did fix the issue.

Comcast's IPv6 deployment has been historically...interesting.

A lot of DOCSIS 2.0 devices still exist on Comcast's network. And most of them (claim) they support IPv6. Suffice it to say they cause a metric ton of problems in of themselves

It's entirely possible that your signal strength may have been "too weak" when reading it in Comcast's "Einstein" troubleshooting tool. That wouldn't manifest itself in the way you describe, but the phone operator may be assuming the technician will call in to the NOC (or "XOC", the "Xfinity Operations Center" in Comcast terminology) to correct the problem you were calling about. The one they didn't understand

To add to this, Comcast equipment is awful. Truly awful.

All OEM's (D-Link, Linksys, Netgear etc) do similar to this. But Comcast seems to outsource development for its equipment to the lowest possible bidders. When I left, Comcast had just started deploying the "XB3" generation of modems

The first one they released. The Cisco DPC3939 would hang on World of Warcraft's patches. The only thing I could deduce as to why was it spawned a few hundred connections (WoW uses a Bitorrent style downloader)

The DPC3939 and DP3941 Comcast modems would typically take 5-10 minutes to reboot. Unfortunately tamper seals prevented me from wiring the thing up to see WHY it would take that god damn long

>They've also tried to upsell me during outages … which, really? Why do companies do that?

Comcast sees technical support as a cost center. They outright tell all agents that they ARE a cost on their first day. I snapped this lovely picture early on in my time at Comcast, which details part of the "S4 Call Flow" in use at Comcast https://i.imgur.com/GXm6Bx0.jpg (dated 2014)
Why is anyone surprised? Almost every software company embaces "open standards" when they're starting up, because it helps them get a foothold. But once they're established, they want to kick out that ladder, in case the newer competitor comes along.

Establish yourself, then build a moat.

This is also a sign that they may be planning to IPO. How else would they sell a walled garden?
We’re all whitelisted in terms of IPs. The issue is with # connections from the same nick. We worked with Freenode to find a solution and it didn’t pan out.

The overwhelming majority of customers connect to Slack though, so it wouldn’t matter price-wise.

I think I’m the only one reading #stripe from Skype :-)
Then you would need an internet connection just to install a driver. It would make getting your network driver installed pretty difficult.

You could look at the system clock but that was not designed to be secure for this purpose.
I didn't have that experience. Plus you can always have both REST and GraphQL. Your GraphQL server can simply call your REST endpoints. If you already have a REST API built it's not that much work to set up a GraphQL gateway.
The SEC made it clearer securities laws apply to cryptocurrencies and exchanges
Checking at install time is effectively useless. The whole point of running signed code is that you can't just load some rootkit. Secure Boot only loads a signed bootloader which only loads a signed kernel which only loads signed kernel modules. You can't do what you're suggesting without fundamentally breaking this chain of trust. What's to stop a rootkit from just spoofing that it was installed months ago?
New Forensic Analysis Indicates Bones Were Earhart’s
How to write clean React unit tests with Enzyme (2017)
Since you mentioned braille displays, some blind programmers do use those. They're expensive though ($1000 or more). Computer braille has 8 dots per cell rather than 6. That's a good fit for ASCII.
I lost my wife suddenly in 2009, she was 34.

Losing your significant other is something that you never get over - you live with the emptiness and the hurt, and you learn to move on and hope that the "fog" eventually lifts. It's something that only someone else who has been through the same experience will understand. I was lucky to meet a friend who had lost her husband a couple years before, and she helped me through the hardest times.

Matt, if you ever read these comments, all my thoughts and condolences for you. I know "thoughts and prayers" does nothing, but a lot more people care than you realize.

Hang in there.
Show HN: Mobile-centric tile puzzle CAPTCHA
Next big Windows update will bring hardware-accelerated machine learning
We did!

We'd like to support multiple cryptocurrencies in a simple, secure and straightforward way. We're looking at CoinBase Commerce and alternatives for this.

Thanks for the suggestion!
Crazy fast lightweight microservices on NodeJS with convenient adapters. Love it!
I understand and agree with you with the issues about REST. But I still don't understand why GraphQL is not unsafe. For example, assuming that we have an endpoint that returns a list of users but skips banned users. Would I have to do something like query{user(banned:0)} ? That would be pretty unsafe as well. So how is graphql different than executing limited queries on the server?
No. A GraphQL server is agnostic to how your data is fetched. You could pull the data from a REST endpoint, or put the SQL query to the db right there in your resolver on the GraphQL server itself.
Although, once you gain or lose a few pounds, it wouldn’t fit quite so exactly anymore.
Does that really not sound ridiculous to you? Microsoft needs to be blamed for their certificate validation implementation because people might use it to make their software expire? Instead of just writing code that does so?
> Certificates aren't supposed to stop working just because they've expired!

Except TLS certs. That's the whole point of those certs having an expiration date in the first place.
Experimental evidence is fine, given an actual experimental protocol. So far, all we have are weak anecdotes that don't come close to proving the assertion.
Theseus Ship of cell replacement?
I'm over forty and still discovering new things that aren't universal.
Given how much the Russian election "rigging" and "hacking" story has focused on Twitter posts, one could be mistaken for thinking they run the elections.
We learned the wrong lesson from 9/11 buddy. Look at the TSA still going strong, all the domestic snooping, and an imperial presidency with open-ended powers unchecked by Congress. Over all the conclusion has been to not deal with the world's problems, kick everybody that might cause problems out, and close the door.
> There's no reason to re-verify the signature every time the driver is used.

I was replying to this part of your comment. It does seem worthwhile to validate the signature of the driver every time the driver is used if that check would reveal when a certificate has been revoked for having been compromised.

Agreed that the expiration time is not particularly useful for this purpose.
Yes, the cable wires are below power lines and even when they get ripped down from the poles they usually keep working.

EDIT: I am guessing Comcast learned after Sandy took out power for a month. We had power for a few days until the batteries died out on the nodes when Sandy hit... even with all the lines ripped down everywhere.
Buy shares in ECC memory suppliers.
The updated article says that the phrase being triggered is "Alexa, laugh". As long as it somehow mishears Alexa, 'laugh' is a very short phrase that seems easy to accidentally detect (maybe even by a cough). That's probably why this one was occurring more frequently than other possible triggers, and would also explain Amazon's fix of changing the trigger phrase to "Alexa, can you laugh?".
This is true in my case. I quit Facebook (and WhatsApp) and life became a bit better.
So that magical box on the pole has batteries inside. Depending on how they have it set up, you get around 24-48 hours of battery power before the fiber node converting optical to coaxial goes dead. They often have a LED on the outside showing red or green depending on status of the node.

A mini generator solves the issue of powering the node if your power utility is worthless and can't restore things after a few days.
As much as im all for for personal freedom and I don't like to see goverment influence ISPs - in this particular case I'm all for making adult sites harder to access via paywall or whatever. There is nothing good about porn being freely available to everyone, especially growing up kids. Porn simply destroys families, lives and relationships.

http://www.dailymail.co.uk/sciencetech/article-4354970/Men-w...

https://www.nytimes.com/roomfordebate/2012/11/11/does-pornog...

https://www.thespruce.com/is-pornography-destroying-your-mar...
See The Delphic Boat [0] for a discussion of this in detail.

[0]: http://digitalcommons.dartmouth.edu/cgi/viewcontent.cgi?arti...
The majority of employees at advertising-based companies are employed in selling advertising and supporting the people who sell advertising. Outside of Google and Facebook scale it is still a very high touch process.
"The Pentagon, which has pledged a fair and competitive selection process, will outline its plans for the procurement to IT vendors at an industry event that more than 100 companies are expected to attend in Northern Virginia on Wednesday. Oracle, Microsoft, IBM, and Alphabet Inc.’s Google are just some of the companies planning to be there."

I'm actually kind of surprised that the DoD would use an outside cloud provider instead of working with other government agencies that have their own data center infrastructure already built and staffed (I'm thinking of the NSA's data center in Utah or something like that)...
GraphQL queries are strongly typed. You can only add fields for what your schema defines. And no, in that case you would simply have a users query and in the GraphQL resolver on the server side for that query you would just filter out banned users. If there's anything you don't want exposed to the client, you simply leave it out of your graphql schema.
Hope you're doing alright dude, sending a virtual hug from Australia.
Don't let TC39 add smoosh and smooshMap to JavaScript