skysight-inc/HackerNews huggingface dataset:
My wife of one year is asleep behind me. She always sleeps in here to be nearby because I love staying up late. Going to go sidle up to her. Sorry for your loss. Thanks for the perspective.
Indeeed! Cryptosecurity is needed now more than ever. Tech security + regulatory compliant, safe on all fronts
It’s a P50!

No kidding, I’ve struggled with the same my whole life. Got into Olympic lifting, saw chiropractors, osteopaths: moving to sit on the floor was the only thing that saved me.

My Keybase is linked in my profile if you have any questions!
Why not outsource the complex ad work to a company that specializes in it? Why not use Google's DFP platform for instance?
> Cosmic rays are bad–and they’re getting worse.

Obviously it can't be getting worse as far as the sun/solar system is concerned per se.

Assuming the data is correct we probably are in a downwards part of at best a cycle I'd assume. It could also be random I guess.

So to predict the future is hard/impossible since we can't be sure when the cycle or randomness will mean it'll increase again.
> It’s not even necessary to test. Once you’ve done it a few times codesigning is a piece of cake.

Presumably this is what Oculus thought and so how they got in this mess.
Of course, if they had listened and therefore never been bitten, they would have seen the work as a waste of time.
Nothing will fill this loss. No "sorry" word will help.
World is different for you now, and it's time for grieving.
There is life and death. There's love and memories.
It was not Apple's choice. You should do some reading on the topic.
Nothing can take away the time they shared in life together.

This is the only fact that comforts me when confronted with the tragedy of our existence.
Show HN: Manage Twitter Engagement
>Just the fact that the device apparently can't function at all without the internet is a problem too.

Isn't Oculus owned by Facebook? Of course it has internet-based mandatory data collection, er uh excuse me, license something something.
None of the Founders, Steve Jobs, Bill Gates, Larry, or Mark decide to change the world from the first place.

I don't actually believe this. Maybe notch was the only one that this could really be true for. All the people you mentioned in those positions have an obsessive drive for success/power - which defacto implies molding the world to how you want it to be.

While it might be true that they didn't know the exact path that they were on was going to be the thing, they had an inkling which they put a shitload of effort into and followed the trend/power curve. That's how all conquerors work. You know the general landscape, but not the exact path, so you can accurately say "well I knew microcomputers were going to be huge, I just didn't expect it was going to be through DOS." That sounds a lot like "I wasn't planning on being a huge success, it just happened."

Otherwise you sound like a megalomaniac blowhard.

Musk seems to be the only one who has stated his intention to "change the world" but dodged any real criticism other thank jokes about him being a supervillain.
I didn't say it was.
That's the only kind of ebooks (non-DRM) ones that I buy. Some publishers (like O'Reilly or Tor dot com) exclusively publish non-DRM books.

I politely ask authors or publishers to release non-DRM ebooks when I can. Apart from best-sellers (or time sensitive books), I believe most books are stuck in the long tail of obscurity and releasing them as non-DRM won't affect their sales.

This also means I don't visit pirate websites that claim to have ebooks. It takes two to tango. :-)
That's the nature of the beast. I have to be the noisy guy about testing and also be the guy who doesn't say "I told you so," but instead continues pushing testing.
+1. I've been doing this for 20+ years. Every site I register gets a new account following a pattern <prefix><site>@mydomain.com.

Incredibly helpful to track who leaked your email and to whom, better control spammers, etc. Just checked on Have I been Pwned, and I have 30 emails from my domain there [1]. Anecdotally, there's at least another 50-100 email addresses that I get spam regularly, so HIBP is a small subset of all the leaks.

Easy to implement. I use G Suite with Gmail[2], but it works with most other providers.

[1] https://haveibeenpwned.com/

[2] disclaimer: I work for Google, but not on G Suite team, and I pay for the service on my own.
Hi there, my approach here will be reverse engineering. Look for the most interesting papers in the area do you want to gain experience. Try to reproduce the experiments in details, document your results and even try to make new experiments to see if you find something new. Ask questions to the authors about your problems. I'm sure that making this in your after ours time, you will gain a good intuition of what research means and you will have some learning lessons to share with others.
Disagree.

First, I won't say your product is a commodity, but there are many, many, many layout and design tools out there. I'm not going to pay $25 to evaluate each one. It's as much about the sign-up-and-hand-over-the-credit-card process as it is about the money.

Second, the fact that it's refundable doesn't matter. I'm never going to ask for a refund. The hassle and the back-and-forth isn't worth $25 to me.

Third, I'm willing to pay way more than $25 if your tool actually solves my problem. There are tons of UI tools out there, but I haven't found the one. It's totally worth it to me if you save me hours of work.

So don't add any friction to the process. Feel free to time-limit or cripple the tool so I have to pay to do any real work, but don't waste my time, and don't make me pay you for the privilege of sinking a bunch of my time into determining if your product works or not.

Find a way to do free trials, and do it in such a way that your costs are minimal. It's worth it.
If you work on a large production code base, I don’t see how you can’t end up having to search and grok lots of code written by other people...
CodAI- Programming Language Detection AI
Starting a minimal Common Lisp project
As a developer community, we need to get to the point where accessibility is not an afterthought, not even something that has to be considered at all; that just is. I'm stating this from experience; I'm blind myself, so I know exactly what is being referred to. My group used to use Slack, and we stopped using it for this very reason. It's not hard to fill out the accessible label field. If it's present in the framework, then it should be taught and enforced.
Proseline – Git for prose, in the browser
Most Americans think AI will destroy other people’s jobs, not theirs
Generally, these days, flexible PEX (cross-linked polyethylene) piping is used for new work in most places. I don't think pressure loss would be much of a problem since the curves in a properly installed system should have a reasonable radius. The reason copper is still used seem to have more to do with inertia and a (sometimes warranted) lack of confidence in new building products.
For me, GraphQL is superb for GET requests. I use REST for everything else.
I'm exploring in build a UI (https://talk.remobjects.com/t/potential-way-to-do-almost-cro...) that probably will benefit for have a custom layout engine. I have looked at yoga, but the example in your site look more compelling.

The use case is "simply". I need something that do the layout calculations for me and I take care of call the controls...
Having just written something similar to that, I agree, the pattern for server-side pagination is pretty clunky. However that is a client-specific implementation detail - GraphQL is an implementation-agnostic spec.
The people who pay aren't asking for E2E. They're asking for auditable shared history. We're in a forums of tech nerds, outside of our bubble encryption is pretty low on the feature totem pole.
I can see you have a lot of interesting ideas, and I think people should be allowed to make developments like what you're describing, but I can't imagine how you justify requiring it, and you don't seem to attempt to do so when you respond here.

A requirement is a very expensive way of foisting a certain lifestyle on everyone, regardless of whether they want it or not. You can't just say "oh it would be nice," you have to actually justify why it's okay to force people to do things this way, and making housing much more expensive.
> I think we should all speak one language (preferably, the one we're speaking now).

Gods no. You'll have to pry my other two languages from my cold, dead tongue. Just the ability to have private conversations in public feels like a superpower. The amazing puns you can make up is also a huge benefit - I can amuse myself all the time.

Plus, you know, cultural diversity, accessing millennia of literature and history etc. But that's the boring stuff /s
Is type the right verb? Maybe glance or stare.
When building an advertising platform that can potentially compete with Google, it's best to not put your entire revenue stream under the control of Google.
It seems the only work left is to continually make the store page even busier and harder to use.
You're assuming that the water cools instantly and you're always wasting the run from the boiler to the fixtures.

No, I'm just assuming that the definition of a "cold start" is that the water is allowed to cool before the next measurement is taken. The alternative (which I agree is common) is a "hot start". The author defines these terms on the box on the bottom left of Page 76 (which I don't seem to be able to copy and paste). Since the chart explicitly says "cold starts", my question/complaint is that as labelled, I can't see how the chart can be correct. I agree that measuring a blend of hot and cold starts is probably a better metric to judge the systems by.
Towards the bottom it gives a little background, with links to more information.
I am so sorry to hear this.

PSA: please, please enroll in a CPR class. It's incredibly simple to learn and administer and you will learn so many things like the role of aspirin, AED usage and of course cpr.
Matt is my boss. He is the kindest and best leader I've ever had the pleasure of working with. Cindy, his wife, was a jewel. My heart hurts so much for him.
Supply side platforms take a pretty big cut of the overall revenue, and are often very focused on existing formats like text and video. You’d be losing out on a huge chunk of advertising dollars both from the SSP cut as well as not getting optimal pricing because you’re bidding in the wrong market.

Of course ideally the question would be “why not just have users pay you directly instead of relentlessly monetizing every bit of personal information you can squeeze out of them” but as an industry unfortunately it doesn’t seem like we’re there yet.
@}}>-----

(It's a rose, in case that isn't obvious.)
I was about to set up a native xmpp/irc client because “Safari reloaded this tab because it was using too much energy”

sigh Richard Stallman was right. Again.
Here you go. This chart breaks down the differences between Pyramid schemes, Ponzi schemes, and open public cryptocurrencies such as Bitcoin. By "open public" I mean that there is no central authority or organization. Bitcoin is a decentralized open source project run by community participation (anyone can run a node or miner, and millions of people do).

https://i.redd.it/6zz58uq57n601.png
What if a bad actor hacks a centralized database? Which is more likely?
Yeah, but they're not that different. They use their own protocol and their flagship client is a web/electron app.
depending on how our punctuation is set up with any screen reader, the characters in code are read off nicely. And no special Braille Display is needed for this; any normal one will do, then again, Braille displays are a rather wide selection. With the keyboard, we can move back and forth nearly as fast as, if not sometimes faster, than our sighted counterparts.
Why is it better to use a upper bound rather than a more realistic estimate?
Agreed and I will piggyback on top of it. I think we forget how reliable some of the code in this stack is. It's battle-hardened and works extremely well with lots of documentation/help.

There is no sane alternative to this...that is the power of open source where we collectively pool our capacity into something worthwhile to everyone. I want more of it.
I can't wait for recruiters to incorporate this to their lingos
you seem to miss the point.

1) get US phone

2) register google voice to US phone

3) stop paying for US phone

4) you can't de-register you US phone, unless you register a new one

5a) if you never sign up for a US phone, anybody can get assigned that number and click "forgot password" on your google voice.

5b) you get a new US phone: go to 2.

that is true for every single service that ties you up to a phone number or that has phone number as recovery option.
College is running an ad campaign, one of your co-workers saw it (consciously or unconsciously) earlier in the day, and that is what lead to the college coming up in conversation?
That's mostly a client problem than a protocol problem. Any mail client with a workflow for whitelisting contacts would stop spam immediately.
One of the reasons to run your own mail server might be exactly the lack of desire to show your mail contents to a third party.
It's overly optimistic that the US gov would have upgraded to that version by then.
Thanks for the thoughtful response.

Ok, what about this: Only you have your private key, which must be used to modify the data, everyone else is given a "view key", which is read-only. If at any point a view key is compromised, you can somehow revoke the view key using the private key. Would that not work?
Is that true though? Could a malicious driver be signed with a compromised key and distributed? Seems like a useful feature to be able to mark drivers as compromised.
UUID v1 is generated by using a combination the host
computers MAC address and the current date and time.
...

This means you are guaranteed to get a completely unique ID,
unless you generate it from the same computer, and at the
exact same time. In that case, the chance of collision
changes from impossible to very very small because of the
random bits.

MAC addresses are hardly unique. There have been cases where manufacturers accidentally shipped ethernet controllers in bulk with cloned MAC addresses. In addition, they can often be explicitly set by software, so I have no doubt there are IT departments who abuse this feature. And perhaps most likely of all are collisions with MAC addresses generated by VM managers.

Assuming your PRNG isn't broken, your best bet by far for avoiding collisions is a randomly generated UUID.

Each and every bit of a UUID v4 is generated randomly and .
with no inherent logic. It’s that simple. There is,
therefore, no question of anonymity. ...

With the sheer number of possible combinations (2^128)....

This is totally wrong. It's like the author didn't bother reading the standard or the Wikipedia article. There are 6 non-random bits in a version 4 UUID. But don't take my word for it. See https://tools.ietf.org/html/rfc4122.html#section-4.4
Well, and this mess: http://www.plumbingfittingsettlement.com/FAQ.aspx

They've perhaps fixed that by now, but the reputation is there.
Agreed =(
Can we please make it to the polls to vote out these small-minded people?
You can play around with the engine in code here: https://github.com/lynaghk/subform-layout but the best way to get a sense of things is to use it from within Subform.

Curious to hear more about your use case and what you think of the existing API/demos --- definitely open a Github issue or start a topic on the Subform discussion board after you get a chance to try things out.
The Dark Roots of AIPAC, ‘America’s Pro-Israel Lobby’
Its not but Flutter is meant to be a cross platform solution.
What are some reasonable SMTP servers written in languages other than C? Any recommendations?
Travis Kalanick Is Forming a Venture Fund
That's a reasonable answer to why the drivers need to be signed in order to be installed. That's not the question. The question is why should the already-installed drivers that you've been trusting all along suddenly stop working.
Like just about any IT service you call your ops team? Slack offers value in being hosted for sure but if you're worried install difficulty then we're in the world of on-prem services. Matrix is easy compared to some paid products I've used.
How Google Almost Destroyed the Zagat Restaurant Guide
I agree that it would be nice to have a way to show that permission prompt only if an external extension wants to use the API - however, that's not possible because such prompts can only be triggered after an explicit user interaction, not from the Add-on itself or external Add-ons.

Also, you didn't effectively "agreed telemetry". The same way you didn't "agreed to sent all website data you visit to the Add-on developers" when you accepted the "Access your data for all websites" permission that the Add-on also requires. If you don't trust the Add-on or its developers, then that permission should scare you more than the "Monitoring extensions" permission. But as you probably know; it's just a wording you have to take with a grain of salt and a lot of Add-ons/Extensions require permissions which would in theory allow them to inject any arbitrary content in websites you visit, or read data from them for that matter. It's how permissions work.
Using jBPM, you get a NullPointerException when you use a WorkItemHandler with a BPMN <serviceTask>. Not a nice one with a message, either. Had to debug into jBPM to figure out that one.
Not every java web app needs to be this bloated. It's possible (even practical) to build robust, database driven web apps/web services without spring/hibernate and with far shallower stacktraces.
First, this tool is brilliant. I’ve been a Front end dev for 7 years and I still google “centering in the unknown” every time because it’s easier than remembering the properties. The whole process of being expressive in HTML and CSS is so broken and the tools today are broken right along with it. Thanks for trying to make it better!

Second, charging for a beta...what a great idea. I’ve signed up for 7 competitors this week and can’t remember their names and will never again login. But if I have to decide this problem is big enough to make a monthly commitment, I’m damn sure going to log back in to get my money’s worth. I hope y’all crush it. Thanks.
I've always marveled that The New York Times can know exactly how many free articles I've consumed across different apps/entry points, but cannot ever keep me logged in.
Honestly, `doFetchMore()` represents all of the worst aspects of "modern" javascript -- incredibly terse syntax that does little to help the developer understand what is actually happening.
The 12 Signs: How to know when you’re slowly but surely becoming a bad manager
Ask HN: Accessibility best practices for web apps?
This question has been on my mind for some time and the recent post on here about Slack’s apparent disregard for blind users prompted me to create the post you’re reading right now.

I’m working on a social network and I’ve been testing in Chrome for their Lighthouse feature and fixed some accessibility issues. However, I’d like to know if there are other great references that y’all can recommend me.
Nah, we were talking about universities (i'm in Canada and almost every uni has an associated college) and topic shifted from that uni to college.

Also, let's say what you are saying is true. How come ad decides to show up 30mins - 60 mins after conversation takes place?
Votes don't matter at times like these.
Aligning a VMWARE tagging strategy with a cloud tagging strategy is one of my current goals. Things like a full blown CMDB seem to always end in pain, lag, and orphaned records. I'm happy enough with something basic that spans on-prem + cloud.
Metered License Support and Improved Reading Voting Button from MSG in .NET Apps
It also adds human redundancy and specialization, both of which reduce risk for a company. In the "product/market fit" words, before fit, a company is all risk. After fit, during growth and long term profit extraction, companies try to reduce risk as much as possible (and optimize for greater margins/efficiency).
Ask HN: A Large Site with my data was just breached, how do I track it down?
I have a friend who works in the infosec industry and he recently alerted me (by sharing the image at https://imgur.com/a/NiiMX) that my information has been leaked online. Now I am pretty security conscious myself and tend not to give my email or phone number to sites/apps I don't trust (I even use anonymous/disposable email and phone tools when possible) unless absolutely necessary so I think this was probably a large breach.

I asked Troy Hunt and he said the data didn't look familiar to him. With just the info contained in this image, is there any smart way for me to try and figure out where it came from? I have obviously redacted my last name and phone number from this post.

For reasons I do not understand (maybe due to NDA?) my friend is unable to tell me where he got the data.
EU ready for a 'stupid' trade war if Trump slaps on tariffs
> The problem is, as the authors note in their new paper, the shield is weakening: “Over the last decade, the solar wind has exhibited low densities and magnetic ﬁeld strengths, representing anomalous states that have never been observed during the Space Age. As a result of this remarkably weak solar activity, we have also observed the highest fluxes of cosmic rays.”
He couldn't afford the renewal fees! Can you imagine?
I’d think regression testing is easier than with a GUI. Just interpose between the app and the screen reader, and check for expected strings in the output.
America Is Giving Away the $30B Medical Marijuana Industry
Right, and now that everyone is hooked the loud minority (if we're being honest with ourselves) have to choose between speaking the Slack protocol or losing access to our contacts.

Are we doomed as a community to be surprised every time a company with power squeezes?
Slack's official clients allow the user to control notifications, and therefore when they respond.
Your premise is faulty, I don't accept any anonymous sources, including ones I agree with. In fact, I'm even more skeptical of them, not less. The fact that you have no way to verify it is what makes it worthless. You can't say "the source is reputable" because you don't know the anonymous source. Nor can you say "the journalist is credible" because they're not showing you their evidence.

This is a great way to let your bias do your thinking for you and I'll have no part of that. Why do I say it's your bias? Because you have literally nothing but your subjective judgement to base your opinion on in this case. After all, if you have something else, why are you trying to judge the reliability of a random, anonymous rumor in the first place?
Obviously facebook uses the microphone if you shoot video or make a call from the app, so the wording is not that odd.
It sounds like the paramedics arrived in a timely manner. No need for PSAs today.
> Seems like a useful feature to be able to mark drivers as compromised.

Putting expiration dates on non-malicious drivers is not a particularly effective way to protect against malicious drivers.
So sorry for your loss, Matt. She was far too young.
I was wondering as well, is it possible that there’s another part that it happens instead?
I've been using focusmate for months, it's surprisingly effective (I figured since they can't see my screen I'd go on hn/twitter anyways, but I dont). Not only is it good for staying on task, I find the biggest benefit is committing to be in your chair at a certain time.
HN community members have a long history of following Matt's work and interacting with him. He's someone who gives you the sense of being a good person even if you've never met him. He has helped a lot of HN users.

There are few people that this community has both respect and affection for, in such large and equal measure. I'd say that's why this is on HN.