skysight-inc/HackerNews huggingface dataset:
> Perhaps I'm contrarian or just have well-behaved apps but I actually prefer notification-driven interaction with my phone. I try to open it only if there is a notification.

You must have well-behaved apps. Many apps are very aggressive about notifications; instead of using them for "this is something important you'll care about", many apps have started using them as "this is something you won't care about but we want you to open up our app anyways".
> 90% will complete a live, guided course. 5% will complete a MOOC of the same quality.

What does complete mean here? Complete within a given timeframe? Doesn't that miss the entire gain that MOOCs bring to the table? Which is that education becomes a lifelong endeavour instead of something you try and fit into a few years and, for most, never return to again?
"Vulnerable to injection attacks" seems like a bit of a stretch to me.

Direct quote: "then about 20% of all modules turn out to directly or indirectly depend on at least one injection API"

Where "injection API" is a reference to either the eval() or exec() functions.
Like Producthunt but for the TW Bootstrap Projects
For a C++ implementation of actor patterns, see: https://www.actor-framework.org/
Yeah on a branch of a fork.
This headline is entirely false - 20% of Node modules use 'eval' or 'exec'. While these are certainly less secure and a strong secure coding standard would probably ban them or at least reduce their use, it's entirely possible to use both in safe ways.
Here are a couple I just found. I've not tried either but hope to later today.

1) https://github.com/pR0Ps/znc-logsearch

2) https://github.com/robinsmidsrod/znc-log-viewer/blob/master/...
I'm sure you had a valuable point to make but the blatant inaccuracy in your comment distracts from any effectiveness your point may have had.

* It was a game killing random robots, not people.

* It wasn't an NRA event, it was CPAC where the NRA was one of many presenters.

* It was not the day after, it was a week after.

You could argue that these are minor errors, but that's not the point. You've already tarnished your credibility so it's hard to take anything else you retort with at face value.

It's unfortunate because I think you had a decent point about optics.
There are ports of Akka and Akka-like libraries for a number of languages. Actor frameworks are relatively easy to find for most languages. Another variation of a sort of an Actor framework that gets used for relatively large projects is the Orleans framework for .NET: http://dotnet.github.io/orleans/
That iPhone is behind the curve on hardware specs is not really true. Their CPU+GPU is faster than anything else on the market.

And in terms of other hardware (RAM, camera, sensors) I would still say it's arguable
The US already produces and consumes 1 billion metric tons of coal per year. Numbers in Europe are similar. Also all this coal is already cleaned and crushed. That's a lot of mass, even at the low yields, and it's essentially "free" ore.

The real limiting factors are throughput and cost of ore processing.
If the process can be done economically at the rate of production, it will be implemented. Even if it barely brakes even in terms of finances, it also helps with A) stopping rare earth metals from going airborne (which is a health hazard sometimes) and B) Creating a strategic backup source of rare earth metals and C) Preventing further environmental damage from additional mining for rare earth metals elsewhere.
Doubt it's any of the bigger ones (longer than couple hundred meters), or done in the last three decades.
I tried the commands given (plus a few more I just guessed) and they all worked. What an enlightening demonstration of IRC's simplicity! This comes at a good time because I've been having issues with eggdrop, maybe now I'll just write something tiny to replace the bits of functionality I want.
To your point, restricting carbs in those diets is one of the keys to eating less. You mention (and rightly so) that "people tend to overeat things that contain lots of carbs and/or fats that fail to satiate": if there aren't carbs in the mix, fats (and protein) satiate more quickly (and for longer) than when accompanied by a hefty portion of carbs.

'djsumdog pointed out diets that many have found successful and meet the requirements that 'georka mentioned, moving the conversation forward constructively. If you have diets suggestions that also meet those requirements, or constructive criticism that 'georka's or 'djsumdog's points are off base and have alternatives, great!

As for "Most people don't need to remove carbs", at least in the US, while complete removal isn't necessary, I believe many could benefit from restricting their carb intake, keeping everything else constant (as long as they're getting adequate protein and vitamins/minerals). Whether that's due to shifting the macronutrient balance or just from the reduced caloric input, they should see a benefit, and likely will not feel hungry. It sounds like you agree that low carb diets can benefit people. In that case, if you have other diets you prefer, offer them up constructively (though likely elsewhere, as this is now well-off the beaten path of this thread).
I use Happy Hacking Keyboard, which is close to the layout you describe: https://elitekeyboards.com/proddata/doc/hhkbp2_basic_layout1...
The Erlang VM (BEAM) is unusual in that it, like the languages it hosts, is very opinionated.

It is designed for robustness, scalability, concurrency, distributed environments. And immutable data. So far as I know, you literally cannot implement a language with mutability on the VM.

So, raw performance will never be its thing.

In general, I think the actor model could achieve high performance, but perhaps only if messaging is syntactic instead of truly distributed with mailboxes, network transparency, etc.
Looks like $790M https://www.crunchbase.com/organization/slack#section-fundin...
this. android phones only seem "better" because they have a buttload of cores (10 in some cases) with weak single threaded performance.
iPhone is generally behind the curve when it comes to hardware specs

Really? In all the benchmarks I've seen, the latest iPhones handily beat the latest Android phones. (And old iPhones remain usable longer than old Android phones.)

Assuming the software doesn't get in the way, benchmarks are all about hardware, not software.
What was the "let's see if this person is serious" task?
Compiled code is faster than bytecode is faster than interpreters.

It's not always true, but it's a good rule of thumb.
Further on:

> 18,924 of all 51,627 call sites are found to be statically safe (36.66%)

> The templates for the vast majority of call sites have at most one hole, and very few templates contain more than five.

If you've got a dependency that calls eval or exec, those aren't great odds that they're doing it safely.
If you're scanning at a lower resolution, the scanner has fewer samples to work with when trying to make a visual representation of your document. If you scan at a higher resolution, the algorithm could at the very least average together nearby samples. It could also detect sharp lines vs fuzzy borders and decide whether the low-res version has a sharp transition or an averaged color between areas.
"Vulnerable" due to eval() or exec()? Not really an "injection API".
To be fair they follow up with

> A staggering 90% of the call sites do not use any mitigation technique at all.

> Another 9% attempt to sanitise input using regular expressions. Unfortunately, most of those were not correctly implemented
tl;dr people pushing security tools for nodejs say security tools are the new most important aspect of node servers because some of them use calls that could maybe possibly be used in an unsafe manner but currently don't appear to be.
Possible, but unlikely. eval is particularly difficult to use correctly, and can almost always be replaced with something better.
Ask HN: What are your gripes with starting innovative projects in your company?
Lots of businesses try to encourage their employees to be entrepreneurial to find new revenue streams and/or reduce costs. I imagine that part of why HN readers are interesting in starting their own businesses is that there are significant issues within their corporate company regarding starting new initiatives.

A personal example is working in a Product team for the first time (with an offshore development team), is that because we don't have as close of a relationship with our developers we can't prototype very easily. An onshore developer may have been able to build a MVP alongside their allocated sprint work off a short conversation. However, with the offshore scrum model developers can't be assigned work unless it is associated with a card. This means product needs to do more upfront work which leads to sunk cost fallacy (lots of businesses are afraid to write code and then say it won't be used.)

Do you experience any organisational issues which stop you from innovating in your workplace?
They changed it to 'KFC' because the state of Kentucky was trying to get royalties from their use of the name.
Also fly ash is a pain in the ass to get rid off. I've heard about companies re-using it in concrete products and other construction materials. Even if the value produced is low, any profit is better than dealing with the cost of safely disposing it.
Erlang does a great job of protecting data from concurrency problems, but you're still vulnerable to mistakes like deadlock.
Your second question about "thousands of commits an hour" is actually a server scale question, as opposed to a GVFS question. The main difference is that GVFS is primarily client software plus some extra server protocols that a server must support.

I find the "thousands of commits an hour" measurement to be conflating multiple things. I'll split out my expectations in our experience with the Windows repo.

The Windows repository is hosted in VSTS and handles over 4,000 developers doing their daily work. This includes an average of 3,000+ pushes per day via the Git protocol. Each push may include multiple commits. At least 2,300+ pull requests are completed per day, which creates a new merge commit each time. Also, the build machines run daily and kick off a push as their first action to update a version number. This creates 250+ parallel pushes within a 10 second window, so a spike of concurrent pushes are supported by VSTS.
Of course if google actually tries that there is an anti-trust lawsuit awaiting them, which will probably force google to spin off android. (this may require a change in US presidents but that happens all the time)
Ask HN: What brings you joy, without a relationship?
Healthy male, 38, financially secure. Being depressed about not having a relationship/wife/family, doing counseling for 3 months already. Rather than focusing on what's missing, I'm working on focusing what I could do on my own.

What activities which don't depend on having a SO bring you joy?

Thanks for sharing.
'Mini code bootcamp' suggests that your target audience is people looking for careers? What are the end employment results like for all the participants?

For instance, are MOOC students more likely to not complete the course because they have already found work in the meantime? Perhaps because they have more freedom to look for work during business hours, for example, rather than sitting in on a live class during the optimal employment search time?

If the goal is to find work, there is no incentive to keep going in the course after you have met your goal.
Ask HN: Who's buying all the big data?
With every service, platform, software package, god knows what collecting data on you, I can't help but ask: who's buying all this data?

It's clear in the case of massive players such as Facebook and Google that don't have to sell their data. They can just keep their data and directly offer targeted marketing to advertising.

But what about smaller players, that don't have a strong 'big data' presence and product? Examples such as:

- online only NVIDIA drivers
- anti-virus software
- chat apps such as Skype, Discord, WhatsApp, etc
- online sites such as Github, StackExchange, etc
- <shady mobile app #1402>

All of the above collect data about you in some form of another, it's a staple nowadays. Who's buying all this data? For how much?
That's click-bait
It’s not uncommon, from my understanding, for founders/families to have almost all of the voting control in a public company. I think it’s a misplaced assumption that the public has a proportional interest in voting equal to their amount of shares, or % ownership.
This was definitely a problem for me with F#. It took me a solid 4 hours to figure out that the best way for me to build the tiny program I was working on was just to run fsharpc from the command line. It seemed like there were a number of quite complicated ways to structure F# projects, but I couldn't figure out what problems they were trying to solve.
WeWork acquires Conductor – SEO pros like Rand Fishkin chime in
And to make it slightly more explicit, the nature of empty content - unlike complicated creative content - is that coincidental similarity is actually pretty likely.
You mean, hook up Seebeck generators to your pipes in order to harvest energy from the temperature differences? It's an interesting idea. I don't think it will help much with hot-water corrosion, and it might hurt.

First, you presumably don't want to put your Seebeck generators on the pipes that run hot water to your taps, because that would make the water coming out of the taps colder. That heat isn't waste energy; it's the effect you were trying to achieve by heating the water! You'll have to put the Seebeck generators on your drainpipes only. But usually it's the supply pipes that corrode, not the drains.

That aside, I am guessing it's going to be hard to passively pull out so much heat from the water as to make a noticeable difference in the corrosion rate. Remember that the temperature difference has to remain large enough to keep driving the current through the load. And, in order to do it, you need to hook up the Seebeck generators to the pipes — you don't want to make the pipe walls themselves out of thermocouples, because then instead of a Seebeck generator you'd have a short-circuited battery, with the water in the pipe as the electrolyte. So you end up joining four or five dissimilar materials together along the wall of the pipe — a recipe, generally speaking, for extra vulnerability to corrosion, although you can avoid that by some ways of doing the joints.

In summary, I think Seebeck energy harvesting from plumbing is very promising, but not as a way of extending plumbing lifetimes.
I hadn't seen it before, but it seems to be pretty common for French-ruled paper. https://getfrenchbox.com/what-is-french-ruled-paper-seyes-sc...
I do host my own mastodon server with a small community, the initial setup is a bit complicated but once you get it going upgrades are nice and easy (each update contains all shell commands necessary outside `git fetch` and `git checkout v{VERSION}`)

Only downside of course is that if you selfhost alone, your federated timeline will be a bit empty, I do recommend either finding a community or starting one to get a bit more activity (Mastodon is essentially geared towards a sort of "community neighborhood" decentralization, where only one in a few hundred or thousand users needs to run a server, on average)
WebWire for Go – A WebSockets abstraction library
The numbers on the box may be lower (number of cores, ram size), but I agree, benchmarks usually show iPhone very competitive or in the lead.
That 20% includes dependencies. I'm sure the majority of those are cli tools (webpack etc), i.e. they don't take unsanitized input from web forms etc.
> "Surely do, both MS and Amazon."

Thanks for confirming.

> "BTW, are you from Microsoft?"

No, I don't work for Microsoft. However, I have enough experience with their ecosystem to suggest that their revenue focus is not in web dev. Other products (such as Windows, Office, Azure and Xbox) are their prime source of revenue. Whilst I don't doubt they have plenty of web devs (TypeScript and VS Code both spring to mind as web-based tech from Microsoft), I wouldn't say that is their core competency, so...

> "a company whose topmost technical expertise is underhanded web programming"

... doesn't ring true. However, if you know people on the inside I'd be interested in knowing how the size of the web dev teams compares to other teams, such as the Xbox division.
> But it’s not like the models the professionals rely on are using m.a.v. in their calculations rather than standard deviation.

Exactly! This is another point I wanted to make on my response in this thread, but I had already written too much. Fortunately you made the same point in one line.

> So the whole controversy is a bit overblown ion my opinion

Just take it for what it is, which is a marketing piece for Nassim Taleb's personal brand.
interesting trick, thanks for sharing ! [edit] Quick test here : https://imgur.com/a/6xOz1
That depends on your parents class if your a bright working class kid whose parents didn't go to uni you don't get told the unspoken rules.

You also don't have access to the behind the scenes influence eg being a legacy at Harvard or similar, I was surprised to hear my mum saying I we had stayed in Brummagem they would have used my grandfathers influence to try and get me into King Edwards.
No encrypted connection when asking for such information is a no-go.

http://www.hibenjamin.com/privacy.html "Sorry, the page you are looking for could not be found."
Product Development in an Age of Digital Transformation
Article says they hope to bring the cost down to to $4000 from $15000. Meanwhile projects like this exist: http://www.300house.com/ That's $300. So what's revolutionary about $15000 or $4000 for a "cheap" home?
Any idea when they are going to ring the bell? I want to get in very very early on this one. Very early.
Yeah I just did the math on this (systems of simultaneous equations FTW) and this comes out to almost 17% class A and 83% class B.

So we have:

- 36M class A shares @ $18/share = $745m

- $100m of class A shares at the IPO price in a private placement. This is roughly 5.55m shares and how the figure gets to 41m shares and change

- I don't know how many unissued class A shares there are but given that there are 41.5m being issued, this implies there are AT LEAST 245m class B shares outstanding, which seems... kinda high.

- Additionally, Dropbox has raised >$1.7b in VC [1] over the last decade. What class of shares have these investors gotten? B or A? If it's A then there are a whole lot more B shares outstanding. If it's B then that too is curious.

Unless we're misunderstanding what 98% of the voting power means here?

EDIT: Oh there's a table ("THE OFFERING").

- 26.8m class A shares being issued it looks like?

- 9.2m class A shares being offered by existing stockholders.

- It's unclear to me if the Salesforce private placement is from existing stockholders or a new issuance.

- 53.7m outstanding class A shares after this offering;

- 339.3m (!) outstanding class B shares

- 5.4m outstanding options to purchase class A shares

- No outstanding class C shares after this offer. One wonders what class C was. Stapled shares to class B that converted to A?

So it looks like this would value Dropbox at close to $8b (393m outstanding shares plus the options plus 30-35m shares IPOed).

For a gross profit for 2017 of $737m (from $1.1b in revenue; that's one hell of a profit margin) that all looks pretty healthy. In fact, i wonder why the price is as low as it is? Although they are spending that on R&D and the like.

EDIT2: Ya know, I realize commenting on downvoting is not a thing here but I have to ask: why on earth is this getting downvoted??

[1]: https://www.crunchbase.com/organization/dropbox#section-lock...
It's a delicate balance. If we assign personal projects in the beginning many just say, "I don't know how to do this, I don't know what you want," and will flail because they're expecting more structure than a personal project can possibly give. You have to slowly train them to the point where they will try things on their own and can abandon your training wheels. It's like they're in a mental cage, I don't know how else to describe it.
It is typically class A that gets 10 votes per share. Does the S-1 say otherwise?

[edit] yep, you're right...

- "Shares of our Class A common stock are entitled to one vote per share."

- "Shares of our Class B common stock are entitled to ten votes per share."

From MarketWatch...

As is the norm for tech companies going public these days, Dropbox has multiple classes of shares with different voting rights. Class A shares have 1 vote, Class B shares have 10 votes, and Class C shares are nonvoting. MarketWatch pointed out last week that Dropbox's structure still gives heavy voting power to the founders and key investors, but it's "slightly" better than the one rolled out by Snap a year ago, in which ordinary investors don't get any voting rights.

- Cofounder and Chief Executive Drew Houston owns 38.3% of the class A shares and 24.3% of the Class B shares, for 24.4% of the total voting power.

- Venture-capital firm Sequoia Capital actually has more power than Houston, with 25% of the Class B shares and 24.8% of total voting power.

- Cofounder Arash Ferdowski has 9.9% total voting power, mainly consisting of Class B shares.
> Using the Vulcan printer, ICON can print an entire home for $10,000 and plans to bring costs down to $4,000 per house.

OK, according to the "global wealth pyramid" [1], a graphical representation of global wealth distribution, the bottom 3 billion own less than 10'000$. I'm not saying that being poor is equal to lacking shelter, but there is probably a correlation there.

3d printing homes is cool and might have potential, but it won't help a poor farmer in rural Azerbaijan get shelter. It would be great if the media could stop presenting this as a panacea to homelessness.

[1] https://www.credit-suisse.com/corporate/en/articles/news-and...
Yes, this came up on /r/emacs recently, see[1] (you can control if you want the HTML preamble and/or postamble).

[1]: https://www.reddit.com/r/emacs/comments/809xwx/how_to_get_pl...
I can get seemingly comparable results with a couple of simple operations in Gimp.

Here is a casual job on the first image:

https://i.imgur.com/Sy2rvsU.png

The steps:

1. Duplicate the layer.

2. Gaussian-blur the top layer with big radius, 30+.

3. Put the top layer in "Divide" mode. Now the image is level.

4. Merge the layers together into one.

5. Use Color->Curves to clean away the writing bleeding through from the opposite side of the paper.

6. To approximate the blurred look of Matt Zucker's result, apply Gaussian blur with r=0.8.

Notes:

The unblurred image before step 6 is here: https://i.imgur.com/RbWSUnD.png

Here is approximately the curve used in step 5: https://i.imgur.com/lvfqCNK.png

I suspect Matt worked at a higher resolution; i.e. the posted images are not the original resolution scans or snapshots.
Key word is vulnerable. There is a gap in protection and they are at risk to being potentially exploited.
Most detailed version of how to do customer discovery
> thousands of modules may be vulnerable

(emphasis mine)

Apparently any module that uses eval or exec counts in "may", regardless of whether there's an actual vulnerability. Then using dependency analysis they extrapolate the 3% of packages that actually use these features to 20% that depend on something that use them.

Maybe uses of eval or exec should be more closely audited for safety, but blanket stating that any use of core language features makes you vulnerable is just vacuous clickbait.

This is a Synode sales pitch.