skysight-inc/HackerNews huggingface dataset:
I agree with you when it comes to most politicians, but I’m pretty sure Trump is actually dumb. He’s the only person I’ve ever seen contradict himself three times in a single sentence. When he speaks, he almost never displays any indication that there’s any understanding of the subject at hand.

W had a superficial dumbness that was largely cultivated. Beneath that he had at least a basic understanding of the issues.
I couldnt immeadiately find a graph or data but potentially parent was talking about price v performance. The computer offerings historically have been behind the curve but I thought the iPhone performance was strong compared to the field. I would be happy to change my opinion with new information but I agree with you.
psst, click their username: "Founder of a deep learning chip startup called Vathys.ai (YC Winter 2018)."

:)

(Edited to answer the below question: Dave Andersen - http://www.cs.cmu.edu/~dga/

I'm back at CMU full time, but was having too much fun at Google to quit entirely.)
So I'm a mid-level manager at a company with a few hundred developers.

The more developers you hire, the higher the chance you'll start collecting people with obscure (but usually reasonably easy to satisfy) tool preferences. You know, the guy who changes his IDE to emacs key bindings, the guy who does all his e-mail using mutt when everyone else uses gmail, the girl who uses a Dvorak keyboard layout, the guy who insists he works best on a 1024x768 screen, and so on. Having tried a variety of industry tools and thought about about how you work best is usually a good sign[1].

Their favourite tools aren't my favourite tools, but they work for me so if they're not happy, I'm not happy.

The bait and switch is we adopted a tool that would keep IRC users happy, and it dropped IRC support.

[1] Although I keep my settings conservative, as it's hard for others to pair program or assist you with problems if they can't operate your computer
Doesn't mean it isn't click bait. ;-)
Both Google and Apple are working hard on it.
If I publish my work as open source I want it to be kept open source. Linux doesn't seem that interested in the second part.
err this is level 2 technician stuff
Here are my thoughts:

You start with a simple CLI, then you figure out you can't do much without variables, ifs and basic loops. At this point you have a language with ugly syntax and problematic semantics because it was never intended to be a language. Then you try add more features (because people a stretching the limits of what is done with the CLI) without breaking anything. This is hard and has even uglier syntax. Not mentioning names here :)

CLI support is needed in NGS because in practice many scripts begin as few lines that you typed in and then copy+pasted to a file. I want to support this mode of work.
It is. It's called "French-ruled paper" and is the school standard in France. [0]

[0] https://getfrenchbox.com/what-is-french-ruled-paper-seyes-sc...
An Introduction to Programming Paradigms
Microsoft feels like it always is moving towards a grand unifying vision, but it is always taking longer than you'd expect. Xamarin is still one of many heads of the great .NET hydra. Microsoft's been making big strides to tame them all under .NET Standard, but there's still plenty of work to go.
> The tech industry as a whole has, over the last decade, adopted an especially frenzied pace that looks an awful lot like someone lost in the woods, freaking out, running in different directions trying to figure out where they've been and where they're supposed to be going.

I think there's a simpler explanation: people are trying to find new business models. The old model of individuals paying tens or hundreds of dollars for software is slowly dying, and it's on full display in the iOS app store where even $5 is perceived to be a lot to charge for an app. So we need new models. The rise of SaaS is tied to that shift. in-app purchases and related psychological shenanigans are related to that shift.

The SV elders, like Peter Thiel of Palantir, now more than ever seem to favor rent-seeking business models and started selecting for those businesses 5 years ago. To course-correct, someone in technology will have to discover a new business model. I'm personally betting that we'll see a backlash and new models wherein people pay so there is no chance of data harvesting (going back from SaaS to standalone software)
So... you can write a bad test? Yup. That happens. And you can misunderstand what you're trying to do? Well, there's no magic test that will make you understand what you're meant to be doing.
The one thing that sets it ahead from shadertoy for me is that it doesn't crash the browser, probably because they use prerendered thumbnails for the previews instead of the actual shaders. The shadertoy front page reliably kills chrome and firefox on windows. Not sure if shadertoy works better on systems that don't use ANGLE.
Click the "theme" button to change to the dark theme.
Why California Politics Is Always 15 Years Ahead
I just wish irssi supported other scripting languages. I don't particularly dislike Perl and it's not like it needs to do very complex stuff, but it'd be fun to tinker with it with my language of choice.
One person's metadata is another's data! You (may be unintentionally) characterise it as a market where you check boxes on "datasets" to buy, but it's far from that. Monetizing by licensing/selling some kind of log data isn't really interesting--but understanding what signal can be derived and how it can be applied to an opportunity (arbitrage, value added analysis, financial product/insurance etc.... is where it gets interesting.

I've written a bit about derivative uses of data if you are interested: https://post-employment.com/category/business/
Thanks for sharing. Which language(s) did you previously use primarily? How did you learn to program in Go? What resources did you use to "ramp up"? I ask because I am wondering about how to be introduced to such issues early on and learn how to fix them before they become more serious like causing "production downtime" because the response body isn't being completely read and closed.
Suttna open source contributions
You website design is awesome! Do you have the site source public? If allowed, I'd be interested in converting that to a theme for Hugo (https://gohugo.io), and possibly demoing that on how to use that with my package ox-hugo.
All of that is true, not to mention that Slack is free (up to a certain point).

But many IT departments require on-premise hosting, which Slack doesn't offer. Users don't care about open standards, but maybe their sysadmins do. If IRCv3 can capture this audience, it has a chance to co-exist with Slack.
Maybe try again? Calligraphy nibs (and Asian fountain pens, designed for Asian calligraphy) tend to be extra fine, and therefore more scratchy.

A fountain pen with an American or European medium nib should be smooth to very smooth.
What would make it a first-class citizen?

Even an empty Rakudo Perl 6 program is a multi-threaded program, as the dynamic optimizer runs on a separate thread. I'd figure if that's possible, concurrency/parallelism would be quite a first-class citizen, not a best hope on top of something.
That's the end of an era - Yerkes has the largest refracting telescope ever built.
I agree - this is very cool, but it's hard to imagine that the kids depicted running around slums will be the beneficiaries, outside of targeted NGO efforts.
The title here (20% of all Node.js modules found vunerable to injection attacks) seems more sensationalised then that of the actual article:

> Understanding and automatically preventing injection attacks on Node.js

The article further guards the hyperbole with phrasing like "may be vulnerable" which is not reflected in the HN submission title.

As click-baity as the title here could be interpreted, the article is highlighting what could be a significant problem: people often don't perform input validation well or create designs which make it difficult to do well at all.

The article may be understating the issue by concentrating on specific types of attack: it seems to be referring only to calls to exec() and eval(), so could underestimating the problem by only considering served-side JS and shell/OS injection vectors. I would think that database vectors and client-side vectors (resulting on possible XSS attacks) are pretty common too, probably more so. They certainly are in a lot of code I've seen both online and in private codebases, due to lax input sanity checking or worse: architectures that make good validation in this respect practically impossible.

This is not at all unique to node.

> A staggering 90% of the call sites do not use any mitigation technique at all.

Many libraries simply assume that the caller are performing input validation and only sending them sanitised commands. This is not safe, particularly in a publicly available library, as a lot of naive programmers will assume that the library is performing some validation and will raise exceptions in the presence of something dangerous. Even documenting the lack of validation won't help in many cases because how many people read documentation in detail until something goes wrong?!

> Another 9% attempt to sanitise input using regular expressions. Unfortunately, most of those were not correctly implemented.

This is a common problem too, the most problematic issue being people using regular expressions to try identify bad inputs. Trying to enumerate the bad is generally impossible as the range of bad inputs is usually infinitely larger then the range of good ones.
This was posted 9 hours ago with the paper title as the name, and got 3 upvotes:

https://news.ycombinator.com/item?id=16566587

I thought it was interesting and relevant for this audience, so I put a more sensational (but arguably accurate - you can argue the semantics of vulnerable all day) headline in the title to grab HN reader's attention. Now it is top of the front page with 40 votes in 25 minutes.

If you want to read papers like this everyday, I got it from the morning paper mailing list: https://blog.acolyer.org/
Learning new things. Making things. Making the world better in some way. Doing something I wasn't able to before. Exercise. Seeing things I've always wanted to see.
Now I'm wondering if there's a viable "seed-deck development" business model that can scale to IPO..
Nostalgic read! Same here, '96. Then getting into irc wars, net splits and nickname collisions, taking over channels. Finding bugs in eggdrop 1.1.5 to gain op on channels. Never did work with TCL again though.
WeeChat + screen is awesome. I was using it for Slack. It handled their strange use of +v/-v for user is away at least, better than Epic

I've never tried Glowing Bear. Maybe that would be a nice way for friends to get comfortable with IRC?
10 new features in java 10
Phil Bredesen’s Campaign Was Hacked. Are You Next?
The Tipping Equation: How Far Is Too Far?
Using observablehq to find the most used Indego bike in Philadelphia
I'm never quite sure what these approaches add to prefab. This process costs $10k to produce up to an 800 sq ft (74m^2) home. They say this is a fraction of the cost of the average American home, but the average new American home since ~2013 is 2500 sq ft (232 m^2), so of course its a fraction of that, and I guess it cuts out the labor. However, I would imagine that even in El Salvador, the principal cost of a new home is acquiring the land. Surely labor and materials are cheaper there, so what am I missing here?
The tin can is dead–long life the food pouch
Well, you can undo your own reactions, so not 'irrevocably'.
Also works with .NET 4.5. System.ValueTuple package has .NET Standard 1.0 target which can be effortlessly used by a .NET 4.5 assembly.
>So far as I know, you literally cannot implement a language with mutability on the VM.

Elixir allows reassignment, of course, in the end, it uses different "Erlang" variables, but the language abstracts it.
I have seen a lot of these "neat" solutions over the past few years. And the counter arguments I've seen are "we already have this, it's 10x cheaper, faster to setup, etc...". These arguments are based on things like the Ikea shelters/homes, or other prefab stuff that's _super_ cheap.

But, the arguments against these is that it doesn't provide income for local labor, or use local resources... but neither does this 3d printed house.

So, where is this all really going, when we have multiple solutions right now that could help people, but they are not being used?

Is the problem actually political and corruption, and not technical or monetary? Or are these other solutions just as much hot air, and we really do need a new tech to fill in the gap?
You are definitely applying your own spin, to be sure. ;) Microsoft tried repeatedly to work with the YouTube team to comply with Google's ToS, but it was a moving target, Google kept changing their requirements until it was largely impossible to comply.

The Amazon/Google spat goes back a lot further than that, which I've talked about a bit in other comments here.
I think a lot of this is objectively wrong. Any of the Cordova-based platforms (including Ionic, Framework 7 and some others) were built to support every platform including niche players and it still never got much attention from developers. Xamarin as well was able to target Windows Phone and it didn't help. There are already big investments from Android competitors like Samsung in their mobile platforms and they absolutely suck.

Even then, a solid cross-platform dev platform like React Native is actually a boon for Android which is second fiddle to Apple when it comes to premium apps. Right now, anyone looking to reach profitability will go iOS first, then web, then Android. Making the cost of bridging the gap to Android smaller will only increase adoption.
Would you mind posting a link or an example of the feature in C#/Rust?
I am assuming your site remake is still in progress? The fonts on your web site show up in super-huge size at the moment. You can see the font size on other sites like this one for comparison: [1].

[1]: https://i.imgur.com/um3yTdU.png
Title should be changed to "Synode: understanding and automatically preventing injection attacks on Node.js"

The issue is an important one to bring attention to, but as I leave this comment all the other comments are arguing whether the submitted title is accurate/click-bait.
I have a theory that corporate food companies slowly remove anything of value in their food. In the next 100 years, McDonalds and KFC will be serving us nothing but fructose-infused sawdust with varying levels of oils and wax to hold it all together.

It's like that old story about the airline MBAs who remove an olive from their onboard drinks every year to save $40,000 - eventually there are no olives left in the drinks!

Pepper is expensive, they probably saved hundreds of thousands of dollars by eliminating that ingredient.
The Assumption of Normality in Time Series
Keep using a computer for 20 years? A 20 year old computer is not going to run the latest version of Windows.

Now I do have a 10 year old Core 2 Duo 2.66Ghz with 4GB RAM, Gigabit Ethernet and a nice 1920x1200 display serving as a Plex Server. In day to day use, the only time I can tell the difference between that and my modern laptop is when I try to run too many things at once and that could be alleviated by upgrading the RAM to 8GB.

As far as the iPad 1st generation, it's true that you can't get software updates -- I have one too -- but you can still download the "last compatible version" of apps for it. I reset mine last year and re-downloaded and ran Netflix, Hulu, Crackle, Google Drive (for reading PDFs), Spotify, Plex, and all of Apple's iWork Suite.

It still supports AirPlay and prints to all of my printers. I can check my Exchange email at work. The browser on the other hand crashes constantly.
Constructing walls by laying down layers of cement does not constitute a 3d printed home. How does this automatic wall maker compare to El Salvador labor in cost and quality?
Language support for actor model as opposed to shared memory multithreading would make concurrency a first class citizen.
Or mammoth. Or whale.

Paleo man also ate the whole thing, not just the muscle meat. Some days, you might just have a giant bowlful of fat. Other days, you're eating paste made from acorns that have been leaching out their bitter compounds under a waterfall for a week.

Depending on where you lived, your tribe might have had access to many portions of meat every day for weeks, and then nothing but low-nutrition or semi-poisonous plants for months. It was a great incentive to develop either food preservation technology, agriculture, or a nomadic lifestyle. Which is to say: follow the meat, keep the meat from rotting until the herd passes through again, or eat more nutritious plants.

So there wasn't any one archetypal paleo diet. Paleo man had to adapt to his environment or die. The "paleo" idea is to reject foods that did not exist 10000 years ago, because supposedly human physiology hasn't evolved to deal with them yet. You invent a caricature of a cave man in your head and let him tell you what's food and what isn't.

~I don't recommend it. When I tried it, my cave man slipped on a wet rock while hunting, got a bad compound fracture, and died from an infection a week later, because antibiotics hadn't been discovered yet. My cave woman was out collecting sour berries and army worms, fell into a creek, and drowned. Then my cave baby was raised by wolves. I couldn't find the wolf milk and regurgitated caribou section in the supermarket, so I had to abandon the diet.~
Interesting idea. What's the cost of this home vs a timber home? Life span, cost of upkeep, R factor, etc.

From my observations building the frame of the house is relatively quick here in the states. I would be that the habitat for humanities groups could put up a similar size house frame in less than 8 hours. So what is the advantage here?
it needs webgl2 to work properly
CuDNN Installation Script Ubuntu
Fear mongering
What studies would you cite for someone interested in learning more about the field?
As someone who's spent years using both, I can definitely disagree. Even a budget Windows Mobile was far less sluggish than my high end Motorola flagship phones.

In fact, I had a phone with Microsoft's Android Bridge beta, and while people were complaining how slow the Android apps were on it... I realized that it was more or less just the normal performance Android apps ran at.
Under the assumption that DNS will move to TLS, a future TLS will have to incur this cost.

It is nice to have 1RTT, but if at the same time you are leaking SNI, people are not going to be happy.

I'm curious how this hashing would work out. My gut feeling is that some security researcher will have a nice presentation along the line of 'nice hash function you have, here's how to break it'.
Oh gosh, network admins might actually have to learn how to do their job, or, more likely, managers might have to learn how to listen to them? The horror!
In addition to some other points, the downscaling step in #1 may also smooth out some noise in the source image. Less noise yields more compressible data.

In my own scanning workflow, I scan at 600 or 1200dpi to png, deskew, downscale, and apply a black/white threshold. This is all done with imagemagick: mogrify -deskew 40% -scale 25% -threshold 50%

If I want a PDF after that I'll use img2pdf.
The only good thing I've ever heard of Slack is that you can avoid the bloated client and use IRC instead.

Probably a great way to reduce friction when introduced.
I agree. I also think that knowing cosine and sine are unit circle X and Y coordinates is at a similar level for university math majors.
'if constexpr' shows the simplification process in the C++ standard. It's easier to use that SFINAE tricks, so maybe non-template-experts will also use it from time to time
Open Source Tool to Visualize Dependencies in Angular2+ Applications
It’s not uncommon today, but was virtually unheard of until Google did it.
As others have said this is incredibly sad, I guess the best case scenario at this point is for it to be a condo, at least the great building can be saved.

But what really puzzles me is that how this great resource cannot be put to better use. Yes, the telescope may "no longer contribute directly to the research mission" but it still blows your $300 home telescope out of the water! I, for one, would pay at least $250 a night for a modest room if I am allowed to use that beast (with supervision, of course). I guess there would be tons of amateur astronomers who would feel the same.

I understand U of C does not have the bandwidth to do this, but why doesn't a local startup/philanthropist/whatever step up?
State of CT going after Newegg customers for tax on 4-year-old purchases
> For people where the $15K difference matters a great deal, the tuition at the elite school is increasingly likely to be greatly reduced or free.

This isn’t entirely true. Tuition aid for most students is based on the parents’ income. My parents are (and were when I went to school) upper middle class on paper. They have never been great with money, though, so they couldn’t cover tuition out of picket and hadn’t set aside funding in advance. They definitely helped with living costs but tuition was covered by loans (and scholarships partially). So I left with loans to cover virtually all of my tuition.

If your parents are middle class and can’t cover your tuition, you’re probably in a similar situation. Combined with a low-demand degree, this could easily result in crippling debt.

> The place where people get killed is when they go to a private school that is expensive and not particularly an academic standout

My sister did this. A couple of years at a private religious school before she transferred to a public school. The student loans from those couple of years are absurd and dwarf the rest of her loans. She’s still paying them off a decade later.
They are pretty big in enterprise apps, usually targeted to employees.

Despite my opinions regarding native UIs, the fact is that we are yet to get pure native apps contracts, they are either Cordova/Xamarin/Qt or plain web based.

The majority of enterprise shops do not care about native UI/UX.
Amazon Now Lets You Place Calls Through Alexa-Enabled Tablets
A lot of JavaScript color manipulation libraries use arrays to represent a color. Like c[0] = R, c[1] = G, c[2] = B.

.NET ports of such libraries can be hugely improved by using value tuples for color representation, while keeping the original array-based semantics.
Effective lead gathering. Perform a small service.
I would say that the feeling you are experiencing is your gut telling you something that you should listen to. Becoming a specialist in a specific technology can be lucrative and can be the focus of a long career, but the technology you pick must have a life outside of the company who makes it.
I read this as Secret[s] Management... Design decisions... Eg how to design your org. Where's my head at.
Microsoft CLAWS at Haptics Progress: Virtual Reality Is Getting Tactile
Thank you for the clarification! It's not exactly a "dot matrix" because the dots aren't on a grid, but I think that would be a much better summary. Also a better summary than "series of dots".
Housing is rarely limited by construction, it's limited by land rights and infrastructure buildout. Oh, and credit availability; even down to "microcredit" for the really poor places.
Gen Equity (1999)
Hey, thanks.

I have a Pilot Metropolitan and it dries pretty fast.
For me the most important are split layout and portability. The cups and thumb layouts are just icing on the cake, tenting on a flat layout would be sufficient too.

Iris and dactyl look like the sort of things I’m thinking, though I’d probably want to find a way to either have f keys or configure some of those thumb keys to hit certain common f keys, I assume that’s doable though! Thanks for the resources, just mentioning names and where to look really helps :)