skysight-inc/HackerNews huggingface dataset:
Can you nest stages?

Say I want something like this:

1. Sequential: stage "build", build-type agent.

2. Sequential: stage "tests" (this is just a wrapper/container)

2.1 Parallel: stage "integration tests #1", integration #1-type agent

2.2 Parallel: stage "integration tests #2, integration #2-type agent

2.3 Parallel: stage "deploy and functional tests" (this is just a wrapper/container)

2.3.1 Sequential: stage "deploy", deploy-type agent

2.3.2 Sequential: stage "functional tests", functional-type agent

Is it doable?
Because libuv (which Node uses for multi-tasking) depends on threads being yielded in order for multiple things to happen without blocking. This is way easier to think about and harder to screw up then traditional thread management with mutexes.

If your api is not asynchronous, then any expensive call is going to lock the entire application which is bad and also why I won't be using this library despite the actual underlying implementation being much faster.
> In the old days it was unfathomable you could be locked up for something you didn't know was a crime.

This pretty much has never been true, at least in Germany. "Unwissenheit schützt vor Strafe nicht". Even the Roman Law didn't excuse for lack of knowledge https://de.wikipedia.org/wiki/Ignorantia_legis_non_excusat

There are edge cases where you may escape punishment (Verbotsirrtum) but only if it was unavoidable that you erred. Involuntarily distributing child porn may carry lesser punishment, but it will certainly be investigate unless you can assert a privilege such as common carrier status or inability to control the transmission, as for example Tor nodes could.
> That you are developing software for web browsers and are still able to maintain the notion that your innovations exist in a vacuum is flabbergasting.

Who invented the software language you use or designed the earliest forms of hardware you use or discovered the electron? The fact that you type on a keyboard and yet consider your imagination innovative is flabbergasting.

https://en.wikipedia.org/wiki/Reductio_ad_absurdum
interesting, so Stackoverflow > Linkedin. Were you targeting a certain # of years of experience or were you more concerned about tech stack?
I had an alpha (miata, AKA Personal Workstation 500au, I think) running NT on my desk for a while, while we waited for space to open up in a rack..(1) The NT on it seemed quite usable, thanks to the FX!32 emulator. When running x86 compiled stuff, it felt mostly as fast as contemporary high-end PCs, once you'd opened the x86 program and used it for a while.

(1) We used FreeBSD/alpha, so we always bought the "NT" version of machines to save $$$ on the DEC UNIX license fee. Eg, just like today, the Windows version of a machine was cheaper.. FreeBSD did not support the ARC firmware needed by NT, but you could easily switch the machines to SRM in order to load FreeBSD.
Interesting project. The only thing that really came to mind is since the messages are deleted on their server, could someone use it as a way to harass to a colleague leaving the company unable to take any action because it would be 100% anonymous.
That's awesome. What is the business model of IndieHacker?
I had a similar reaction, that quote seems extremely ignorant and tone deaf. Open source is all about shattering that mentality from Day 1; making an open source POSIX compatible OS.
Find CSS selectors with a Chrome extension
Working with automation frameworks like Selenium?

Get rid of the hassles in finding selectors using HTML. Take help of CloudQA’s free CSS selector picker to click-n-copy unique selector of an element.

Unlike any other tool you can quickly get the selector of your preference. This is very useful in building reliable test cases for complex web apps having nested iframes and dynamic elements.

Get your invitation here: https://cloudqa.io/css-selector-chrome-extension/
Sure. Could you just write a patch implementing the solution? I'll then open a pull request submitting your patch, to save you some work. ;-)

In practice, this only works if you provide the password manager that will be chosen once and for all.

zaarn's suggestion "providing an interface for password managers" is an interesting alternative.
Show HN: Soccer-go, node cli for soccer scores and more
Started it in 2012 while wrapping up my last year of school. Put my idea for a product I really believed in on Kickstarter, luckily Hacker News and the like really took to it, pushing it past 100% quickly. Been at it ever since.
The Ultimate Crypto Exchange Platform – COINNUP
That's a bit of a stretch. There's no reason to obfuscate anything (unless miners are actively and intentionally censoring content) and it'd be straightforward to make a browser.

For example, I don't think it's a defense for the owner of a website to say "this horrible illegal content I'm sharing is only accessible via a custom tool that downloads and decodes image data from me...such as a web browser."
Are you sure it can store passwords and decrypt them with required touch? What's its memory?
It's interesting how little attention this issue received throughout nine years of time, especially when you see a 5-year gap between updates/comments on the bug thread.
The tech stack behind iPlayer
Yo is a scaffolder. At the end of the generation you are more or less on your own.
This is a full prepackaged config you can easily upgrade. The cost? Hard (if not impossible) customizations of underlying products config. Not a con IMHO.
It doesn't do double compilation when using TypeScript, .ts goes goes to tsc and .js to Babel. It uses Babel so you can use ES6/7/8 on the server.

This is meant as a simplified project build tool, not for every use, but you can configure it quite extensively if you need to (although it has limitations). I would estimation that ~80% of projects could use this, and is less than 5 minutes of migration or 30 seconds to get started. It's not for the 20% of projects with very custom needs for build configuration.
Probably the same team that designed the Hawaiian missile alert system.
> AList's used as a map. Probably the worst possible structure for representing a map.

They're more flexible than hash tables and often faster; what makes them so awful? They both have trade-offs that make them better and worse in different contexts, depending what you're optimising for.
They could rephrase it to: "we consider this an enterprise usage pattern for our software so this feature will be included in the paid Enterprise Edition".
I wish Linux would implement a modern Secure Attention Mode (it has one but that kills all processes).

It could be as simple as having a syscall that connects a process directly with the keyboard and does not let any other process intercept any keyboard input until the program lets go or times out (180s, after that the program isn't allowed to get SAM anymore for another 180s)
Not everyone wants to build a family. Some people are quite happy to be single throughout their life.
I think it is technically impossible at least improbable to make such encoding scheme, unless your encoding becomes the content itself.
We have more than one service, more than one environment, and auditability requirements (due to being a financial institution).

I find it more complex to try and keep track of remote state modifications than to have a single source of truth, but whatever floats your boat ;-)
Check out something like pkg by zeit[0] which compiles the node app to a binary. Then put it in a directory in your $PATH and you'll be able to run it as `fibonacci`.

[0]https://github.com/zeit/pkg
As I told @fs0c131y (cited in the article), they're very easy to find. My bot found many of them without even looking:
https://anisse.astier.eu/what-do-you-find-when-you-search-tw...
At least in that case the important keyword isn't placed at the end (i.e. you would get an error if you merely typed ` switchport trunk allowed vlan add`)
Good idea! I'll add it to the tutorial on the next release.

It's basically making a custom entry for that specific command and adding it as a bin in the package.json.
PlayerUnknown’s Battlegrounds on Xbox Hits the 5M Player Mark
Sons of Rich Black Families Fare No Better Than Sons of Working-Class Whites
Yeah age is not relevant really, but I went for a complete example. As for vim, or emacs in particular, I actually met a few of these 20 something programmers with enthusiasm who went there. Some stayed, some came back frightened. But they all tried (and I modelled the exampled on them)
Agreed, seems suspect. If they are really able to learn the population-level distribution then why even bother generating fake data. Just release that instead.
Largely through word of mouth and referrals from friends. This has generally garnered the best signal for me personally.
City and county officials say the practice is a natural evolution of criminal investigative techniques.

Ah yes, very "natural"

And they're carefully balancing civil rights with public safety.

and "carefully balancing"

Bureaucrats and their weasel words.
Indeed I was about to write as you have that key servers, or CT logs etc could arbitrarily decide not to include whatever keys they wanted -- although once included, it would be a pain to get rid of them because I think they're built on a Merkle tree structure which is routinely audited: I believe revoking a key doesn't actually delete a key from the database, but rather adds the statement "this key is now revoked", as it's an append-only ledger.

In theory the miners of a public blockchain could also do such auditing, to simply decide to ignore anything containing child pornography, just as they could arbitrarily decide to ignore any transactions. Of course, it's probably expensive to actually check all possible transaction in this way, and they most likely don't have a big enough incentive to. And of course for other sometimes illegal content (e.g. a picture of Mohammed or a particular nation's state secrets) some group of miners would censor while some wouldn't, and it would only take the miners who don't censor to win once for it to forever fork the blockchain.
I had this book as a student of Prof Lopes' class at UCI. One of the best classes I had. Programming patterns/styles that senior programmers got through experience were covered, which I liked a lot. As students we had to compulsorily buy the book though.
Well if you dont use a master password, the passwords are available with the Show passwords button. Firefox's saved passwords feature is not meant to protect against theft etc. (This is actually annoying to me, but I cant really flaw the model; people want what they want and the browser needs to provide it).
Yeah, that's how I know about it. I spent some time in England in the early 1980s. So it affects me. But I did get my gallon pin before they kicked me out. Which means that there could be hundreds of Americans walking around with foreign prions, just because of me. :)

The real advantage of being kicked out is that once you tell them the reason you can't give anymore, they ghost you. Totally. No more phone calls literally begging for your blood. :)

The funny thing is, I'm sure, all the English are donating blood to one another. And they're surviving.

I can see the opposite viewpoint as well. If even a single American got BSE from "foreign" blood, there would be an incredible shitstorm. And the poor recipient would have received the equivalent of a death sentence.
Show HN: Decss, a JS-in-CSS library that converts CSS into components
India has active border disputes with both Pakistan and China. The concern is that if an Indian publisher produces maps which don't show the disputed areas as part of India then that would hurt their legal case in international tribunals and hand a propaganda victory to the other side. Land is the foundation of the state so it's not surprising that some governments react harshly to something their leaders perceive as an existential threat.
I like the idea of styled-components. But I also have had to deal with hundreds of thousands of lines of Sass code so I know well how even a little bit of (real) code could make styles incomprehensible.

So I've built a JS-in-CSS library that keeps your CSS where it belongs and converts it React/Preact components using CSS modules.

You can learn about the reasoning behind in a Medium post: https://medium.com/@kossnocorp/js-in-css-df4cf8b9b96c

I did battle test it in production for almost a year, so now I think it's ready to be shared with HN folks.
I'm not trying to start an offtopic discussion, but the not enthusiastic 24-year old looks like the clearest and best option to me. Personally, I would refactor it to three lines.
Top small business ideas for 2018
at this point, the attacker has already owned the database and found an exploit that allows arbitrary shell execution on the host. i feel like the title is a little bit click-baity, because the attacker could have just hosted their executable payload on any of a thousand shady file hosting sites without needing to hide it in an image.
...and, if especially unlucky, that would be the trunk you're using to connect to that switch.
I think they meant, “don’t have internal and guest WiFi connections use the same subnet”.
If you’re giving non-employees passwords and access to a network that contains sensitive resources that’s a big security red flag.

Many companies also use IP whitelisting for external services/systems, so if someone from outside the company joins an internal network they now have access to them as well.

Edit: Actually, they point out those exact reasons if you expand that entry in the list.
Putty for Mac 9.0.0 status update
"Samsung has been able to improve its OLED technology with every iteration twice or somecase three times every year."

Isn't the only noticeable difference between S8 and S9 AMOLED screens 15% increase in brightness?
Recruiting and resume writing is what entrepreneurs call a "tie shop business." The product is already well-defined, the customers are already well-known, and how to operate the business is already well-known.

Even a software consulting firm is a "tie shop business."

Developing new technology is the polar opposite of a "tie shop business." The product is new, the customers are unknown, and how to sell the product is unknown.

The reason why I state this is that hacker news's users, and Y Combinator's businesses, are developing new technology. They aren't creating "tie shop businesses."

It's important that you know the difference when participating in a forum like this, and deciding what kind of business to start. Advice that applies to a "tie shop business" doesn't really apply to someone who's starting a business to develop new technology.
I was and still am working full-time, but I try to put a new side mvp project out every roughly every 6 months which can (hopefully) generate revenue. Ive been doing this for about 2 years, and am launching hopefully my third "successful" project in April.

My most recent project ( https://projectpiglet.com/ ) is an AI financial predictor - I started with scripts in 2013 - 2014, I then rewrote it recently to launch as a web service. So you can say it started as a side project, made me money (100% yoy), then after I felt it was validated, I went to expand.

My first project ( https://easy-a.net/ ), was built as a weekend project to help some friends. It lets you know the grade distribution of every course, semester and professor of the universities in the system. Further, it provides estimated workload, probably exit grade for you, etc. My friends needed it because they couldn't get in to see a CS advisor at UIUC at the time, because they only had one advisor for ~ 1600 students.

The two I have today (aka the remaining "successful" MVPs) are gowing at an alright pace based on how much I put into it. And although I don't plan on leaving my job yet, I'm sure in the next couple years.

For reference, I did $3k the first year from my projects, $7k the second, and this year I'm on track for ~$25k+. I think I've heard it called the hockey stick of death.. where it isn't profitable enough to sustain itself, but it's growing... Slowly. It's a pain for SaaS. But I try to improve the products because they are both growing constistently.

The project I'm about to launch is built off my most recent platform ( https://projectpiglet.com/ ). I think I can build at least four apps off of it - which I why I built it. More MVPs to try for the market!

List of ideas that haven't made it (yet at least):

- http://synaptitude.me

- http://lettergram.github.io/AnyCrypt/

- thinksuite - https://www.kickstarter.com/projects/synaptitude/thinksuite-...

- pearlywhiteparcels - toothbrush deliveries (similar to Dollar shave club), couldn't find enough partners with dentists (probably didn't want you to clean your own teeth lol)
In a lot of ways I think writing a text is similar to writing code. In both cases, I think there is a lot of value in getting something down that can be refined. In coding, the refining is done with refactoring. In regular writing, it's editing and rewriting. I find it much easier to have a poorly formulated sentence and then editing it into shape than it is for me to write a good sentence from the start. The same applies to code for me.

I have written about my process for writing blog posts here:

https://henrikwarne.com/2017/11/26/6-years-of-thoughts-on-pr...
The query in the example is not “count” but a count + group by query. While it is possible to precompute group by results on every possible columns per page we don’t do that and this query does touch every row. The article touches on how this is possible: operations on encoded data, AVX2, not using a hash table for the intermediate result of the group by. And we certainly don’t fake it with storing query results.

We guarantee that the result is legit.
I think this is not likely to be something you would encounter only in Switzerland; it's a global phenomenon as far as I can tell (it certainly seems common here in the Netherlands).

You just don't fit the ideal profile of what many companies (and certainly start-ups) are looking for in a new developer: i.e. slightly naïve, little to no familial obligations, willing to work long hours (beyond what is healthy and reasonable), and little legacy baggage. Also, childishly put, having a PhD means you would academically 'outrank' most of your would-be colleagues and (most significantly) bosses, and for a lot of people it marks you as someone who is way too theoretical to fit into a development team. These are prejudices to be sure, but we don't appear to live in a world devoid of them.

Of course you would probably be a very good hire for a company that values its employees and sees a well-balanced career like yours as a chance to built on your experience, but those companies may be harder to find.
Facebook suspends Cambridge Analytica for misusing personal data from 50M users
Seems like this could lead to a lot of trolling, harassment, and false flags. As humorous as I find the guy fawkes avatar I would pass on this for my own workplace.
If said tweets were reported they would (probably?) be deleted. I'm not sure the "custom tool" defense would really work, you could say the same thing for warez on usenet or even simple jpegs and videos, you need special codecs to view them. Furthermore even plain text embedded in the chain might be enough to get you in trouble in some jurisdiction if it contains hate speech, personal info or harassment material for instance.

The problem with the blockchain is actually its greatest strength: it's immutable. If somebody reports a block containing child porn there's no way to remove it without compromising the blockchain's integrity.
>an adversarial actor can poison the blockchain with bits that make downloading, storing and processing the blockchain a highly illegal act.

Exactly. I brought up the same scenario recently.[1]

The top 2 replies to my comment was basically, "unless you're looking for illegal data, it's not a problem."

That head-in-the-sand ignorance completely misses the point. It's not about how _you_ specifically ignore illegal data and therefore, you have absolution of guilt. It's about the whole world's response to bad data in the blockchain.

[1] https://news.ycombinator.com/item?id=14434786
How is remembering where I have been useful to me at all? Hopefully something like a us GDPR would make them excplicitly ask my permission before stalking me.
https://ajp.psychiatryonline.org/doi/abs/10.1176/appi.ajp.20...

http://www.academicpedsjnl.net/article/S0010-9452(11)00102-X...
Civil law is again very different to criminal law.

You can obviously have a contract between two people for sending digital information between them.

That this only happens in digital space does not mean the contract can't or shouldn't be enforced.
A Call from Joybubbles
Show HN: What is the best people counting Software?
I want to know why exposing databases on the Internet publicly is considered a problem. Is it because a vulnerability found in a database would allow to exploit the database directly?

I ask this because people expose web-apps on the Internet publicly too and an SQL injection vulnerability on the web-app would also be equally catastrophic.

I guess exposing web-apps on the Internet is a risk we need to accept because it has to be available to users of the Internet. But we should not expose anything else that we don't need to? Is that the reason why exposing databases publicly is considered best practice.

I would like to know what experienced professionals think about this.
You can make a browser extension extracting illegal data from innocuous images on twitter
easy: attentional control and mindset control are executive functions.

ADHD is an extreme deficit of executive functions.

http://psycnet.apa.org/record/2004-19094-002
Spotify mechanical license copyright lawsuit
> I'm not very interested in the worst case, I think a HAM image with width * height modify ops is very unlikely.

Sure, but maybe not as far off in some real world cases. Say, black-but-not-perfectly black letter box bars where the nuances could result in long sequences of small alterations to the base black color. This becomes less likely with an optimized palette, and of course you could set a hard limit to length of modify sequences in conversion, though that would have to compromise the quality of conversion.

> The average case for a direct HAM implementation would probably be more like hundreds of frames, or a couple of seconds, not tens of thousands.

Then the problem, with respect to the original question, is the definition of real-time. For the purpose of a game like No Man's Sky for example I'd think hundreds or even tens of frames would be unacceptable.

Don't get me wrong, I love technology applied to the "wrong problem" and see that as an end in itself sometimes :). I'm just considering the feasibility of accurate HAM in realtime using shaders, and am really enjoying the discussion on what compromises have to be made for it to perform adequately in a shader. But with respect to the original question I can't quite bring myself to say "yes"
Uhhh, read the description.

node-sqlite3 uses an asynchronous API for CPU-bound functions.

An asynchronous API is only for IO-bound functions. CPU-bound functions should be synchronous.
This is exactly what I'd do. I'm currently at 20h/week due to finishing university. After that I'll go to 40h/week for a while, and if I figure out the ideas I have are "more than a hobby"-worthy I'll reduce to 80%, pursue those and see where it goes from there.

My SO and I don't plan to have kids and our rent is already well affordable; this makes it easier (plus FT job \subset hobby helps a lot); so additional earnings would go straight to savings anyway...
Wouldn't that allow a 'denial-of-service' like attack? You keep sending illegal content over and over and the next block is never attained.

Maybe I am misunderstanding the process.
Percent, rather than asterisk.

UPDATE t SET foo='bar' WHERE baz LIKE '$INPUT';

This will do no changes when $INPUT is empty, and only with $INPUT set to '%' will it update every record.