skysight-inc/HackerNews huggingface dataset:
1. My nation elected a president more interested in plundering the environment than protecting it.

2. Nearly everyone feels "I want to act but if no one else does then my actions won't matter so I'll keep doing what I'm doing."

3. When I've gotten over that feeling, my changes improved my life.

My podcast, Leadership and the Environment http://joshuaspodek.com/podcast, emerged to help provide the leadership for cultural change, to where people want to act on their environmental values.

Then guests like Dan Pink, John Lee Dumas, Dorie Clark, Frances Hesselbein, and other luminaries enjoyed their personal challenges, leading to more influential guests.

With a Superbowl champion and a Victoria's Secret model coming up, I'm more motivated than ever.

Plus people are volunteering to help, leading to in-person events.

Check it out: http://joshuaspodek.com/podcast.
Sounds reasonable, since you can (and should) enforce use of password manager by your employees.
Distributed Deep Learning with Polyaxon
The item it would solve is that if you "pay" then you can more directly influence their road-map. As a customer they want you to be happy and to remain one, that gives you the ability to influence direction. Individually, it may not be a lot, but in aggregate customers have power.
Except grabbing types like that in code is usually a code smell. It can become brittle and hard to extend as time goes on. It's suitable when you need something now or you know you'll only ever have a few (less than 4 or 5, preferably no more than 2) cases. But either way you ought to be refactoring to something more like the third example.
Software engineer salary numbers in the US
I feel that kernel-level handling would get messy. Just to name one thing that comes to mind: how would you handle multi-seat systems? Oh, or accessibility; say, there is no physical keyboard, just a touchscreen and onscsreen keyboard that you've just blocked from displaying. Yes, you could handle it, but by the time you've hit a few of these the code will be... inelegant.
Interesting, thanks for the validation. We have basic Maven support already, and a PR half-finished for .Net - I'll get on it :-)
They are cumulative though, and the efforts have been ramping up.
Haha what a bunch of clowns...

Which part of permissionless do they not understand?

But what else to expect from idling academics on gov payroll?
The short story of this is:

- Gain access to the database itself

- And the Postgres database should be vulnerable to various remote code execution

- Once they're able to execute code remotely, they then download an image which has binary data tacked onto it

- They then parse out the executable part of the image using dd

- Then they're able to execute and mine away

While an interesting read the shortest takeaway is:

1. Don't leave your Postgres open to the public internet and

2. Ensure to upgrade when security releases come out.

If you're unsure if the version your on has security patches available or other reasons to upgrade consider checking out https://why-upgrade.depesz.com/

Edit: Looks like the user that gained access had ability to execute pl/c. Which has to run as superuser. You won't find things like pl/c, pl/python generally supported on most Postgres services like Heroku, RDS, Citus because of just this reason. So in this case database access with pl/c was enabled, suspect could have been done equally via other vectors (once database access was achieved).
SpaceVim release v0.7.0
I expect most users of hacker news aren't creating any businesses at all ("tie shops" or otherwise) but are here for interesting stories and dialogue with others.

YC's portfolio and team may be creating new tech, but HN is a bit of a bigger umbrella from what I've seen, and in my several years commenting here your comment is the closest thing to a "you don't belong here" or "stay in your lane" signal that I think I've heard.

OP's question was pretty open and didn't mention anything about developing technology. I wouldn't offer expertise where I didn't have it, but if someone asks how I started my business I think I'm qualified to answer.
There’s less evidence for this; once fertility rates drop, they mostly seem to stay dropped. A notable example is the former Soviet Union.
G20 watchdog focuses on rules review, holds fire on cryptocurrencies
One more reason for Google being a very scammy advertising company (they stopped being a search company years ago):

You can not blacklist entire TLDs, just individual subdomains.

Thanks to ICANN (and others?) there is hundreds of TLDs that are 100% full of spam. And they all are able to game the system.

Google has lost the SEO War IMHO.

If they are not willing to innovate they should be broken up via anti-trust.
How to make your WordPress blog load incredibly fast
So how can one protect against an image with a payload?

Would the payload still be there if the image was rebuilt with Imagemagick?
Like another commenter on this thread, I too find the second example the most readable and I write code like the second example even though I have many years of experience with Python.

The third example is cool but I don't see the immediate value in writing code that way unless I am designing a framework of some kind.

I am of the opinion that code should be written in as simple manner as possible so that programmers from different background can get up-to-speed with the code with little trouble.
Gutmann method
Seeing that mypy is under github.com/python/, you can easily argue that it is in fact the standard tool for type-checking python code.
#SmooshGate FAQ
Google makes push to turn product searches into cash
As per my other post here, you don't need anything more than a file to hex converter like http://tomeko.net/online_tools/hex_to_file.php?lang=en and the ability to calculate the gas cost to post on the Ethereum blockchain (second largest coin by market cap and transaction volume).
Its not an exact science, or even close to approximate. It's more for fun than anything else. The correlation between style and personality is 'loose'. And a lot of it is in the perspective of the observer and what he knows about the person upfront. I guess. Consider this a "fun" or "not fun" exercise, and nothing more :)
Enable your Devs to do Ops: Runbooks in the DevOps era
Yes, but you not only have to just quit -- you also must do more.

Before deleting your account overwrite everything with garbage data. If you simply close or delete your account, FB saves everything (in case you might come back, they can offer you a better experience, don'tcha' know?). At least overwriting garbage may give you a slightly better chance.

You also need to use NoScript or the like and deny all FB scripts. FB tracks and maintains profiles on everyone, even whether or not you are members. They are being sued over this in the EU.

Also find and delete their hidden Super-cookies; 200kb of data, including all your other browsing habits, Amazon purchases, etc. Several tutorials are searchable online.
Only the world's most popular browser also has it. https://www.ghacks.net/2013/12/04/google-chrome-gets-master-...
Even the initial example of anonymous feedback about meetings was strange to me. If a large meeting is worthless/long/whatever, I'll tell my VP directly in person.

Do other people really trust their coworkers so little that they feel the need to submit any criticism anonymously? That doesn't sound like a healthy work environment.
That might create odd effects. Consider. What if, right now, cows are raised using feed that's a inedible cast off of food grown for human consumption. If you tax all meat equally the incentive to do that would be reduced. You might as well raise cows on food that is fit for human consumption if it marginally improves the quality of the cow because you're paying the same tax either way.
One thing this @dragon_slumber (the author of the article) had is the grit. To push it out after 1 year, solo, is an incredible effort. Hope that 2018 works out much better for him
I think Trump's rise isn't explicable only in the light of _economic_ stagnation in small towns. Growing insularity and racism (or maybe a climate where those are freely expressed?) are to blame as well.
You're taking this too seriously. This is not even pseudo science. Just Pseudo.
Well done. That looks such obvious evolution of those many online markup editors such as dillinger, https://stackedit.io/, https://jbt.github.io/markdown-editor/ )

Well, not so obvious, after all because it never occurred to me up until I saw your site.

Again, very well done. I like also the catchy title "Create presentations as fast as you type"

best
Excellent question.

>If you can't explain what you mean by "show you a mind", then I'm not sure how this question is different than "can you show me a gefadfij"

This is basically my point, the mind is an undefinable concept.

Many people arbitrarily assume the mind is constrained to the brain, which is provably false.

For example, gut bacteria have a powerful influence on the mind.

Do you think it would be possible to completely separate the brain from the rest of the body and it's environment and still keep the persons conscious mind "alive" and in the same state?
Then you migrate. If the platform provides tools to do that, you use them. Otherwise you make a new namespace, upload the project to the new one, and edit the old one with a link to the new one and a deprecation warning. Then if you have a trusted announcement platform like a blog or Twitter, announce it there.

If it's feasible to do so, you also push updates to both namespaces for a little while during the transition.
An IDE for React.js
You bring up a fair point.

Excessive prompts are equally dangerous. “Click fatigue” is a real thing and you can quickly shift from a state of “let me know when something differs from the expectations” to “why are you making me agree to everything?”, which means more often than not the user just clicks blindly instead of reading the prompt for context of why this time the prompt is different.

I’m a proponent of appropriately prompting the user when their submissions, if processed, would result in ambiguous / destructive and not-easily-reversible outcomes.
You are expensive. Tech jobs in America earn double what they do in other western countries.
The present perfect tense does not necessarily mean that the action is recent.

I chose the present perfect because I think Facebook still derives utility from being a social network and is not solely a data-mining machine. It's a process that I think is probably inevitable but is not completed yet.
My first six months as an engineering lead
Don’t forget that all of your friends and family who use Facebook are potentially leaking your data as well. FB has become quite the tentacled monster!
I was a solo founder with no real network of suitable people for this kind of job, the first employee was secretary/marketing assistance. I didn't have time or experience for serious recruiting and didn't particularly care about it at that point (was busy planning for scalability, writing forum software...). Thus I was grateful for the help and considered the VCs responsible for the result, the employee was paid with their money anyway. So everyone involved was OK with the outcome, I suppose.
FYI: it's possible to say racist things unintentionally - i.e. without being racist. I'm not saying that's what you did in this thread: but you shouldn't assume that someone is calling you a racist when they say "[...]your other claims are borderline racist"
How to run a “Time Audit” and get control over your schedule
Iran-linked group TEMP.Zagros now targets Asia and Middle East regions
I can actually +1 this. While I was getting my degree I worked in various departments at my university (I'm not the kind of person who can study without working, so I worked pretty much full time). I worked in Chemistry, Physics, Astronomy and even in the computer services group. Astronomy was probably the most fun because I wrote code to animate star fields with the planetarium projector. Lots of math!

Downsides are that sometimes (well... lots of times) they need you to do trivial things. Often you are working with some stinky piece of code that a grad student wrote in fortran 10 years ago and that another grad student rewrote in C -- transliterating the design from one language to another. Nobody understand software development practices, so it's cowboy time every day (unless you are good at managing it yourself). And the pay is generally pretty low :-) Still it is probably the most fun I've ever had and I would go back if I was anywhere near a university.
Let's assume I agree with you about how bad Microsoft's hegemony was.

What exactly is the problem with "buying a stairway to heaven?" If you're actually doing good work, how is this criticism not just a vacuous attack?
Yeah but anyone developing will likely turn that off as it interferes with attaching gdb/strace/etc
An OO language that has the ability to do dispatching on types ought to be exercised in that way.

Checking for the types explicitly in your code creates a brittle system. For a one-off bit of code, fine. For anything that may be extended in the future, it's a bad idea and will have to be refactored to become maintainable.
They are usually broken because Google often pushes shady obfuscated updates.

IIRC the OFFICIAL "Personal Blocklist" was broken for a long time due to this.

AFAIK there's still no way to block entire TLDs.

So basically Google doesn't give a shit about you!
Late to the convo, but I created a go library with no C dependencies that lets you play with raw sockets on Linux:

https://github.com/nathanjsweet/zsocket
He says in the post that he was already using that icon service for other side projects though.
I just _assumed_ that passwords stored in the browser would be vulnerable if someone got physical access to your computer. So never used that feature.
Creating a C language function is not allowed to regular users by default because "language C" is an untrusted language only superusers can create functions using that. Additionally, regular users don't have the privileges to insert into pg_proc. So unless the attacked application uses a superuser for database access (which is a big security hole to begin with) or uses a superuser account with a weak password and allow superuser access from the outside, I don't see how this could be exploited.
How did you negotiate doing a PhD remotely?
Yes, though it still improves on the many problems of IPS and VA LCD technologies.
Yes, but they only look for the presence of the degree, not so much the pedigree of the school, barring Ivy leagues of course.
The tug-o-war over America’s ethanol mandate
Apparently. And it seems that Theranos actually gets away with it.
In addition to the obvious scams and microscratching, I’d be surprised if this wasn’t an avenue for organized crime to launder money. The store(s) get the sales and a percentage, and the launderer gets clean money out of the other end.
This can be managed in many ways, like identity immutability, package redirection, and solved from a UI standpoint like "a/foo was moved to b/foo" on your user's next package update because the package manager has first-class support for it.

Did you think nothing can be improved upon Java?
GetAltName – Get Subject Alt Name from SSL Certificates
Exactly this. And Rollup wasn't available (or at least well-publicized) when I was evaluating about a year ago.
Second is example is most readable, I agree. What I was trying to convey there was first the use of "type" vs "isinstance", and second the use of non pep8 snake case in Python which is frowned upon. Then I wanted to show there is another way of handling (larger) blocks of "if this type/instance then this, if that then that, etc.". I use it as a getter when I have either an id or an instance and it feels smoother to me. Python's version of overridden methods. Both are fine of course.
The implication is required insurance forces drone operators to be careful where/when they deploy their drones, for fear of increased premiums/dropped coverage.

Similar to automotive safety features. Extra air-bags or ABS systems reduce accident, lowering premiums, driving demand for those features.
The more you pay them the less they have a reason to make things bloated for the sake of making it sellable to enterpises.
> But we should not expose anything else that we don't need to?

Yes. Why would you ever need public logins from the open internet to your production database? Even if you need to ability to log in from a random computer, there are better ways, like requiring the use of a vpn so logins are always coming from a white listed ip.
Intro to web components
Hanlon's Razor applies because the GP literally accused the person of malice. Direct quote:

> Point is, this is a core thing that should've been tested, and not doing so implies either malice or laziness...
Does this mean that ultimately this will be won by manufacturers? Volvo has a program where you can only lease certain vehicles; Tesla is thinking about on-demand rentals for vehicles, so in the longer run, the manufacturers may outmaneuver Uber? Just a thought
To me, this is no different than how a Grocery store does product placement. In fact, some brands pay a premium to be at the eye level. There are cases where grocery store chains promote their "value" brand above the other competition. This really isn't anything new.
Having ongoing and massive issues with a Cisco phone system where I work currently, so I was reading into it as being a Cisco system and not being surprised.

Although agree that Cisco is usually pretty solid.
Unfortunately it doesn't work on image searches.
Which is why you usually have a seperate OOB network for logging into switches and routers.

If it's very mission critical, even an entire seperate cable infrastructure for OOB is not uncommon.
Duck.Duck.Go.
Related: http://highline.huffingtonpost.com/articles/en/lotto-winners
[0] is the reuters article that the linked article is based on. It provides a lot more information on the plans and a lot less time spent speculating (with a very authoritative tone) the reasons behind the change. ("Anti-amazon tools"? really?)

Also, it doesn't say anywhere that they are boosting amazon's competitors directly (or that they are "boosting" anything at all), just that amazon is unlikely to participate in this program that Google is creating that integrates stuff like checkout processes, carts, and payment processes into one unified system.

[0] https://www.reuters.com/article/us-google-retail-exclusive/e...
The deeper problem is that the tech industry is slow to get rid of HTML, even though HTML was created to exchange documents, and nowadays we mostly use it as a GUI for network software. See "The Problem With HTML":

http://www.smashcompany.com/technology/the-problem-with-html
> The question here is can't we have banks that fulfill their basic functionality without the corrupting and destabilizing effects of the big banks?

Implicit in this question is the idea that the destabilizing effects are actually a large amount of the banking activity. I would argue they are not, we just hear about that far more often because it's bad news, and bad news is more interesting. The rote, mundane functionality of all banks, including the big ones, is mostly under the radar and (in my opinion) vastly underappreciated with respect to banks' occasional tendency to throw the system out of whack. In particular, I would posit that the latter is more a manifestation of common economic activity than it is to a centralized and consolidated banking infrastructure. Or, more succinctly, that economic activity at the modern scale does not sustain itself without these banks working more or less as they do now.

There are certainly improvements to be made, for sure. But I personally discount the possibility that those improvements would radically reshape banking infrastructure or significantly reduce the volatility cycle we encounter every decade or two.
I can imagine it once they found out the cause.

"Really? That was it? Are you fucking serious?"
It's also hard to tell what damage you might have done to your liver, kidneys, or other organs by applying a furniture cleaner to your skin repeatedly. The unseen (and often delayed) side effects of medications are one reason that the FDA regulates them.
You need to do it properly; the comic is misleading on its own.

https://www.eff.org/deeplinks/2016/07/new-wordlists-random-p...
If you're interviewing for job I would not deflect; most of the time it will be legit "what kind of skills and knowledge do you have". And it's not like you were looking for contract anyway, if you get this vibe just answer honestly and don't take the job.
I had a full-time job, and my side gig was only 10 hours per week that I was doing in addition to my FT job. Then I went full-time as a contractor for my side gig.
I think people put too much meaning in Japanese set phrases, imagining them to have their literal meaning when that is not what they actually mean. The author provides this transcript:

Me: This is clearly broken!
Tanaka: Yes, you’re right.
M: Shouldn’t we do something about this?
T: Nothing can be done.
M: This is easily patchable!
T: I’m sorry.
M: Who’s responsible for this code?
T: Team X.
M: Somebody on our team should talk to them.
T: Yes, you’re right.
M: Well, can I talk to them?
T: Ah, it’s not impossible.
M: Does that mean I can?
T: Who knows.
M: …

I've had this conversation in English with American coworkers more times than I can remember:

A: This is clearly broken!
B: Yeah....
A: Shouldn't we do something about this?
B: It's not a priority.
A: This is easily patchable!
B: I have to work on Project X now, they've been bugging me about it for months and their manager is getting mad at _me_ now.
A: Who's responsible for this code?
B: Team X.
A: Somebody on our team should talk to them.
B: I already have 8 meetings this week, I don't have time.
A: Can I talk to them?
B: They never answer my email.
A: I'll email them.
B: Good luck!

It all boils down to the same issue: the person you're conversing with doesn't consider the matter as urgent as you. The words used are different but the message is the same: "meh". This isn't a Japanese thing or an American thing... it's a people thing. And honestly, a lot of times, they're right.
Okay, interesting. Although it seems a bit strange that this would end up in Washington at the federal level, i.e. Justice Department..
I don't think that they have to deal with just any case of fraud, even big ones. But I could be mistaken.

But if the Justice Department handles this I wouldn't be surprised if this whole thing gets kind of, well, political..

Also, this somehow begs the question who brought the charges in Shkreli's case.
How to Run Digital and Develop the Right Pace According to World’s Top Runners
Don't access your database with a superuser account from your application.

Don't allow superuser connections from outside of your network.
Is this really so hard to believe?

When nearly every question I end up on has been closed it seems they don't really care, if they did closed questions would disappear.