skysight-inc/HackerNews huggingface dataset:
This is insane. While I'm in a bit of a rush and haven't yet had time to read too in depth just yet, I did click through on a few and can tell this is an incredible resource. Thanks so much for putting this together and taking the time to construct such a robust response. I'm sure many viewers of this thread will find it useful, as will I.

If I have any questions for you directly, I'll be sure to reach out. Thanks for extending the invitation.
Eslint plugin for JSON internationalization translation files
Some banks allow customers to send cheques/checks printed by the bank, even on a schedule. This makes it easy for the bank customer to routinely pay predictable bills or send someone money on a schedule without having to go through the hassle of setting up direct deposit to their bank account (which is needlessly difficult even transferring money across two customers of the same bank, or across two banks in the same country). But the paper sent is far too revealing. The amount of information printed is remarkably high in order to do something that should be considered routine by now. And cashing or depositing still requires physically depositing paper somewhere like a bank teller's station or some ATMs. Remarkably few places will accept a picture and conduct the transaction from information gleaned from the picture.
Centre-left as in bleat about “our NHS” while dodging the taxes that pay for it.
> This is called a multiple-document interface, and it's been Microsoft's preferred method of nesting documents/subwindows within a single application window for a long time

Microsoft moved away from MDI in most of their flag ship products (bar Visual Studio) a long time ago. Eg MS Office was last MDI back in '95. Office 97 was SDI from what I recall.
Great resource. Thanks.
SF man arrested in bizarre triple stabbing at Oakland Coliseum BART Station
Eugenics and population control fell out of favor a few decades ago. Gonna be hard to bring that movement back into vogue.
No point, just wanted to link to it.
You weren't taught to write it as "Four-hundred and 23/100", and then "$400.23" in the little box?
They check in certain countries. I live in Sweden, but recently started to travel to Taiwan regularly. I never signed my card in Sweden, but I've been asked to sign it in Taiwan.

Funnily enough, I have been refused to pay a hotel bill with my unsigned card, since the clerk couldn't verify the signature. So he had me - in front of his eyes - first sign my card, then sign the bill, and then he double checked that the signatures were identical (which they're not - my signatures always come out different).
> Most of the commas I use (before the "and" & "or"s) are Oxford Commas which dictates to use a comma before the conjunction if the sentences are separable

You seem to be confusing the Oxford (or serial) comma [0] used after the penultimate item of a list with the rule on comma + conjunction (or semicolon with no conjunction) separating independent clauses as opposed to a bare conjunction separating dependent clauses.

[0] https://en.m.wikipedia.org/wiki/Serial_comma
It's gamification isn't it. They seem to think that this farmville/15 millian credits approach will work on humans, and the end result is a perfectly compliant citizenry.

But I don't think such an experiment has been tried out on such a massive scale over a nation of billion plus humans.

This is the next great social experiment after the failure of the Soviet Union, so it will be interesting to see the end results.

Americans and the West should recognize this a legitimate threat to their civilization, because the success of this system will result in its spread similar to the spread of communism during the cold war days.

What the Chinese Social credit system is way beyond simple discrimination.
CodeScoop Demo – Interactive Extraction of Examples from Existing Code
That’s nice! Does anyone already have an example to just add Windows like ALT + Tab like behavior? Thx!
A screenshot would go a long way to help sell this (think there's one in the comments here).

On the topic of file managers, I'm hooked on Dopus and using anything else feels like working with one hand tied around my back.

Incredible how something so seemingly unimportant can add or subtract to your productivity. Also incredible how native file managers still suck.
You can use Google's search anonymously.
Do you have a better option for the people in this situation?
We’re always looking for “better” project management software
In my part of the world once Whatsapp was discovered messaging changed pretty quickly from BBM to Whatsapp. Then the main advantage BB had was the keyboard. But soon after smart phone apps started to rule and that was that.
This is dependent on the machine reading the card, not the card, or technology, itself. This horrid noise is not present on machines used by many vendors..
Lots of focus in the comments on the database access issue, but trusting the user specified (signed) token doesn't seem like a great idea. Not validating the token against database seems like a painful shortcut
Yes, a battle too horrible to contemplate! Imagine the slaughter consequent on ingesting coffee,chocolate,tea,sourdough bread,cheese,buttermilk,crème fraîche,yogurt,kefir,salami,wine,beer,sauerkraut,dill pickles,kimchi,kombucha,fish sauce,vinegar,miso or tempeh.
I believe [1] should contain the information you need. And thanks to brilliant lobbyists and reluctant politicians you'll get a 30% tax reduction then as well [2], lucky you!

[1]: https://ind.nl/en
[2]: https://www.belastingdienst.nl/wps/wcm/connect/bldcontenten/...
Agree with most points.

A plug and play never works when it comes to scaling engineering function through not just india but anywhere.

One must invest from a long term standpoint. Offshoring isn't a shortcut to scaling, its better from cost perspective.

Its best to first get someone on the team who knows local ecosystem(offshore) and is good fit from your culture standpoint. Its a harder process but once you get this right you are most likely to succeed.
How about in 12 kilobytes of assembly? More featureful implementation here: https://github.com/dfouhey/caffe64
I don't know the story behind it, but fortnight was adapted into a PUBG type free-for-all mode which seems to have helped its popularity. Being able to jump on a trend like that so quickly shows impressive flexibility. They didn't need to make a whole new game to cash in, the ROI is probably crazy.
You may be interested in (my) https://fman.io. One of its most useful features is a Sublime Text-like GoTo command (Cmd+P) for jumping to a directory.
How to “play back” a picture of a sound wave
Depends on the restaurant. Most of the times the terminal doesn't support PINs and so it falls back to signatures. But some restaurants use PIN-capable terminals in which case that issue occurs.
> does not care about the obvious centralization

Was there a poll of the community? We're lumping in early adopters of "the web" with promoters of the dot com bubble. The position is uneducated at best and disingenuous at worst. I suspect "Kai" benefits from click bait.
The Unreal engine can be used innthe browsers quite effectively thanks to WebAssembly. It would be impossible to write a modern gam in JS
So the session keys mapped to usernames, rather than IDs in the database? Otherwise, when the database is restored with the old user IDs, the session would become invalid instead of continuing to work. This is what I'm seeing:

1. Tables truncated.
2. In this window, someone creates an account with a username that existed in the dropped database.
3. They see a blank user page because a new user record was created.
4. Database restored.
5. It's as if you're logged into the original user's account.
Wrong. There's negative China articles coming out every day. If you just browse HN you'll find a fair selection of them
Wow, that is still around?

I remember using it ~10 years ago when I first started using Linux. Together with XMMS.
> most of the haystack is really just hay

Citation needed? You can't blindly assert that something doesn't work by appealing to scientific methodology and its heavy reliance on proof without actually bringing that proof to the table.

Otherwise you're just arguing from your own heuristics and prior beliefs—just like other non-scientific traditions. You might be right, or you might be wrong; but cloaking that claim with the mantle of science is the exact opposite of careful scientific scrutiny.

> but it did not distinguish between ineffective and successful treatment due to generally high mortality rates and lack of rigorous testing.

And we're sure this is true for all cultures over all times how, exactly?

> ancient western medicine

This might be much more likely to be true since modern Western medicine developed from pre-modern Western medicine, so early modern doctors were intimately familiar with how effective (or not) those approaches were.

How likely is it that Western medicine has rigorously and thoroughly investigated non-Western medical traditions though?
Sorry, I can't help you, but I am curious as to why do you want to move out of Canada when many Europeans want to go the other way?
Right now the second link you posted isn't loading, so I'm not sure if that is something that matches the Go Tour interface (maybe it is, and it's not loading because it's failing to init some virtualized environment for test code to run in?).

My problem wasn't that good documentation wasn't available, it certainly is. The first and second editions of the rust book rust book (https://doc.rust-lang.org/book) are what I read through and they're great.

What I meant was very literal -- I don't know of a site with Go tour's exact (or close to exact) interface, where you can run through ~30/40 slides (that's how long go tour is AFAIK) and write some code right in the browser to get a feel for the language.

Rust is considerably more complex than Go, so I'm not sure it could be so succint, but I can say that at least for me, going through Go Tour really did make me feel more confident in starting a project with Golang.
All of my production terminals have dark-red background and my screen hardstatus also red. This is my default in rc files, and I have to explicitly link rc files to get my dev-only black background with lime hardstatus.
> but how are the environmental variables transferring from the production machines to where the tests are being run?

tmux[1] is a terminal multiplexer, a screen alternative.

Some speculation, they might have stared the session on a remote machine; set `DATABASE_URL`; use it for something; detach from the session; to later reattached with the bash env still in tack; without the developer being aware he executed the tests commands.

Another tmux "problem" is developers using it to tail logs with a infinite back-scroll to only fill up server memory. One solution was to kill all tmux session nightly via cron. Might have helped here.

Finally as tui lover, try tmux! Really keeps the frustration at bay if you ssh to a box and your session drop to know your terminal workspace is still in tack.

- https://github.com/tmux/tmux/wiki
Ah ok, you've obviously bought in 100% to US-style anti-socialism propaganda. I refuse to argue with fanatic True Believers.
Why would you limit yourself only to probiotics when prebiotics/symbiotics exist? I recently learned about them - bear with me as I have zero experience and lack of terminology in pharma - prebiotics will create a better environment/surface for probiotics to feed on and symbiotics are both pre and pro in a single pill.
How to get rid of viruses?
So one of the ways of analyzing the root cause here is that the autoincrement index of the user table in their database is security-sensitive, and relatively normal DB operations like "Let's roll back the DB" have serious security implications involving ID reuse. What are some ways to make this less dangerous? (The rest of it was an operational failure, but it would have been less trouble if it weren't a security failure.)

I can think of the following:

- Don't use auth cookies that are signed messages consisting of a UID + expiration date and other data, use auth cookies that are opaque keys into some valid-auth database. This is significantly less efficient (every operation needs a lookup into the DB before you can do anything; if you move it into a cache you now risk the cache being out-of-date with your DB). AFAIK using signed UIDs has no security downside other than this, right?

- Identify users by usernames, not by UIDs. This makes renaming users (which GitHub allows, so Travis is forced to allow) difficult and security-risky.

- Use UIDs that are selected from a large random space so make collisions unlikely, e.g., UUIDs or preferably 256-bit random strings. This seems fine and probably preferable from a security point of view. Is this fine from the DB point of view?

Anything else? Maybe a DB restore-from-backup option that preserves autoincrement counters and nothing else - is that a standard tool?
Yes, whatever is serving on that interface will have to terminate TLS. Or somehow pass the session information to the proxied server, or ask the client to reconnect, or do some kind of tls tunneling from the client to the real host. I don't think any of those are unreasonable options.
GTA V is now the most profitable commercial entertainment product of all time
Mesh – A headless CMS
This is much more common in London than in the rest of the country.
Thankfully.
Single core? No AVX? What's the point of writing it in C?
The blogger, Taking Note, mentioned in the OP article, is a huge fan of index cards, and he suggests using software called ConnectedText as a digital alternative [0].

[0] https://takingnotenow.blogspot.co.za/2016/03/one-way-i-organ...
When you watch a film, do you want to feel immersed in it? When you play your favorite sports game? I don’t think using a product is necessarily different.

But let’s replace immersed with “enjoy using” or for it to be clear and intuitive. Some product designers and UI experts don’t need usage data, but I think a lot benefit from it to create a better and more enjoyable and clear user experience.
I just edited that Wikipedia article. Interlisp on Xerox Daybreaks (and maybe Viewpoint; I've only used Interlisp) had left/middle-click context menus under cursor in the mid-1980s, so I imagine it was present on the earlier D* Xerox systems and maybe the Star. Definitely predates Nextstep though.
It's a demo, like https://github.com/rswier/c4.
It's not like the signature actually mattered. I've literally wrote "blah blah"

That is when the signature pad actually works.
If the slice is large, it's less likely to be cached either way.
> For nearly a decade, Doug Taylor, a sales manager who travels often for work, has signed credit card receipts with a doodle of a dog wagging its tail.

Well, this story/hoax/experiment from the late 90s was at the time the funniest thing I had ever read online:

https://web.archive.org/web/20130120184305/http://www.zug.co...
This is not what happened. The tokens were mapped to user IDs and when people signed in, the db created new users which may have had the same IDs as old deleted accounts. When they restored the DB, these tokens pointed to other users and granted access to these other users' accounts. Quite an unfortunate situation. May have been mostly avoidable if UUIDs were used instead of incrementing IDs, but hindsight is 20/20.
If you can MITM the connection, you can just do it server-side, which is far more insidious. This was done in the UK + Brazil a few years back -- some ISPs (including British Telecom) trialled it without even telling affected customers that they were being snooped on!

https://www.telegraph.co.uk/technology/news/8438461/BT-and-P...

https://phonecallsuk.co.uk/bt-webwise.html
Detecting Methane from Miles Away
Mostly bias, I suspect.

If you polled management from Westinghouse in the 1990's, you would find Pitt, CMU, Penn State and OSU overrepresented.

One thing you have to be careful of is that "elite" school graduates often have an over-inflated sense of how good they actually are. The ex-CTO of ModCloth had a video talking to a bunch of Russians where he talked about how the Pittsburgh team was better and more productive and that the SFO team was unjustifiably arrogant.

The guy was Adil Wali. Man, it took me way too long to find this. I guess ModCloth PR has sanitized the web: https://www.youtube.com/watch?v=q4qYFqpLQBc#t=1h20m
> uh....this guy's English is really excellent.

It has very good vocabulary, but a whole lot of verb tense and subject-verb disagreement errors, and use of the wrong parts of speech in ways which are (especially combined with the excellent vocabulary) very emblematic of a non-native English speaker who either learned late or learned early but had much of their use of English with other non-native speakers.

Now, it's very good for someone with either of those backgrounds (and much better than my command of any language that isn't English), but the upthread comment that it is very far from that of a native speaker is spot on.
checked out this https://github.com/drinchev/phook. Really awesome!!
Maybe at the same time as the US lives through the 20th centurty revolution of livable wages, something could be enacted that prevents employers from stealing from employees?
I've left one unsigned and another had the strip wear off to the point the card says "VOID VOID VOID".

Never once stopped me using them. I'm glad for it because my signature isn't exactly consistent.

In fact, I don't think the swipe and signature method is generally allowed in the UK.
Go-internals: Chapter 2, “Interfaces” released
ForumTIC  FIB
I once saw a cashier compare the signature on the back of the card (There is a little field for "signature" on the back of credit cards) - to the one I signed.

When I noticed I hadn't signed my card he said he couldn't accept my purchase, so I had to sign the card first, then he could compare the signature...
> Getting things done: Too obvious and no groundbreaking new insight at this point in life

I had my suspicions, but I was not sure. Thanks for saving my time :)
Much like how YouTube abandoned ratings in favor of a simple thumbs up/thumbs down, I wonder if Uber and Lyft will do the same.

https://daringfireball.net/linked/2017/03/18/youtube-thumbs-...
I use a mix: UIDs (auto-incrementing primary keys) for internal app use (e.g. joins), but use UUIDs for referencing records outside the app (anything sent out over the API).

The UIDs just make for easier to read logs, and easier to inspect and hand-write db queries. The UUIDs just seem much more secure when communicating with client applications.

I also agree that authing with a DB is preferable, if you can afford to do that at the scale your app needs (which is most apps out there).
But ... doing all these "science is evil" changes to law would make a few tens of thousand very rich people feel slightly better about themselves, what they eat and what "they achieved", and yes, it will starve hundreds of thousands, and make food more expensive for no benefit for hundreds of millions (and thus make those millions poorer), but they will never see those people.

> IMO, supporting GMOs is one of the most environmentally concious things you can do.

True.

Other observations one might make is that the "greenness" of small parks in San Francisco really have no significant influence over how green the world is, and campaigning for them has much less to do with environmentalism than with "more tax-funded house-value-increasing toys for me NOW ! FOR THE GOOD OF THE EARTH !".
DNS Market Share Analysis – Identifying the Most Popular DNS Providers
Look up server-side rendering in React. The major benefits are better/faster first page load experience and better SEO, especially for crawlers that don't have good JavaScript support. This way you can run the same code on the client or server depending on the circumstances.
This is a lot more impressive! I'm puzzled by this bit in FAQ though:

Q. It seems that it only does 1D feature vectors?

A. Convolution and other inductive biases are only necessary when you have small data.
I think the hype around rust is actually pretty well warranted though -- people got really excited about Go and Rust because they were new "systems" languages, and the world hasn't really seen one of those in a while. "systems language" is a pretty vague term, but one of the things I think is important is that memory be manually managed -- I think most people would agree with that.

I think Rust is interesting to the people already using non-GC languages is precisely because it offers the speed of C/C++ with LESS of the footgun aspect. Writing C/C++ is accessible and familiar, but it is far from simple, there are tons of pitfalls. Rust has less of those, and takes a modern approach to much of it's toolchain bits and ergonomics.

> I'm a Rust newbie and haven't benchmarked anything, but the sense I get from the docs is that it theoretically can be as fast depending on how much you limit yourself. Kinda like how C++ can be as fast as C, if written with care.

Almost axiomatically, if Rust could be built 100% with ONLY zero cost abstractions, then it could certainly be as fast as C. Concretely, I don't think that's possible, because usually abstractions will cost you something even if it's just a single extra function call redirection. However, you can definitely get to a point where the difference is negligible, and the downsides (maintainability taking a nosedive) make the tradeoff worth it.

I think if you were to compare rust and C overhead in terms of function calls, slices and the like , you'd just be comparing compilers and micro optimizations implemented in both. I think it's kind of hard to test for the things that really make rust shine -- it's all the time you DON'T spend on race condition bugs, and the time you DON'T spend debugging pointer issues.
Minimal dependencies; people are starting to get fed up with having to bootstrap and/or compile the planet just to be able to run some software. The situation has gotten completely out of hand, especially if one is not on GNU/Linux.
I think the root issue here is that the production database "user" has too many privileges, and the reason for that is migrations. This is compounded by the test user essentially needing to be a db superuser to create and destroy test databases, as well as run the migrations for them. I've noticed this lately with Django, but I'm guessing that it's a general problem.

When I design a DB system, Ideally the production 'user' can only do those things that we reasonably expect them to be able to do, and truncate isn't one of them. Also drop tables, potentially delete entries, and any maintenance tasks. DDL modifications are right out.

Those tasks can be run from a specific user, and locked down to a certain types of connections that aren't allowed from production.
I've been casually following rust for ~5 years now, but finally decided to really put in the effort to learn in in the past several months. It's definitely a slog to really "get" the Rust mindset (as well as learn the various sharp corners of the borrow checker and lifetime systems), but I think it has made me a better programmer.

To write Rust you have to be very conscious of how you're sharing data between functions, structs, and threads. This is a common source of bugs even in GC languages, so working with a compiler that will point out your mistakes teaches you how to avoid such issues in other, less prescriptive languages.

I also think rust is a lot of fun! I haven't had a chance to use it professionally yet, and it doesn't seem to have made much impact in industry yet, but I think it will get there. Right now it's pretty hard to write networked services (the main market for Go it seems), but that will get a lot better this year as libraries mature and async/await is stabilized.
Unencrypted SNI is still the global standard for TLS, and it is supported by most commerical tracking software. Tracking complexity has not been increased in practice.
Well, that's a terrifying device for finding humans.