skysight-inc/HackerNews huggingface dataset:
The voting reorders the search results. https://www.jivesearch.com/.

You will need Elasticsearch, Redis, PostgreSQL as well as run the Wikipedia & MusicBrainz dumps. Let me know if you run into any issues.
You're right that dictionary words are weak, regardless of whether they are long or short. Same applies to anything that can be arrived at by a simple heuristic such as dictionary word + 1, capitalized dictionary word, dictionary word with "@" substituted for "a", etc..

However, outside of the above caveats, it's a common misconception that more complex is more secure. Which of these is harder to crack?

catzzzzzzzzzzzzz

db0mcgn20y64zzn7

Since an attacker is unlikely to arrive at either of these through a dictionary or heuristic, they will take roughly equally as much time to brute force.

When you force users to comply with arcane password policies, a high percentage of them are going to build their passwords in very predictable ways that are easy to code into a heuristic, like replacing "o" with "0" or something. These kinds of changes add no security value and are just extra work/bother for the users. With the length requirement, it's unlikely they're going to think of a dictionary word off the top of their head that is long enough (how long did you have to think about it to get pennsylvania?), and thus, on average, you're more likely to get more passwords that are a couple of words, or a phrase, or something that is a lot harder to dictionary attack. Once you break away from the dictionary, complexity doesn't matter, only length.
Nokia had all those things, and still lost out to a company who upgraded their popular MP3 player to support cellular.
Ok, but when the sentiment in the thread is that the OP list was not useful I think it's a good idea to shift the focus of the discussion to other books that might cover the premise of the title.

Presumably a lot of the people that click on this thread do so because they wanted to know about good books relating to CS and programming. So let's tell them about some good books to read.

I also don't think the idea of "thread hijacking" applies in the same way on link aggregators like HN and Reddit. And really I don't think it applies much even for text posts on these sites because HN and Reddit use threaded discussion which make it possible to have a lot of simultaneous different discussions going in a thread at the same time in a way that linear discussion thread sites like 4chan etc etc don't make possible.
> Github

Think of it as simply a place in the “cloud” to store our code and provide use with free hosting for our website.
Cost? FREE forever

What?? If you want your code to be stolen, sure it's free i.e. public repos are free, not private repos.
That in turn causes other trouble.

People adjust for perceived risk. For example, seatbelts and airbags make people less careful when driving.

Vaccination makes people less careful about disease. There is no vaccine for enterovirus-68, which sometimes paralyses people. There is no vaccine for adenovirus-36, which is a cause of obesity. I could go on for a long time I think; lots of "harmless" viruses are turning out to cause serious problems. They can damage your heart, set off dementia, or give you cancer.

The only effective answer is avoidance. This requires learning and behavior modification, so it isn't too popular, but nothing else is as effective.
Big tit Italian  Photo #29
You mean actually reading dirstate[0] or just the branch/bookmark files?

We also do the latter, but dirstate format isn't easily readable just with shell builtins (lots of fixed-length fields with NUL-byte padding, also we don't even have a `stat` builtin and the external program isn't a thing on macOS AFAIK), so we still fire up `hg status` for that - but only after we decide that there is a hg repo.

[0]:https://www.mercurial-scm.org/wiki/DirState
We use 100 Gb EDR Infiniband to each host in our HPC clusters and with a combination of file system access, message passing, and general network traffic we actually use that bandwidth.
They don't charge you for the first $200 worth of service.
Virtlyst 1.1.0 – A libvirt web interface done in C++
This is also available in Node 10 behind the `--harmony-bigint` flag. I've already made two modules with https://github.com/emilbayes/secure-random-uniform#bigint-su... and https://github.com/emilbayes/biguintle. Lots of fun!
FWIW no one who replied to this email thread said something even close to "no". Victor Stinner points out that startup time is something that comes up a lot and mentions some recent work in the area [1].

Python is a big ship, it may not be as nimble as a young FOSS project but it is always improving and investments in things like start up time pays dividends to a large ecosystem.

[1] https://mail.python.org/pipermail/python-dev/2018-May/153300...
You also have the option of attaching a magnet to the bottom of your motorcycle sufficiently strong enough to trigger the induction loop.

https://en.wikipedia.org/wiki/Induction_loop#Vehicle_detecti...
There's some really early eye movement based detection too. Good to see this. As others point out it isn't a binary but a hugely variant spectrum, but there are some commonalities that at the very least suggest that a child receive further screening or prepare the parent to watch for other symptoms. Regardless of the type and spectrum position, a kid with an early diagnosis/warning seems much more likely to have a good outcome than one that gets one while in pre-school or kindergarten.
Even a year and a half later, I'm still sad about how quickly the meaning of "fake news" diluted. We throw it back and forth over CNN errors and inflammatory Daily Caller topic choices, but there's a very different meaning behind all of that - things that are literally just falsified, in the full "sky is green" sense of the word.

Something like "ABCnews.com.co" is A) impersonating ABC and B) publishing objectively-false stories. If Facebook wants to put a warning next to it, or drop its share priority, or only accept shares with comments attached, I don't give a damn. That's not an entry into a partisan fight, it's the news equivalent of flagging a spam link.

I have lots of Facebook friends who sometimes share dubious or ill-sourced stories, and I wish they wouldn't. But I have a few Facebook friends in a very different group, who post whole-cloth inventions at the level of the dumbest conspiracies, or take Onion and Duffleblog articles as real news. It's a fundamentally different phenomenon.
Open Source and Standards Must Mesh for Blockchains to Succeed
Elon Musk knows what's wrong with Fiverr: Sub-sub-subcontracting
Also, if a feature is trendy enough for long enough, it starts becoming a pretty safe bet.

I'd also love to see some analysis on feature correlation. Is a central vac actually something that people pay more for, or is it something that is frequently noted in listings and correlates with features people do pay more for?
35ms for Python is ok. What we see in reality is that the imports that a real application will use, adds a whole lot more time.

For example, if you want a snappy command line response for a Gtk-using Python program, you probably want to handle command line arguments before even importing Gtk. Maybe it is --help or an argument that you pass on to another running instance, and you want it to be absolutely snappy and fast.
Rust might immature, but it's rock solid. I don't think lack of maturity of the core language is a reason not to use it in production anymore. Lack of available libraries may be an issue, but if it's not then Rust seems like a pretty goos choice to me.
The other side of the coin is that the game engine for StarCraft II is signifcantly smoother, and so its dynamics are easier for models to learn. Brood war has all kinds of weird quirks and dynamics, and some "bugs" are part of the game system, so it's much harder for computers to reason about some of these kinds of things.
From a couple points below that mention, which I think answers both parts of your question:

> your first $200 of monthly usage is free, and you can set usage caps to ensure you don’t go over this amount.
no doubt, but popularity and timing matters.
Yes, in all engines. You can read the current status update that will be presented at the May TC39 meeting in a few weeks: https://docs.google.com/presentation/d/1Bx13eCgM9Rujs4zNdfO9...
I think you misunderstood the point. These weren't things that would address the cpython startup problem - these were other priorities that can be worked on, instead of (or in addition to) the latency problems under discussion.

Saying yes to fixing one thing usually means saying no to all the other things you can be doing with your time instead. Unless you're lucky and can "kill 2 birds with 1 stone".
Do I think I own my wife like chattel? No. Is she 'mine'? Yes, she is; I won her heart, period. I don't share her with other men, and that's not me being facetious. If you don't understand how that works and cannot appreciate this healthy male point of view, then that's your tough lesson to learn.

My wife is a third wave feminist, she wouldn't be dominated by me if I tried. And that's not right to think that way, and I don't act like a dominant a-hole that way, for the record.

But she clearly looks to me for leadership of the family, and I gratefully, joyfully provide that leadership. So I am legitimately dominant in many aspects of our relationship, just not by force.
Specifically:

It follows that, for sufficiently large n, Karatsuba's
algorithm will perform fewer shifts and single-digit
additions than longhand multiplication, even though its
basic step uses more additions and shifts than the
straightforward formula. For small values of n, however,
the extra shift and add operations may make it run
slower than the longhand method. The point of positive
return depends on the computer platform and context.
As a rule of thumb, Karatsuba is usually faster when
the multiplicands are longer than 320–640 bits.

https://en.wikipedia.org/wiki/Karatsuba_algorithm#Efficiency...
obv
Chrome is like the elephant that comes and sits on my laptop. Would be unusable without the great suspender.
Why all the negativity? Isn't this tech in the early stages? Isn't there hope that these issues can be worked out? and in what way was it "barely working"?

I had at&t in one of SF's typically old buildings and I can tell you, the internet there barely worked - i had to reset the router about once a week, plus hour long downtimes not uncommon. Even now, when I'm in a brand new 3 year new townhouse, I still have a reset the router once or twice a year and I get half the speed I'm paying for on a DSL broadband plan, not to mention that I get stuck in a 12 month contract anytime i want to switch plans.

Considering that there are currently no other options than the att/comcast douopoly, I would think people would give a little more credit for providing alternatives, even if it's not perfect yet.
Extremely low information article... A startup obviously has more costs than a domain and email.
(Keep in mind that Node 10 will update to V8 6.8 before it becomes LTS, so it will get BigInt without any flags.)
Can't wait for a static, dependency-free hg, but sadly they aren't going to rewrite it entirely in Rust, just the speed sensitive parts. I don't care if it's written in Rust, D, Go or even C. When we picked fossil over hg and git, the Python dependency made us shy away from hg, although the CLI and the overall experience was better than git. Now we also fossil as a deployment tool; it can be a statically compiled drop anywhere binary.
I'm sure there are areas where there's enough standing freshwater around to sustain mosquito populations. If you're living in a community densely packed with continuously irrigated yards, there are probably mosquitoes - don't live in those places if no mosquitoes are a priority.

The last time I experienced mosquitoes in California was camping in a rainforest. I am not immune or unattractive to them, they are quite attracted to me.

But I'm also not putting myself in residential areas that would be desert if not for the constant irrigation. You're certainly able to find places with mosquitoes if you're looking for them - why would you do that if you're averse to them?
It sounds interesting. Is the language open-sourced?
I'd be very interested about your findings decompiling wasm. Do you have a blog, by chance?
Actual ISP network engineer here: I'm sure these people are having fun and all, but it's insignificant in the larger scheme of things.

(correction to original post: I did not at first see an ASN for them, or announcements of their own IP space. They have an ASN and announce two /24s, and peer at one physical location in metro NYC).

Real five nines network infrastructure takes significant capital investment.

This part is so much unadulerated bullshit:

""The internet doesn't really cost you anything, it's just the connection [that has a fee]. So however you can get plugged in — then you're on the internet. Nobody owns the internet, there's no one to pay.""

Actual, reliable internet costs real money, both in the salaries of people to engineer and architect it, salaries for 24x7x365 clued-in NOC staff, equipment, salaries and expenses for field technicians to build it. And that's before you get into things like establishing colo at major IX points, serious core routers that cost $15k each (do you really want to deploy something in the year 2018 to take several full BGP tables that doesn't have a 4 million FIB capacity?), etc. The Internet is a significant construction project at OSI layer 1, whether you're putting PTP radios on rooftops, running aerial fiber, or underground fiber. Otherwise you're just piggybacking on something that another, larger entity has already built.

I give them an A for enthusiasm and effort. It just needs to be channeled the right way so that they can figure out what it actually costs to run a reliable ISP. I'm all in favor of new startup ISPs.
Or Unbounded Solutions -> BrighterBrain.
Google Maps open redirect flaw abused by scammers
Can you please link to the React Native desktop projects that you're referring to?
They may not be faster, depending on what size integers you are dealing with.

From your [1]: "As a rule of thumb, Karatsuba is usually faster when the multiplicands are longer than 320–640 bits."

Toom-3 doesn't get faster than Karatsuba (couldn't find numbers quickly). See e.g. https://fossies.org/linux/gmp/tune/README for a discussion.
Somebody has to be responsible for reconciling multiple workers' changes to a document and arriving at a consistent state. Sounds like they're probably doing it in memory within an application worker. You could imagine a solution where they move this to the storage layer and have multiple workers acquire locks to mutate it, but I'm not sure how that wouldn't just move the problem.
The percentages seem more informative to me, since they are meaningful across different locations. If you don't know what 40% of a home price is in your area, do some research.
Yes! If one uses something like Kubeless[1], you have something like AWS Lambda, but where the backend is Kubernetes rather than AWS. Yes you're still on a framework, but it's a vendor-agnostic, open-source one. There are some other attempts at similar things, too. I am partial to this one for now.

[1]: https://github.com/kubeless/kubeless
In Catalunya we’ve had such a network for many years and it is specifically used for providing connectivity to rural parts of the country. It’s called Guifi.net and has over 30,000 nodes. I was surprised it wasn’t mentioned in the article actually.
This can work for small scale networks but it needs to be a paid service model to scale it(at least for usable performance).

A spine/leaf arch would be great for this imo. The leaves can be local cells of wifi networks. The spine can be operated by payment collecting individuals that maintain a high speed(10g+) and low latency uplink to the internet and network gear that can handle the traffic from the leaves. In spine leaf, leaves connect to multiple spine nodes as well (don't have to worry about spine operator reliability too much,could potentially load balance over spine)

That being said,I hope any modern wifi network assumes wifi encryption is not reliable and instead implements a layer2 or 3 tunnel (macsec/.11ae and wireguard respectively)
Well there's iron.io (which just got bought by Oracle) and there are several FaaS projects for Kubernetes such as: OpenFaaS and Kubeless.

Edit: OpenFaaS can run on Nomad as well apparently: https://www.hashicorp.com/blog/functions-as-a-service-with-n...
Looks great keep up the awesome work!
> The language will be open-sourced later in 2018.
Anyone who's used the Twitter API from Javascript has probably encountered the integer limit, because Tweet IDs are 64-bit values that often exceed MAX_SAFE_INTEGER.

Their JSON API works around that limitation by returning IDs as both "id" (a number that may not be representable in Javascript) and "id_str" (the same number in JS-friendly string form).
This doesn't mean that Windows is better, it just means you have no other choice because you were forced to by a vendor who didn't provide a native Linux binary.
> "It is immoral for wealth to exist in a way that, properly distributed, would solve the fundamental necessities of people. Thus, wealth should be confiscated until this goal is achieved for morality"

I don't believe anyone in this thread would say, "Yes, that is what I was arguing." I don't believe you do either. Stop trying to jujitsu random passersby in to discussing your preferred topic with you and the downvotes will abate.
My point is that the dominant software programming paradigm is migrating away from highly dynamic to highly regular. A good example is Machine learning, where for any given pipeline, your matrix sizes are generally going to stay the same. A good compiler can distribute the computation quite well without much trouble, and this code will almost certainly not need SpecEx/OOO (which is why we put them on GPUs and TPUs). Or imagine a billion tiny cores each running a fairly regularly-shaped lambda.

Sure some things like nginx gateways and basic REST routers will have to handle highly dynamic demands with shared tenancy, but the trends seem to me to be away from that. As you say, this is all dependent on the structure of code; and I think our code is moving towards one where the perf advantages won't depend on OoO and specex for many more cases than now.
Sure, but chances are that many of your house's existing features are becoming progressively less trendy over time, and you could have something hard to sell (or daunting to update) if you don't do too much over a few decades of home ownership.
Further, why should a person who build a brand based on dishonesty be trusted to implement a trustworthy way to rank news sources?
HN truncated the link to say "Ac..." and I thought it was a link to the page for Accenture, which changed its name from Andersen Consulting to get away from the bad reputation associated with the Andersen name.
How are they at any greater risk than any other ISP?
Language maturity is not a one-dimensional problem and it's also not equal to the age of the language.

To name just two ways in which I consider Rust more mature than Java:

* It has a lot of fundamentals that are based on more academic languages which have explored some specific PLT space for a long time and let it mature. The fruits of that are now in Rust (many aspects of its type system for example).

* Rust's community has an almost absurd ability (contrasted with most other languages) to focus on specific core libraries and tooling. For example serde[1], the Rust serialization library, is well-understood, simple, mature and supported in basically every Rust library out there.

The second point is extremely impressive when contrasted with the state of things in Java-land, where you often have many different solutions for the same problems. Sometimes even the well-known and used ones are of very questionable quality[2].

[1]: https://serde.rs/
[2]: https://github.com/FasterXML/jackson-databind/pull/1423
We’re Scott and Brian of Scott’s Cheap Flights. Ask Us Anything on IndieHackers!
This isn't correct either

"For users who can't spend the money, we made it easy to build the pro version from the source code."

https://github.com/nesbox/TIC-80#pro-version

https://github.com/nesbox/TIC-80/blob/master/Makefile
From a merchant perspective, I totally understand being wary. Even as a former Amazon employee I'm regularly surprised to learn new areas the company has expanded into.

But from a customer perspective, I'd be glad for this to take off. I would prefer to checkout using Amazon as a payment processor than Paypal, and Square (seemingly the other prominent option these days) doesn't seem to let me use a single set of credentials across merchants, which is always obnoxious. From a customer perspective, I've had almost nothing but good experiences with Amazon, and most of the bad ones (delivery estimate issues) wouldn't impact this space.
> have any proximity to "corridors of power" or political patrons or any sort of power

This is a picky comment, but I think it's important to distinguish "proximity to power" from "holding power". There are a lot of journalists with proximity to power, some of them doing a serious disservice to the public because of that proximity. A false story like Iraqi yellowcake uranium was peddled by high-profile, respectable journalists because they had and relied on proximity to power. But it didn't give them power, it just made them a mouthpiece.

Which doesn't make the preceding commenter right, that's still wildly off-base. I just wanted to note that the journalists close to power rarely have it, and the journalists with real power are rarer and tend to lack proximity to political power. They do exist - Murrow and Woodward for good, Hearst for ill - but most of them only have it for a moment.

(And yes, Skin in the Game is unbearable. Reading the pre-release excerpts felt like hiking through egomaniacal mud, and I'm not likely to try the whole book.)
Python is moving to have a lazy loader as part of the standard library. I mean, it's there already, at https://docs.python.org/3/library/importlib.html#importlib.u... , but not clearly easy to use, and with a big warning label against using it.

The issue at https://bugs.python.org/issue32192 says the plan is to start with an easier to use system as a PyPI package.
I initially thought it was the programming language
Speaking of London, talking to building owners is exactly what Hyperoptic did to build out a fibre network in London.

Unfortunately, the building owner where I used to live wasn't interested -- it turned out most of the building was empty, people keeping apartments for occasional visits or as an investment :-(

https://www.hyperoptic.com/how-hyperoptic-works/ or https://www.hyperoptic.com/map/
I currently run my own (DNSSEC validating) Bind. But it has some drawbacks. For occasionally visited sites/tlds, my bind would need to contact root more often than if using a shared resolver.