skysight-inc/HackerNews huggingface dataset:
"Add SELinux and some patches and it's good enough for the NSA."

Exactly. They didn't accept that, though, since the underlying TCB was too insecure. I'll elaborate for other readers.

SELinux was a prototype to add a tiny amount of functionality from "Trusted Operating Systems" to Linux to see if its security could be improved. Those assessing security at NSA rated the confidence of systems like that at C2/EAL4+. Here's what that means as described by Shapiro when Windows 2000 got the rating:

https://www.rigacci.org/comp/freesoftware/trust-comp/win_eal...

Highly-assured software they accept as close to secure is rated EAL6/7 (new criteria) or B3/A1 (older criteria). One of my favorite papers illustrating the kind of rigor that goes into that was VAX VMM Security Kernel for secure virtualization back in early 1990's. It was designed for A1/EAL7. Look at layering and Assurance sections for examples of techniques high-assurance security still uses today albeit with different tooling.

http://research.cs.wisc.edu/areas/os/Qual/papers/vmm-securit...

One of the newer ones at EAL6+ is INTEGRITY-178B whose page nicely illustrates the kinds of features and evidence packages they had to use to assure the separation kernel. There's more politics in the process these days, though, where they try to play down any weaknesses. The features and analyses are still good examples, though, of what would be in an openly-developed alternative.

https://www.ghs.com/products/safety_critical/integrity-do-17...

SELinux and common virtualization solutions don't begin to compare in confidence that attackers will find minimal hacks. Instead, the endless complexity demanded by the features people add assures there will be plenty vulnerabilities to come even in things that used to be safe. That's the default of proprietary and FOSS. Stuff making sacrifices for maximum security is rare. SELinux isn't one of latter. Its predecessor, LOCK, was though. Compare and contrast them, too, esp on where UNIX functionality set and what/why of the modifications.

https://www.acsac.org/2002/papers/classic-lock.pdf
This is a very key question, not just here but for the entirety of the software industry's "we just want to see how you think" thought-experiment focus. Which I don't disagree with - but would take further and say "if your discussion of 45-minute problem is a useful indicator of how you think, your discussion of a real system you've built or worked on in the past and thought about at length is an even more useful indicator."
Universal Basic Income Didn’t Fail in Finland. Finland Failed It
29 Design Features That Increase Your Home’s Value
"Incredibly destructive"

Incredibly hyperbolic
Yes, but a more-consistent-with-UB compiler is better to use than a less-consistent-with-UB.
This is somewhat ironic given that all five of the paper’s authors are East Asian.
But according to some online articles .com domain should be the first priority. According to my teachers, friends they suggested me the same.
Slowness is the elephant in the room in Python land. It's like everybody has decided to cover their eyes in front of this massive pachyderm. A massive delusion
It’s only a hard problem if there is no desire. The slowdowns for the interpreter startup did not happen because they are necessary but because site.py and friends just do more stuff now and a lot of important internal tooling became unnecessarily complex.
charles proxy is not bad .. still have to do some self-signed stuff but it is fairly automated
> There are enough homes in the US, as far as I know.

1.8% of all homes in the U.S. are vacant[1], as compared to 0.17% of the population who are homeless.

[1] https://www.census.gov/housing/hvs/files/currenthvspress.pdf
[2] https://www.hudexchange.info/resources/documents/2017-AHAR-P...
> You can create a GUI using something like Qt, but the code to make it is messy and unorganized. Having made a very large GUI myself, it gets very cumbersome to manage all of that.

Haven't we moved past writing UIs in code about twenty years ago? I see your code samples, and all they look like is an improved version of the code UI creation we had in OWL, MFC, and other UI frameworks on other platforms.

Starting about 1995 we had a better way: form designers that streamed objects (note: not even auto-generated versions of code, which is not much better, but object streaming.) Your UI is then designed and manipulated largely as a graphical UI -- that's what it is -- and manually written code is reduced to tweaks or state changes.

For example: Delphi (the prototype of all modern UI frameworks); C++Builder; others. WPF may count although the generated text is ugly as :) - but it carries the concept. A NIB file on macOS. You get the idea.
This didn't read like a complaint at all, but, rather, merely helpful advice on how to navigate their interview process.

Over the years of perusing this thread, it seems that more and more commentary has been deemed off-topic. As such, I'd ask that the rules at the top text be more explicit in what is actually permitted here, which is clearly much narrower than the rest of HN.

Alternatively, maybe just make it post-only with no comments permitted, since I, for one, would no longer even mention something like an typo'd URL for fear it would be considered complaining.
I pronounce it like the planet, and everyone else I've met in Jupyter leadership (including Fernando and Brian) also pronounce it like the planet.
Ehh, what I found funny as commentary on how far out of left field this is for Facebook. They want AI people to help them make money from advertising, so in effect they are doing this as advertising which actually does put it into their preview.

From the right angle you can see it as one of those in soviet Russia jokes.
But if it's a personal blog and I decide to sell products, it's then 'not' personal and a business and therefore GDPR will then apply. Too many things for me to be bothered with at this stage, so the easiest solution is to limit exposure to it.
Will UBI end up like Communism - no "true UBI" will ever be implemented because of Human Nature (TM) and all the failed experiments will end up giving a bad name to UBI?
France was conquered roughly 70 years ago. England was not conquered, but I suspect WW2 had a near significant impact upon domestic government operation. According to Wikipedia the US health system has roots that go back much further without noticeable disruption: https://en.wikipedia.org/wiki/Health_insurance_in_the_United...
> Universal health care is a euphemism for the poor and sick getting their medical care subsidized by the wealthy and healthy.

Correct me if I'm wrong, but the wealthy and healthy (who have health insurance) are already paying for the poor and sick, aren't they? Hospitals can't deny care to the poor and sick, so they inflate the costs of the wealthy insured to compensate for the poor's ER visits.

Universal health care would mean moving more ER visits to a primary care physician in a clinic, effectively _reducing_ the overall burden that the healthy and wealthy pay.
Early Access Program for Kubernetes on DigitalOcean
Who says they suck? They very much DO NOT suck. Every time I use a PC laptop, I am reminded why I use Bootcamp or a VM for Windows on an MBP.

However, I need a new laptop and I really don't want the Touch Bar MBPs. :( I don't know anyone that likes them.
I'm excited for this award, it's certainly well deserved.

In my heart, I wish the "data community" would show more care for security (and, related, privacy), with deeper focus on features that simplify access control, and guidelines on how to enforce "reasonable defaults".

I fear that Jupyter in many companies is becoming the next Jenkins, with unconstrained access to all data vs all infra, and this will lead to more and more incidents and leaks.

I very much hope that recognitions like this one will foster not only better tools and support, but also best practice and security considerations.

But, back to the focus of the post, congrats on this success!
From my experience, you won't have more time than you do now, it's just a matter of what is a priority. Cool project.
It's interesting that different cultures use names in different ways. I always hate it when websites give me a form to fill in where you must specify first name, middle name and surname. In a lot of the world this just doesn't make sense. Almost everyone has a name though so just have a name field that allows Unicode and allow people to put whatever they feel like naming themselves.

In addition names can't be used to uniquely identify people and relying on them in some cultures is a bad idea. In Korea in particular, family names are pretty common so most people have the exact same name as thousands of other people. It is also quite easy to change name in Korea. For that reason lots of Korean services use other information to identify their customers. The most commonly used identifier is a mobile phone number which in turn is linked to a resident registration number.
Bandicam 4.1.3.1400 Crack and Serial Key Free Download
what if you have multiple applications writing data? The central repository, most authoritative copy of your data is your database.
Wow that's awesome; you really are still in highschool.. When I read your gitHub profile where it said "A sophmore at High Technology High School" I thought you were being sarcastic!
> I'd love to be able to push/pull from my NAS at > 100MB/s.

At a guess you are not a typical consumer. 10G will happen for the consumer, but 100G might never happen for the consumer. And I suspect it will be a while (quite a few years) before 10G will become commonplace enough that economies of scale kick in making it affordable.
Where do you get that from? The Russian government blocked lots of AWS and Google IPs, and had no problem keeping them blocked until they agreed to stop allowing this, which was the same thing Telegram was using. And it doesn't appear that they cared about the "huge financial cost".
That's a nice saccade you've made from "you are a terrible person" to "healthcare ... ends at the borders."

Universal healthcare would be great if it was cheap and covered everything.
RDS supports wal2json.
This is from 2015. RAM prices remain artificially high.
The only appropriate password requirement is length.

A policy that requires 12 or 14 characters alone will have much better security than all these character sets, time limits, and other nonsense while only requiring 6 or 8 characters.

And these sites that limit password length to ridiculous short lengths are infuriating. Who could have possibly ever thought that was a good idea???
I know you're being sarcastic, but it looks like there are 6 vaccines in the first 2 months:

https://www.cdc.gov/vaccines/schedules/easy-to-read/child-ea...

Not that I think it matters - I was just curious based on your post.
Why not both? If the site gets popular, you run the risk of squatters taking the alternative (.co or .com) and hosting ads/malware, etc. Something to think about anyway.

I haven't seen any studies that .co is worse or better than .com. My gut reaction is that most non-technical people assume ".com", so if they see "www.example.co" they would type "www.example.com" out of habit and/or thinking the .co was a typo.

That's if they know the URL in the first place. I would bet most people just enter the "example" part in the address bar and assume Google or Bing will do the rest for them.
Even so, I'm not in the USA and don't plan on visiting very soon. And I'm pretty damn sure my government doesn't have access to it.
can you talk more about the points of failure? and is there a place I could sign up for more information when you open source your websocket solution?
> I guess a lot of existing universal-coverage systems, such as the UK's NHS, are also single-manager (someone will correct me if I'm mistaken), but the very existence of Medicare Advantage shows an alternative possibility. I think that, far from being an argument against single-payer, it shows how single-payer can be made to work even better, through premium subsidies (and, I would guess, reinsurance for catastrophic losses) to private insurance companies, for those who are willing and able to pay additional premiums for better care.

I don't think you understand how Medicare Advantage works. There's really nothing about it that suggests a single-payer system would work. The premiums are not subsidized. (Reimbursements are, but that's a separate matter.)

Medicare is the fullest extent to which people can legally opt out of Medicare, short of claiming religious exemptions (rare), working for a foreign government while in the US (rarer and legally questionable for citizens), or surrendering US citizenship altogether (drastic). Medicare Advantage outperforms Original Medicare on the top performance indicators (medical outcomes, cost, patient satisfaction), though underperforms the same exact private insurers on those same metrics, despite the latttermost also being saddled with the burden of subsidizing Original Medicare reimbursements.

If you still want to advocate for single-payer healthcare on philosophical grounds, okay. But from an empirical standpoint, Medicare is not the place to look for data to support that stance.
Anecdotes are fun. Here's mine: It's been literally 7 or 8 years since I've had a Windows machine (desktop or laptop) blue screen on me.

(Although I admit I've primarily used a Mac the past couple years, so maybe Window 10 has degraded recently.)
An iOS Developer’s Journey into React Native
well good, your short term memory is in tact.
Sweden, without oil and without much fishing, is also doing really well per-capita etc.

On the ground, the welfare state approach seems the plausible explanation.

And how will Norway do post-oil? Really rather well, it seems, because of its sovereign wealth approach which contrasts strongly with eg the Texas approach.
> Jump forward 5 steps in the line for every person you invite and get beta access sooner.

So what you're saying is that Viktor Hn just shot to the front of the line? Well played, Viktor.

Edit: Actually, based on the invite code, it's likely a specific code for HN. The Developer's name appears to be Viktor Jansson, I just assumed Hn was a last name. :)
There is also some greyness around Mailchimp hosting data in the US. In my work environment we have been advised not to use them because of this and choose providers with UK or EU hosting.
Medicare is the core of all regulatory and pricing issues in the healthcare space. And if medicare were expanded to the entire population of the us, its expenditures could be 40-45% of gdp.
I was in your shoes at my last job. I tried many techniques for over 2 years, but eventually I had to resign because nothing was going to change no matter what I did.

I was constantly being dictated to or ignored as if I was a Jr. Dev, even though I had by far the most experience on the team. I'm sure I am not the best at handling the nuances of interpersonal communication, so I'm sure I'm somewhat to blame. That being said, what can I do when someone argues against me about something they are truly incorrect about? Just let them carry on and do the wrong thing and further sink our codebase into oblivion? I guess so...
Because I can install nextcloud in a single cli line. With out it I need about 9 scripts worth of stuff (example of what I wrote to do it) https://github.com/OhioVR/nextcloud_debian_install_scripts/t...

If you want to learn a whole software stack, building and administration to just TRY a program ONCE I won't stop you. But there are better ways like using docker.
This.

In a world where publishing is essentially free, reputation is an extremely valuable commodity. The ask here is not trivial.
I don't think there's a regular FPS game that does 60Hz. That's usually reserved for the private servers, tournaments.

This guy does a lot of game network analysis of the most popular FPS games:

https://www.youtube.com/user/xFPxAUTh0r1ty/videos
Are You Approaching Prototyping All Wrong?
Only the free version, there is another (Pro) version which has additional features and a closed source.
Given how hostile most of those companies have been to remote work, I'm not too optimistic. I hope to be wrong, though.

And while those other cities do have some tech scene, it's still nowhere near that of SV, and that's still the first choice of most developers.
True. However, the argument that advertising in search results is unethical seems weak, I don't see it. There is some conflict of interest, but Google walks the line pretty well. I don't think it necessarily follows that a conflict of interest mandates unethical behavior.

I correct my stance to be that the trade-off of having better search quality in exchange for ads in the search results and the associated tracking is still worth it to me. If I felt otherwise I would use a more privacy friendly search engine.
Workable policies that levy taxes abusively are not workable policies. Its institutional exploitation.
Cambridge Analytica closing down after Facebook row
Fixing Gmail Re-Design
They do. And I literally live around the corner from one. But the position they're looking at me for would still require me to move to Mountain View.
Ideal for those times when the echo chamber is not enough.
https://qt.io
Google's SVP of Ads & Commerce is on the board of IAB. https://www.iab.com/our-story/#board-of-directors
Even easier is to remap Caps to Esc when hit once and Ctrl when held.
It wouldn't have. The culture of the organization (and by proxy the culture across all of those organizations -- including allied/FiveEyes nations) is seen as one of its greatest assets, and they go to great lengths to preserve that culture and boot outsiders. If I hadn't been part of a completely third party organization, there's no way I'd have been in those positions for as long as I was ("those positions" here not implying I performed the same function, but rather a job that was critical to their continued presence abroad, with my clearance under the control of that external third party -- sorry for the lack of specificity). No leader will have been able to change their culture, and any leader making headway into changing the culture will not have lasted very long.
Seems like there are a lot of people here who aren't aware of wal2json and RDS support for wal2json.
Seconded, my initial impression was 'bad idea' until I read a bit more about how it worked.

Seems like an interesting idea - could be quite useful if you can get a critical mass of user data.
Ultimate Best Portable Home and Office Humidifiers Buyers Guide 2018
Interesting:

"Instead of going all-in on Rust, we decided to keep the network handling in node.js for now. The node.js process creates a separate Rust child process per document and communicates with it using a message-based protocol over stdin and stdout. All network traffic is passed between processes using these messages."
Cambridge Analytica and SCL Elections Commence Insolvency Proceedings
Redskins Cheerleaders Describe a Trip to Costa Rica That Crossed a Line
I live in Karachi and I have seen how the Circular Railway was dragged to a rusty death. The land grabbers, the transport mafia and corrupt officials all played their part in the tragic demise of Karachi Circular Railway.
I don't use blender, so I'm not sure if it is highly specialized for a particular application. However, Autodesk Fusion 360 is a perfectly capable program as well, and has very favorable licensing if you are a hobbyist. They've done a really good job with first party tutorials, both in written copy, and videos. It seems to be one of the hottest tools in the 3D printing community right now, so the community is robust for support as well.

Where it really shines though is that anything you can make happen in the GUI, you can also make happen in python. In fact, I believe it is possible to simply "trace" what you are doing in the GUI, and use that as a guide for how to do it in your own custom code. Thats the "Fusion" part of the name. You can do the actual modeling with code. You can also create more gui features. For instance, you can make a button on the toolbar that, once clicked, checks for user selected geometry. If any is found, do operation X upon that geometry. This pattern alone makes me think that Fusion 360 is an excellent tool to approach CAD from the perspective of a coder.
See Through Rotary Engine in Slow Motion
There's some caveats to all this. The most obvious is that you're right and Kara's wrong. The problem in creative orgs is that it's often hard to tell you apart from Kara. Learning and unlearning are important abilities in a creative setting. Otherwise, it wouldn't be a creative setting. How many of us (in ops) have had to argue with coworkers about the usefulness of configuration management (back when that was becoming the best way to do things), and who now have to talk with coworkers about the need to containerize our build and deployment? So, what might've been wrong (or right) at some point in history, may not be wrong (or right) now.

And yes, as others have pointed out, there is usually a lot of technical debt at stake.

In UI/UX settings, agreeing with your coworkers (as someone who's done design, talking about engineers), it usually means that you end up with a real stinking pile of a UX, where the designer gets overruled every time unless product intervenes. There's just more engineers than there are designers, and all of the engineers are living in the same bubble.

That leads into the other caveat. This strategy works okay when you are in an org with enough clearheaded people (who have the power). With a critical mass of clearheaded people, you can carry forth and the cumulative effect of things going wrong doesn't overwhelm the org's ability to repair them.

Are there meta-abilities involved with creativity? I know for my own individual flow, it was important to recognize when I was stuck, and to take a walk. Creative people are often very stubborn, and, maybe this works well in a traditional, management context, but, I'm pretty sure this works against us in our creative bread-and-butter. And, I'm not sure there really is a general way to teach creative ability (whatever that is) that works for everyone, including this fictitious Kara.
That's not really a fair summary. The issue is that less mature language have lots of other issues that come along with the good. Just in this article they noted immature libraries, difficulties with async that kept them from migrating fully off of node.js, and difficulties with error handling. So you have to weigh those in the comparison, not just focus on the one major benefit.
Tesla hit with $2B lawsuit alleging violation of semi truck patents
This is behind a paywall.
Python is great for prototyping or even real apps if performance isn't so critical. However, more than once I've found myself in the situation where I wrote a bunch of Python code and then end up starting that code up from another app, just like the thread discusses and I immediately feel like this is an anti-pattern.

What's even more annoying is that my Python code usually calls a whole lot of C libraries (OpenCV, numpy, etc.) So it's like this: app->OS process->python interpreter->my python code->C libraries. That just really feels wrong so I'd like two things:

1) better/easier path to embed python scripts into my app e.g. resident interpreter

2) some way of passing scripts to python without restarting a new process, this may exist and I'm unaware
barsa sempre joder
I'm really curious about one thing: what do they need or plan to do with over a $1 billion?