skysight-inc/HackerNews huggingface dataset:
It's more about trying to formalize that knowledge into evidence-supported statements.

Kinda like they mentioned in article, there's tacit knowledge and externalized knowledge. They are trying to condense tacit knowledge in this area into externalized, or formalized, knowledge.

This formalizing of knowledge makes it easier to build on top of it and work with. So while it may seem silly to survey something that is tacitly known, it's also good to formalize this knowledge into something a bit more trustworthy.
Build a JavaScript DApp in a Few Hours with Added Bonus Incentives
From my understanding when things burn hot enough -- which I think the mantel burns hot enough -- this sort of thing is not that big of an issue.

Also, I am not entirely sure this would raise the temperatures of something so massive. In any case it would probably become the "global mantel worming" debate.
Ah ok, I see, it’s kind of a replay attack. Seems like SMIME itself is broken because it doesn’t do whole message integrity.
Just to record the difference.

Unsigned and signed overflow in rust are both well defined to do one of two things, panic or wrap. If debug assertions are enabled they are defined to panic. In practice if debug assertions are not enabled they will wrap, but I believe that is technically subject to change (into a panic). It will realistically only change if the hardware gets much better at catching overflows quickly.

A panic is usually like a exception that you are really not expected to ever catch except at thread boundaries. You can turn them into a immediate process exit with a compiler flag.
The laws aren't for protecting the gamblers, they are for protecting the sport. The concern being that if gambling on sports is a real industry, then the outcomes of the games may get artificially "adjusted" by nefarious parties.
Show HN: HowDidTheyLive – Healthy living philosophies corroborated
It sometimes goes well beyond that too, where the ‘bad guy’ isn’t human enough to deserve any kind of compassion and so becomes an object for any kind of abuse or revenge the ‘good guys’ care to throw at them, and not all of this is just in the realm of TV fantasy because it’s clearly catering to a certain audience mindset.

- torture is okay if someone is a suspect

- jokes about being raped in prison

- all of the shitty treatment suspects get in police procedurals and detective shows, at the hands of the ‘heroes’

Even if they turn out to be innocent, it’s still like they’re guilty of not being innocent enough which justifies the abuse, while the apparent good guys are celebrated for being utterly sociopathic.
Try this: https://github.com/warpfork/gof

It's pretty easy to declare a GOPATH that's local to your project. I've been quietly doing it for years. The linked repo is just one short shell script that helps do it (on any project; you don't even have to commit the script, and it doesn't change how anyone else develops).

Frankly, I think every highly-productive gopher outside the Google offices uses some form or another of this. It's unpopular to say it and goes against "the community" zeitgeist, but many people will admit it in private if you ask around.

My biggest complaint about the current state of Go dependency management is actually the vendor dir. We never needed it; project-local GOPATH is enough in the first place. Now, we just get the headaches when both exist and are in conflict, or one provides something that should've been in the other (not a problem, until you push, and someone else on the team has to tell you that you didn't vendor enough...)
I'm guessing they will regulate it though. And of course demand their share of the revenue.
So the reasonable answer for me would be “go forth and use a modern scheme by default.”
They tried marketing a similar system for military applications. The military refused it because it was too noisy. [1] The Police may have similar concerns.

[1] https://www.theguardian.com/technology/2015/dec/30/us-marine...
There are a couple of different approaches you can take. The "traditional" way to do it would be something like exerb, which is a packager for building standalone Windows executables (although I'm not sure whether it works for recent rubies), and you literally end up with a single file. Similar ideas crop up every now and again.

But that's not the only way to do it; it's in keeping with the "uberbinary" idea to have a single tarred up directory and a known entry-point, such that once that's copied to the server you don't need anything else, no post-install build steps to get running. I built something to do everything-but-the-interpreter a while ago: https://github.com/regularfry/au.git.

The tricks that let these things work almost always boil down to knowing about the existence of a very few environment variables, and when in the build process you need them set to which values. `au` relies on $GEM_HOME, $GEM_PATH, and $PATH, and knowing what to do with $DESTDIR and `ruby-install` ought to get you a ruby interpreter as well (although `ruby-install` is just a shortcut to `make` in the MRI source). Where you'd look to learn that stuff now, I don't know.
A platform for bad ideas
Woz on the importance of HP in the creation of Apple
Yes, ignoring all moral and ethical externalities – things that are important to human beings – does indeed make economics easier to fake on the internet. Letting people die in foreseeable fiery crashes, however, is not how an organized civil society deals with product defects that put lives at risk. It is immoral to do so: a concept which actually does exist, no matter how hard you sarcastiquote it.

Your proposed framework would make for a silly Ayn Rand book or two, but little more.
In my shower/tub combo, I sometimes accidentally plug the drain by bumping the attached drain cover with my foot, causing it to slightly turn and fall into place. This could easily happen if I fell.

Sometimes I have a slow drain and I don't fix the until it becomes slow enough to fill up substantially during my shower. If I were unconscious in the sub with the shower running, it could have enough time to fill up. This would be especially true if my fall caused the water to switch to tub mode, which sends a lot more water into the tub.

I had a friend in college who liked to take showers while pass-out drunk. He flooded the adjoining rooms several times when his unconscious body blocked the drain. Luckily this shower was not a tub or he may not have survived these incidents.
Interestingly crystal has neither sum types or pattern matching (and it doesn't need them) :)

And yeah, nobody has any experience maintaining 300kloc+ systems in crystal. And i'm sure we get loads of things wrong and there are lots of pain points. I hope we find some type theorists to pick through the problems when that happens too, because crystal's type system is really quite different to anything I've ever seen before. And it would be nice to see what comes out of that theory wise.
I'm stealing etelegram for a new startup I'm going to make
Yeah, whoever thought that adding the attack/bug surface of a browser to the email client should be publicly shamed.

I assume that aerc like mutt is not affected by this "vulnerability"?
Proof-of-Work is the only solution to Byzantine Generals' problem
My PyCon talk about living in a school bus
No, but my old one still works, unlike my last 8 smart phones.
One could argue if a military will keep on using drones, is it “better” for them and us to better discern an enemy more accurately to minimize non enemy casualties, or continue with present incidental collateral death rates?

It’s not as simple as I’m against droning—that’s going to continue so long as the electorate demands minimized losses on our side (a very good argument, one leftists leveraged to try to get the US to disengage from previous wars), droning and it’s capabilities will continue.
Relevant comment from Werner Koch: https://twitter.com/FiloSottile/status/996011473112576000

Either GPG buffers the data and checks for DECRYPTION_FAILED, or the application depending on GPG does. Of the two options, it makes much more sense for GPG to handle this.
> Well, iOS, right? or Android? or are those not "Computers" ?

iOS is NextStep, and Android is Linux, so in that way what Steve said holds true, given that Linux wasn't developed commercially.
It's not block ciphers versus stream ciphers. CFB mode is a stream cipher and is implicated in this attack. CTR, the canonical stream cipher, is even more malleable than CBC.

The problem is authenticated versus non-authenticated ciphers. CBC, CTR, and CFB are non-authenticated cipher designs. EAX, GCM, and OCB are authenticated designs.
What does IANAL stand for? I don’t dare to google for it at work.
What's different from when you last posted this 3 months ago?
At this stage in my career, Python is my most used language, but I would prefer static typing (ideally with type inference) and native executables. I've been learning Haskell for that reason, but I see that Nim would also fulfill those requirements. How does Nim compare with Haskell, including its maturity and community?
Looks very cool! Small question: why did you write the parser by hand instead of using a parser generator?
Special Theory of Relativity: Logical Inconsistencies [pdf]
> Given that my data plan is 1.5 GB/month, I would notice if a gigabyte magically disappeared every month

Is that so? We're already used to updates, videos and even simple websites needing an enormous amount of data. I could easily imagine a gigabyte vanishing that you'd attribute to other things.

Also note that this is probably an average value, not an absolute.
IVs aren't nonces. Nonces need to be unique. IVs need to be unpredictable. Those are subtly different requirements.
Even if you agree with him that population control is needed, I don't see how you wouldn't criticize him harshly on his method both on the technical grounds of being ineffective and on various moral grounds. His comic-book motivation of trying to impress a certain lady is much more relateable for the particular action he took.
Great stuff, Iyanu. You just need to perfect the UI.
A correction to people claiming that Python's obviously got a better solution to dependency management than Go, a solution so "obvious" that a Python programmer of 15+ years hasn't heard of it yet. (No, I'm not actively programming in Python right now, but if it's so obvious and concrete I should still have known about it. I was up-to-date on best practices as of a couple of years ago!)

You aren't obligated to do anything; the question is open to anybody.
London skyline has world's first gigapixel photoshoot
Marketing has always been defined by the 4P's: Product, Price, Place, and Promotion.

The "business" defines the problem-space and strategic direction (in these cases, food/drink), marketing defines how you address the space (specifics of the products from research and evaluation, market positioning, promotion to audiences), operations executes on the above (supply chain, training, maintenance), and then customer support feeds into all three of the above.

This GCSE Bitesize piece (revision material for UK exams students take at 16) outlines why marketing is more than simply advertising and promotion: http://www.bbc.co.uk/schools/gcsebitesize/business/marketing...

Advertising is a subset of marketing, but marketing is a broad term, and is often mistakenly limited in how it's used in arguments (usually to belittle the role of it).
Battlestar Gallactica had mostly clear good/evil lines. What they didn’t do is paint all humans as good and all Cylons as evil. There were good Cylons and evil humans throughout along with plenty on each side who were not clearly good or evil but some mix.
But it isn't a crypto attack at all. Gpg is doing what it is supposed to do, and the overall cryptography is not effected. It's bad clients that are the problem.
Show HN: Coinograph API – Cryptocurrency Market Data API
The reason cannabis is being legalized in several states is people's changing moral intuitions leading to public action to change the law. The law has not stopped being an approximation of morality in that regard.

Reason and logical conclusions are not contradictory to a citizenry's moral intuitions, but are orthogonal to them.
I am not a lawyer
Twenty years ago this would have been the premise for a Fry and Laurie sketch.

Hugh Laurie wearing a mac and looking embarrassed, enters a newsagent where Stephen Fry is manning the register. Several customers browse. Laurie quietly mumbles that he would like a porn pass, upon which Fry loudly starts enumerating the various categories available (“The new porn categories only just arrived this morning. Now — no no, let me guess! I'm a good judge of character — I think you are looking for an ebony-pass. Am I right?”), to the embarrassment of Laurie who looks around at the other customers anxiously.

Hilarity ensues as Fry continues listing ever more embarrassing categories of porn for which a pass presumably exists, and Laurie's character loudly gets his name read back to him as Fry reads the details on his driver's licence for confirmation.

Something like that would never happen in real life of course.

Strange and worrying that this managed to get turned into legislation in a country like the UK.
From the ruling:

> Congress can regulate sports gambling directly, but if it
elects not to do so, each State is free to act on its own. Our
job is to interpret the law Congress has enacted and decide
whether it is consistent with the Constitution. PASPA is
not. PASPA “regulate[s] state governments’ regulation” of
their citizens.... The Constitution
gives Congress no such power.

https://www.supremecourt.gov/opinions/17pdf/16-476_dbfi.pdf

I don't quite understand what they're saying here...I guess the idea is that Congress can regulate gambling -- assuming some constitutional justification like the commerce clause -- but they can't restrict what laws states pass? (Of course, per drinking ages, they can tax states citizens and then release that tax money back to the states conditional on state s enacting certain laws.)

Here is extensive coverage on the excellent SCOTUSblog

http://www.scotusblog.com/case-files/cases/murphy-v-national...

Other HN submission (Bloomberg article):

https://news.ycombinator.com/item?id=17065652
Update: It's fixed in 3.1.1.
I'm using AWS SAM, which simplifies much, but couldn't setup CORS with it.
It strips the PGP MDC and then uses a malleability attack on CFB or CBC to inject content, but it's not a crypto attack? You have a definition of "crypto attack" that nobody in the field uses.
And you should look at market share numbers and maybe visit every other place in the world sometime.
> Let me tell you, if my emails were sensitive enough to require PGP, I would also use an email client which does not load images or evaluate HTML by default.

This approach requires too much diligence for most cases: people will forget to switch to the encrypted system, they won’t have a key / it’s expired because they don’t use it regularly, the software will remain horrible because nobody uses it, etc. Encryption needs to be enabled and usable by default if you don’t want a regular stream of human error.
I had the hybrid tires where they were smooth on the bottom for street, but knobby on the sides for traction when they partially sunk into soft ground such as trails. I was riding on the street, and there was a concave concrete drainage strip between the street and a driveway. When I hit the incline of the strip at about 8-10 mph, the knobs had no traction and the bike slid out from under me sideways, so I started falling on my side. I reached out with my hands to stop my fall, but realized those were my money makers and pulled them back to my side (I had mentally practiced this maneuver for years). I hit the ground shoulder first, but since I was moving forward as well as sideways, my body rolled and my head smacked the ground hard (this was all very vivid thanks to time dilation). I ended up breaking my right shoulder, and despite my best efforts, my left hand got caught in the brake lever, and I broke my pointer knuckle as well. It was two weeks before I could go back to work, since I couldn't use either hand for a while (right in sling and left in splint). I may have never made it back to work without the helmet.
If I remember correctly, the full form of that joke is that time is nature's way of preventing everything from happening at once and space is nature's way of preventing everything from happening in Cambridge.
I wouldn't escalate on disuse, just straight-up time. Exponential I chose to make it cheap to hold on to for a couple of decades, but by the time a company is claiming something for the 80th or 90th year, they better be doing something pretty darned awesome and profitable with it to justify keeping it out of the public domain.

And if they are... I really don't mind. I'm a bit less incensed at the fundamental idea of "culture being locked up"; if something is being maintained as Star Wars is, for instance, let Disney have it for as long as they can homestead it, basically. I'm personally far more aggrieved about the pile of stuff that nobody owns and nobody particularly wants, but is locked up because Disney wants to own Steamboat Willy. My pragmatic solution is to basically let them, but to do so with much, much less collateral damage.
Regarding France and the slide about the growth of ISP and the correlation with the IPV6 deployment I can say that sudden user growth in france is very often due to an aggressive offer from one of the ISP, resulting in the migration of a large number of users from one ISP to another, no new clients.

I do think this is a valid indicator in "not fully developped yet" countries, but I don't think its very representative for others.

As for the slow down some ISP in france started to regroup several clients under the same IPV4 addr, essentially assigning them the said ipv4 and a range of ports, some sort of PAT at the ISP level, I don't know if it is an isolated solution but it might explain part of the slow down. Doesn't explain why they do it tho.
I always found the ending to that personally unsettling, because I actually agreed with him and he does end up accomplishing a greater good.

It's great because it divides the present heroes as well, with Rorschach the absolutist morality on one side, Dr Manhattan as the complete pragmatist on the other, and everyone else somewhere in between.
This quote always brings to my mind the Ford Windstar.

Now, they did do a recall for a problem with the cruise control cutoff switch possibly leaking brake fluid. But not included in that recall was any damage that leaked brake fluid might have done to the anti-lock brake control module, or any of the other electronic or electrical components located beneath the potential leak site.

Such parts can be corroded by leaked brake fluid, causing electrical shorts and burnt-out components. And the brake fluid is itself quite flammable. Your Ford Windstar can burst into flames while you are at speed on a highway. Or it could simply light itself on fire sitting unattended in your driveway and turn itself into a total loss. Most of the time, it just drains its own battery or kills all the instrument gauges in the dashboard.

No recall for this problem. And yet, the vehicle has already had several previous recalls, including one for the rear axle potentially breaking in half. This leads me to believe that there is another term, D, for the estimated dollar amount for a loss to brand value due to doing another recall.

But then again, "Found on Road, Dead" didn't come from nowhere, so I'm not sure how much value is left there.
Google has done this for at least 6 years now, I don't know when they started doing this.
Source: Spouse works at Google
I’ve heard that in many cultures, being super logical without any emotional intelligence is a sign of immaturity. I’m beginning to see the wisdom in that.
Get Azure Mobile App: Microsoft Azure On-The-go [video]
Ask HN: What is a good tool for portfolio mgmt, investing, finance?
Hello HN,

I would like to know if you have any recommendations for different tools (open source or otherwise) that you use for personal portfolio management, finances, investing etc.

I would like a tool that protects your data but also gives you option to integrate with external tools if needed. Something that can be scripted to a certain extent would be most helpful. Having said that i would like to learn the capabilities and limitations of the best tools in the market and it can help me sway my thinking in different ways.
CBS sues majority owners to block Viacom merger
The drinking age is 92% state law. However, the federal government will withhold some (8%) highway funds for states that allow the purchase and possession (but not necessarily consumption) under 21.
Apparently nuitka's author considers it a bad idea and removed this feature: http://bugs.nuitka.net/issue136
Really? In my experience, that's been tooling on top of Docker that makes that sort of declarative networking easy.
What is the benefit of the global clock, in that case?
Yeah, mutt is safe

https://pbs.twimg.com/media/DdJ_d_wWsAEclUs.jpg:large
IOW, Matrix is best suited for replacing IRC or Slack, for communication around organized teams/communities or topical conversations with strangers; while Jabber/XMPP is a better Facebook Messenger, WhatsApp, Hangouts or Gadu-Gadu, best for staying in touch with friends and talking in ad-hoc group chats between them.

Plus, XMPP can be used for great amount of stuff non-IM related, while Matrix seems very focused around its IRC-like use case, where XMPP doesn't really improve much over IRC.
It provides a fixed contract to the outside world that is independent of your code-level infrastructure so both parties(provider and consumer) are required to conform to it as an integration. In that sense I find it a compelling thing.
I like the "Where did the plastic come from?" section in this article. Pretty sure it was a fish that carelessly tossed away the bag after going grocery shopping.
This is shades of the curl maintainer rationalizing CURL_SSL_VERIFYHOST=1 not doing any checking, because CURL_SSL_VERIFYHOST=2 does.
Bringing confidence to our API’s uptime through Elastic Search
Galileo May Have Flown Right Through a Plume of Water on Jupiter's Moon Europa
On HN, etc: I was just illustrating a point. She’s not an enthusiast at all. Software is strictly her job and she’s doesn’t care about it outside of work.
But it varies wildly by state, with some states having nearly half their prison population in pivate prisons. I imagine in those states, the lobby is pretty powerful at the state level. Lots of state-specific interests have a great deal of federal lobbying power.
As someone who grew up with LucasArts games, I really enjoyed Thimbleweed Park.

However, I wonder how much it would resonate with kids today who might not be nostalgic for this genre of gaming.
What’s the pun?
On Venmo, the lifestyles of the (fake) rich and famous
As much as I like the output, it uses a free production API not meant for such projects. Please make the API URL configurable.

> src/helpers/helpers.ts: return fetch(`https://www.openstreetmap.org/api/0.6/map?bbox=${bboxStr}`)

https://operations.osmfoundation.org/policies/api/

> The editing API is provided in order to edit the map data, not for read-only purposes or projects.
People are still making well-regarded Sherlock Holmes stories.
We let the web application do it and pray the web server does't croak mid job which it usually does.
What version? IIRC, WebRTC support (which WebTorrent relies on) started with ios 11.
The compiler could help here.

It makes sense for %G to appear with %V, but not with %m and %d.

Nonsensical combinations like this can be diagnosed with a compiler warning if the strftime format is a string literal directly passed to strftime, or found to do so via data flow.

A run-time warning would be nice, but problematic.
Ah, thanks for expanding - that wasn't clear to me from your original comment.