skysight-inc/HackerNews huggingface dataset:
"- both C and C++ have gone through quite some changes as well, and so have the compilers; so it's not exactly uncommon to find 20 year old code written without this in mind and making use of some specifics which now are unavailable"

C, C++, and Fortran have ISO standards, and if you write standard-conforming code, the committees that revise standards are very careful not to break things. It's not like Python where the BDFL changes the syntax of the print statement.
> When it comes to consumer ISPs, who are the people paying for the high-end packages?

A family of 5 where you need the bandwidth if everyone starts streaming videos at the same time. For gaming you'd advertise ping times, I haven't really seen that recently.
> (in fact I am not aware of any client that is vulnerable to this)

> First, the direct exfiltration attack abuses vulnerabilities in Apple Mail, iOS Mail and Mozilla Thunderbird...
Judge not, that ye be not judged. First cast out the beam out of thine own eye; and then shalt thou see clearly to cast out the mote out of thy brother's eye.

Criticism is a lot more effective when it's not hypocritical.
This. LIghtning rods are a very cheap insurance policy against the enormous property damage that lightning does to your building (think fire + widespread electrical damage).
Calculation was the price we used to have to pay to do mathematics
Imagine if BLAS had to be frozen and run from a container.
You kinda need the car running for the heaters to work.
EXPLOSIVE Growth Strategy “Shaking” the Internet
Parent is not whataboutism: it wasn't excusing other instances. It's a simple accusation of hypocrisy.
Looks like you committed a .env file previously with some semi-private details contained within it, plus you’ve hardcoded some Cloudinary API credentials. You may want to rotate them before they’re abused by someone.

Edit: oh and some database credentials & getstream.io api credentials
There is a callousness in the attitudes the general populace has toward prisoners. The American desire for retribution and revenge toward prisoners is insatiable. This overall attitude affects our views and reactions in other areas. For instance there is a lingering fear in a large segment of American society that poor people get something they don’t deserve through the welfare system. The dehumanizing way we view prisoners and their concerns is toxic. As a people we have lost our way.
You can't just "not use cars". No matter what you need some form of transportation, and people will die on it.

Any time someone says a huge class of deaths is totally avoidable, take it with a mountain of salt. It's a useless idea, completely disconnected from the useful realm of risk management.
Top 7 Data Science Use Cases in Finance
In the middle of this ramble:

"I wish developers were more willing to consider the possibility that their favorite computer programming may not be ideal for a world of distributed computing in the cloud. Apparently I’m shouting into the wind on this issue."

Maybe understand someone's job before telling them what tools they should be using? Sure, simpler is usually better engineering. But results are important. Docker is helping a lot of developers get results, and the author is clearly not one of them.

And in conclusion:

"Docker strikes me as a direction that one day will be seen as a mistake."

Name one technical movement that wasn't! I'm not sure why it's such a shock that programmers are "fashion-conscious". It matters more that we put our collective effort behind something with a few years vision, not necessarily what that something is.

(I speak as a member of the minority waiting for the phone industry to get over its obsession with black glass rectangles and get back to making proper phones for grown-ups that come with proper keyboards, rather than pandering to the teenage dem~~increasingly loud static hiss~~)
Which is fine but it's not a meaningful change to the perspective of me on page 120 when I think "when we reach page 163 I will no longer feature in this novel".

Our problems with death are, basically, ego. How you mentally model time and the universe doesn't take that away
That's why I wait. Don't want to do the work twice in one month. It could be that they already provide all data but I'm only sure from the 25th.
Digital Forensics Report for Dagens Næringsliv (re Tidal) [pdf]
That's very nitpicky for such a comprehensive article.
Why not eschew the idea of "exceptions" at all then, and just return an error outcome if it can be expected? You've just wrote down a way to do that with no ABI changes.

A more expensive (and preferably non-allocating) mechanism could be used for a controlled "panic", that is, winding things down in an orderly manner when an unpredictable error occurs.
Wouldn't be a payment if CPU cycles didn't have some scarcity.

My laptop would be fine with 30 seconds of a CPU spike, though. Most phones could probably also tolerate it.
> I've made it abundantly clear, in this thread and going back years, that I consider free speech to have limits. Speech acts have consequences both in law and everyday life, and to pretend otherwise is facile. Incitement to violence against the innocent is one of those.

There is a clear legal line between genuine incitement and protected speech. This is my point of contention. If it is illegal, let the authorities require its removal.

> It is you who has kept ducking plain questions and pretending not to understand them.

Because you are using rhetorical questions to attempt to paint me as some type of monster who supports horrific crime because I want due process of law.

> Just so there isn't any ambiguity, I find your excuse-making on behalf of incitements to engage in rape, enslavement, and massacre contemptible.

I am not making excuses for crimes. I am suggesting we follow the due process of law before silencing speech.

I find your attempts to silence speech you disagree with a horrific path to fascism.

Now let us agree to disagree.
Certain use cases of text analysis via Excel add-in
Wait until you realize that they never change, and apply to all industries in slightly different flavors.
Yep. Living a (relatively) hermetic/isolated/minimal-external-contact lifestyle while the rest of the world was getting ravaged by plagues probably got them a long way. To say nothing of being generally granted greater autonomy/self-sufficiency without invasion/domination by political orders, and living a lifestyle that emphasized self-sufficiency and discipline.
Aren't governments meant to be money holes? You put money in, you get governing out. They're not meant to be turning a profit.
An alarm would still be fine though? Maybe with an option to deactivate it. I'd want to know when the key gets removed from the car, not having any notification appears wrong.
Null definitely has a meaning, as missing value, encoded often by Optional types. What many of the programming languages got wrong is that is NOT a subtype of all of the other types. (It's not a bottom type.) Subtypes are required to fulfill the same interface as their supertypes but null fails at this because it doesn't have the same minimum set of fields, it doesn't respond to the same methods etc.

The only way I can think of making this sound and well-typed, is that null supports any fields and any methods, returning always null. This doesn't fit well how many of the languages actually do.
This is American "justice" culture. We can do anything we want to "bad people" because they are intrinsically "bad". You can tell they're bad because they're in jail. If they were good people, like me, they wouldn't be in jail.

Anyone caught suggesting something is too much punishment is not "tough on crime". They want the bad people to win (so don't vote for them!). Reducing sentence length, improving prison conditions, trying to actually help those on prison, that's all just weakness, that's not being tough on crime.

Who cares that recividism is more expensive than rehabilitation- the point isn't to save money or reduce crime, it's to punish the bad people. I mean, if we stop thinking of them as bad people, how am I supposed to know that I'm a good person?
> Go do it yourself

Who says that I do not work on such things already? (just perhaps in a somehwat different way than you might spontanously have in the back of your mind).
Having been around that particular block in Ruby, and seen similar things happen in other languages, I'd say that the primary problem with them isn't that the interpreters or basic tech makes it difficult. It's that the community rallies round ways of doing things that don't focus on the "uberbinary" story, and the knowledge of how to do that sort of thing is not well distributed.

For instance, it's not particularly hard to wrap everything from the app down to the ruby interpreter in a single directory that you can then drop into a .deb, but because deployment stories in the Ruby community, from at least Capistrano onwards, focused on getting the app code onto the server and then working from there, with all the problems that entails, the folk knowledge of how to do it just never spread that far. You had commonplace craziness like using RVM to install Ruby on the production servers because it was convenient, and once that mindset was embedded, the community as a whole (and I'm tarring with a very broad brush here, but it's not inaccurate) ignored simpler solutions that worked better, and didn't need tooling with as many points of failure. Bundler is another case in point: you just don't need it in production. Or at least, I never found it necessary past the build pipeline, and I think a lot of folk never found out whether they did or not.

The point is, a lot of the apparent deployment difficulty in interpreted languages is entirely incidental and self-inflicted. Now, there is a real argument that Docker removes the need to learn all the ecosystem-specific folk knowledge you need to get to a point where you can do painless, sensible deployments in a new environment, but I think it's just moving the problem around.
Too easy. You'd need to split it up into at least 10 services, it's called microservice for a reason.
I don't even understand why they needed to tease the thing one day in advance with measures that were so weird that nobody knew what to expect. "Stop decrypting email", right, super convenient and totally appropriate given the actual vulnerability. Next time maybe they'll say "don't touch your mouse until further notice". What difference would it have made if they had simply published this website straight away? Seemed like they were releasing the teaser for the next Captain America movie or something.

This reminds me a bit of the "amdflaws" debacle, although that one was even shadier and might have been an attempt at manipulating AMD's stock price.
Even setting aside that this is an excellent example of how toxic the security community is, the real problem here is that HTML email is a steaming pile of crap. The number of vulnerabilities introducted by the mind bogglingly stupid idea of putting HTML in emails is staggering. You're better off only reading plaintext emails and sending the rest to /dev/null. Bonus: this gets a good deal of spam out of your inbox!
Another +1 from an Emacs and Org mode user. I keep on wishing that I got introduced to Emacs sooner in my life.

It will help you with the organization using Org mode. But as you use it more, you might find yourself doing many more things more efficiently in Emacs.

Emacs is not something like Notepad where you go through all the settings and be rest assured that you know everything about the tool. Emacs is so extensible that if someone claims to know it 100%, they are naive. The beauty is that you learn to use the stuff that only you need, and learn more things as they come.

I am telling the above because you might get overwhelmed looking at Org mode feature set. But you don't have to know everything in that.. just learn and srart using what you need right now.
This may sound trite, but this is why science is based on math, and not code. Math results can be fully reproduced from a paper document no matter how old it is. That is the point of math. Until code reaches that level of self consistency and rigor, no one is going to waste their time building a friggin virtual machine for their one-off incremental molecular dynamics result that all of 2 people will try to reproduce.
So development on the author’s Molecular Modeling Toolkit will stop, I see that. But it sounds like these older packages can still be used, it’s just that scientists can’t blindly run everything on the same python installation. But with pyenv/virtualenv, or dockerized versions of python2, it should be perfectly possible to keep using them for a very long time. For the same reason, the author’s comment that scientific python scripts tend not to be usable after 5 or more years seems not entirely accurate.

However, it wom’t be possible to use them together in the same project with modern python3 code. So that’s bad. I wonder whether one option is to create a dockerized version of the library runnng against python2 and the write a serialization/deserialization layer allowing the old API to be implemented in python3?
Memes That Kill: The Future of Information Warfare
> it's rather obvious that German Zwerg was related to work

No, it is not obvious. In fact, that is not a mainstream etymology at all. Nor is positing the initial dental as a “pejorative” prefix, something any recognized scholar of comparative Indo-European linguistics would do. Furthermore, your connection of ‘dwarf’ and the PIE ‘work’ root to ‘warrior’ is, frankly, crackpot.
You both have a point. All societies that are sufficiently large have quirks and contradictions. You can find inequities and injustices in every country that is large enough. But people should still be free to criticize policies of other countries. Of course, when the hypocrisy is too great said criticisms falls on deaf ears.

Let us strive to be less hypocritical but still vigilant in pointing out human rights violations elsewhere.
As a lifelong Marvel fan, how dare you call Iron Man second rate, sir/madam.
Xerox has cancelled its $6.1B sale to Fujifilm
Microservices are bad for your startup
Google Employees Resign in Protest Against Pentagon Contract
Takes one to know one?
A lot of buzz for a not so critical vulnerability. Well it is critical but very hard to exploit because :

1. Hacker need to intercept the encrypted email.
2. HTML tags/remote content are blocked by default on most email client.

Still an important vulnerability, but not enough (for me) to disable enigmail, I know I'm safe with blocked remote content.

By the way I hate this kind of "buzz" disclosure. Just disclose fully or wait.
Yes. That is correct :)
Yeah S/MIME probably overlaps with HTTPS a lot these days, especially in corporate environment where it makes the most sense. Just setup an encrypted connection with the company's messaging platform and you're good.

For personal email GPG is still pretty much the way to go if you don't want to trust any 3rd party though. Few people seem to care about that these days however. The fact that GPG's UI is abysmal doesn't help.
If small Tcl doesn't exist, it becomes necessary to invent it:

http://jim.tcl.tk/index.html/doc/www/www/index.html
Exactly no problem if paid by someone but should not be unpaid job.

When companies open source stuff are not for the greater good they do it because of economics. Just like in a bar when you get free salty nuts that help you drink more :D
You have to start one step before this: Are there convincing arguments that this is a failure at all? Children's entertainment isn't an exclusionary arena, nothing about the number of options Disney provides prevents someone else from putting out option N+1. It was true on cable TV, and it's infinitely more true in the streaming world of today. In such a market, Disney's dominance need not mean anything more than being really good at servicing this market.

Copyright is really an orthogonal concern here. Yes, it certainly endows Disney with some rents that they shouldn't have, but their dominance is based on a continuous supply of new content, not derivatives of Mickey Mouse.
If you can do those things, you don't need cqrs to begin with.
Ask HN: How do you stay updated with open source tools?
I've been developing websites and apps for almost 7 years now. Yet, every 2 weeks or so I find an awesome 3 year old library I had no clue about.

Before asking here, I asked some of my friends how they found out about the tools they use . A few answers were:

- "Someone at work was using it"

- "Someone at work/ a friend recommended it"

- "Found it through a news letter"

- "Found it on reddit/ hn/ a blog post"

- "Found it while searching for a problem on Google"

(By including a library in my project, I (or my employer) bear a financial cost. And I want to be absolutely sure that I'm picking up the best tool available so I want to evaluate all options.)

What are your strategies to stay updated with the fast paced open source world ?

Thanks `\(^_^)
Holy moly! I wouldn't have thought this was possible if I didn't see the code.
Arrow's impossibility theorem
Bitcoin for beginners
Hi everyone,

we have a new integration on our site, a Proof of concept for a Bitcoin e-commerce site using our API which primarily addresses itself to beginners. Now, you can learn how to accept bitcoin in your store even if you are not a geek or a programmer.

All you have to do is set up the integration and change parameters as noted on the page. Just follow the instructions. Once the database is created, open page in a browser and click button "Bitcoin Pay now". This will give you an opportunity to see how bitcoin works. You will see an invoice page, the preparation of a query request, bitcoin addresses and a QR Code and you will quickly become familiar with Bitcoin network confirmations.

Once again, this is only for beginners. To complement this post, here's a little infographic to summarize the transaction process. And if you have questions (no matter your skill level or your goals), it will be a pleasure to answer you.

Link: https://apirone.com/integrations/
Infographic: https://apirone.com/static/img/horizontal.png
I love that game! So many fun anecdotes to the 90's, X-Files and a lot of silly humor. Would like see him make more of those, but with a fantasy theme.
While I agree that death will feature no matter how you model time, the difference between the flowing time and the block universe in this regard is that in the block universe you never cease to exist.

In the model of flowing time, once you are dead you've passed out of existence, only to be clinging on trough the memories of others.
Dear Comrade
I agree with you, but for the foreseeable future this will remain easy to test. Just ask the caller something out of it's domain. Get a call about life insurance? Ask about ratios of trail mix.
I think that main difference is the fact that Jabber has important features (in 2018 year) as an optional extensions. So you have to carefully search for a proper client and server which support those features (and your companion's client AND server should support those features as well). Matrix should have those features in core and any server or client is supposed to support them.

That said, I think that main problem with Jabber is lack of a single entity pushing it. So it'll naturally lose fight against corporation with billion-dollar marketing budgets. With Matrix it might be better.

Sometimes technologies losing or winning for very ackward reasons. I don't believe that Jabber will win, but with Matrix it's possible. We should keep trying.
None of these problems would exist if developers packaged their software and the configuration in operating system packages. Then it’s just a matter of plugging those into their OS’s respective provisioning technology. I suspect the issue isn’t that, but lack of shell scripting expertise. In the end one has to shell script anyway, even inside of systems like Docker, so prolonging the inevitable is irrational.
Kissing cousins.
You can see a similar simplification between good and bad in popular movies, like all the superhero movies. It's always the good versus the bad, and the bad can't be helped, they must be punished or -better yet - destroyed.
> and put them through all the ceremony that is getting "hello world" to work in Java
Ceremony?

It's one line with the official java REPL jshell. Two lines, if you want a GUI (Swing).
My personal design philosophy (from a System Admin, SRE, DevOps, Ops- whatever) is no black boxes. I'm not talking about knowing the inns and outs of every little component in my infrastructure/system, but instead of saying "This is Graylog" being able to say "This is Graylog- a Java app that uses MongoDB to index and Elasticsearch as a backend. We have to monitor JVM usage." The former is saying we depend on a system we have no idea how it works, and the latter is saying we depend on 2 java applications and a NoSQL database.

It horrifies me that people run stuff in production not knowing how it's configured. But, this happens and is why there is just a booming market for DBaaS and other like productions. Docker is an amazing tool, but does make somethings a bit too easy.
I'm glad others see this crap for what it is--just another industry. I once happened to be near the local courthouse on "DWI night" and the line to get in the building was out the door. Money, money, money!

We need to get back to some kind of system of laws where only crimes with actual victims can be actionable. Transgressions against the state are not that.

Before anyone says "China has fewer inmates that the US" I say to you: Yes, because China executes people wholesale.
Your company is running at full steam, you are smart and keep headcount in line with the actual needs to deliver products and services, e.g. everything is a good bit understaffed.

A big decision looms - a new product, a new market, whatever it is, it requires the full attention of a team of people to just outline the knowledge needed to make rational decisions in it.

You're also worried about tunnel vision of your own team, success tends to bread that.

This is when you hire outside help. Temp workers to research and present a deep topic. They don't decide, you do. But rather than putting people on full payroll and then maybe need to axe them, you have them do a project.

Absolutely valuable, if employed correctly.

And don't underestimate what a McKinsey or BCG can pull in terms of network. Their research can go into places where your team simply can't reach. Good VCs act the same way btw, the value of a16z for a small startup as an advisor and door opener is the same as McK or BCG for a public co.
It's a blogging platform with ecommerce bolted on. I suspect it's a little bloated. Indeed, my experience with it was that in many respects it was very sluggish and inelegant.
Now that you're in Amazon your chances of getting into F, G, etc are higher. Believe it or not but the first tier hires plenty from the second tier - and I think Amazon is above second tier.
Something happened over the years that caused, at least in my experience living in America, people to incredibly deeply associate legality with morality. I suspect this is universal to some degree in societies around the world and in history. But how prevalent it is in my lived experience feels deeply Orwellian. As long as Big Brother approves your in the right, right?
I can see how it would work against Apple Mail/iOS Mail since they load HTML and external elements by default.

I would be interested to see the attack working on a Thunderbird client with Enigmail installed and no other settings changes (like; loading external resources).
Do you plan to open source it?
https://matrix.org/docs/guides/faq.html#what-is-the-differen...
The pattern in this case is the connection between surreptitious listening and the suggestion.