skysight-inc/HackerNews huggingface dataset:
> If you feel that you can discard a whole article because you find one line in it that confirms your prior belief then that's fine with me.

The entire spirit of these articles are completely misguided because the adverse reaction to GDPR is not hysteria. Here's the unique nature of this which makes it a recipe for disaster:

1. Every business interacting practically any way with European citizens is affected

2. The potential fees for breaching a very complex regulation are unprecedentedly high.

3. Determining the actual fees for each breach is in the hand of every EU country, including some which today wouldn't be admitted into the EU.
They already have a few CRM like Marketing Cloud but these are SaaS. I guess they'll integrate Magento with their marketing tool suite. Magento is first and foremost an open source e-commerce "script" built with PHP so it will be interesting to see what they do with it.

Many businesses moved to integrated solutions such as Square or Shopify to simplify building shopping carts so it is possible Adobe eyes at building such services as well.
Can Chinese isolationism really be compared to repugnant UK imperialism?
We (the USA) literally engineered a coup in neighboring Ukraine in 2014 in our continued efforts to surround Russia with military bases (as we do with every country that isn't a client state of ours). No matter how many times I see it, its astounding to see how the educated readers of HN are so totally ignorant of (even current) history and how susceptible to propaganda they are. It just goes to show how tenuous the relationship between education, awareness and critical thinking is - if it exists at all.

>“I think (Yatseniuk) is the guy who’s got the economic experience, the governing experience. What he needs is (Klitschko) and (Tyahnybok) on the outside. He needs to be talking to them four times a week,” Nuland said in the recording.

https://www.reuters.com/article/us-usa-ukraine-tape/leaked-a...
This is basically what it is, except the collection is made otherwise inaccessible through the closure. The closure exposes the minimum interface needed to adjoin elements to the collection, whereas passing the collection around allows all sorts of modification. I’d also say that if this was used a lot, the intent is more clearly specified and it’s easier to narrow down where a bug might be (precisely because rampant changes to the collection are not possible in the body of the macro).
Unfortunately not in PG11, but not because we don't want it - it simply didn't get ready in time.

https://github.com/postgres/postgres/commit/3de241dba86f3dd0...

The relevant limitation is described by CREATE TABLE docs that say

Partitioned tables do not support <literal>EXCLUDE</literal> constraints
however, you can define these constraints on individual partitions.
Also, while it's possible to define <literal>PRIMARY KEY</literal>
constraints on partitioned tables, creating foreign keys that
reference a partitioned table is not yet supported.

(the wording is slightly broken in the commit, but got fixed later).
Nope. MVS is designed so that each version can be explicitly ordered within a major version. Non versioned commits are assigned to the "v0" major version and compared by date of commit I believe.
But the definition of "sufficient privileges" is different here - on most Linux distros (and I'd guess on other OSes?) ssh-agent protects itself from being accessed by the same user account (via the debugging APIs) by being setgid to group ssh. On Windows, the data protection API specifically allows any process running as the same user on the same computer to decrypt protected data.

So it's not a vulnerability in the sense of an unintended exposure, but, it's certainly true that Microsoft's design gives the private key much more exposure than the design used on most Linux distros. (And it's unclear whether MS intended to deviate from this behavior.)
Can we be like Shopify but with more baggage? I think there were better options here.
The industry simply is not as smart as Dr Dale Bredesen who reverses Alzheimer's in 9 out of 10 patients.
Link for others: https://basecamp.com/books/rework
The older Lisp folks often have a Prolog integrated in their system...
Also conflicts with Oracle Policy Automation.
Spectre v4 – Speculative Store Bypass (CVE-2018-3639 aka GPZ Variant 4)
Yeah, I've been thinking about closing the comments. I don't get many anyway, but the people who do comment might care that they're gone.

I'll be curious to see whether GDPR results in a web with fewer features, or maybe features that don't work as well. I tried DuckDuckGo, for example, but I dropped it quickly because Google's results are so much better. I actually like that it takes my previous searches into consideration.
Microsoft, Google find fourth variant of Meltdown-Spectre
Looks like the "Hall of Fame" link in the bounty confirmation email is broken / not rendering:

https://www.google.com/about/appsecurity/hall-of-fame/
I cannot see how this is a good thing...
Predictability of success in contemporary songs in and out of the top charts
The fact of manipulation is, itself, morally neutral. When you manipulate someone into something that's against their interests, but serves yours, and that manipulation is done by means of shading (if not worse) the truth somehow, it's pretty unambiguously a negative, in my book.

Unless you somehow think that having a "society" or "economy" is predicated on that kind of manipulation. I actively repudiate that notion, personally.
It's written in Java but embeds prolog as a rules engine for deciding when a change may be submitted.

https://gerrit-review.googlesource.com/Documentation/prolog-...
>but in the end the opportunity cost of having a vehicle is worth it

To add to this point: renting a car not only takes money, but also advance planning. A rental car is not waiting for you to just jump in and go at your home.

I realized I want to see the total solar eclipse 9 hours before it started, and it was an 8 hour drive. Wouldn't do it with a rental.
> Show me how I don't have to choose between value, reference, raw pointer, unique_ptr, shared_ptr, etc, to pass a damn parameter to your function.

This really sounds like your problem isn't with C++, it's with, well, any language that's "low-level" enough to distinguish between values and references.

I grudgingly used C++ for years because at least it was better than C, but since C++11 it's actually been a great experience. Honestly my only complaint about modern C++ development is that the compile times are painfully slow. There are quirks, but overall it's now a wonderfully usable language.

Though obviously you shouldn't bother with C++ if you're working on stuff that could just as easily be written in Python or whatever.
In 2012 Kalman Reti, the last Symbolics hardware and software engineer, mentioned that John C. Mallery (of CL-HTTP fame) acquired the IP from the probate and was thinking about open-sourcing everything. That was a while ago, so I guess the new owner changed his mind or he is too busy with his cybersecurity business. I wonder if there is a way to convince him to do the right thing.
Once I earn the money it is my money and no longer taxpayer money. I fund the union with my money. The union does not receive money apportioned by the government.

Is the landlord I rent from supported by taxpayer money because I’m a public employee that rents from him?
I was in fact thinking of exploit brokers as well, so my wording was unclear. Let's call it the grey/black market.

In the scenario you described, without any other contacts and/or experience with transactions like this, I would approach an exploit broker. As for the payout - I assumed that any RCE vulnerability that qualifies for Google's highest bounty is likely to fetch a higher price elsewhere.

My experience with the field is limited and considering yours, if you are suggesting that this particular exploit would not fetch a significantly higher price, I shall stand corrected.
OP here. I'm a touch typist. Not the fastest, but I can type around 70wpm with ten-finger-system.
Still think the movement between the home-row and the arrow keys is not a big deal, at least in my workflow.
I actually mostly use w and b instead of h and l because it's faster.
I don't know if I missed your point but right now I can export a private key using seahorse, a key manager program, very easily not using its password.
Service Mesh Creator Buoyant Is a 2018 Gartner Cool Vendor
I've been going to meetings for 21 years, and this is utter nonsense.
I'm not sure how this is supposed to be comforting. Judicial bodies have repeatedly come up with different, or even conflicting, interpretations of the same text. Take the US Constitution, for examine. The main text has remained unchanged for over two centuries, and most of its Amendments are at least a century old. Yet the courts are still overriding past interpretations of the same laws.
Yeah, I guess most such things would need a big network effect to be successful.

I don't know which places people go to in Miami anyway, besides the beach ;)
For others like me who are not to keen on the update; I made a quick (and dirty) Chrome extension that reverts it back to the old way; kind of: https://github.com/olssonm/github-dash
They should have just called it (Microsoft) Code. If they can use Word, Access, and Excel as product names, surely they could get away with just calling their world-class editor "Code".

I second your recommendation, I'm a sucker for a sleek editor with a great plugin architecture.
> Google was fined $22.5m for the practice by the US Federal Trade Commission in 2012 and forced to pay $17m to 37 US states.

So it's the consumers who were violated. But were they compensated?
Nearly half of millennials plan to leave a job within two years
Government bonds in Brazil are paying an interest rate of 6.5% per year, which is considered very low by Brazilian standards. Inflation for the past 12 months has been below 3%.
What's an "exploit broker"? Where would you find them? What price would you ask for this vulnerability?
I've never met anyone who uses Magento that actually likes it.
One lived in Iraq and the other lived in Iran. I prefer not to be more specific.
Damn and I downloaded a picture of the 2FA thing. Now you are spooking me about 2FA, maybe I should disable it on my googly accounts.
Well, it depends, if you can keep the rules structured as data and not as code you're fine.
Ok so what happens when boring-library v1.5.1 is released that fixes the breakage, right after the maintainer of cool-framework goes on vacation? Now you have the opposite problem: you can't update to a perfectly compatible version because one of your dependencies can enforce arbitrarily complex constraints on which libraries you can include. Now the problem isn't a simple "oops gotta revert the upgrade until later" which either library can fix, now the issue is that one of your dependencies is blocking all upgrades for (now) no reason.

There are problems either way. I think the other benefits that MVS enables is worth choosing one of these problems over the other.

Edit: As mentioned upthread, vgo supports exclusions for the top-level module. This doesn't directly help here currently, but what if exclusions in dependencies produced a warning of a possible incompatibility instead? I think that would solve the issue of you not knowing that an upgrade could break things.
I think that is stretching the definition of colonization too far.

Using the same logic, Western countries tried to colonize Russia in 1919 and Nazi Germany colonized quite a bit of Europe during WWII.
Other dep managers could at least tell you about the conflict. Maybe that's what vgo needs, a way to specify a conflict bound so that any downstream user is notified if the depgraph has conflicts (ofc conflict bounds would only apply after del resolution as simple checks otherwise it wouldn't be MVS)?
'Confusing Africans'

What? You reaching man.
There are a lot of cultural stereotypes from different African countries, just like how Americans see Germans as 'cold and reserved' and Italians as 'loud and friendly'.
Yes, but I don’t think you find a ton of highly skilled 18 year old software engineers in the US selling RCEs in the black market for $200K, so I’m not sure you find that in Uruguay.
It's not that odd. Section 7 is about the right to form unions and carry out collective bargaining: "Employees shall have the right to self-organization, to form, join, or assist labor organizations, to bargain collectively through representatives of their own choosing, and to engage in other concerted activities for the purpose of collective bargaining or other mutual aid or protection, and shall also have the right to refrain from any or all of such activities except to the extent that such right may be affected by an agreement requiring membership in a labor organization as a condition of employment as authorized in section 8(a)(3) [section 158(a)(3) of this title]."

It would require an awful lot of creative reinterpretation to decide that class action lawsuits are a form of collective bargaining and this section granted some kind of right to them, especially since they didn't exist at the time and wouldn't be invented for several decades.
My registrar allows 9-year renewals at most. I should check, as I renewed my main domain five years ago (four to go!).
go.mod paired with MVS effectively locks versions into place. It must be computed, but it effectively locks all versions into place for reproducible builds.

> It's not a lock and from what I gather from Russ not intended to be.

go.mod files lock versions into place. If you disagree read the code / design documents. I find it dishonest to say something technically true "It's not a lock [file]" and yet not be true, as it together locks versions in place.
I find a light that gradually turns off over 20-30 minutes at bedtime to be nice (though it could just be placebo, for all I know) but seem unaffected by phone-vs-book-vs-kindle lighting types.
They've been doing a lot of adtech related acquisitions (bluekai, moat, crosswise, addthis, datalogix, etc). Magento fits in nicely - lots of data to potentially use/sell/take advantage of.
Get used to it. After 40+ years in this industry, every single 2,3 and 4 letter acronyms are already used by Something else.
Why is just a wikipedia page posted?
Ask HN: Computers and counterculture
I'm interested in learning more about the links between computing and the 'counterculture', both in terms of the social history and in terms of radical thinking about computing's role in society/culture. By 'counterculture' I'm primarily thinking of the late 60s/early 70s hippy movement and maybe the 90s free party scene (seems quite linked to technology, especially in Germany?), but I'm keen to learn about other links.

Some books/thinkers I've come across already are:
- Stewart Brand and the Whole Earth Catalog
- Computer Lib/Dream Machines by Ted Nelson
- Erik Davis' 'Technopagans' essay in Wired
- Jaron Lanier's 'Who Owns the Future'

As well as books I'd be super interested in any links to good mailing list archives, or even first hand accounts, that anyone can share.
Why are you traveling with $10k worth of valuables? Did they steal your personal vehicle?
Fitniks unite!

MPG on the Fit depends on how you drive it. It hits max MPG at about 55MPH, if I recall correctly.

Now in TX you have highways with 85mph speed limit (most are 75), and in CA people drive as if the speed limit was 85 anyway - which is how I end up with the same mileage as what you report.
I believe the open source Swift versions are not supposed to have any check fixes. They are not the ones that are run on Apple OSes and probably never will be. They’re more meant to help Linux and other non Darwin platforms adapt. Which kinda sucks because it means the repos are a little lacking.
The oft bandied around 20 million euro fine is the reason for that particular choice of words. People shutting down their projects without having spent a minimum amount of time on the impact, bloggers worried about having to hire a DPO. I haven't seen this much bullshit since the Y2K days and even then with some work and planning it got taken care of.

People were genuinely surprised when the world didn't end. This is going to be just like that. May 25th the world will continue to turn and none of these bogeyman stories will come to pass with anything approaching fidelity.

Regulators will target the worst excesses to show they mean business and are severely limited in manpower anyway so the vast majority of interaction that has to do with the GDPR will amount to a change in mindset and some best practices. In edge cases things will get a bit more interesting (someone mentioned federated services and that's a really good question).

FWIW I've been looking at companies from the GDPR angle for about a year and a half now, we slowly ratcheted up the push for compliance and it is interesting to see how (EU based) start-ups have adapted to the new legislation. We have also found some companies that were ill prepared but that's to be expected.

The worst position to be in is a small (10...20FTE) company operating in the US running a SaaS that stores critical information. That's an expensive affair. For most other companies - including the really large ones - the impact will be mostly a one-time investment in software and inventory of data and processes. After that they will be in much better shape and that's a good thing.

Companies that make a business of selling data are expected to be hit hard, and rightly so.
Speculative Store Bypass explained: what it is, how it works
Indeed! I was just thinking that this could be a substitute for viewing where I don't want to have to fire up OpenRefine, but for editing, GREL, reconciliation, etc OpenRefine is still king! I've just started playing with reconciliation in OpenRefine via conciliator + Solr. Pretty cool.

https://github.com/codeforkjeff/conciliator
Very nice.

> By calling ServeHTTP on the server, we are testing the entire stack including routing and middleware, etc. You can of course call the handler methods directly if you want to avoid this

What is the trade-off between the two? Does it make the tests significantly slower to test the entire stack rather than just a handler?
You don't find a ton of people of any age anywhere selling serverside RCEs in individual websites for $200k, or $20k, or --- I will go out on a limb here --- $2k.

The $2k limb is shaky because I guess in theory you could buy a GCE RCE for $2k and flip it to Google for their bounty payout, which will probably be at least $3,133.70.
Adobe to Buy Magento Commerce for $1.68B
It seems the problem was, they were banned, so Google no longer considered them a customer. Which is a Kafkaesque nightmare scenario. But the thread (on reddit) was locked and the guy hasn't updated since yesterday. None of the people involved with Google (one guy at reddit said he worked with the GSuite team and would look into it, some guy on here said he was with Google services and is looking into it, etc.) will update out of the risk of losing their jobs. So I'm afraid the only hope we have for an update is if the original guy comes out and gives a play-by-play after this is resolved.
Techdirt is running a Kickstarter campaign for a version of the game that they're developing: https://www.kickstarter.com/projects/mmasnick/cia-collect-it...
But that's would be counter to their interests. They want to hire this kid when he graduates. If they paid 10x their current bounty rates they'd have paid over $400,000 to him in the last couple of years of his free time. That's a great way to never be able to hire him.
> Debuggers could add conditional expressions, but then they'd be re-inventing WRITE statements anyhow.

SWI-Prolog's debugger can be invoked conditionally whenever you want from inside your running application. I've used it many times, and the code is simply:

(Condition -> gtrace ; true)

It's true that you could stick a write there, but you would have to think about what pieces of data you will need. Your mileage may vary. I've found this style a lot more useful than "traditional" debuggers where you set breakpoints beforehand and hope you hit them, as you say.

> As far as the nearby statement that maybe I didn't learn dissection correctly, that may indeed be the case

The point was more specifically that you didn't learn Prolog properly (or at all) and don't realize that it forces you to dissect your code. As I said, in Prolog you cannot nest loops. You cannot nest loops. It's hard to write a big non-dissected piece of code if you cannot nest loops.

> perhaps the real problem is that nobody knows how to TEACH functional/logical programming right

I agree with regards to logic programming. We need better free tutorials. I don't particularly like the linked one, it feels like it doesn't start at a beginner's level. I would be interested if anyone who didn't know any Prolog before has managed to learn Prolog from it.
Reads like parody.
There is no real reason not to be using C99 (or C11) unless you work with targets that only have an "ANSI" compiler. The additions that come with each new standard are either sorely needed (stdint.h, stdatomic.h, etc.) or conservative to a fault (_Generic) so you can't even complain about bloat.

Down with "ANSI" C fetishism.
I don't usually listen to music. Two Steps From Hell isn't bad while coding, though
Scanner: Processing Terabytes of Video on Hundreds of Machines
I can see that. And maybe it was written subconsciously so, but the truth remains that Adobe does have its fingers in that pie, and that people think of Photoshop when they hear "Adobe" and not marketing.
I think technically it is, but they count on the fact that it would cost twice as much to fight them in court than you could ever hope to get back.
Serving Healthy Conversation on Twitter
Oh, I conveniently skipped over that when reading. I'm definitely not claiming it's graceful of even practical.
The fines you mention - 325,000 EUR and 150,000 EUR - seem pretty stiff to me and would kill most small businesses. They aren’t the maximum, but that doesn’t really matter if the fine is a death sentence for your business.

I’m not sure how any of this makes the point you seem to be trying to make that GDPR is lenient.
My experience is the opposite. I don't have to unlearn native patterns. I learn a different pattern, and switch to it. Because I understand grammar and the parts of speech as an adult, at a level beyond simply having copied it from people around me, I can understand foreign, completely different grammar, at an intellectual level.

When I speak (and learn) Japanese, my conscious understanding of Japanese grammar simply makes it easier. The same when I speak French. I don't unlearn anything; I learn different patterns, and I simply switch to them.

In fact, it's what you suggested about programming languages, but for spoken languages. In my experience, adults can learn foreign languages far faster than children can. Maybe it appears that children are better at it because they are completely immersed in the language they need to learn and have no other means of communication. If I spent 16 hours a day immersed in a foreign language, with people trying to communicate with me and no other way of communicating back, I reckon I'd pick it up pretty swiftly.
I think eventually we'll go with the second option, and do stuff to eliminate the scalability issues with many partitions. For example we could maintain a global bloom index (still global, but tiny compared to the sidetable), which should tell us whether there might be a duplicate value. If yes, it might be a false positive, in which case we have to do the expensive per-partition stuff. I'm sure it's going to be more complicated than this in practice, of course ...
It could be the GP is just very slow and was still in 6th grade as a 16 year old :)
Trump Hints at Plan to Create 'Space Force' as Sixth Military Branch