skysight-inc/HackerNews huggingface dataset:
Us are us. Whom are enemy.
Also it seems to have been decided that you have to use SCTP-in-UDP (RFC 6951) in order to get though firewalls, which is only implemented in FreeBSD so far, so an implementation will include a userspace SCTP library even if the operating system has it in the kernel as well.
It's pretty hard to get strdup wrong.
When your messaging protocol is Turing complete you have no hope of a secure web server.
About the international post service... isn't Amazon somehow going that way?
graphql does not provide for more complex queries than a regular RPC, the API designers decides specifically what they want to provide at each level.

What they do is coalesce all those separate queries into one, and actually allow for sub-query optimisations if you feel like it.

So the answer is that it does not, any more than e.g. grpc does not.
Ask HN: Video site framework
(Noob Question) What is the ideal framework,
stack, language, algorithm or method to build a video site.

Something like a self hosted YouTube or Vimeo clone with minimal features.

Should I learn how to build a cms first or is there a simpler and elegant way to implement this without reinventing the wheel.
As i show in another reply below, it is only GNOME/GTK that does Cancel/OK, while every other environment and toolkit does OK/Cancel - this includes KDE, Tk, Motif, FLTK and even some classic X11 apps like `bitmap` use OK/Cancel. This is also the case with console-based UIs, like dialog, picotui and free vision which all use OK/Cancel. So GNOME/GTK is really the odd one out going against what everyone else is doing. It is also interesting to note that this was changed in GTK2 days since GTK1 does also use OK/Cancel: http://pike.lysator.liu.se/generated/manual/images/predef.GT...
I was hoping that it just pulled the weeds up.
Better:

Delete xyz.jpg?
--------------------------
The file 'xyz.jpg' will be
permanently deleted.
--------------------------
[ Delete xyz.jpg ]
[ Keep xyz.jpg ]

Action buttons sometimes need to be single verbs for the sake of brevity. A verb-noun pair is much more legible than a standalone verb. Self-explanatory buttons are usually preferable to buttons that depend on explanatory text.
How can I demonstrate knowledge of CS in my resume?
Except that macbooks have gotten worse (and pricier) :/
My 2016 base pro model overheats and some keys literally fell out while I was typing. Sometime when I open the lid, I see the apple logo, which means it's rebooted.
C is a dangerous beast, but with good practices it isn't that dangerous. Of course you have to be extra careful when dealing with user content, like JSON payload, but many decoders in other languages are written in C.

It isn't hard to build tools like Valgrind and AFL into your C workflow. I would take that over simply taking for granted that a higher-level language was secure just because it is interpreted. After all it's probably C under the hood anyway.
Are you sure you want to be unarmed in front of enemy just because someone else may use your weapons unresponsively?

Look at Ukraine then. Ukraine exchanged their nuclear arsenal for promises of safety by Russia, Britain, and USA. Is Ukraine safe place now?
Maybe the original idea behind IH was to provide success stories to learn from. It seems to have evolved though.

To me, IH is a community of people going through the same struggle. Some are just starting, some are in the thick of it, and some have made it to the other side. All of which have their own role in a community.

I see a lot of blind leading the blind comments, but I don't think it's about leading and following. It's about doing something together with people doing something similar.

For that reason, I still find value from IH.
A good design centers the touchpad on the alphanumeric part of the keyboard, example: http://xahlee.info/kbd/i/Dell_Inspiron_laptop_keyboard_2014-...
Which panel do you have? The reviews I've seen all claim 60-70% of sRGB. Maybe the QHD screen has wider color range.
I find the site a little tongue-in-cheek, but I genuinely like the ideas behind it. I honest-to-$DEITY prefer programming in C to any sort of Javascript. C is kinda hellish for large, complex projects, which is good. The world needs fewer large and complex websites. OpenBSD also provides very good security features that mitigate the inherent security challenges of writing C. pledge(2) is just a very good idea.

I generally think websites should do their processing in the backend, whenever possible. Running code to generate the website should not be the user's problem. This also comes with the advantage of not being constrained to *Script languages. C is alright, but if you're of the defeatist camp who thinks writing C safely is impossible, you can adapt the BCHS philosophy just as well to C++, Rust, Go, D, Python, AWK, Common Lisp…
I'm never ever going to buy another ZenBook again.

I got one for my girlfriend and another one for my dad, around the same time one of my dev friends also decided to move to ZenBook from rMBP.

Compared to Macbooks it looks, feels and works cheap (the trackpad, d'oh), but that's not the major issue as almost everything is that way excepting Surafaces/XPSes.

But the real issue here is this: hinges. They're horrible. They break every 2 to 9 months. Their quality is also very easy to test - just open any ZenBook in shop and wobble it. Macbook's screen is as solid as rock, won't move an ich, while ZenBooks one - well, it wobbles. Almost unusable on the bus for example, your screen will shake as hell on even smallest bump or corner. And then the hinges will break and Asus will replace them for you. And the new ones will last a year, if you're lucky. Then it happens again and again and all of sudden you're out of warranty and at this point, after replacing hinges for a few times, you're told that they'd gladly replace them for you - and it costs only around $400, while you paid for your ZenBoook $1000, two years ago. %#$# them.

And I wasn't unlucky, this is considered normal for Asus:

http://www.breadcrumbsguide.com/asus-zenbook-review/
https://www.youtube.com/watch?v=EAP-NwyE4H4
https://www.youtube.com/watch?v=5ju1aCd4iOo

etc.

Terrible, terrible build quality and no respect for consumers, don't even go near them.
> launch any application from the terminal

I am not sure I understand the issue here, but is there some reason that 'open -a "ApplicationName"' does not work for you?

I can think of some things; I haven't tried but the app developer would need to provide an API to handle command-line options. Sometimes I examine an application's Scripting dictionary via the Script Editor or Automator, but in general I am not writing big shell scripts to drive applicaitons.
I'm not a UX person but I notice bank ATMs places OK (Action) button on the right, and Cancel on the left. Recently I encounter an ATM by a new bank which places the button the other way, and feel weird. So my guess is there is no right way or wrong way. Just the way we're used to.
I agree with your point. I'd however like to add to this: "Users should think of themselves as a respectful guest, not an entitled customer".

Lots of landlords that rent places for a living started using AirBnB. I specially experienced this in Poland, where I often had to go to a company-owned building to pick up the keys. There they had an office, reception, etc.

It didn't feel any different from a hotel. One time we complained about an apartment, and they gave us another one that was empty.

So, my point is that the host often sets the mood. If it's a hotel-like structure that even has self check-in, with a company that uses its own website, Booking, AirBnb and whatever else is around to rent rooms, you feel like an entitled customer. If an old woman opens the door to the guest house, you feel like a guest in her house.

I guess AirBnB departed from their original vision of having people sleep in your living room on an air mattress, and it's now used by hospitality companies as another channel to get customers. When that is the case, you definitely feel like acting as a guest at a hotel, since that's what it is although booked via AirBnB.
I love Vue, so much of what it does just feels right.

My one complaint is that Vue components place templating, code and styles in a single file and I'd prefer a directory with three (or more) separate files.
That gives me an idea for my .bashrc:

rm () {
(sleep 30 && \rm "$@") &
}

(Untested, and I'm unlikely to use this.)
The unsafe C in popular language runtimes has hopefully been written or at least reviewed by someone who knew what they were doing, and it presents a relatively controllable interface.

Most people who write code in C are not that good at avoiding memory safety issues. The process is mostly to write some code, run it, then fix it until it doesn't crash immediately anymore.

Have you ever been the first person to run valgrind on a codebase? Lots of uninitialized reads and use-after-free issues will be flagged, because they don't normally crash the program and therefore go undetected without using an additional checker.

It can be fun to watch the error messages flow by, until you realize that now you have to file tickets for all of them. And some people won't even see the problem with those errors that don't crash the program, because potentially exploitable vulnerabilities are not as obviously bad as crashes.
This has been my experience too, and I’ve thought long and hard about how we’ve gotten to hiring practices that rewards 6 week boot campers more that seasoned pros who do outstanding work. I’ve come to the same conclusion, that it’s got to be because of bloated HR. It’s harder for me to pass interviews today vs 5 years ago, despite being less junior and more than capable of doing an A+ job.
Monzo Bank no longer requires any proof of address. They are doing this specifically to address the issue immigrants have with access to banking [0]. They are a fully licensed and regulated UK bank, and have built their entire infrastructure from the ground up (zero legacy mainframe software) [1]

You can mail your debit card to any address you choose, no verification required.

“When you sign up through the Monzo app, we’ll ask you to take a picture of that ID and a short video of yourself. That’s it! You’ll need a UK address where we can send your debit card, and then you’re good to go.”

[0] https://monzo.com/blog/2018/05/29/getting-bank-account-immig...
[1] https://monzo.com/blog/2016/09/19/building-a-modern-bank-bac...
Labor productivity since 1973 has been much lower than in the decades before 1973:

https://qz.com/633080/the-rise-and-fall-of-american-producti...
…You've never seen a man page?
As an "Angular-guy" I can ensure you that with Angular we use also builders, minifiers and even TypeScript compiler. And testing is a separate story with painful moments. Of course, we have much more tools out of the box - we don't have to look for a good router, for example.

But there is no paradise of one magic tool in the web development.
Many of us have observed that the federal government, from time to time, conducts unethical and/or illegal behavior and should not be blindly trusted. We also know they use classification to hide embarrassing or illegal actions.

Leakers are one way we can learn how the sausage is really made, and in most cases that knowledge is in the public interest.
> No, that's not what I meant. I meant that RESTful APIs relate the URL to the data in a way that isn't true in GraphQL APIs.

So 1. you're talking about something completely unrelated to TFA and 2. you're talking nonsense.

> Take reddit, for instance. I can clearly see a username in the url: https://www.reddit.com/user/masklinn

That's a UI component, and an explicit decision of the system's designers.

It, again, has nothing do do with APIs.

Hell, it doesn't even have anything to do with RESTful systems, https://www.reddit.com/lfskfsh8432kdb60 would be just as RESTful.

> The conflation of route and content is frustrating for developing single page apps, but it maps better to my understanding of disk files and folders, thus making the URL more human readable and easier to toggle and change by hand.

Cool, so use that for situations where direct human interactions is expected or convenient, what's the issue?

> If everything was an SPA, you'd have to interact with the data through the frontend

Which you already do, the URL is part of the frontend.

And using SPAs does not preclude providing nice (and user-friendly) URLs e.g. with https://developer.mozilla.org/en-US/docs/Web/API/History
So you PC/windows guys, wasn't having a touchscreen on your laptop the be-all and end-all? Didn't work out? Wasn't gimmicky enough?
You can just chat Monzo in the app and ask for a paper statement. They will mail you one with a official looking stamp on it. Worked fine for me when the idiotic government bureaucracy required I produce such an archaic thing.
CopperheadOS near shut-down over partner dispute
Differentiate between a wreck and a bug. Bugs may be big, common, and expensive, but they don't invalidate the system as a whole. Bugs need fixing, a wreck requires a reimplementation. But seductive as reimplementations may be, they are usually a lot more expensive and difficult than one thought, and at the end they're still going to have bugs.

Wrecks require reimplementation. In politics, as in software development, one should think very carefully indeed before declaring something a wreck.
As a UX Designer with limited coding abilities this looks very interesting. I tried to describe a little feature that we will need to build soon. That was pretty straightforward, but I also felt very limited as there was no way to comment anything in the spec.

But it can be really helpful to think through all the states that the application can be in, something I often neglect. Not sure if I will automatically think through the non-happy paths, but it might help.

With a more fleshed out syntax, I could very well see myself using this. But I don't see myself using the Javascript / prototype part, if I actually to that I could probably just create a prototype in Vue.js, which then also would describe all the states. I would focus on the spec part and make that more powerful.
Xilinx Vivado is not ugly; but resource heavy; so most people stick to tcl scripting.
We (in Ukraine) need to research new weapons because Russians kills us, and USA and Britain forgot(?) about their promises.
> I sometimes browse React projects and look at the import blocks to see if I recognize any of the dependencies; I probably average about ~8%.

This is very true, not just because of the libraries you don't know yet but also because those you do know are continuously evolving. I've been working in the React ecosystem for about 4 years now. I think constantly keeping an eye on the changing ecosystem, and constantly changing the way you do things where it makes sense, just comes with the territory now. You just have to accept it as a way of working, if you're going to enjoy working with React (and JS generally).

Whenever I've locked down dependencies and just got my head down and built stuff for a few months, without fail every time I've looked up I've realised that there are now multiple things in my stack that are 'outdated' and there are some genuinely better ways of doing things (some really are just different and equally good, and it's fine to ignore those) that have evolved and been evaluated and ultimately embraced by the community in parallel in the few short months I've had my head down.

To be honest it's what I love about the JS ecosystem in general - it's an environment of continual improvement and blisteringly fast pace of change.
I'm ~750 hours deep, doing a SeaBlock run. I've never found a game with quite so much depth as Factorio.
Politics is about expanding power of the political elite while using "improving societies" and other Orwellian language to justify it.

Maybe you should be a little more cynical.
Interesting, indeed you would want feedback from users that want to pay for your product, rather than those who just want to take it for a test spin.
I've seen various sites in compliance, mostly smaller companies TBH. It seems to be mostly US companies who seem to be getting it completely wrong (maybe that's biased by the sites I frequent), which has perplexed me a little as it would have been cheaper to just do nothing about it at all.

I'm also wondering if the cookies thing is actually just the other law, but now we're all having to look at the old "we use cookies" notifications in a GDPR light.
> Unemployment is low because people can no longer say no.

Succinctly put. I'd say this was also a reason why, 9 years ago during the big crash, we saw "productivity" measures go up, and continue to rise even after the 'recovery', even with companies working with fewer people. They managed to get the same results out of fewer people (or... close enough results), and those people really couldn't say 'no' because... they'd rather have some job than none at all (or, again, they needed something vs nothing).
I have yet to find a personal project which I am legitimately interested in doing. Time and time again I'll simply start the project, do 30-60 minutes and then never look at it again. The whole process isn't something I find enjoyable unless I'm working with someone else.

A difficult problem I come across in work is something I cannot bare to do in my spare time, and it's rather annoying as I used to really enjoy programming when I didn't know how to do it.
> (Edit: I’m joking. It’s a great game.)

It's a joke, but like all the best jokes it's one with a large grain of truth and exactly why I've held off buying Factorio for now (Frostpunk as well).
You should predict returns or log returns - not the actual price series - because of non-stationarity.

For a good reference, see Hayashi.
Good to hear that the situation is improving drastically! Just a year ago Monzo didn't even offer a current account.
Using tech to identify illegal fishing
We [0] took the same approach since launching (which has been a while now).
We focused on:
1) Outbound calls/emails, and
2) Networks

Rather than relying on the ROI of long term marketing techniques such as content marketing early. Otherwise, it takes too long to learn from your users/iterate on the product.

[0] https://telointerview.com/
Interesting that even the most naive methods still have >50% accuracy. Also interesting that the best method was better able to predict downward moves than upward moves, during a bull market. Any intuitive reason for this?

Is there some reason the study doesn't include the post-December 2017 bear market?
On most rail routes in Austria we have high speed trains and low speed trains on the same routes. When you need to go to a smaller station, you get off at the closest major station and switch to the slow train. It would be awesome if you could just switch directly to the low speed train whenever the high speed train passed it... (Then you don't even need to have shuttles going back and forth)

This would be awesome.
Wow. 1,959 detections out of 10^21 interactions. And they talk about statistical significance. In any other field that is so close to zero you would ignore the results.
I would like to learn those criticisms! I believe I read somewhere that most Scandinavians for example trust their government while they may disagree with individual policies. Are EU states similarly trusted on the whole?
And here's an Oracle blog post about it: https://blogs.oracle.com/poonam/entry/about_g1_garbage_colle...
> there are some obvious things that could be done to greatly improve it [...] it could be so much more

As with much of programming language design and implementation over the last 3+ decades?

below> that could have been mitigated or entirely avoided by surveying best practices

Yes, people who would spend their time working on language designs and implementations, should at least be familiar with the many surveys of best practices. Surveys of repos, type systems, memory layout, parallelism, and so much else. Language choices are intertwined and subtle, and adhocery has enormous downstream costs to the field and to society. The programming language design and implementation wiki exists for that reason. To accessibly distill our collective experience. Not using these resources is negligent - a disregard of our profession's responsibilities to society.

Oh, wait. Our field can't be bothered to create surveys of best practices. Or a wiki. Knowledge is inaccessibly dispersed among balkanized and siloed human communities, assorted academic papers, and scattered code.

Shall we continue to blame pervasive failure on individual language developers and tools? For how many more decades? At what point do we start addressing it as a systemic problem?

:) So I agree with your observation, but suggest the problem extends far beyond package management systems.
Yet, it happens:

https://nvd.nist.gov/vuln/detail/CVE-2017-14064

https://nvd.nist.gov/vuln/detail/CVE-2015-3182

https://nvd.nist.gov/vuln/detail/CVE-2017-13748

etc.
You could just link all four rails to prevent that.
I don’t think any non-gc language is trivial to learn, C also. Manual memory management is hard, and either you learn from the system (C way) or learn it upfront from the language (Rust way), it’s still the same amount of concept you have to digest to write practical software.
Get Free Embroidery Digitizing Software
Back in the 80's or 90's, I used a popular editor (can't remember the name, but it might have been by Borland), that randomised the 'Yes/No/Cancel' buttons if you tried to quit without saving.

Whilst I initially thought it was cool, it quickly wore me out. Often times, if I was in the 'flow' of editing, that tiny fraction of time that it took me to stop and have to actually read the screen (instead of habitually clicking on a position without even reading) was enough to interrupt my thought processes and impact my productivity.

I think it would be like randomly rearranging the clutch/brake/throttle pedals on a manual car every day. Sometimes you just want your tools to stay out of the way and not interrupt you when you are busy. It is far better to have your feet (oh, ok - mouse cursor) fall to the right places without having to think too much, especially if your mind is busy on more important stuff happening.
The two-sided coin of web performance
I'm loving the spirit if not the snark, but it's still odd OpenBSD's httpd (not to be confused with Apache httpd) calls it's CGI gateway "slowcgi" (and kindof derides CGI programming). I mean, it being slow is entirely the fault of the O/S isn't it ?: And using C gets a whole level more challenging with long-running processes and async I/O because of manual memory management. Native CGI programming IMHO is best enjoyed with a reverse cache if you can help it, such as with Apache's mod_cache.
Can you lose your native language?
A screen in a touchpad can be useful because it can help users to understand how to use different features like side scrolling or drag-and-drop. Also it can be used to display some useless information, like time, current keyboard layout or CPU load.

Putting buttons on a touchpad is not the best idea because they would interfere with its normal usage.

And by the way, why nobody makes separate keys for layout switching? It is very inconvenient to have a single key to switch layouts (like Win + Space that is the default for Gnome). It would be much better to have separate physical keys for each language so I can start typing with one of them and never type in the wrong layout.

Seriously, why didn't anyone invented it yet?
The new 100% Open Source Agile platform for FLOSS projects: tuleap.net
I wonder how feasible would be a mainline kernel for Openmoko Neo Freerunner...
Management books in review
079: Microsoft  GitHub, Kubernetes, Ansible, Amazon EKS, Uber's D and More
Node + Express on the Backend, Hyperapp + Bulma + Parcel on the Frontend.
If you are looking for cases which are definitely compatible with your iPad checkout https://identifymyipad.com/ Shameless plug