skysight-inc/HackerNews huggingface dataset:
I've stopped taking buses and trams at night for this exact reason.

Trains seem to be mostly OK, maybe because they're bigger I can just avoid them. But I've felt seriously unsafe on trams and buses before at night, and I don't scare easily. There's nothing quite so unsettling as a junkie having a psychotic episode in the back of the bus. You don't want to look at them in case they engage you, but you want to keep your eyes on them in case they feel like jabbing you.
Why do site owners use Google CAPTCHA?

Because it's free, reasonably hard to beat by bots and reasonably low-effort for the user if they let Google track them (enabling the single-checkbox captcha).
Well, at least in the European waters fish are recovering beyond expectation.
Players usually wear their own shoes, so I doubt they have sensors.
The paranoid minds here are too much. Consider the likelihoods of each explanation. Elon Musk didn’t get to where he is now by orchestrating bizarre excuses.
That's a reasonable stance, but consider:

1. If the rider isn't sensitive about when they leave home, then they can happily wait until a driver who happens to have dropped someone off nearby is willing to take them for $7, because they don't need to drive more than 1 minute for the pickup.

2. Lease/finance, insurance, rent and food don't go up with the number of rides or distance. If a driver has the option to take someone right now, without driving far to pick them up, vs. waiting for a higher rate, then in some cases they'd maximise marginal profit by taking the 'low rate' ride.
I'll generally take a train over Uber if it's less than 10 minutes walk either side. But I'll take an Uber over a bus any day.
Who's really got skin in the game? Perhaps the author who spent countless hours pushing the project along all those years, he took all the risks and uncertainties. Yes, all contributions did help but being a humble contributor I wouldn't ask for any kind of eternal obligation. Otherwise what kind of help is that? If one wants to give, they just give, full stop. Why not stick to free will? Notice the word free.
Check out this nice forum http://mawazo.byethost7.com/
These seem like mistakes one would make if one was using tutorials to build a Rails application for the first or second time ever.
I agree. I'm just passing on some general life advice for interviews I got from Bob. If you're in a position to look around for other opportunities (as "the best and brightest" often are), it helps to see through the market hype. If you're actually in need of the job, do what they ask. I've been in both situations.

IBM often had "hiring freezes", nobody could hire anyone... well, except that I still did some interviews at IBM Research. There were people we would hire under any circumstance. In fact, one of the people I interviewed during a hiring freeze was offered a job and a whole new lab. She really was one of "the best and brightest". (She actually did walk away and went elsewhere.)

Do you really think that Geoff Hinton, Andrew Ng, and Yann LeCun got whiteboarded?
Out of interest what strategies could be implemented to avoid this?

I've worked as a developer for a number of companies who handle sensitive data and I could have fairly easily have pushed malicious code. Even with mandatory code reviews, significantly complicated code with a well placed security hole would likely be missed.
Improving Negotiation Skills: Rules for Master Negotiators
Early stage SaaS Marketing (and why?)
Nothing “made” them behave that way, other than a poor upbringing maybe. Each person is responsible for how they react to each situation.
Lack of experience?
A French grocer fought EU food rules and won
And that's why I love D. I can get fairly small binaries and still use powerful language constructs so that I can focus on the logic and not on the language.
Reading your reply it seems as if you are the person OP was describing.
The Anatomy of a Perfect Blog Post – There Is More to Blogging [Infographic]
Of course it is a bit slower, as Java does not take advantage of UB nor disabling security checks for the ultimate performance.

And depending on the use case there is always the issue of value vs reference types.

But it is good enough for most use cases of typical desktop software, to the point of Oracle's long term roadmap is to rewrite the remaining C++ parts of OpenJDK in Java (Project Metropolis), using a subset they are designing called System Java.

Also can check Android flagship devices (better for performance comparison), since Android 5.0, Java is also AOT compiled to native code. Although Android 7 changes it to a mix of interpreter written in Assembly, JIT and AOT with PGO. And Android P will introduce sharing of PGO metadata across devices via Play Store.
Podlike templates: reusable, templated config to build pods on Docker Swarm
That it would be everywhere was exactly my point; I started listing all the sources of unpredictability in my comment but then I figured that wasn't necessary so I didn't go on that tangent. But yes, threading, floating point, RNGs, cache timing, etc. are all sources of randomness we deal with, but a computer where pretty much /any/ computation has to deal with randomness is a whole new ball game so far as I can tell.
Ask HN: Advice on selecting domain name for my programming blog/website?
I am a software developer and would like to create a blog/website about mean stack JavaScript application, nodejs frameworks tutorials etc.

Inspired by websites

simpleprogrammer.com
cleverprogrammer.com

So would like to build something like that but in my own niche

But Already Spent two day just brainstorming and came up with few domains which are available but not sure which one to choose feeling stuck :(

Here is my list

1. 101node.com/io

2. 101null.com/io

3. 101promise.com/io

4. instaprogrammer.com

5. activeprogrammer.com

6. Meanprogrammer.com

7. meanify.io

Thanks in advance
There is a successor to the Icon language called Unicon. Like Icon, its strength lies in text processing. It incorporates all of Icon's features while adding object-oriented capabilities. It's in active development but completely off the radar of the main programming scene.

The main website could do with a facelift.

https://unicon.sourceforge.io/

It's a shame these languages aren't studied more because they have some unique ideas that we could all learn from.
I agree that the Go compiler doesn't optimize as aggressively, but it's not that simple. I've heard of a rewrite of some legacy code from C++ to Go making the code go faster.

A rewrite often includes a redesign, which can make more of a difference than compiler optimizations.

If they ported back to C++ again, it would probably be faster still. But there are also maintenance concerns to think about.
>What to do?

>Tapplock user? Get and install any and all patches provided. Apparently, the company has now addressed the most obvious web portal holes (guessable account IDs and no HTTPS), but we assume an app update will be needed as well.

Also, stop being a Tapplock user
There is also the case that filling too much between the lines is in danger of driving its own narrative.
> As you know, there are a long list of organizations that want Tesla to die.

Is it correct to use 'are' here instead of 'is'?
People at Tesla are working incredibly hard, they just had a FTE mass layoff and are relying heavily on 'associates'.
This reminds me of the darker days at Zappos with their holocracy business model and all powerful vanity CEO. It's not hard to imagine the disgruntled moving fast and breaking things in frustration
Adventure Games: What's with all the clowns?
The Odyssey
Wouldn’t that „test“ imply that Apple isn‘t doing any kind of marketing/promotions through the 30% cut? At least here in Germany, discounts and boni of 10-15% when buying iTunes gift cards are quite frequent. And these discounts influence at least my app buying behavior. In addition, these discount offers are advertised and so indirectly promote the App Store to millions of people. Developers profit from this in one way or the other.

In your test just cutting the 30% „Apple tax“, the developer would still profit from these discounted gift cards. But it’s not the developer giving the discount from his cut, but Apple from the 30%. Moreover, the 30% covers not only handling and processing App Store Infrastructure and sales, but as well the editorial sections of the App Store promoting news apps daily. There already exist reports on how this editorial content boosts app sales.

So, your test would still take all this for granted and therefore would be highly skewed. The data would not be „statistically significant“ at all.
> ”Incredibly, Tapplock’s back-end system would not only let him open other people’s locks using the official app, but also tell him where to find the locks he could now open!”

Never heard of this product before but what a hilarious read. They seem to fix some of the issues pretty quick. But what a nightmare IoT are. I’m stressed out by not keeping up to date with computer/phone updates (mostly because I wait a bit to ensure programs I use still work). Can’t imagine owning even more products that I have to maintain software updates on...
>If I understand the math correctly, BART claims about 126 million rides (2015) and cost $906M (~$7 a ride, comparable to some uber pool fares)

I think a better comparison than total cost is how much money they are losing. The difference between what I'm paying and what I feel like I'm getting with uber feels like... a lot, and that lines up with everything I've read of their financial situation.

If you are willing to lose substantial money on a per-ride basis, sure, you are going to have a pretty nice transit product.

(Personally, I'd be pretty okay with the government losing some of my tax money on public transit projects... though I think if the government is gonna do it, I want them to lose the money up front on expensive, durable, high-capacity infrastructure, then come closer to breaking even on a marginal ride basis)
Mac user. I use OneNote for 1) active reading. I use it to import articles so I can annotate them. I use skim for PDF files.

For linking & collecting I use DevonThink.

Summarization markdown files using iAWriter. It can handle adding pictures very well. I make heavy use of screenshots.

To collect ideas I use Scapple, it's a fantastic brainstorming tool.

I use Monosnap to take screenshots. I can drag and drop and picture into either tool I mentioned above.

The most important step, however, is the last one. Putting my own thoughts down into a final text (that I hopefully publish somewhere)

There is no single tool. You could use DevonThink for everything I guess.

Having said all this, be careful not to get hung up too much on the tools, they can be a mega distraction (productivity app p*rn). Use what works for your flow and try to produce your own thoughts, which is hard.
No; "a long list" is singular.
It's operated by two for-profit companies, but the government paid the massive bill for the construction, sets the fares and even owns the rolling stock (trains) now:

https://www.straitstimes.com/singapore/transport/government-...

...and of course, this being Singapore, the companies in question (SMRT Corp and SBS Transit) are themselves largely owned by various government entities (Temasek etc).
> Web programmer? Don’t make account IDs easy to guess. In an otherwise secure system, account numbers that go 1,2,3… shouldn’t be a problem, but why make it easy?

Is that the best advice to web programmers they can give based on this story? That's the "obscurity" part in the security by obscurity scheme. If you've got your security otherwise nailed down fine, some obscurity on the top doesn't hurt: security-in-depth, people seem to call that. But use only the obscurity, and only one person has to find out how your scheme works, and it's game over.

I'd, you know, recommend to think about authentication. Your authentication state is not "logged in", it's "logged in as user X". So the code that decides whether a client can see a specific page can and should (!) depend on what specifically you're authenticated as.

Oh, and yes, this company has proved that they don't know the least thing about security. But that was clear already.
There are a finite number of known movies. There are an infinite number of "bad" videos that could be created. It's easy to come up with an automated system to identify the former, orders of magnitude harder to create one to identify the latter.

Not to mention there's also an infinite number of benign videos that could be created, and you need the automated system to correctly identify between all three for most of the time, otherwise one group or another is going to get mad at you.
Frankly, this all seems like quite a lock of fuss over nothing. Firstly, pad locks are generally very easy to just break open with a set of bolt cutters. Particularly, if you look at more secure traditional pad locks practically all of them share physical design features intended at minimizing the amount of the actual shackle that's accessible. So to be clear- the second you see the shape of that padlock you know that it's not designed to be super secure.

With that in mind - which are you more worried about? Something spoofing your Bluetooth pass code using some advanced tech, physically unscrewing the back and deconstructing the padlock, or the third option: chop open the shackle?

What I find amazing is that they thought they advertise this product as more secure than any other padlock with the same mechanism. This padlock is a finger print padlock, maybe people like that convenience, but don't try and pretend physical security isn't a concern.
I'm not sure, but my hunch is either is OK.

Compare:

> There are a hundred organizations that want Tesla to die.

> There is a hundred organizations that want Tesla to die.
I thought this was a blog post about the guy who simply unlocked the padlock using a GoPro mount (https://www.youtube.com/watch?v=RxM55DNS9CE - the video is worth watching from the beginning) but this was more amusing than I was expecting.

Nothing went right in the design of this padlock.
Recent Stanford grads dish life advice for high schoolers
I am fairly certain that the lean methodology of "if you are not embarrassed by your first release, you released too late" may have been a factor.

Being a Kickstarter project, the pressure to meet production deadlines is severe, and any technical debt inherent since the 'quick and dirty' MVP probably stays unpaid.
Thanks, that was much more enjoyable - and better written - than the main article.
> I wasn't trying to be pedantic, I was trying to point out...

I agree!

> but it's easy to do and easy to reason about

I agree it's an obvious/intuitive approach to take, just like OOP. However, from a computational and software maintainability standpoint, I think it rarely pays out.

> How one should best solve the problem depends on the scope of the problem and what you need to do downstream

That's right, however ADTs are very rarely occurring naturally in what I do (I've dabbled in quite a few areas).

I've found them to occur naturally in parsers (because languages have forks in their syntaxes), but even there I've had great gains by avoiding ASTs altogether, and making multiple streams, supported by a ADT stream of simple data that does not contain real data but only "joins" the other ones (it contains only a type-flag and a pointer into one of the other streams).

I think ADTs are the right choice whenever the ordering between a set of things with heterogeneous types is very important. If that's not the case, code can be vastly simplified by sorting the data by their types and processing them as separate bins - separately and independently.
And doing so was not illegal. That's exactly what I'm talking about - platform owners legally putting in place restrictions to control access to their platform, often because that's the primary way in which they make revenue.
Keep the fire inside you bro, you will get there
All you need is burning desire to accumulate anything, no need to feel depressed this happens to most of us and we all struggling to start something of our own

if you're going through hell keep going dont stop!!
you need faith and belive in your dreams to keep moving
They can, will, and have. ContentID came after the Viacom lawsuit.
The reason why C or Rust are fast is primarily the increase data locality. In java, js or python everything is a pointer. Fetching random parts of memory is expensive therefore if you want to keep the CPU fed with data you need continguous data structures. In theory nothing other than data locality stops JS from being faster than C and the proof is webassemby which gets 50% of the performance of native code which is really impressive considering that webassembly runs inside a sandbox that prevents glaring security issues like bufferoverflows on the stack from rewriting the return address.
I don't understand how that's "the real question". It's a Sparpreis. They fluctuate. You can buy a full price ticket that doesn't fluctuate if you want to.
Second one definitely seems wrong to me.
I think you're extrapolating that from my use of the term 'content', but I'm merely referring to whether anyone responds to my occasional posts about my work or life.
I have thousands of connections on Facebook, but when I put up something, I'll get one like, from my dad. The same thing on Instagram, and I would get actual communication with the peer group that I was intending to communicate with.

All I'm trying to is casually keep in touch with my friends and acquaintances. The like/heart/favorite serves as a register that someone read it and/or cared enough to send that signal.
Obviously, not all details are available, but the wording in the email suggests that the parent comment is anything but naive:

> This included making direct code changes to the Tesla Manufacturing Operating System under false usernames and exporting large amounts of highly sensitive Tesla data to unknown third parties.

This sounds like something out of the 1990s, that dark and romantic era of version control when we thought CVS was pretty cool actually and we didn't know what key-based authentication and 2FA were.

There are volunteer-ran projects that don't have this problem.

Edit: to be clear, I presume no one is debating the fact that someone with high enough credentials can push code to production. The questions that the email raises are:

1. Why can anyone, regardless of credentials, push mission-critical code without review (or, alternatively, if the changes did go through review, why did the review process not catch multiple malicious changes?)

2. Why can someone compromise several high-level credentials without anyone figuring it out (the changes were made, apparently, under "false usernames")?
*lose

Who am I kidding, I simply gave up on getting people to know the difference between "loose" and "lose".
They should have paid for code audits, penetration testing, and the whole nine yards before putting anything in a customer's hand. The whole point of this company is based around a physical security device with online controls, to not do any of that is a downright folly in my opinion.
Are you stuck in a “bullshit job”?
I don’t know, so their children and grandchildren will have fish to catch and live off of?
"There will always be a small handful of engineers that can push the button to move code into PROD"

I have very different experiences from a SEC regulated company. With SOX there are controls to prevent such a thing to happen. If this is a SOX breakage, Tesla is in deep trouble with the SEC.
I think its a general cultural disdain for the environment within some cultures.

Most of the world's plastic pollution coming out of 10 Asian and African rivers for example.

This is why arguments from educated, intelligent and responsible Westerners that they themselves shouldn't have children in order to reduce the impact on the planet are flawed.

If not for their children with the same skills and views, who else will reign in the Asians and Africans who are busy destroying their environments?

The first thing that the world needs is for all countries to reach a stable population level. This means hugely reducing fertility in some developing countries, mostly by making sure contraception is widely available and that women are educated enough to know how to use it.
To me this sounds like a major violation of SOX controls. If this is the case Tesla is in deep trouble with the SEC.
You with your hobbies and your existing social life are not missing out.

I with my hobbies (Swing dancing) would dearly miss out. That's why I'm still evaluating whether it's feasible to delete my account, by getting other sources for events. So far, only very limited success.
The article recommends:
> Don’t allow plain HTTP any more. Make sure your servers insist upon HTTPS connections, and update your client software to use HTTPS exclusively.

Does this mean I should turn off HTTP completely? Right now, I redirect any incoming HTTP requests to HTTPS. Is this considered insecure?
Category Theory: What is a Natural Transformation?
Thanks for your post and report; it made me think that my voice could actually make a difference and I just called, using the Mozilla tool! I got to speak with an actual person and in my native language. The guy seemed to know what's their stance and not to will discussing it, but he for sure mentioned taking note that they got some 6000 emails and also many phones. Anyway, I'm super happy I phoned, I talked with a real person, and the Mozilla website was super easy to use :)
Ask HN: Which programming jobs / tasks / projects excite you the most?
I am currently a graduating Computer Science student and to me many of the different fields seem so interesting, that I don't know which direction to go (at least at first).

Which types of work excite you the most in the different fields and why? The types of work performed in fields as embedded systems, (web) servers, algorithms / performance, AI etc.
Are you trying to say that if you buy a fishing boat with money you borrowedfrom Warren Buffett, then dynamiting the fish is understandable, but if you borrow from the ABC Pension Fund it's not?
Please don't break the site guidelines by bringing extraneous flamebait into an already divisive thread.

https://news.ycombinator.com/newsguidelines.html

Edit: looks like we've had to warn you about this repeatedly in the past. Eventually we ban accounts that won't stop doing it, so will you please stop?
An average US citizen contributes far more to pollution than the average African or Asian.
WooCommerce vs Shopify: Which E-Commerce Platform to Choose
>seems like overkill

Welcome to modern js development.
Your arrogance is breath-taking.

Will you only decide which hobbies I may have, or do I have to submit planned meals and TV watching for your approval, as well?

"Just stop being part", my ass...
Most locks are in public places so the threat from a way that doesn’t draw suspicion is much higher than one that requires you to carry a huge set of bolt cutters in to do the job.

Also with bolt cutters that leaves a mark. With a high tech back it doesn’t (unless they record and you actively look at unlock attempts). Which means that to find out if your lock has been hacked you’ll likely have to physically go there, open it up, and then look inside to see if anything is missing.
Link to part 1: http://www.r2d3.us/visual-intro-to-machine-learning-part-1/
What it’s like to watch an IBM AI successfully debate humans
If someone chops open your padlock you find out about it next time you see it.

The vulnerabilities in the article might go unnoticed, so the user keeps locking gates, chains, whatever with the bad lock and the crooks can come again and again and rifle through your shed, garage, whatever.

It is absolutely worse than a chopped padlock.
Using HTTP to redirect to HTTPS is fine, but you should augment it with HSTS (to instruct browsers to always go to HTTPS) and HSTS preload (to let browsers know to go for HTTPS even before they visit your site the first time).