skysight-inc/HackerNews huggingface dataset:
So I think hacker news either did some magic (?) to have it show up in two places at once or someone copied your comment word-for-word. Anyway:

> I'm not sure why you picked that one in particular

No particular reason. They use the same general mechanisms so I lazily chose to only include one.

> Wikipedia mostly disagrees with that claim.

I don't know what to believe on Wikipedia articles about drugs because of the high prevalence of biased medical research. All I know is 1) anecdotally I've experienced benzo withdrawal - it's not pretty and 2) statistically speaking, benzo withdrawal is a common enough phenomenon that much care goes into warning patients of the dangers of benzos and the appropriate usage approaches.

Anyway not tryna persecute you, I just saw this text twice in the thread and felt like it appeared dilletante in addressing benzo usage. Didn't want self-medicating types (like many people on hnews) to screw themselves up.
What’s new in Celery 4.2
> For example, doing some work on a VBA-related tool on a plane was surprisingly productive:

That's interesting! How do you test VBA in the iPad?
Thankfully even the shitty low-end phones I see these days have 8GB ROM
I usually end op recommending people Excel
Healthier people have better attitudes.
Cordova is not Electron for mobile. Calling it that is a fundamental misunderstanding of how both work.

One depends on the OS to provide its built-in Webview/UIWebview. The other packages an entire damn browser with each app.
Show HN: AMP for Shopify finally done right
pNFS in FreeBSD is one developer's toy project. I don't know of any widespread interest or plans for enterprise features.
Great if you like the provider's content. Quite bad if you like any content not owned by one of the few Internet providers, who can't offer such freebies.
As a side topic, is there a useful web search engine that uses a fundamentally different approach to Google, e.g. aren't using backlinks as a ranking signal?

When Google's approach isn't giving me an answer, it'd be nice to try a search that wasn't based on a discoverability feedback loop.
Context:

1. So called "Security" companies (middlebox vendors) advise customers to write what are effectively firewall rules that bake ossification into their systems using, I kid you not, regular expressions

https://www.fidelissecurity.com/threatgeek/2018/02/exposing-...

This type of nonsense is why one of the optional TLS 1.3 features is certificate compression. It seems like a no-brainer to offer this for earlier versions, but it turns out that middleboxes snoop the certificate and make decisions about it so compressing it causes them to freak out. Why can we (hopefully) fix that with an optional extension in TLS 1.3? Because in TLS 1.3 now the certificate is encrypted, so the middleboxes can't see it in the first place.

2. In about 2016 when it originally looked like TLS 1.3 was almost finished, the middlebox vendors finally noticed something was happening and began yelling about how their products had "legitimate" ‡ uses that would be blocked by these improvements and it all needed re-thinking.

Fortunately (or perhaps inevitably) the middlebox vendors have no idea how the IETF works, so they spent a lot of effort on trying to "win votes" which should have anybody who was somehow unaware of this drama but involved with the IETF smiling since there are no votes and you can't win. They also, like typical business people, figured they could fly in to meetings in say, Singapore or London, and spin up at the meeting, but of course those meetings are just a temporary physical incarnation of the IETF, it exists all the time as mailing lists, so if you aren't following those lists you're basically always a kid who wandered into a room where people are having grown-up discussions you can't understand.

3. After a surprisingly long time the middlebox vendors got the hint and went to ETSI to make their own alternative. ETSI is a traditional SDO which is perfectly happy to work on a standard without any messy ethical considerations. It is also, like most traditional SDOs, closed door, so we have only limited visibility of what they're up to. So far it looks like TLS 1.2 (so, bad) but with the ability for an arbitrary number of middleboxes to interact with all the packets on path (so, worse).

It's OK though because under their ETSI proposal the user will "Consent" to this. If you've spent the last month mindlessly clicking through GDPR-inspired boxes on US web sites you regularly visit, or indeed if you're the new hire who has just this moment realised why the big boss decided he needed her with him on this trip, and is now calculating whether to say "No" and risk losing everything or to close her eyes and pretend this is happening to somebody else you have a very good idea what "Consent" means in this context.

‡ "Legitimate" is a word you use when it's important for people to accept that what you're doing is OK, without them thinking about what you were actually doing because they might throw up. "Bribe officials to ignore flagrant safety violations" makes you angry but "Legitimate facilitation payment" sounds very respectable.
Because it sucked ass and there was new frontier that likely was livable... The latter doesn't apply to space.
VSCode's success is due to the team that builds it using Electron as a tool, not as a crutch.
Ravi never actually got around to committing that NVDIMM work :-(.
The search problem is connected to the spam filtering problem which is an ever advancing arms race - it's never solved and depends on the new schemes spammer come up with. So search itself is never a solved problem.
This is likely welcome news to some people who struggle with mobile page-speed and Shopify (a platform not exactly known for its speed).

It's now possible to have highly customizable AMP e-commerce pages by simply installing a Shopify plugin. And this one really beefs everything up where the others fell short.

We've done a ton of work to make the AMPs as customizable as possible - letting you use iframes, youtube embeds, images, and even keeping a lot of the same styling that it automatically reads from your page.

The app converts products into AMP with proper JSON-LD structured data, and we have integrated with 3 third-party reviews apps so that you can easily put product reviews on your AMP pages (even better SEO).

If you have a Shopify store, we think it is a must-have. Sure, we're biased, but we also own a shop and the SEO benefit has been startling.

https://shopsheriff.com/amp

I'm happy to answer any questions. We're currently offering this as a free service (and free in the future to anyone who installs it now).

What do you guys think about AMP for e-commerce? Do you guys have any suggestions for features that are a must-have when it comes to AMP and Shopify?

Cheers guys
Perhaps people who have a good attitude about old age are more likely to have had the experience of healthy parents and grandparents and thus are more likely to have genes that lead to a long healthspan.
لوفوتن جزایری با چشم انداز های جادویی در نروژ
I kind of disagree, the argument back then (6 years ago) was that the rendering was slow. That argument has not been revisited since. And new ones were made along the way. IMHO, Facebook was just looking for developers mindshare. If the core of your app is bloated, speeding up rendering is pretty moot.

I'd love to see the argument revisited today.
I've confronted my PhD supervisor (Professor of Library and Information Science) with this statement once, and she almost went berserk. Her take is that free text search is approaching the solved problem stage, but almost all other search isn't.
I wouldn't read too much into it. It's not like he did a study. There are plenty of modern day white knights who will happily proclaim women to be the better sex and we don't give them any credence.
Juice has a ton of sugar. You don’t normally eat 5-8 oranges, but you can drink that very easily.
Some of your points remind me of Flutter.
>7. I saw that the only group of people able to preserve a minimum of humanity in conditions of starvation and abuse were the religious believers, the sectarians (almost all of them), and most priests.

This, to me is the point of religion. We need religion when things are hard and unpredictable. In a world where most things are certain and predictable, religion has no value.
"Do not fall for the romantic tales of psychonauts to reach some kind of enlightenment. All these people suffer from psychosis."

Nothing like a blanket statement in your first sentence to immediately discredit your argument.

"All black people... All psychonauts... All Americans..." When you look at it yourself... doesn't it sound stupid to try to argue this way?

There are now hundreds of studies showing numerous benefits to psychedelics, from anxiety, depression, OCD, anxiety, Autism, etc.

What more evidence and data do you need?
I remember finding the base element very useful back in the days of hand writing the HTML of my Geocities page, what with its ridiculously long base URL.
Yup, good clarifications.

As you say, "fallback retries" are bad. But that is what browsers did, some years ago, when tls1.2 was less common ... and they added the TLS_FALLBACK_SCSV "not-a-cipher-suite" to try to detect attacker-caused downgrades in a dumb-server-compatible way ...
Flutter is closer, but it is too focused on being a framework. I'm thinking of a platform agnostic protocol with implementations in whatever language you like. Flutter is too many of things at once. If they basically ripped out each native platform's implementation and made it target the protocol I've described, then made their OOP framework target that protocol, then had the two interface using the protocol, that's what I'd like to see. That way you could write React Native on top of that new "Flutter Native Core".
Sounds cool, but I'm missing something basic.

1. I update some data on my desktop.

2. I shut down my desktop.

3. I power on my laptop.

How and when does my laptop get the updates made on the desktop?

(edit1) One idea for a solution is asking peers for help: my data gets encrypted and seeded to many peers, so it is always available somewhere.

(edit2) While I like the "own your data" aspect of this, I dislike the "everything in a browser" aspect. At what point is this easier as just a native program?
Google is limiting Chrome extension installation to the Chrome Web Store
I know. Isn't ETC's most prominent miner suspected to be connected to the theft that spawned the coin's creation?
The tensor cores are simply matrix multiplication + accumulation. They don't need to be used purely for deep learning.
Research has been conducted since 1950 (With a gap period of a few decades). It's pretty clear it works effectively, there are several meta analysis' done on modern and historical studies.

I agree that many normal things help even simpler, such as good sleep, exercise, good diet, meaning work, connection to community/society/family, etc.

You are absolutely correct that there is no panacea.
Origin of the Zen of Python
Feature Engineering: Selecting relevant features for useful pattern
Snails’ Teeth Beats Spider Silk as Nature’s Strongest Material
Blocklist subscriptions arrived in Little Snitch 4.1
Uber developing technology that would tell if you're drunk
What’s the big O of starting a pool? It’s around 1 either way right?

Presumably the work processing time overwhelms the IPC time.
I was the 7th hire at a YC start-up which is now worth at least $1bn. I negotiated 2% of the stock in exchange for a 60% discount in salary, and an understanding that my work would primarily be evangelism/marketing, as I was burned out on engineering and just didn't want to be a sysadmin/devops/whatever anymore.

Anyways, I signed our two biggest customers, organized our tradeshows, did some tech work, and protected one of our employees from assault at a conference.

When I'd been there for 3 months, in the midst of a conference (where we were kicking butt, by the way), most of AWS went down and we scrambled to figure out what to do.

When I got back from the conference I was fired without severance. After I let them know I'd be speaking to the customers I'd signed, and that three of the engineers in their hiring pipeline were friends of mine, they came back with a "generous" offer of 2 weeks severance.

The funny thing, is they were really nice kids, and I do mean kids, they were children. I'm quite sure they used this as an opportunity to get rid of me because Paul or some other greedmonger at YC ordered them to screw me over so that they could sell more stock to investors later.

After that point, it hasn't mattered if I work for a start-up or a big company. YC taught me that all companies are the same, and now I just view myself as a mercenary.

It doesn't matter where you work, how much they lie to you about "culture" and "family", or how much they try to convince you that you should take a salary discount because "your stock will be yuuuuuuge and we're changing the world", or "this is a greenfield environment with a chance to do something entirely new" (it isn't. all start-ups are really just rip-offs of other start-ups. )

Your main response to every sales pitch they give you should be, "fck you, pay me".

Repeat it, memorize it, live by it. Fck you, pay me.

"This kinda shit happens all the time. You gotta get yours, but fool I gotta get mine" -- Snoop Dogg.
> we ... as in humanity as a whole, don't have enough to do.

We have masses of people dying in poverty, of diseases and causes that a minority of us can ignore. We have water shortages in multiple major cities in the world, we are causing extinction of many species, and we are harvesting all the resources in the planet we can get our hands on with no real attempts to ensure that life can continue .

We have plenty to do
Not if your backend is Node! :)
Perhaps it does, if you remember that rape is not necessarily about sex, but about violence and power.
We are still in the stone age when it comes to search.

Ask Google who played the mens semifinals of Wimbeldon three years ago and Google will tell you it indexed 6 million pages to provide a link that may or may not have the 4 names I am looking for. Why is it doing all this pointless work? And why is it that dumb in 2018?

We have got so used to what it does that lot of people have stopped asking questions about how it does things and wether all the stuff it does is required.

Wolframalpha, Freebase/SemanticWeb/Wikidata/dbpedia approaches, NLP/NLU are still very underdeveloped and untapped.

Having open and distributed indexes like we see in nature with DNA is also totally unexplored because of Google type centralised index monopolies in various domains. It just takes a Gig or so to store a local offline index off all Wikipedia or Stackoverflow pages. And given the massive RAM and hard disks everyone has these days why aren't we seeing sophisticated local offline search apps?

The internet is getting exponentially more noisy day by day and in many ways its easier to find quality info going through a top notch library's index than wading through Google's. So there are lots of blindspots and areas to explore in search right now imho.
Correlation =/= causation. Can't be said often enough.
New ideas for a Blockchain Technology startup with raising money
Honestly the list would be even more cringy if IOTA was there. The codebase is so terrible, the wallet management so cumbersome, and it has so many security concerns that I can't even understand how any company would push for that other than fad of riding the blockchain train.

Plus the IRI is written in Java, that's totally rock the socks off the IoT world, right?
Processes might be more expensive but they do have advantages.

If you do use a lot of CPU time, spawning a process instead of a thread might not have any noticeable impact at all.

Additionally, IPC isolates the process, meaning it can be more resistant to hostile takeover (if you drop privs correctly) and additionally you avoid any and all shared state that could possible result in unforeseen bugs.
Top Websites for Crypto, Bitcoin, and ICO News, Research, and Analysis
Turn Sublime Text 3 into a JavaScript IDE
I tend to think the search is often the last resort and indicative of the other navigation system being broken. When people can reach the info they need in a more organized way quickly, they'd probably do so. Therefore full text search has to cover every residual task; it's bound to be messy.
Q: Why is WEP protocol vulnerable to attacks?

Aristo is not sure about this one...
Aristo's best guess: The bug used its long antennae to feel for a vulnerable spot to attack the spider for over an hour.

Confidence: 5.33%
> There was a huge bubble in December that clearly couldn't continue forever

Which is why I mention the continuous month-on-month declines. January trading lower than December is expected. But February lower than January? March than February? April than March? That trend line implies more than just a bubble popping.
And the re-education camps in China.
https://www.nytimes.com/2018/05/15/opinion/china-re-educatio...
Ask HN: Would you partner with a development shop to build your startup?
Full disclosure: I'm running a software development shop. I don't want this text to look like a self promotion, so I will not put here any specific information about the company. Just my questions and answers to your questions, if you have any. My goal is to figure out how I can build a dev shop specifically for startup founders.

1. On which conditions would you consider to use a software development company as long term partner for your startup development?

2. What should this company accomplish in order to prove that it worthy to rely on?

3. Would you prefer to share equity in order to ensure that software development shop is interested in your startup success, not just code writing? Or there are better ways to prove that dev shop goals align with yours?

Thank you for your time!
Let me chime in with my perspective.

(TL;DR : I can see the use for the lazy or otherwise-occupied developer who already knows vue and needs to dabble in mobile dev)

I'm the CTO of a start-up whose core product is a set of APIs. We have a little bit of front-end we had to build in a hurry for a "special" customer (as in, special enough to not know how to interface with an API). We used vue.js because frankly that's the framework the dev with the most front experience was comfortable with. So we're starting to get up to speed on vue.js, which honestly is a pretty good framework. But let me emphasize once again that building customer-facing front-ends is not our business.

I dread the day when we bring in another "extra special" customer who absolutely needs an app to use our products... vue-native, if it's robust and stable enough, might just be a quick way to build such an app without having to learn an entire stack (on another platform, no less) for a quick one-off.
Like in almost any functionality of a computer or programming language, it helps to understand them, being aware of the risks and knowing alternative approaches.

Threads can be a bad idea but if you keep in mind what variables you use and guard shared memory, it's fine. Sometimes you might prefer a process instead for security/resistance.
> it's not legal to offer this investment opportunity to non-millionaires right now

Bitcoin futures are legal. The principal issue ETF sponsors are running into is constructing an index. The SEC isn't thrilled with indices referencing trades on e.g. Bitfinex.
[video] How to create a command line tool in Node.js with real world usage
that's what the operator| at the end is for
Auto Scaling Dockerized RabbitMQ on ElasticBeanstalk
Netflix's TLS support is an extremely limited hack that suits their performance needs. It does not support initial session negotiation or rekeying. They do the former in userspace before handing off a symmetric key to the kernel, and drop connections in the latter case, relying on the client to reconnect. There's no chance it will be merged to FreeBSD; it's not a general solution.

As long as we're talking about TLS and IPSec, though, I'd point to Wireguard as maybe something viable for kernel use.
Show HN: An app to cherry pick text from the real world
It's not constantly churning and it has matured over many years. Those are genuine benefits.

I am not a fuddy duddy holding onto old memories, I am a long term web developer watching people try to shoehorn the churning spaghetti mess of dependencies and tooling that is the javascript ecosystem back into native platforms that have dedicated clean frameworks already.

It has gotten better of course, but the only reason we have so much engineering capital in Javascript is because it runs everywhere on the web. If everyone using typescript and ES6 transpilers could have just used a better language 10 years ago they would have.

It seems backwards to go from web tech to native, because native has always had numerous advantages as a platform over the web. Everything we have in the javascript ecosystem is just us saying "man I wish we could do this thing the non-web platforms can do already"
If anything, it's an abandoned problem. A lot of companies bought really expensive enterprise search systems, which are sitting dormant because the results are so bad.

With advances in spamming, internet/email search is getting to be a harder problem every year.

I remember when Google was quite effective in finding what I need, but nowadays it's dismal. As an example, I googled for "storename return policy", and got page after page of results. All of them were tagged "missing storename", so just randomly picked return policies from other stores.

Search is their bread and butter, and they're probably keenly aware of the diminishing quality of results. I'd love to hear what's caused the recent trend for results that are missing a few of the most crucial keywords. Probably over-enthusiastically trying to filter out keyword farms.
It seems the AI does not understand "security" at all,

Which security protocol is superior?

(A) WEP
(B) WPA

Aristo's Answer: (A) WEP

Justification Sentence: Recently, researchers at the University of California, Berkeley, published a document identifying "security flaws in the 802.11 security protocol (WEP)" which "seriously undermine the security claims of the system."

Knowledge Used: [ security protocols | were created | to address the problems with WEP ] [ security protocols | to address | the problems with WEP ] [ WEP | provides | a level of security ]

Which encryption algorithm is more secure?

(A) DES
(B) AES

Aristo's best guess: (A) DES
Justification Sentence: DES is a well-known encryption algorithm which is reputed to be very secure.

------------------

Q: What is the most secure wireless security protocol?

(A) WEP
(B) WPA-TKIP
(C) WPA-CCMP
(D) WPA2-CCMP

Aristo is not sure about this one...

Aristo's best guess: (A) WEP Confidence: 39.10%

as computed from these reasoners:

Information Retrieval: 8.87%
Justification Sentence: It is used in popular protocols like Secure Sockets Layer (SSL) (to protect Internet traffic) and WEP (to secure wireless networks).

Topic Matching: 97.66% More Info
Topic: equivalent

Tuple Reasoning: 51.67% More Info
Knowledge Used: [ WEP | provides | a level of security ] [ WEP | has been criticized | by security experts ] [ WEP | protected | wireless network ]

Ohhhhhh, no. First, the data looks a bit old, still mentions "SSL" and "WEP". Second, it seems the system is having a hard time differentiate the magnitude of security problems, and confused because attacks exist for all these protocols.

Tuple Reasoning: 8.86% More Info

Knowledge Used: [ the WPA protocol | had only supported | inadequate security ] [ most wireless networks | are protected | by the WPA security protocol ]
Getting DOOM to run macOS was straight forward. Lacks sound though: https://github.com/a3f/doom
Where to Open a Business Bank Account in Europe as a Crypto Startup?