skysight-inc/HackerNews huggingface dataset:
We don’t know whether they prioritized things. They’re more than rich enough to pay two teams working in parallel, and this may have been faster to fix, given the constraints they set themselves (weight, cost, materials, size, etc)
Should SSL be terminated at a load balancer?
You repeat that "The thing evolves to follow the demands of the market power" but that doesn't make it true. You can probably think of counterexamples, likely a dozen off of the top of your head.
I didn't have time to dig up more studies but I certainly could if I was paid to. My claim is true and all research on this topic has overwhelmingly confirmed my claim on male group behavior in apes, humans included.

In any case I've acted in good faith to contribute positively to the discourse. I haven't antagonized anyone and I've provided relevant new information that might shine new light on the discussion at hand. If anyone isn't meeting the standards of civil discourse, it's you and whoever flagged my comment. You'd think people on HN would be curious about new ideas. Instead all potential positive discourse is shut down due to a single individual's subjective judgment of what is inflammatory, despite it being scientific consensus. It's clear this isn't a space for civil discourse amongst reasonable people.
You did great. Precise, informative, and evocative. Really fun to read.
This feature has been missing since the beginning! The lack of a proper terminal is actually what made me switch to a tiling window manager.
Calling it resolved is worse than doing nothing. If they had done nothing, at least people would know that "If I run npm install now, that's bad". Now they've claimed it is resolved, which tells their users "It's okay to start installing things again" when it isn't safe until an audit has been completed.
I don't know about period dramas, as I'm not really in to that genre, but I am very much in to scifi and there are plenty of great scifi films that aren't on Netflix streaming.

As to how one find them, I have a number of strategies:

First and best is to find people who share your taste and ask them for recommendations.

Second, find other films by the directors and writers who's films you like.

Third, read reviewers, forums, blogs, and magazines that talk about your favorite genre of films.

Fourth, try doing web searches for more than one of your favorite films at a time. If you get lucky, you might find them all on a list of great movies and go from there.

Fifth, there used to be a website called YMDB (if I'm remembering right), which used to let you put in your top 20 films and match you up with others who had similar tastes, and then you could see what other movies they liked. Unfortunately, it's no longer around, and I'm not sure if there are any other services like it these days.

Sixth, find lists of great movies and watch as many of them as possible.

Seventh, go to movie clubs and art house cinema houses and watch what they show or maybe talk to some of the people there and see what they can recommend given your taste in films.

Eighth, read some books on film.

Ninth, listen to directors' commentaries on the movies you like, and read interviews with them. They'll often mention films and directors that influenced them. Watch those.

Tenth, rate all the movies you've seen on dvd.netflix.com and then look at what they recommend based on your ratings.
VS Code? No joke.
Well, do you use open source code?
Off-topic: Imagine discovering the IceCube detector 10,000 years from now, and trying to figure out what it was for.
Google's Closure compiler [1] has been around forever (the Java version, anyway). There used to be a separate linter, but now it's wrapped into the compiler using the flag `--jscomp_warnings=lintChecks`

Given the number of other tools in my workflow that are all JS based (webpack, etc.) I don't use it, but I've heard good things from people who have.

[1] https://developers.google.com/closure/compiler/
> package signing and verification

You're the first person I've seen mention this, which seems like it should be the first and most obvious line of defense against bad stuff like this. +1
How to choose the right analytics platform for your product
Very nice feature - now its even easier for me to break into vim and do something I can't figure out how to do in ST3. ;)

One thing though - whats up with key repeat? It doesn't seem to be working at all .. (macOS, ST3 Build 3176) .. this kind of makes the whole thing unusable for me, personally.

Also its not processing any of my ~/.bash* scripts .. I guess this is by design since its not guaranteed to be a full-featured Term yet?
This is the same process that was done with J2EE and Application Servers, it starts out with a _simple_ standard to have a Java application served with a standard API, and then it grows out of control. You are already seeing it with Itsio and Helm being layered on top. Today you might be able to get the stock Kubernetes up without much assistance, but give it a few years as "features" get added on.
I think the point was that the x-ray 'colors' do not have 1:1 mapping with the colors that our eyes see. So the color is useful to discern different tissues and bones and stuff, but the colors won't look like the colors of those things in real life.

We see in a range of wavelengths 0.4--0.7 um. X-rays have no intersection with our visible range. Therefore the best you can do is define some function that maps x-rays into our color range, but things look very different in x-ray land than they do in color land. For starters, most things would be transparent if you could see x-rays (hence x-ray imaging!).

http://www.columbia.edu/~vjd1/electromag_spectrum.htm
Has there ever been a successful large scale pivot by an American technology company that wasn’t founder led? All of the successful FAANG companies successfully managed transistions led by thier founders. Even though Microsoft’s recent turn around wasn’t founder led, I don’t think the current CEO could have done it without Bill Gates’ support.
Sea slugs, on the outside of the dome? How do we get outside to scrape them off?
> They also censored and cut their movies, which was really annoying

This is a bizarre urban legend that I don't believe has ever been substantiated. Can you do so?
Fireside Chat with Changpeng Zhao (Binance)
I thought eutelic organisms experience mitosis until they reach maturity but that's coming from Wikipedia so ymmv.
Maybe React Native?
Why wait for future?
You can deploy openfaas on kubernetes, i belive there is more serverless projects you can deploy on k8s cluster
The Ethics of Cultural Heritage
All this power and whizbang stuff doesn't impress me... I got a $4,000 MBP for work and it's really full of itself...

Anyone else dying for a fresh mac book air? That's all I need!
As long as they encrypt the stored passwords and you don't use your master password anywhere else, there's not much that can go wrong.
While this is possible, I'm willing to give the NPM team at least a little benefit of the doubt that they actually researched the access logs before they state this:

> We determined that access tokens for approximately 4,500 accounts could have been obtained before we acted to close this vulnerability. However, we have not found evidence that any tokens were actually obtained or used to access any npmjs.com account during this window.[1]

I get that it's possible that other modules could already be infected, but it's also true that other modules could have been similarly infected long before this one.

[1] https://blog.npmjs.org/post/175824896885/incident-report-npm...
Parsing can be "fun", trying to figure out if text is ended with \n, \r, or both.
> The touch bar macbook seems pretty useful itself considering how insanely good its IO is (4 thunderbolt ports!!!)

Can a machine have "insanely good IO" if dongles are required for everything from iPhones to hard drives to memory cards? I could agree that a machine with 4 thunderbolt ports on top of the regular complement of power, USB-A, and SD slots would be insanely great. But I'm living the dongle life and not loving it.
For anyone interested in building or modifying system architectures I also highly recommend this book, although it isn't web-specific (similar to the DDIA recommendation):

Building Evolutionary Architectures https://www.goodreads.com/book/show/36308520-building-evolut...
I use gcc on Open Solaris, so, yes. I'm not an ass to the maintainers, God save their souls.
As an aside, doing

find -exec [...] +

(note + instead of \;) will exec one grep process for as many arguments as possible, instead of one grep process per file.
What did he mean at 1:09:22 (https://youtu.be/R1R2jH4PQEo?t=1h09m22s) when he says "nobody complains about multiplying one fraction by another because it looks reasonable, but it turns out it isn't reasonable at all"?
The NRE would be millions, maybe over $10M and the COGS alone would probably be $1,500 so I don't think the unit economics work.

An ODM model might be a better idea; ASUS is probably willing to design and build a customized ZenBook with your logo for a much lower price than you could do it as a separate company.
Not all of them. And programmers deal with confidential information too.
Ah, I always heard it being called that, but indeed cannot find the term on Google. I mean an open office surrounded by private offices. So you gather in the ‘courtyard’ and then people who want to can sit in their own closed offices surrounding it. I was in a company a while ago that had multiple of those and it was a pleasure.
“Today's hypothetical 18 year old doesn't want $10 million as a nominal amount. He wants 10 million present day dollars worth of value.”

This may or may not be true. OP was referring to a historical document that called out $1M and they remarked that today more like $10M is needed.

For practical purposes I guess it depends on whose hypothetical 18 year old.

If inflation is 2.5% then you need $3M in 2063 to have the purchasing power of $1M now.

Having a million bucks in purchasing power at retirement is pretty good.

So how much do you think an 18 year old wants?

I didn’t mean that taxes don’t matter at all. It depends on what you want to measure.

I was trying to show that it’s possible to end up with $10M after 45 years. I think you’re arguing that taxes will reduce that value and inflation will reduce that value. Yes, of course, so what. Arguing over how much is enough is a bit moot (or at least we should do it in person over drinks so it has some purpose and at least we can get drunk).

For me, $10M in 2063 dollars that is worth $3.3M in 2018 dollars that gets taxed at 40% lump sum or 25% per year or whatever is perfectly suitable for comfort and for angel investing. As far as staggering sums, $15M isn’t staggering in 2018 or 2063 dollars.

And yes, of course earning 5% is a huge differance than 6% over 45 years. So is earning 7%. What’s your point? Do you have a better arbitrary number for an average 45 year return?

I think we have different points and are talking past each other. You may have a more specific need for a certain number. I just want to point out that “being rich” isn’t some elusive, unobtainable outcome.
Maybe I'm just not picky enough but as someone running whatever the current Macbook Pro is as my daily work driver, I haven't had any issues with the Esc key not being physical. I'd love to hear issues that users are having since I haven't really been exposed to the discussion around it.

On a side note, I agree the touchbar is useless on its own but BetterTouchTool + some python scripts has made it a neat feature for me. Personally, I use mine to display our on call roster from Pagerduty + the number of open incidents (if any)

Oh, I should mention I do use neovim somewhat lightly and it works alright.

USB C only can be a pain in the butt too
A German court ruled you can inherit Facebook content like a letter or a diary
I dunno, that doesn't sound like a crazy feature. The purpose of Notepad is many times to look through gigantic log files. When you find the error, you can just select it and then Bing it.
That’s not a benefit to me. Is it reproducible? Keeping desired state under version control is valuable.
Also https://www.razer.com/comparisons/blade and https://consumer.huawei.com/us/tablets/matebook-x-pro/
Since you're here! Is Iridium out of your price range, or does even that have latency/bandwidth issues for the kind of SSH work you're talking about?
npm shrinkwrap could have helped here (at least with the spreading).
That's not true in every case. For instance you need to keep pools fenced in, in most location as they are considered an attractive nuisance and you are liable if children jump into them and drown
TL;DR it’s CT with false colors
If anyone's interested in other unusual (i.e. other than an optical imaging telescope) detectors, have a look at Imaging Atmospheric Cherenkov Telescopes [0]. More details can be found e.g. in [1].

TL;DR: how to detect a very high-energy gamma-ray photon? Either with an orbital observatory (but these have limited size); or let the photon hit upper atmosphere (at a few tens of km), create (together with some atmospheric nucleus) a fast electron-positron pair, which through additional interactions eventually causes a narrow cone of Cherenkov light to shine all the way down to the ground (having ~100 m diameter there), and then gather this light with an array of a few large reflectors. Finally, perform some tricky processing to recover the initial photon's direction and energy.

[1] https://en.wikipedia.org/wiki/IACT
[2] https://arxiv.org/pdf/1510.05675
Anyone who buys a computer with it pre-installed is paying as part of the computer's cost.

Regardless of its price I still won't willing run spyware on my hardware.
You know what could open large files? The editor in Visual FoxPro. Because the devs didn't assume to just load it all in memory and call it a day. No, load the piece you need to display, you can go get more from disk if you need it. Without an install in front of me, I'm pretty sure it was limited to 2Gb, though.
Which they barely did in Phoenix Project toward the end. The first part was building silos to slow the input and reduce work in progress.
For MTP: gvfs-mtp is in the main repos, and pretty much the fullest-featured MTP implementation that exists, which includes all the extensions Android made to it to turn it into a block-oriented file system.

Honestly, MTP is terrible on every OS though. Mac and Windows have it a _lot_ worse for interacting with MTP devices.
Even just PAL and NTSC analog broadcasts would take some work to figure out if the alien ship was using the other one, and those were both developed from a common base of technology (early 20th century Earth).

Enterprise had them working around the universal translator on several encounters, and IMO even just that got old. It makes me glad that most series handwave away those concerns most of the time, and try to make it an interesting plot point when they don't.
Post-Doc in Quantum Computing at QuSoft and CWI, Amsterdam – Quantiki
Emacs shortcuts for beginning and end of line.
Unfortunately that is not possible at this moment. Without going into details: Flex is running on the same cloud infrastructure as Memorystore that it why it is possible to establish networking between them. This is not true for the regular AppEngine.
While it would be nice to be able to run `npm install` fearlessly, how much would it truly help? In almost all cases, the code downloaded from npm will be executed non-sandboxed anyways; that's probably the reason you installed the package after all.
> tokens were invalidated at 2018-07-12 12:30 UTC

I'm reading it as tokens created before 2018-07-12 12:30 UTC were invalidated, but the invalidation itself happened on 2018-07-12 18:42 UTC according to eslint's post-mortem[1]. I think the latter is the more relevant date.

[1] https://eslint.org/blog/2018/07/postmortem-for-malicious-pac...
Missing assingment.
Show HN: Scheme-coin with P2P support
That was not the point I was arguing with. Let me qoute.

>AMD should have just not made TR work in this case

Where "this case" is <4 dimms.
It's not obvious to me that credentials are ephemeral data rather than part of the configuration.
Like gpg the payload and make sure npm has a public key.
I use KeePass and have a local kbdx file for this reason - imo LastPass and the like are a huge target. This does require a lot more work since you have to manage keeping a file in sync on your laptop/phone/device and literally cannot get a password without one of those near you. (I have obscene overkill settings for encryption and key transformations in case I lose a device and someone tries to brute-force).

one thing that is without dispute is that a password manager will not reuse or slightly vary the same password which is what human beings pretty much always do.

also some popular ones have integrations for reissuing credentials for major sites. in theory if there were some huge compromise you change your master key and reissue as many pw automatically as possible. then focus on the ones in the list that you know have your credit card saved or are essential for other reasons (npm credentials). you also literally have a list to go down at the point anyway. what is the alternative scenario if your 'same password everywhere' pw is compromised ... try to remember which websites you use and might be the biggest issue and literally manually change every single one?
> I'm not suggesting that great care shouldn't be taken; I'm suggesting that there's no evidence that it hasn't, and that neither you nor me are particularly important players in the story of what is happening, and that nobody owes us an explanation.

Completely tangential, but the density of negatives in that sentence was nothing short of majestic.
I really wish this notion of "society by survival of the fittest" would die its long-overdue death.

What actually happens, in the real world, in situations like this, is that people suffer and die. They don't become Ayn Rand's ideal man; there's just lots of needless suffering.

And because people are capable of violence, and because people don't like suffering very much, they commit violence against each other to improve their own position -- which increases the suffering.

And then other people, who don't want to suffer and don't want to commit violence, try to leave. And they come to countries like the United States, which they've heard at some point is a great and welcoming land of opportunity, only to discover that it's all a big marketing sham and the majority of the US wants to put up a sign that says, "Go away, we're closed."

Given the number of failing or failed states around the world recently, you have to have your head quite deep in the sand, or maybe far up in some body part, to still subscribe to this idea that anarcho-capitalism is a solution to anything.

There are many complex problems with many governments around the world right now. "Get rid of government" will not make any of it better.
Apple seeds also contain small amounts of Cyanide. A couple seeds won't hurt you, but I heard a story about a guy that roasted them like pumpkin seeds and died after eating a couple handfuls.
Neutrino discovery: high-energy particle came from distant “blazar” galaxy – Vox
"Conclusion: Scheduling threads on a multicore machine is hard."

Kudos to the kernel developers who have tried nearly everything under the sun to make performance of multi-core, multi-task, general-purpose machines satisfy everyone at the same time. Your efforts are not lost on those of us who understand just how difficult that is.
Kind of missing the point, when he/she is simply talking about the day-to-day experience of using the OS.
Zuckerberg LLC Claims Credit for Doubling Number of Girls, Minorities in AP CS
My Windows machine at home is awful. Every time I go to boot it up, I have to wait another 5 minutes for it to… whatever it does, finish windows updates I assume.

I shut it down before a trip to Montreal; two weeks later I came back and it wouldn't boot. No idea why. Had to restore from a previous system snapshot and re-install a bunch of drivers and windows updates.

It's a lot better than it was, but there's still strange, ridiculous stuff that crops up seemingly out of nowhere.
Major League Baseball tickets are going biometric in 2019
Is there a reason to favour an embedded terminal with a fixed viewport + an N-line scroll-back, over one that just uses a text-editing buffer as the moral equivalent of a serial-terminal (where line-editing escape sequences edit the ST buffer) or even as an append-only log (i.e. regular TTY output is output; but escape sequences are ignored)?

This would give you the ability to use any REPL as (something close to) a Jupyter-style notebook. Sure, curses apps wouldn’t work very well... but why are you running curses apps inside an IDE?
The browser extensions can provide a big attack surface. But otherwise, you're right.
> And the escape button on the touchbar is actually not at the same place as it is on other keyboards, which makes me think you've maybe not used one of these new touchbars

Nonzero finger width easily makes up for the difference. You don't have to hit the center of it to register a touch. In fact you don't actually need to touch it at all.

Edit: Video proof
https://streamable.com/ao18b

> which makes me think you've maybe not used one of these new touchbars

You were saying?
Better yet. In AWS I can whitelist a security group
and all ec2 instances with that security group would get access to RDS.

This would be handy with tags in gcp.
Pilots being another good example.

Years ago, I interviewed for a couple of positions with Schlumberger which, at the time, basically went out to oil wells and made various measurements. In a lot of ways, it was essentially a tech job but the reason you had engineers (assisted by techs) was that you had various training and, presumably, other background for when things went sideways.
One further note... The version of Sonatype Nexus that Maven Central is running does not support signing with a subkey, and does not support ECDSA. Unfortunately, the software that needs to be fixed is proprietary.

If someone has a contact at Sonatype, I'd love to talk to them about fixing this.
Much of that early information may not be digitized.
If I understand the npm incident report correctly, the answer is none:

> We determined that access tokens for approximately 4,500 accounts could have been obtained before we acted to close this vulnerability. However, we have not found evidence that any tokens were actually obtained or used to access any npmjs.com account during this window.

Source: https://blog.npmjs.org/post/175824896885/incident-report-npm...
My guess for lack of successor is that he doesn't want to burden someone else. It's probably one of those things like being a head of state where you don't really know what it's like until you've done it yourself. So people that want to be Python maintainer do so because they don't know what they're asking for.
Yep, I used that plugin. I made my file format compatible with his intentionally.
First clue to a world beyond quantum theory
Even on a good console I put a # at the start of the line before editing or typing it in case I accidentally hit Enter too soon.

And never ever paste commands without first trying it into a trash terminal or editor.
Register allocation using graph coloring
> Who knows how you explain to your grandma over the phone how to add some IP address to her hosts file so she can see your development site.

If you need your gradma to edit her host file, you are doing something wrong.

Get a $3.99 domain during development, and point it to the IP you need. Problem solved.