skysight-inc/HackerNews huggingface dataset:
See Bazel, you have the depes manifested as source controlled the data, then you can build everything as deterministically as possible.

Then you can manage dependency as part of the normal source control process.
If you store it in a long-term storage solution that makes sense (cold storage), it would not be "gone" because this wouldn't have happened.
I've had to dispose of a Commodore 64 because the SID was dead, since it's pointless without the sound. This is potentially quite useful.
I'm using KMail here and works fine, this might help https://www.kernel.org/doc/html/v4.17/process/email-clients....
> Without context, that is not a helpful statement.

On the contrary, it started a discussion.

> For starters, a 60 day fast will lead to a very large loss of weight

Approximately 80 lbs in my case.

I started the fast at 37% bodyfat, according to my somewhat reliable Omron scale which uses Bioelectrical Impedance to measure body fat.

> so unless the faster is exceedingly above the ideal weight at the start, it sounds dangerous.

From my experience, fasting is the opposite of dangerous.

If you're a healthy adult, you can easily fast for 7 days. But yes, you do need the fat stores, though I'm counting that 7 days of fat stores as implicit in 'healthy adult'.
Fraudrepreneur
I used to use Zotero and Mendeley, but recently switched to Paperpile and haven't looked back. It's a Chrome plugin, and saves all your papers to Google Drive. It has a really nice cite-while-you-write extension for Google Docs that really makes it worth it.
This is exactly the reason why we went away from appengine flex to AWS Beanstalk. As much as a google fan I am, this is unacceptably high and there seem to be no interest by Google to reduce this. Beanstalk isn't that great either but better than appengine flex when it comes to the deployment wait times.
Exactly this. Or at least it's a way this can be achieved, assuming solid testing & some tooling in the mix.

For folks unfamiliar with it, the issue is something like:

1. You find a bug in a library A.

2. Libraries B, C and D depend on A.

3. B, C and D in turn are used by various applications.

How do you fix a bug in A? Well, "normal" workflow would be something like: fix the bug in A, submit a PR, wait for a CI build, get the PR signed off, merge, wait for another CI build, cut a release of A. Bump versions in B, C and D, submit PRs, get them signed off, CI builds, cut a release of each. Now find all users of B, C and D, submit PRs, get them signed off, CI builds, cut more releases ...

Now imagine the same problem where dependency chains are a lot more than three levels deep. Then throw in a rat's nest of interdependencies so it's not some nice clean tree but some sprawling graph. Hundreds/thousands of repos owned by dozens/hundreds of teams.

See where this is going? A small change can take hours and hours just to make a fix. Remember this pain applies to every change you might need to make in any shared dependency. Bug fixes become a headache. Large-scale refactors are right out. Every project pays for earlier bad decisions. And all this ignores version incompatibilities because folks don't stay on the latest & greatest versions of things. Productivity grinds to a halt.

It's easy to think "oh, well that's just bad engineering", but there's more to it than that I think. It seems like most companies die young/small/simple & existing dependency management tooling doesn't really lend itself well to fast-paced internal change at scale.

So having run into this problem, folks like Google, Twitter, etc. use monorepos to help address some of this. Folks like Netflix stuck it out with the multi-repo thing, but lean on tooling [0] to automate some of the version bumping silliness. I think most companies that hit this problem just give up on sharing any meaningful amount of code & build silos at the organizational/process level. Each approach has its own pros & cons.

Again, it's easy to underestimate the pain when the company is young & able to move quickly. Once upon a time I was on the other side of this argument, arguing against a monorepo -- but now here I am effectively arguing the opposition's point. :)

[0] https://github.com/nebula-plugins/gradle-dependency-lock-plu...
I've used Zotero for about 10 years. Its one-click citation saving is awesome.

But since I am a LaTeX/LyX person, I also wrote an extension that lets Mac users automatically add newly saved citations to BibDesk: http://mackerron.com/zot2bib/
> Its business, after all, is driven by engagement, and because engagement is well-understood to be eroded by the presence of nuance and depth — two traits that are essential for a complete understanding of anything — Instagram promotes neither.

This must be the best description of fb/insta mechanics.
Soooooooo politics?
We moved out and built a mobile app for it.  why
Not related to the 'not secure' marking, but on the page it says they fixed a medium severity security bug reported in 2014.

> [$500][394518] Medium CVE-2018-6169: Permissions bypass in extension installation . Reported by Sam P on 2014-07-16

And given the relatively low issue number (e.g. http://crbug.com/394520 is from 2014), it's not a typo.
"Unfortunately, our website is currently unavailable in most European countries"

I wonder how we as a community should handle websites that are not internationally available.

My first reaction is that we should not link to them. It somehow feels wrong. I'm not sure though.
I reinstalled Zotero just now, since it has a Mendeley importer now.

What is the proper way to store PDFs that I annotate (say, using Okular in Linux) on Zotero with the ability to send them to other researchers and then update them?

I don't mind paying money for cloud storage, but I gotta be able to work with the pdfs.
How to upload images using Laravel 5 and Vue
Do you even support trivial features like sending an email if a build fails? Please don't answer write your own pubsub component. If you don't have that, you shouldn't have bothered rereleasing this.
> If that's the case, then perhaps it's not so much that PAL was broken by design but that the original design merely didn't anticipate threading.

I don't think it's even that. It's simply because the API describes the contract between the kernel and processes, not the kernel and threads. It's a case of determining who is responsible for what.

In this case the process is responsible for coordinating file locks with the kernel, not individual threads. From the kernel's perspective, 2 requests to the locking API from different threads still come from the same actor: the process. From the perspective of the locking API threads are a process's private business.

A developer failing to understand the abstraction levels in an API is not the fault of the API's design, but it could be caused by documentation.
100C is the boiling point of water.
Another option: https://outline.com/3jHBNW
For people wanting to try this, but not having the right OS installer, see https://pastebin.com/9JK1i7aD
For general public 'not secure' imply something like 'not safe'.
For anyone whose interested, here's the link to the previous HN discussion about fasting: https://news.ycombinator.com/item?id=16941097
I am suspicious too, I had not thought about identity yet but linked it with change in lifestyle. I have seen several men die 1 - 2 yrs after retirement.

I know/have known men who never really retired, they just scaled back operations bit by bit. Like my dentist now at 71 scaled back to 3 days/week. Why he does it? "Because I like it".

Or people who have shifted ownership of the business to their sons, but are still around some days of the week.
The metadata retrieval pairs with a DOI or ISBN [1]. Articles without such handles might not work, nor will articles which are not OCR'ed (obviously) but this can be easily fixed with OCR scanning software.

The metadata retrieval process is a very handy feature, especially paired with Zotero's web browser plugin.

Zotero also keeps a repository of all the citation styles, which are curated and administered by the Zotero team and stored in a Github repo [2].

[1] https://www.zotero.org/blog/zotero-5-0-36/

|2] https://github.com/citation-style-language/styles
Job Opportunity: Business Development Apprenticeship
Are you seriously proposing that I expose my printers to the public Internet just so that they can use HTTPS on a local LAN?

If I must choose between the possibility that an attacker with local access might snoop/change my printed documents, and a possibility that my printer will become part of the next botnet through some firmware exploit, I'll definitely choose the former.
Maybe this is a reflection of modern tools using the version control system to store built artifacts, like npm and "Go get" do. Anyway, depending on the programming language, you can have a monorepo and still bind your modules with artifact dependecy, not necessarily depending on the code itself.
That is exactly what i am talking about. Who will pay to update legacy website content to include meta tag or update webserver config to include http header?
> One downside is that immediately after lunch I find myself very very drowsy.

What does a typical lunch consist of for you?
Well yes, I suppose it is. But you don't meet anyone on my site - it's just advice on how to meet someone.

If you check back in a week, the technical path will be up and running and the email-reminder will be gone.
If you don't find it interesting, don't read it, and upvote stories you do find interesting. Don't complain about other people's taste. Do you think everyone is always fascinating by everything on the front page? Wrong.
> Your devices can get letsencrypt certs

I don't want all my internal network hosts exposed on a certificate transparency log.

I want my http connections to work without scary warnings in my local home network. Because if you show me scary warnings, and no meaningful way to implement the http connection securely, I will just start to ignore them. And if I ignore them in my lan, I will ignore them on the internet too. And that would be a net security loss.

So either use something else entirely inside a lan, like ToFU like ssh, or allow http connections without tls and without scary warnings. But I think deprecating http in local home lans with no meaningful way to make them secure is not a step in the right direction.
By having malloc take an allocation from a lower-level allocator and hand out pieces of that. The lower-level allocator (mmap or -- historically -- brk) is a primitive, implemented as a syscall.
I had the same problem and it got fixed quickly after I contacted them. It's a bug in their auto-renewal script.
These figures could be the universal pictoral symbols for numbers. I especially like the triangle figures since the triangle is the 2D simplex.

https://domodernlife.files.wordpress.com/2014/07/nodal-lines...
As discussed at https://news.ycombinator.com/item?id=17471324 .
> There is no sane way for an operating system to switch out program heap pages after they have been mapped.

They'll even move the page to the harddisk if necessary. Or am I misunderstanding what you're asking?
Totally agree with this point of view.
How to play this game? Do you have any tutorial?
Huh, the "carto" service this calls out to seems a bit interesting. Surely someone else has noticed this...

Specifically the part where
https://amtk.carto.com/api/v1/map?stat_tag=API&config=%7B%22... is a URL-encoded request for the following encoded JSON:

https://amtk.carto.com/api/v1/map?stat_tag=API&config={
"version":"1.3.0",
"stat_tag":"API",
"layers": [{
"type":"cartodb",
"options":{
"sql": "SELECT * FROM national_route_shape_v16",
"cartocss": "#layer {line-color: #FF031D;line-width: 2;}",
"cartocss_version": "2.1.0"
}
}]
}

In case you don't see it:

SELECT * FROM ...

It does seem to be going through some mangling and parsing however. Carto's website doesn't look like it's from 1994, so my guess is that Someone™ read a book on "rapid-turnaround web development" upside down a few years ago, and now the current devs have to live with some poor decisions (raw SQL as form input) for the sake of legacy compatibility.

This being said, the error messages are quite fun:

> SELECT version();
{"errors":["Postgis Plugin: ERROR: column \"the_geom_webmercator\" does not exist\nLINE 1: ...ECT ST_AsTWKB(ST_Simplify(ST_RemoveRepeatedPoints(\"the_geom_...\n ^\nin executeQuery Full sql was: 'SELECT ST_AsTWKB(ST_Simplify(ST_RemoveRepeatedPoints(\"the_geom_webmercator\",1e-05),1e-05,true),5) AS geom FROM (SELECT version()) as cdbq WHERE \"the_geom_webmercator\" && ST_SetSRID('BOX3D(-20037508.3 20037508.25881302,-20037508.25881302 20037508.3)'::box3d, 3857)'\n"],"errors_with_context":[{"type":"layer","message":"Postgis Plugin: ERROR: column \"the_geom_webmercator\" does not exist\nLINE 1: ...ECT ST_AsTWKB(ST_Simplify(ST_RemoveRepeatedPoints(\"the_geom_...\n ^\nin executeQuery Full sql was: 'SELECT ST_AsTWKB(ST_Simplify(ST_RemoveRepeatedPoints(\"the_geom_webmercator\",1e-05),1e-05,true),5) AS geom FROM (SELECT version()) as cdbq WHERE \"the_geom_webmercator\" && ST_SetSRID('BOX3D(-20037508.3 20037508.25881302,-20037508.25881302 20037508.3)'::box3d, 3857)'\n","subtype":"query","layer":{"id":"layer0","index":0,"type":"mapnik"}}]}

The ">" prompt above is from this 4-second hacky script to make a shell:

tput reset; while true; do read -p '> ' x; echo '{"version":"1.3.0","stat_tag":"API","layers":[{"type":"cartodb","options":{"sql":"'"$x"'","cartocss":"#layer {line-color: #FF031D;line-width: 2;}","cartocss_version":"2.1.0"}}]}' | curl "https://amtk.carto.com/api/v1/map?stat_tag=API&config=$(php -r 'print urlencode(fgets(STDIN));')"; echo; done
Would just having a pre-paid credit card work? I guess not, also given how every once in a while you may need to accept new terms and conditions.
Last time I took Larium was near the White Nile in Uganda for 3 weeks. The beer there is pretty strong and people stay up late! During the trip I did feel pretty lethargic, but it was very hot and I was very active so I didn't blame the larium. No other symptoms. On other trips I've taken Chloroquinine/Proaganol (this is what it's called in the UK anyway) and it was fine, I think that is only useful in a few regions now though?
Addressability != reachability. This is how the internet used to work before people got stockholm syndrome with NAT :)

Letsencrypt doesn't require you to run a public facing web server on that domain, you can use DNS challenge validation where you prove control by putting a TXT record in your domain.
I like that it works well on mobile. I would use this to pass time while on public transit etc.

Can I make my own deck?
+1 for Bare Metal support.
Sergio Marchionne, CEO Who Steered Fiat Chrysler, Dies Aged 66
Exactly, it's not like only Americans read this website. You're cutting out a lot of nations.
You could, but it wouldn’t carry much weight without any evidence, and it does seem pretty preposterous. I remember when the legalize marijuana campaigns started to gain traction, and they were often parodied by people saying we should also legalize heroin/meth/coke... They were strawmans, but not any less absurd today than they were then.
I hope it will be the case, but the continued existence of civil wars and failed states may put a damper to that.
Here is a discussion about how the sqlite4 experiment ended, from 8 months ago

https://news.ycombinator.com/item?id=15648280 (157 comments)

And the relevant commit (timestamp 2017-10-27):

https://sqlite.org/src4/artifact/56683d66cbd41c2e

> All development work on SQLite4 has ended. The experiment has concluded.

> Lessons learned from SQLite4 have been folded into SQLite3 which continues to be actively maintained and developed. This repository exists as an historical record. There are no plans at this time to resume development of SQLite4.
Do you know if SuperMicro are going to have any POWER9 systems? ( I think they had announcement but there are no information on their webpages )

Given the insane amount of bandwidth, I wonder if Netflix will use this for their Open Appliance.

If we are sticking to x86 it looks like we have to wait till Zen3 from AMD to get something equivalent, that is 2019 or 2020.
I think the way most chinese people who also suffer from similar issues deal with it is a VPN.
> One could just line in the real world where you don't know or care what the "web" is

Here, I rewound the comment 25 years for you.
Why do HN keep supporting the LA Times which is UNREADABLE in the EU, with that stupid GDPR wall?

Is the article not available anywhere else? Can we at least have the "Outline it" link instead of the "web" one?
A tiny amount of both and a whole heaping scoop of most places being older than both cars and trains.
> Parent comment was talking about routers and network printers. No CA (except for if you're your own CA) would provision a certificate for "192.168.0.1" or "hp-laserjet".

hp could get a cert for 15327c5ba80d1b8933.hp.com and make it resolve to 192.168.0.5 (your printer).
Yup. It's not free even for the first 12 months, even assuming upper bounds on load.

$6.35 != $0. (For any numerical value of $ not equal to zero.)
I don't understand the downvote. That's a polite and constructive comment.

I don't mean the US looted the country, but the reconstruction brings a lot of gigs that the US are distributing to whomever they want.
I skip breakfast, lunch, and have a 3 hour window for eating in the evening. I have more energy during the day, clearer thinking, and dropped some pounds.
Well done. Ive tried out a lot of these crypto tickers in the past and this seems to be one of the better ones. Where are you getting the data from? You seem to support a huge amount of coins I've never heard of.
Just because you wouldn't remember how to tackle an advanced math problem doesn't mean it has been wasted.

You've gained experience and you can identify what you don't remember. Even if you can't remember it it is no longer magic, which is invaluable by itself.

Also the process of learning these abstract concepts is arguably the most important skill you learn in higher education. You might recognize what is required and you do know how to pick it up when you are faced with it - or know when you need external help.
You're right but nobody cares - the market share of people with your problem is small and software vendors like Google will probably not spend too much money catering for people like you.

Harsh but true.
It's pretty amazing.
Top Hacking movies of all time
Yes this is a strategic move on googles part, but that doesn’t make it any less valuable to consumers. Getting less lock in and more choice is good for everyone (except AWS)
Very interesting. However I'm not sure the benefit of saving couple of lines outweighs the cost of depending on a non-standard syntax thorough a transpiler.

You mentioned that this is a proof of concept hack. What's the plan ahead?
After I ran my head against math for some time and actually noticed changes to my mind structure, I am sceptical. Studying math is not (just) about the knowledge you gain, it is about the reasoning structure behind it, like a workout for the brain.

Learning things is not (just) about the facts you know afterwards. I read so many books I forgot at least half of what was written there, but my worldview and thinking was altered from that.

Not that the other stuff isn't very important too of course..
printer-level0.printers.coorp IN A 10.10.10.10

Not a problem in any sane DNS, not a problem for your issuer (who doesn't care about the IP) - though it could leak data outside. So to fix it, you could just solve the challenge in outside-facing DNS and only resolve the IP address if the request came from inside the corporate LAN.

Also, my school has so many IPs that they do give public IPv4 addresses to all machines, printers, etc. but block access with a firewall.
You can find old ASOT mp3s here: http://www.asotarchive.org/
>Why in all that is holy did anyone think this was a good idea and why did noone bother to test this on Firefox

Because Google only cares about making Chrome look good.

Take a look at pretty much _every_ Google property and at some point or another they've fucked over other browsers in order to make Chrome more attractive for end-users.
> What’s to deal with? It’s still the same as before: not secure.

But there is no meaningful way to make it secure. So marking it not secure creates just noise.
That's an incredibly narrow view of morality you have there.
ReactPWA feature list
There are several comments complaining about the lack of an introduction or topic sentence. Maybe it’s me, but I knew what ride I was on from the large clear title and subtitle:

“The Cosmetic Class”

“What happens when a society with a penchant for the cosmetic meets a medium dominated by it?”
Vancouver's crow population is out of control. A spring "egg-shaking" campaign is in order.
Win my $5 bounty: Google Markers on Map Jump to other regions on Zoom in/out
Another question is just the sheer scale of the FAANG companies, making things work at that scale is likely to be counterintuitive sometimes.

I just looked it up, Facebook has 2.2 billion users monthly. That's almost a third of the entire planet.

Shit that makes sense for them won't make sense for 99% of everyone else.
There’s an “or” in that sentence: “old or unsupported browser”
Galileo launch 10. Completing the constellation
A Simple Landing Page Can Save Your Startup from Fail
Any specific tracks?
What Google for Jobs Can Do for You and Your Company
I came here to say that I am a very happy customer of Codemason. Ben is incredible and helped me a LOT with his support through Slack.

I have finished building an MVP for my web app and was considering alternatives to host it. My biggest struggle was how to set up a proper CI/CD flow. Consider that I have pretty much zero knowledge about devops.

I asked for help on the Indie Hackers forum and Ben contacted me. It was like a God-sent gift. Now I am days away of launching my own, properly deployed, web app :)

Couldn't recommend this service more!
I have found syncing the PDFs via Dropbox works fine. Zotero puts them in a Dropbox folder with a reasonable filename, and then the regular embedded Dropbox PDF reader does an OK job on my phone/tablet.

It'd be nice to have the database synced, though. Funny how "synchronization of replicas of information", for all its centrality to modern internet-based life, isn't something that our operating systems provide as a system service.
Medicaid Fraud Lawyer
Amazon expands in Cape Town, stepping up cloud rivalry with Microsoft
> It's not a good restaurant playlist if it doesn't have Massive Attack or Bonobo!

Different people from different backgrounds and social status want to hear different music. How do you attract your target audience? That's the problem to tackle.
Because sometimes, good is good enough and someone being "annoyed" is just pitching themselves as a niche into the market.
Like Degrasse Tyson and most of the mainstream media artists.
Show HN: Pix-Zip – Download stock images easily
1. Besides making HTTPS non-mandatory, what else can businesses do to try and attain/maintain a viable presence if they think they have something to offer that may not be antagonistic to the Chinese government? Run on local servers? (By "viable presence", I mean the ability to reach a small level of success and not only be known by those who have figured out how to successfully consistently break through the GFW, or been deemed eligible for a waiver)

2. I'm beginning to see the HTTPS thing as some kind of strategic war move on the part of the US, possibly 5 eyes, possibly other countries. I don't see it making things simpler, only more complicated (one example I can give is https://news.ycombinator.com/item?id=17540111 - it's a lot harder for me to analyze Web traffic within my own LAN now, I have to set up a machine capable of breaking HTTPS, then secure it well enough I'm still confident to do my banking/etc).