skysight-inc/HackerNews huggingface dataset:
I have to admit that I'm missing the take-over-the-world/crazy-moonshot kind of company among the entries. I appreciate that Y-Combinator is a commercial institution with commercial goals and that personalized daily vitamin packs, better SaaS conversion and AI-powered programming are all sensible iterations on existing themes - but wouldn't there have been space for at least one next-gen Googe/Space X/Hyperloop sort of venture? Surely someone applied that'd fit that bill.
The v2 library suffix on the package path seems rather hackish.

Feels like it would have been better to use a different delineating character instead of a slash to make it abundantly clear at a glance that it's effectively a major version tag and not a subpackage.

Other than that, seems relatively straightforward. Hope this is the last "new and completely different" attempt to tackle dependency management in Go.
Curious to know what are you hiring for?
Just a tiny glimpse of the circus that will be self-driving cars with proprietary software running the in-cabin telescreens in cooperation with the autonomous systems.

If you're working on building the stuff to enable this future, please stop.
"Crossing at an uncontrolled crosswalk" is specifically not jaywalking, it simply means that it has no traffic control mechanism (e.g. a traffic light activateable by a pedestrian).
Fascinating. The /bin/true started as an empty script and /bin/false as "exit 1", then someone added -version command (why!?) and then someone added help for this unnecessary -version command. Now it is 22kB binary and it's not even used because bash implements it's own.
> I don't ban for sincerely held, well argued politics.

But that's subjective, so you'll just end up reinforcing your own opinions, which is exactly what an echo chamber is, unless I'm missing something...
Coffeehouse is heavily regulated. There's consumer rights protection, all sorts of safety inspections etc. The only thing that requires your trust in a coffeehouse is the quality of their coffee and the only damage you'll get with the breach of that trust is the price of a cup. Being banned from a social network harms you more than that.
THE US GOVERNMENT Now TESTS EBOLA IN CONGOLESE WAR ZONES
I'm quite enjoying my System 76 laptop, have you looked at their offerings? https://system76.com/laptops
Plus we don't know if FHA is going after ad buyers as part of this investigation...
How about huge helium balloons attached to a hose that lets a compressor suck the helium back down to ground level. The hose/tether would be on a spool attached to a generator. You could even do this from the ocean floor using regular surface air.
> Tommy Robinson's beliefs about Muslims are held by a good deal more than 0.1% of the UK population

Do you have a source for that number?
The article failed to mention possibly the most influential one of them all, the Busicom. While it was an obscure Japanese company, they indirectly kicked off the microprocessor revolution -- via another obscure company called Intel.

"Busicom asked Intel to design a set of integrated circuits for a new line of programmable electronic calculators in 1969.[1][2] In doing this, they spurred the invention of Intel's first microprocessor to be commercialized,[3] the Intel 4004"

https://en.wikipedia.org/wiki/Busicom
In summary, their new work is an "exiting start". They find a way to deliver small doses of hydrogen sulfide directly to mitochondria with a "molecular postcode". This chemical is toxic in large doses but has been shown to "improve age related disease features in animals" [0].

[0]: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5964063/
People tend to get misled by warnings toxicity by high doses of some vitamins. In the case of Vitamin D, you'd really have to overdo it a lot for several months to get to toxic levels.

If you examine this deeper, you'd find that it's not very easy to do, more so when you follow a doctor's recommendation and just overdo it in an effort to enhance its effects. Take a look at the dosage of supplements, look up online on how much is toxic, and the answer will change your mind on unfounded fears such as this.

I'm purposely not giving details in this comment so that people are free to lookup different (scientific) sources and decide.
I remember testing various calculators with the sequence

25 sin cos tan atan acos asin

to see how close they came back to 25 degrees.

The Sinclair showed 42 point something.
Nah, this way I count 1. Wasted hours 2. How much my vacation is actually worth.

This seems like it would make you a workaholic / crazy, but in fact at least for me, it makes me value the time more and make a bigger effort to spend it well.

It also makes it easy to decide if buying something that's meant to save me time is worth it, cause it's a simple "time saved" vs cost calculation.

Time spent sleeping is special, because I know how bad I function
and unhappy I am if I sleep too short for an extended period of time and it actually equates to days wasted.
https://news.ycombinator.com/item?id=17789737
That's a nitpick. When people say off center, they mean numpad. And I can't tell from the render if it is even slightly off center. It's a render for one.
I use constate which is very similar to Unstated: https://github.com/diegohaz/constate
You'd think, but the people running Netflix are human. They do not always put business success first. There have been a number of highly political things produced by Netflix that were heavily promoted. People slammed them hard in the reviews and comments.
I cherished my SR-52 in high school. My parents got it for me for Christmas my Junior year. I replaced it with a TI-59 (with magnetic cards!) in college. And the top of the line for me was the 'landscape mode' TI-92+.

I sold the -52 and -59 at a garage sale one year but still have the 92+.
He's worth $1.7b so I think he can elect to have any shaped head he likes fwiw
Jago: An experimental JVM byte code interpreter in Go for educational purpose
The un-celebrity president: Jimmy Carter shuns riches, lives modestly
Honest question: what's wrong with being a crane maintenance worker or a crane operator? Cranes are cool, cranes help build stuff, cranes are complex. And if anything, out of the list of "desirable" jobs you mentioned at least two (police officers and lawyers) are the result of "bugs" in our societal system, they aren't productive.
Hmm that's interesting, that they do that via their API. At the same time,

using an API for analyzing data privately inside one's organization,

or for re-publishing content on one's own website (even if there're attribution links),

are two very different things. The first is allowed I think; I think the second is not, although I'd guess Y-C is happy with people doing that too, as long as it has good effects for their business — after all, is it a bit free marketing for HN & YC. :- ) ...

if however ... another website with YC content becomes too popular instead of YC, I'd think they'd tell that website to stop.
So I guess it might turn out to have been ap good business decision to ignore the law?
Do I have the ability to somehow specify "use git+ssh for this dependency" with the new modules system?

Right now it seems near impossible with go to do that other than manually cloning the repositories into the correct path. We can't host our things publicly and have to use SSH to clone the repositories at my company.

It is especially frustrating in our CI/CD process if we need to manually clone our packages for setting everything up.
Do we always have to do the gender discussion? Don't get me wrong, I'd love a real scientific analysis. But social media speculations with people trying to push their favorite ideology with at best some anecdotes seems like a huge waste of time.

But to play the game... maybe woman are more likely to get caught falsifying data before publication, because the evil patriarchy thinks woman cannot to science and thus more rigorously verifies their results? We for sure could come up with lots of other crappy explanations and theories.
I received one of 2018 machines a couple of weeks ago. It worked for a few hours until I tried to install the system update that fixes the CPU throttling issue, which I assume included a firmware update for the T2 chip.

The update failed, and the machine was bricked.

Apple have removed everything that isn't controlled by T2 chip. There is no power light on the machine or the charging cable. CPU temperature is the only indicator of power on/off status, as I discovered after removing a very hot machine that I thought was off from my backpack after arriving home. Despite being non-functional, it was actually powered on but spinning the CPU and/or T2 doing god knows what.

My replacement unit arrives tomorrow. Wish me luck.
"Go modules is a first step in potentially eliminating $GOPATH entirely at some point."

Hooray!
> Smaller more compact touchpad as well

How is that a benefit? I love the new big touchpad on latest macbooks, it works perfectly
The FHA clearly regulates housing advertising.

>>(c) To make, print, or publish, or cause to be made, printed, or published any notice, statement, or advertisement, with respect to the sale or rental of a dwelling that indicates any preference, limitation, or discrimination based on race, color, religion, sex, handicap, familial status, or national origin, or an intention to make any such preference, limitation, or discrimination.
It's super impressive to me how much mileage we've gotten out of the Hubble Space Telescope. The article implies that this finding was made found in old data once the researchers knew what to look for.

Does anyone know how much data from Hubble is sitting there, and whether it's publicly available?

EDIT: I found this: https://hla.stsci.edu/
> This would last about as long as it took the first customer to notice that the previous customer paid $0.01/gallon less than him, whereupon the gas station owner would get a (well-deserved) online lynching.

It would cause a lot if online conspiracy theories and moderate outrage if anyone did find out.

> Not to mention that virtually every gas station I've seen in my life has the price prominently posted on a large display.

If everyone can see the prices of the closest stations on their dash, those displays might vanish because "no-one uses them anyway".

> We won't even go into the over-the-top "charging $5.00/gallon more" scenario. Any station that tried that would be out of business within days.

Like Uber is out of business becauase of surge pricing?

If only one small station is doing it, they might get repercussions. If many stations (or large chains) do it, it might become normalized.
I love them because it's a reminder of how I became interested in computers and programming in the first place. 1980 -> '84 I lived in a country town in South Australia (then the second-largest city, but still only around 30k people); after school I waited for my parents to finish work in the library of the government education centre, and quickly discovered copies of Byte magazine. They had all the issues from the first in the 70s' to the then 'current day', and I can remember seeing all the adverts for very cool (or so I thought) calculators and computers and hardware bits and pieces. My interest became an obsession, and I cajoled my parents into buying a TRS80 Color Computer in 1982, started typing BASIC programs into that machine, and haven't stopped programming since.

These kind of articles restore, at least a little bit, the wonder and excitement I felt at having interaction with these new amazing machines, and make it a bit easier to deal with the next JS problem, or developing that new Web API for a client.
I don't think normal Americans would portray you as monsters for this. Of course, the MPAA and RIAA would complain, since it is their business.

There are other types of intellectual property that are much more likely to upset normal Americans. This includes trade secrets, trademarks, and possibly patents. Trade secrets are stolen by hacking, by forcing American companies to give them up in exchange for market access, and by employees who fail to abide by non-disclosure agreements. Trademarks are stolen by simply making clones, or sometimes by unauthorized operation of a legitimate factory in China. For example, I have a USB power adapter marked "SAMSUNG" that clearly isn't made by Samsung. This is very common, and these devices often catch fire or damage the electronics that are attached. Patents can sometimes be an issue, with Chinese companies able to evade enforcement.
Good to hear that the Earth is settling somewhere that it won't affect us instead. This is newsworthy to me if it decreases the likelihood of new earthquakes in the area.
I mean, asians look white to me.
I think he’s saying:

a) Why are you using bleeding edge software in production, and especially so unreleased versions of OpenSSH?

b) Why are your SSH servers exposed to public traffic?

c) User enumeration is useful for finding accounts with weak passwords. Why do you have personal accounts on prod servers? Why do you have _any_ accounts not using public key authentication at all?
Really cool. I wonder how efficiently (and safely) you could operate a small-scale version in your back yard for personal solar panels.
I figured that one tube is stretched by the gravitational waves and the perpendicular tube is unaffected, so you're measuring the difference between the two tubes. Simple and easy to understand. However, the video mentioned that both light and the detection apparatus are stretched by the same degree and the physicist says "the light does get stretched and that part doesn't do the measurement for us"[1] -- which makes me think that the simple and easy explanation is not quite right. There's some subtlety that I think I'm missing.

[1] https://m.youtube.com/watch?v=iphcyNWFD10&t=376s (6min 16sec into the video)
Not sure why the downvotes, I thought the exact same thing
Discussed at the time: https://news.ycombinator.com/item?id=11811118
Would a device from space, like a satellite, be able to produce this attack remotely anywhere on Earth?
MakeBadge. Online Badge, Name Tag Maker
That kind of cranes is very reliable, but in the real world they are used maybe 10% of their capacity [1].

In a normal building site they either do very few cycles per hour (at heavy loads) or a decent number of cycles per hour at a tiny fraction of their load capacity.

Even when you use them intensively (with concrete buckets) to lift/pour concrete, that happens for a relatively short time (a few hours) each day.

A typical cycle is 5-10 minutes and you don't actually have 12 or 6 of them per hour, each hour in a normal 8 hour shift and - with some exceptions you normally have 1 shift per day, 5/7 (it is rare that a site working with cranes operates 24/7).

Besides, in a building site you don't work when it rains, and you cannot work with cranes if there is a not-so-strong wind blowing (for safety reasons).

[1] no reference, you will need to trust my word for it, coming from some 30+ years experience in building sites
I currently use submodules inside of vendor/ and set each dependency's remote to the SSH URL. You can then simply use git clone --recursive to get everything, including via SSH.

That being said, I share your hope that this can remain smooth in the new Go modules implementation. $GOPATH is always a hurdle for new-comers to wrap their heads around in my experience.
A recruiter who had been stalking me for about 5 years (in a good, friendly way) contacted me, and the position was just interesting enough that, combined with rumblings about possible pending layoffs at the then-current gig, I decided to pursue it. $NEWCO made me an offer and the rest is history.
Took less than five seconds to load for me, your connection must be horrible.
I liked this. It offers hope. Bleak hope, but hope. But I can't stop thinking .. yea but maybe she isn't. Still.. the lack of fear and addiction risk in opioids bears thinking about. It suggests some brain chemistry difference.

Definitely not a sociopath either. She cares enough not to want to cause pain even if she can't always read the symptoms of emotions. So.. if you have psychopathy but care enough to work around it, do you really have it?
https://news.ycombinator.com/item?id=17788740
> What bothers me about the Prenda coverage is that what got them in trouble was that they [the legal team, doing the suing] owned the copyright. As far as I've read (basically just the Popehat posts), there was no legal issue with what they were doing, but they hid from the court the fact that they directly earned the penalties imposed on victims.

Various elements of the trolling strategy were cited in the sanctions order besides the fraud of concealing the fact that they were their own clients. Part of the impact of the fraud was that it reduced the likelihood that courts would examine the other elements.
To hazard a guess: it should be standard practice to use public key authentication for ssh (>= 2048 bits rsa or ecdsa), so this attack shouldn't make compromising a system any easier. Better yet, use a Yubikey or equivalent.

Other commenters have mentioned this attack getting information on hosted services on the system. But, usually you can get that from a straightforward nmap or other recon tool anyway.
Are you being sardonic or is that a genuine question? It’s difficult to tell here since most comments are generally serious and not flippant.
FWIW, regarding a),

> We believe that this issue warrants a CVE; it affects all operating systems, all OpenSSH versions (we went back as far as OpenSSH 2.3.0, released in November 2000), and is easier to exploit than previous OpenSSH username enumerations...

As for b) and c), I 100% agree.

In fact: if you're using KVM-based virtualization, and you have VNC or serial access to your node (GCP gives you serial access, via web UI or an SSH-based proxy), you could completely _disable_ standard network-based login. (Writing an admin tool that connects to the serial console, gets a usable shell, and enables your sshd for when you need it, is an exercise for the inspired sysadmin. :P)

But this fun little trick is going to break a lot of stuff.
This. I am confident I'd fail any current US corporate enterprise interview and I've had a happy successful 35 year career in computer science and networking. Don't fight for something as tenuous as a cubicle farm in a Plex.
Does anyone know why Rich Jones never released this tool???

https://github.com/Miserlou/Mackenzie

(If we had this tool....)
Show HN: FreshJobs – An aggregator of junior and entry-level jobs
A correct sshd_config includes:

PasswordAuthentication no
I had gotten (expectedly) laid off. Following a friend's recommendation (and pressure), I asked an acquaintance for a referral at his (large, famous) company that I was wary of.

At that point, I had about 10yrs experience in my career, embedded software.

I still had to target specific postings from their job board for my acquaintance's referral. I found some that matched what I was looking for, got to through the interview process for a couple postings. I was impressed by and hit it off well with the manager of one team, and got hired. That was a few years ago.

I'm really glad I was pressured to apply at this company that I would have otherwise avoided, this is my favorite job in my career so far.
Maybe a comparison with an existing radio station that publishes ads for profit, people submits ads where some are obvious illegal, the radio station is aware about it but since it makes money does absolutely nothing, not even warn their clients.
I'm sorry. You shouldn't have needed to explain your situation.
Definitely sounds like an upgrade to our current approach, thank you!
Pretty cool! How about turning this into a service where other people can lease their own GPU hardware? Either through your website or by offering it as a sort of turnkey solution.
MIT 6.886 – Graph Analytics – Spring 2018
The issue is that you've been using HN primarily for that, which is against the site guidelines. You've also used more than one account to do it.

https://news.ycombinator.com/newsguidelines.html

I've banned this account until we get some indication that you want to use HN as intended, and will from now on.
but it's not really what's happening here. If a gun manufacturer sells you a gun where it is legal to sell gun, then they are neither doing something illegal, nor directly giving you tools to do something illegal.
They can't control what you will do with the gun, but they also don't tell you where it's safe to go kill people with it, and mostly give you safety instructions.

Here it is the same thing with Facebook.
If they sell you a platform for advertising, they might not be able to control 100% of the content of the ads, some bad stuff might slip.
But they should NOT offer you tools to publish illegal ads. In that case, being able to filter ads by race is illegal, and it's on them to offer this option.
It would be a different story if there was no option and a publisher just wrote "no people of <race>".
We don't need publish or perish. We need replicate or perish.
I do believe it is your responsibility as the radio broadcaster to filter the content that you broadcast. I would think both the broadcaster and the publisher would be in trouble?
Couldn't you make the first requester wait until you've made your query?
LinkedIn with proper keywords so people can find you. Recruiters will probably start sending you messages really quick. I have no Facebook account but do have references.
Internet penetration rates are high in North America, Europe and parts of the AP
>Surely you don't expect color profiles to work when f.lux is operating?

1. Don't call me Shirley.

2. I in fact do, in a way:

>I'm not sure what the point would be for color profiles when you're explicitly opting for distorted color reproduction with f.lux.

I opt for __linear distortion__ of a non-linear function. What f.lux ought to do consists of shifting the whitepoint coordinates of the current color profile. Which has the point of only distorting colors in a way where my brain can adapt to it.

But that's not exactly what f.lux does - it already DOES try to account for color profiles, but it does so incorrectly.
Why does AWS allow /tmp/ to hold data across executions? (just for speed?)

user@host:~ ls /tmp/

user@host:~ ls /tmp/

test

user@host:~ ls /tmp/

user@host:~ ls /tmp/

at_everyone__WHO_IS_MONITORING_THIS_QUESTIONMARK

aws.tgz

file.txt

foo

foo.txt

sshd-tar.gz

test

user@host:~ cat /tmp/egg.js

console.log(process.getuid())

user@host:~ cat /tmp/egg.js

Command failed: cat /tmp/egg.js

cat: /tmp/egg.js: No such file or directory
It is actually portable. It isn't 100% standard of course, and almost nothing is. Start with the fact that standard C is unable to have a GUI, unable to make a network connection, and unable to make a plain text editor that can respond immediately to any keystroke other than Enter.

You can't even implement the functions to provide those features. Any program using any of those features is fully undefined by the C standard. Any interesting program is thus undefined by standard C.
low security impact, best practice as others has mentioned
That is an interesting point, kind of on the edge I guess. If Facebook really wanted to do the right thing while allowing this kind of multi-targeting, they should then build something such as segments in the same campaign.

You want to target only a specific group that, under the law, can't be targeted/avoided? Fine, but then you have to create at least 3 segments on this ad to target at least 3 different groups, to prove that you are not discriminating.

A segment would be a version of the ad (design, copy, etc) + targeted group.

edit: my point here is that it should be Facebook's responsibility to make it difficult for publisher to post illegal ads, not the other way around.