skysight-inc/HackerNews huggingface dataset:
Interesting. I wonder in what format the index is provided. (Hopefully then don't simply anonymize and forward user-searches to Bing).
Cracking Litter Box DRM
Using global variables in a careless fashion is a bad practice indeed.

But globals are not universally evil. Laravel uses globals very thoughtfully. Having used the Laravel framework for many years, I agree with many of the choices it has made.

Additionally, Laravel does not force you to use Globals. See https://laravel.com/docs/5.6/requests to dig a little deeper.
Mindless Tasks for Brainless Days
I'm looking where to source the tasks/gigs to work on, while being reluctant to start something new, but eager for the feeling of accomplishment and personal usefulness =)
It could be whatever basic or complex thing a human eye is needed for.
My family and I are working on just sorting my son's huge Lego collection into small and medium bins so that we can more quickly rebuild sets and so forth. It's a very hard problem just to come up with a taxonomy that we all agree on! There's not that much info available online, either. It's easy to think about, harder to create understanding among more than one person.

Formerly, we had been sorted by color into large bins. Now, we are working on sorting into sub bins by type. We are also separately sub-sorting dark gray and black by type and some by size while other colors can be combined without loss of speed in locating a part.

It's hard to explain, but our taxonomy is not as consistent as I would like it to be and it's not clear whether it will help overall or not. This is experimental.
> This is the only way you can prevent having seventeen different copies (and probably versions) of e.g. libQt on your system at once.

How many copies of the Win32 widget interface do you think exist on a Windows installation? I'll give you a clue: it's one. This is because Windows has a defined and stable base system that developers can depend on being there so they don't need to ship their own copy of things in the base system.

Linux has no base system because that would mean agreeing on something.
Cost and value of DocBlocks
It’s Official: Warren Buffett’s Berkshire Buys Stake in Paytm
Things have gotten much better especially the upper 1080ti and the Titans but the Vega???
My take is that Lego has intentionally created so many unique type of pieces that they have on purpose made it very difficult for less motivated people to make sense of what they have so thye will just go out and buy more sets and not worry about the mess.
Publicly show the data on the CTO's, CFO's, board members' etc use of Venmo. That should prompt some haste.
3D-printed gun blueprints ban extended
VMware teases bare-metal hypervisor for 64-bit Arm servers
Looks like all the enterprise Linux distros to me? I wouldn't qualify Arch for that purpose.
For me, at least, htlatex never works just quite right. There are a lot of edge cases where it's broken. If you want to preserve having non-PDF output, starting in something like Pandoc Markdown is a better idea. And I do most of my documents in regular LaTeX.
If you don't use HTTPS you are also forgoing the integrity check and not only the encryption. Any router standing between your users and your servers could inject anything into your code, html, etc.
> The only thing that crosses the wire is a request for the application code and a response with that code.

If someone man-in-the-middled the downloading of the app code (trivial, if not HTTPS), then none of those constraints you later mention would be true and the user’s data is now compromised.
Uber, Toyota sign $500M deal to put self-driving tech into Sienna minivans
This might sound too obvious to work but I know a non-zero number of people who picked up lightbulbs and plugged them in at home.
> One very serious argument that HTTPS evangelists avoid is when there is no content to protect the security benefits of HTTPS evaporate. My site is a web application that stores all user data in their browser. Their data does not come back to the server. The only thing that crosses the wire is a request for the application code and a response with that code. I would argue this model of application is substantially more secure that sending data across the wire regardless of whether that transmission is encrypted.

That's a case where HTTPS really is essential! If you serve your application code over HTTP, then I can MiTM that connection and replace your application code with something that reads all the user data from the user's browser and then sends it to evil.com.
Is there working demo?
Will truck drivers ram them? Workers broke looms in the Industrial Revolution
this is why I think one-way specifications are a massive anti-pattern in the software industry. Often times the developer, who has the front-line view of the existing abstractions, could turn a 4 week project into a 1 week one just by adjusting the spec, while still solving the actual problem.
Why wouldn't you? It took me 30 mins to read and set up a cert from let's encrypt.
Jokes for Funny
Open source project trends for 2018 – GitHub
your phone number is not your username on telegram. the username on telegram is like a handle on twitter, with the difference that on telegram you dont have to have a username. you can message anybody in your contacts without username. but if you chose to have a username on telegram that username is public, and searchable. and the worst part is that anybody can add your username to any channel.

so tltr: username on telegram is something you chose and not your phone number.
“I Used AI to Clone My Voice and Trick My Mom into Thinking It Was Me”
paypal is a product built on top of existing currency. bitcoin is a currency on top of which you can build paypal-like product. there are many things trivially done in bitcoin that are absolutely impossible in bare usd. one can use multisig escrow accounts to implement paypal-like dispute resolution but also limiting the influence middleman (paypal) has - can't run away with your money, can't block the transaction against will of both participants, etc.

this tech is a decade old but it's still in it's infancy especially regarding UX side.
Black hats are baddie hackers, white hats are goodies, grey hats will sell IP
So you moved from virtual to real economy where you actually help produce something that has a positive impact on people's lives.
> My site is a web application that stores all user data in their browser. Their data does not come back to the server.

If you weren't using HTTPS a very simple MitM attack would send all of that data straight to any server. HTTPS doesn't just prevent intercepting AJAX communications, it prevents anyone from changing your webapp (js file) into something that uploads everything to evilcorp.com.
Long-sought decay of Higgs boson observed at CERN
It was designed for Venmo to prove to new users that the app has a large network and was trustworthy

> Yeah, absolutely, so one of the biggest purposes of the social feed when Venmo first launched was around this concept of social proof. So if you think about a product like Venmo, it’s really only useful to you if people that you want to transact with are also using Venmo. So when Venmo launched, we had two feeds, we had the public feed and the friend feed. And immediately when a new user signed up for Venmo, you could see in the public feed that Venmo was something other people were using.

From a Venmo product lead - https://www.theverge.com/2017/11/14/16643192/venmo-stalking-...
There’s no risk-free amount of alcohol, population-level study finds
I agree with you, there are several settings avail to control what is optimized, it’s typically enabled on faster devices/connections at work. I would be upset as well if a site naively used up a connection in the background.
Thanks paper is from 2003, so I'm not sure.

This is just an example. From experience, most PDFs at conferences and journals, generated from pdf, are not accessible to varying degrees.
Code-surfer: React component for scrolling, zooming and highlighting code
Idea Man: Hey boss, I have an idea for a new personal payment app.

Boss: So what, those are a dime a dozen.

Idea Man: Yea boss, but this one has THE SOCIAL!

Boss: OOOH, we need THE SOCIAL!

---

How I imagine the pitch for Venmo went.
Huawei elbows aside Apple to claim number-two phone maker spot
House looks like a fantastic book!

Tracy Kidder is also the author of The Soul of a New Machine for which he won a Pulitzer. One of my all-time favorites.
I’m 100% behind the idea that instances should be able to refuse to carry (literal) nazi propaganda (read the footnote; this is what we are talking about here. I agree that isn’t great wording though).

Isn’t that the whole idea of federation? Instances can do what they want?

Also Nazism is a threat. I have Jewish and gay friends and Nazis want them executed.
With a $20 dongle you can perform TEMPEST attacks on the display itself.

https://www.rtl-sdr.com/tempestsdr-a-sdr-tool-for-eavesdropp...
I moved to Poland and built a house there. I can recommend some Polish-language resources here. Where are you planning on building the house?
You should use your own PRNG in that case.

I understand not wanting to change the implementation now, but users should never have assumed it would be stable in the first place.
I think it is the fact that most of the time

a) things don't work
b) it is hard to say why they don't work

Annecdotaly, from looking at my mom, a 50+ year old economist working on insurance backend platform, any sort of error would be hugely discouraging.
Linux xxxxx 4.17.11-arch1 #1 SMP PREEMPT Sun Jul 29 10:11:16 UTC 2018 x86_64 GNU/Linux
Fortnite’s Android vulnerability leads to Google/Epic Games spat
Show HN: Interactive completion for all the things in tmux windows
I doubt anyone wants their transactions to be public, even younger people (many of which are knowledgeable about privacy nowadays). I think this is more of an oversight by Venmo and this post is telling them to pick up their act and change the default visibility to private.
Don't underestimate the weight of decisions, let alone the knowledge of a choice, and the care.

Also, see how often humans don't change from default settings -- ringtones, bootstrap themes, etc..
this is some of the most poorly written english i've seen.. and, more importantly, the questions are not 100%

Seems like a 3rd world sysadmin created this.
Alternatively: One more novel way to work stupid smart consumer habits into a profit.
Lyrebird: https://lyrebird.ai/

Demonstration from the author of the Buzzfeed article: https://soundcloud.com/cwarzel/2018-02-06t19-53-39769z-1

Demonstration using Trump's voice: https://twitter.com/LyrebirdAi/status/904595052521025536
Ask HN: How do you manage your serverless code base?
It seems like services like Google's Cloud Firestore and Cloud Functions (and similar offerings from other cloud providers) are meant to enable you to create a complete back-end for most mobile apps.

I can see the advantages (no need to managing servers, offline support out of the box etc.), but I'm curious to hear from those using this architecture:

- Does it cause additional complexity, and how did you decide it was worth it?

- How do you manage your code base, run tests etc.?

- What types of mobile apps are good match for this model?
Linux 4.19 lets you declare your trust in AMD, IBM and Intel
Another use case would be you simulating a physical system with random noise. You get an error for a certain noise sequence. You might want to be able to get the same random sequence back.
There is the possibility of corrupting the integrity of the application code in this way, but this doesn't void privacy thanks to the same origin policy. https://en.wikipedia.org/wiki/Same-origin_policy

If integrity of the application is violated the application is broken or defective. Fortunately the application is open source and so integrity violations can be easily verified. More fortunately still the application is a diff tool, so it can perform self validation across the wire by comparing the transmitted application code against the stored application code.
A big reason is that Chrome (and others?) specifically show 'Not Secure' for all sites not using https.
I can't imagine not downloading all mail, why wouldn't you want a local backup? Space is cheap.
Secure End-To-End VoLTE Based on Ethereum Blockchain
Boffins bork motion control gear with the power of applied sound
The green box represents everything wrong with Australia's internet
China Withholds Latest Flu Virus Samples from US Labs
"what happens when you type api.example.com and press enter?"

This has been one of my interview questions for years. Take a minute to speak your answer aloud. Do it now, I'll wait.

It requires walking through several layers and subsystems. Really a great question for exposing how the candidate models a complex system. The best part, as an interviewer, is seeing how deep the candidate goes down the potentially infinite rabbit hole.

The most entertaining answer I've received started with the electrical contact in your ENTER key sending the key code through USB. He briefly digressed into the pinout of PS/2 vs USB, and continued in that fashion.
Sure, good idea - https://docs.google.com/spreadsheets/d/1HdlD_tmmm1D0zX1JgXzF...
>I do find however that it is something that skilled programmers will likely outgrow except perhaps a subset of them.

One thing that keeps me in VSCode is the support it has for the "non-mainstream" languages since it exposes the Language Server Protocol. I use VSCode for writing Elixir and Rust since there is pretty good support for both languages.
>I’m not sure how Atom lost out so badly in this they used to be pretty good but I hardly hear about them anymore

No stellar team at Microsoft supporting the project?
Jupiter suffered growing pains before becoming our system's big daddy
Isn't it glory, e.g. Slava Ukraina?
> Just resilvered a bad consumer drive with two bad blocks. All fixed now.

Hm, just makes one put ZFS everywhere!

> The better the drives, the better the performance and data integrity with ZFS, but WD is really consumer grade hardware: Seagate ES or Hitachi enterprise drives have completely different firmware.

Is the firmware the one that really matters here or is it about the quality of the hardware itself?
Both options there feel like the wrong solution.

Why would you call the constructor 100 times to popuate 100 4-byte arrays?

It's a service, surely the best approach to call the constructor once, then populate 100 4-byte arrays by calling GetBytes 100 times from the same service?

It is explicit code without the downside of the expensive constructor.

edit for clarification: It's true that getting all the data at once will still be much faster because it'll save all the other overhead, but it's not the constructor at fault there.
> I have Jewish and gay friends and Nazis want them executed.

Same here. Wanting someone executed is already covered by banning threats, as mentioned in the comment you're replying to.

Removing unwanted speech which isn't threatening isn't necessary. The most likely outcome of blocking free-speech nodes is control of conversation, eg, deeming supporting national borders as 'hate speech'. Which is fine if you want that, but makes tootcafe seem like a play pen for people who don't like to be around others who disagree with them if you don't.
Puppeteer recorder
It's a crappy word then.
Have you seen indiehackers? It's a whole community of people trying to do just that.
UK getting ready to go it alone on Galileo
Well, I also somehow expected this kind of feedback too.

I agree my findings are far far away from a specialized audit, but nor did I intended to do one.

I just wanted to check out some of the best practices & stuff, based on my daily experience as a web user and developer.
When I read things like that, I always think of the paper "The Rational Rejection of Security Advice by Users". [1]

Yes, content injection is bad, but the chance of it happening multiplied by the damage it could cause to your users is probably less than the the effort required to shift a static blog site to HTTPS. (Do not underestimate the leap in difficulty from copy-pasting from an Nginx tutorial to understanding how Let's Encrypt works).

[1] https://www.nspw.org/2009/proceedings/2009/nspw2009-herley.p...
Thank you for the reply, the idea with AirBnb is pretty cool. I see you do stuff on the web, I've got an offer from Bloomberg (Software Engineer), did mostly web development too, thank you for the contact details, I'll reach out when I'll be in London :)
Introduction to Tron, the content sharing platform built for blockchain
Given that Atom is created/maintained by GitHub, and GitHub is now owned by Microsoft, that's technically untrue :P
Actually one service that DNS providers should offer is generating and renewing let's encrypt wildcard certificates automatically, and offering their clients to download them through some API. That would make life a lot easier for less technical devs who are intimidated by the complexity of pki.
Why Python's For-Else Clause Makes Perfect Sense, but You Still Shouldn't Use It
Next to every transaction is a drop down menu. That menu allows you to select "Private." This doesn't seem like something Mozilla needs to involve themselves in, especially with all the privacy snafus of their own.
A couple of decades ago I could not even imagine that in around 2020 people will create a petition for a default setting. Still looking for a better name for this phenomena, since what I have in mind seems too offensive.
On Our Way to Lower Emissions and 100% Renewable Energy
I agree, many (most?) data scientists spend most of their time coding, it's ridiculous how little time they're willing to hone this skill.

Data science practices are similarly inexact - a lot of good decision making comes from experience, knowing when to apply each tool to a specific problem, when to just throw in a hack etc.
Assuming you're a master of the English language, can you clarify what "the questions are not 100%" is supposed to mean? Also I think you made a number of mistakes yourself.
That actually makes sense and I have used PRNGs in that way myself. I should have thought of that.
Pretty sure you can use certbot and just run like... a few commands. Even easier than setting up Nginx.
Ask HN: Facebook Web Plugin
I'm starting to see this integrated everywhere https://techcrunch.com/2017/11/07/facebook-introduces-a-messenger-plugin-for-business-websites/ however I can't find anything about the privacy of this new feature.

If I visit a site, what stops them from storing my identifying details? I'm aware that sites can track how I've moved through the web via cookies but it's semi-anonymous, this is pushing the limit a bit?
I write integrated servers with the web server, the database server, a video server, and a facial recognition application all bundled together in C++. The application screams: try 1/16th the memory footprint of a traditional multi-server Internet application, it is 4000% faster, and can run on a $100 Intel Compute Stick. Try this in any other language...
> I am thinking about a massive, concrete house.

Great. https://en.wikipedia.org/wiki/Environmental_impact_of_concre...
> This isn't to say that semiconductors will stop improving

The funny thing is they might stop being semiconductors actually.

> Digital logic integrated circuits (ICs) implemented with complementary metal-oxide-semiconductor (CMOS) transistors have a fundamental lower limit in energy efficiency because transistors are imperfect electronic switches, having non-zero OFF-state current (IOFF) and finite sub-threshold slope. In contrast, electro-mechanical switches (relays) can achieve zero IOFF and perfectly abrupt switching characteristics.

https://www2.eecs.berkeley.edu/Pubs/TechRpts/2017/EECS-2017-...

And the work on the optical technologies to use instead of transistors are massive recently.
I love IDEs, but I need something that gives me a good consistent editing experience between all the languages, config files and everything in between that's not tracked in a project file of some IDE. That's VSCode for me.

My initial reason for switching from Notepad++ to VSCode was file search speed. We have a lot of 5GB folders at work that I can search in a few seconds in VSCode. It needs 2-3 minutes in Notepad++. That is of course thanks to ripgrep.
If I'm reading the signs correctly, your working demo is at maps.google.com

Remember a couple weeks (months?) ago when google changed their maps from being a flat Cartesian style to having a more polar spherical look to them as you actually moved away from the surface of the earth? This is the library responsible for that.
How hackers managed to steal $13.5M in Cosmos bank heist
Mozilla should make all of their Firefox telemetry, Pocket ads and sponsored content, sponsored Mr. Robot addons that automatically install, Cliqz spyware, etc. opt-in before they talk about the defaults of other companies. Mozilla have no shame.
You would have more success convincing people if you were a little more charitable. It is very difficult to have a reasonable conversation when it starts with an insult.

That is not condescension as I am not condescending towards users. Rather, it's reality. I volunteer with an association of retired people and 100% of our executive and every single member I have ever spoken to fits in in that group. They don't do more than that because frankly, they don't particularly like their computers. I also briefly sold computers when I was in University. Over that 18 months, I'd say that 85% of people who needed my help were looking for machines that could do exactly that.

Finally, I really question what kind of Linux distrust you use. With a half decent, consumer focused distribution, I can't imagine how anything could fall to pieces the moment someone colours outside the lines.
How to Write a Powerful Investor Update
And one reason it doesn't: https://meyerweb.com/eric/thoughts/2018/08/07/securing-sites...

Secure websites make the web less accessible for those who rely on metered satellite internet (and I'm sure plenty of other cases).

Know who your demographic is and make sure you don't make things more difficult for them. Maybe provide an option for users to access your static site on a separate insecure domain, clearly labeled as such.
APM should be cheap: I built a complete APM solution using open source
I'm 49 years old, and I've been programming since I was 10, on a Vic 20. I've been doing web development for 20 years, from Frontpage to PHP to Rails to .NET to Java. Picking up .NET wasn't terrible, but I've been at the Java/Grails/Spring/Angular stuff for MONTHS, and I'm just barely getting off the ground. I guess I'm just old and/or stupid.
No. https://en.wikipedia.org/wiki/Same-origin_policy
"My chicken is fried."
Are you a quant? What do you use instead of C++? Python/cython? I’m not convinced C++11/17/20 cannot be used in quant but I am not in the business (i’d Love to though).
The sentence in the top of the readme for the github repo is:
"Glium is no longer actively developed by its original author."

Which links to:
https://users.rust-lang.org/t/glium-post-mortem/7063

Which pretty much states that Glium is not a really long term viable solution at the moment.

I've toyed with cool open source libraries for 20 years. I'm too old to get caught up with something new and shiny only to find out it wasn't structurally sound.

That is why C++ is a good choice. It has huge traction. The ecosystem is basically bullet proof. It has lot of practical libraries that are so well used that while not bullet proof themselves, it is likely they will stay alive as long as you need to compile your code.
Tkvdb: Trie (radix trie in fact) key-value database in ANSI C
There's an unofficial Arch package for it:
https://aur.archlinux.org/packages/pandoc-bin/

I wish I'd known about this sooner. I don't spend much time with text documents outside the web, but when I do, pandoc handles the disparate formats admirably. The only inconvenience is when I update my system, there's guaranteed to be a huge pile of Haskell libraries to download.