skysight-inc/HackerNews huggingface dataset:
For some time their Unified Driver Architecture (UDA) was touted as the solution:

https://www.nvidia.com/object/feature_uda.html

Its been around since at 1999.
That's where stuff like batch inserting the elements (split your table up into groups of 100 elements, and add one every so often to keep the UI smooth), and virtual-rendering (only show the part of the list that is actually visible) are going to be the only real solution.

Oh, and making your DOM simpler if possible, but normally there's not a ton of gains to be had there in my experience.
There are some: https://github.com/xiph/rav1e

The projects behind this project are all in C, so I imagine that’s why. They probably don’t want to commit to Rust on the basis of this codec alone.
https://superhuman.com/
Politics.

Adding a bike lane or adjusting road speed to reduce car-pedestrian fatalities is enough to get city council members unelected the next cycle.
cough Hypercomputation cough
Additional obligatory "2FA doesn't excuse weak password choices or password reuse."
It is (or was) common for mailing lists to keep the From header when forwarding mail to a list. The envelope sender is commonly changed to refer to the mailing list for bounce processing, and often a mailing list footer is added, sometimes the subject is adjusted and other administrative headers are added.

Changing the subject or adding a footer will almost always break the DKIM signature, and DMARC won't like it anyway, because the From address and the envelope sender don't have the same domain (alignment). This makes it pretty hard to use DMARC for a public domain.

It's not so bad to use it for a corporate domain, and it helps a bunch if your domain is being used to source phishing; except that people still think you sent it when it comes from admin@yourlocaldentist.crappyhosting.example.org which is clearly some ancient web mailer script that was compromised 20 years ago, but still remains online. (I'm totally not bitter!)
Elon Musk’s deal with the SEC doesn’t fix Tesla’s biggest problems
Waiting for GDPR. The information provided while not PII is still pretty useful for say, social engineering.

One wonders how much the dataset would go for in the black market.
Well since this is a streaming service, there is no such thing as an "offline" game as you need to be connected to the internet to stream it. I"m guess they will have some sort pay for play time model rather than a full game purchase. This would be the streaming equivalent of renting a red box title, but hopefully cheaper.
I love that Apple went to all this effort with Dynamic Desktop... unfortunately it still shows the wrong image at the wrong time. I'll see a daytime/dusk image long into the night before it switches. (My computer location is set properly.)
2 years ago I’ve started using Arch Linux for my laptop because of slow nvidia graphics driver updates from Ubuntu... Don’t know how things are nowadays

Arch, being a rolling-release distribution, can always get you the latest driver updates with the package manager (but with the cost of being a little bit more work to maintain)
Diginex | Blockchain startup | Hong Kong | F#/C#/Linux devs | Fulltime employees ONSITE preferred, VISA sponsors (for freelancers we might accept part-time and/or remote work, if you prove yourself to be worth it)

We are a blockchain start-up based in Hong Kong. Our business consists of cryptocurrency mining, financial services, Initial Coin Offering (ICO) & blockchain technology consulting, and software research. Among our products, we are developing an opensource crossplatform multicurrency wallet app for desktop & mobile devices and we have plans to build a cryptocurrency exchange platform. Our goal is to become a legitimate, regulated, go-to global blockchain service provider. Our core values are based on high professional standards, where the ability to work effectively and independently is a must-have.

We are looking for filling several vacancies for the following roles in the next few weeks:

- Linux DevOps (no previous blockchain experience required): must be comfortable working with opensource workflows (pullrequests, code review, git, etc), with main responsibilities including packaging(deb/rpm+snap+flatpak), CI curation (we use GitLab+AzureDevOps), cloud infrastructure (AWS,Kubernetes,TerraForm...). Typescript & selenium experience are a plus.

- F#+C#+Xamarin Developer (no previous blockchain experience required): must be comfortable working with opensource workflows (pullrequests, code review, git, etc). Typescript & selenium experience are a plus.

- QA Engineer (no previous blockchain experience required): must be comfortable working with opensource workflows (pullrequests, code review, git, etc) with main responsibilities including Selenium tests development and bug reporting. Typescript experience is a plus.

Work onsite (relocation package is offered) is preferred but not a must. Please send CV and short cover letter to andres.aragoneses at diginex dot com.
You could just as well throw your money at any other group of advocacy scientists... say creation scientists.

Of course, I am not an actual creationist, so dont throw any money at my belief that the world is billions of years old.
Show HN: Discuss code and docs in repositories (on Sourcegraph)
It seems like a cool concept however when I use it the image comes out as near-pure black, everything seems to be incredibly dark for some reason.
I don’t know, an asyncio ORM version seems very challenging, but if anyone could do it, it’d be someone with deep domain knowledge (like you).

Relationships as properties for example, I just don’t know how you’d solve attribute access in an idiomatic way (sure it could return a future, so maybe the idea is that you’d get a future subclass that still supports operations)?

Anyway, the problem is that it’s really difficult to mix sync/async code. And as soon as you’ve got a need for websockets, you’re pretty much thrown into the world of asyncio. To use the ORM is then a threadpool issue.

Anyway, my approach has instead been to use SA Core (with aiopg). I’ve probably always gotten to involved with my Mappers anyway.
Can't spot the bot? In California, automated accounts have to reveal themselves
My bank's fraud department sent me a voicemail saying my card had been deactivated and I needed to call them at 1-800...

Yeah, fuck you. I'm not calling a fraud prevention number that was given to me over the phone and more to the point, what is wrong with you for asking your customers to trust people that called them on the phone.

I called the main switchboard for the bank and couldn't find the fraud number from there. They got an earful about that too. None of this is okay, including why they flagged my card (Not for buying a TV and a bluray player, no. For getting a $8 car wash on the way home...)
I think this is more useful from the perspective of, if you have some busy task and you need to get the data back into the DOM, what can you do? You either need to build a messaging layer, which was the defacto way, or use this. I have a few projects that could benefit from this, being able to put a progress bar in the DOM and have the worker update it in a clean API is pretty neat.
9 things to never say in a salary negotiation
Very nice. Poking though the source now, cmdfrontend/graphqlbackend/textsearch.go is one of the more interesting files I have found so far. It's very neat to look under the hood.
Wow, I never knew so much thought had been put into line breaking algorithms before!

I wanted to get a simple and fast solution into a one line regex a while back with the simple premise of: breaking on spaces before n chars, i was quite happy with it [1]:

const wrap = (s) => s.replace(
/(?![^\n]{1,32}$)([^\n]{1,32})\s/g, '$1\n'
);

...this looks like a child drawing compared to the article, but then i'm heavily biased towards simplicity over sophistication.

[1] https://stackoverflow.com/questions/14484787/wrap-text-in-ja...
It is an outrage. I also opened it on Lynx, and all I saw was some weirdly rendered characters. Why, Google ?
I could see this being used in a "pre-fetch" manner for single-page applications. For example, preparing and rendering the next page or component before the user has opened it. So when the user does click to open the next page or component, it can be displayed immediately.

The ability to perform that rendering in the background without blocking the main thread would offer some real value.
This is literally testing streaming to Chrome. I'm guessing that optimizing this required some serious client side support, so it would make sense why it would only work for Chrome. That being said if it takes off, I can easily other browsers supporting a standard.
Armory (YC W17) | San Mateo, CA | Onsite | https://www.armory.io

We believe software is the highest-leverage way to improve humanity, so we are creating a Platform that helps software teams ship better software, faster. Armory automates software delivery. As enterprises break monoliths into micro-services, containerize their workloads and deploy to public, private, hybrid & multi-cloud environments, they'll need Armory.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/armory

Here are our open engineering roles:

- Senior Software Engineer: https://jobs.lever.co/armory/f42bb3d2-0b94-450d-b1cb-5156600...

- Solutions Architect: https://jobs.lever.co/armory/7ebab03a-cfe4-4798-8d03-6b523a6...

Tech Stack:
* JavaScript
* Java
* Groovy
* Spring MVC
* Python
* Go
* Kubernetes
* Docker
* AWS
* Awesomeness
Yes, but the types of bugs/issues that plague actual graphics don't necessarily apply to CUDA.
Name and email are usually considered PII in most of the compliance world, no?
We deal with this on a semi-monthly basis at the hospital I work at. We'll here from one department ("Hi, this is the Emergency Dept, all our phones are busy with a robocaller") then it will roll across other departments for about 20-30 minutes. The best our telecom team has come up with is to take the numbers, give to the FBI, and ¯\_(ツ)_/¯. Last time, they had spoofed the number of FedEx so we couldn't even report that.

Most are very noticeable for being in Chinese and tying up multiple lines at a time. That's not really great though, like in the example, when it's all the phones in the ED.
Hi HN -- This is something I've been working on recently and really advocating for at Sourcegraph.

I'm extremely excited about improving how code gets discussed in general, and I'm really excited to hear any feedback and answer any questions you might have about this. Let me know what you think (I want to hear your harshest criticism!) =)
Two things: if you can find this text by Fefermann, this is very helpful: Are There Absolutely Unsolvable Problems? Gödel's Dichotomy https://academic.oup.com/philmat/article-abstract/14/2/134/1... it's super simple and clarifies a lot of things about Godel.

Second, I took a philosophy of mathematics course when I was an undergrad studying computer science. And I have a copy of Godel (1951) (I think it's transcripted from his Gibbs Lecture) given to me as a class material. I tried search engines and couldn't find it anywhere, for the love of god. It's such a shame because it's a very important text imho. Since it's probably copyrighted or something, I don't know where to put it. If you're interested PM me and I can send you a pdf. Its title is "Some basic theorems on the foundation of mathematics and their implications". It's mostly about Godel explaining philosophical implications of his theorems and why he thinks they're important. If someone can find pdf, it'd be very helpful.
That must be for SSDs, which are ~$150/tb vs ~$20/tb for HDDs. I expect IA must use HDDs for the bulk of their data.
Thanks for sharing your work!

Your demo app has a 1.7MB payload after gzipping (the main.js file alone is 9.5MB before gzip). For me, this alone would be a dealbreaker.

Do you have plans to reduce the payload size?
I don't like the way the results of calculations like this are often presented with absurd levels of precision. So much more sensible to say $5200 and $1700. Arguably $5000 and $2000.
This smells like someone leaving a DB open to the world (remember the old MongoDB open by default?)

I think stealing a whole database raises very serious questions as to how technically this was done and how would you prevent this at your company.

Unfortunately "transparency first" aside, companies don't usually release this information which leaves us all wondering how we can better protect our users (outside of having sane defaults, closed by default, no ssh, private networks etc...).
Rather I'm not happy with the foreboding.

I really like video games, and they keep getting worse... not the games themselves, but everything around them (due to "business" concerns), such as my above concerns, and IAP/DLC, and Xbox Live/PSN/Nintendo all charging money to play games on your already-paid-by-you internet connection, where it used to be free (since you can act as a server).

For DLC, in some cases, it's never sold on physical media, so for example you buy a playstation game, and half the game is DLC, and then 5 years later Sony shuts down the service that delivers the DLC, and you're left with half a game, so when your kid turns 10 and you want to show him this cool game, now you only have half of what you paid for.

Games now require mandatory updates to play alone by yourself (GTAV needs gigabytes of updates, no option to play the game offline alone and update later)... so you get home after work and want to play for 30 mins but have 2 hours of updates to download or more.

And a million other little things. Pardon me for not wanting Google to pour more gas on the garbage fire.
My domain, lolware.net, has a total of three email accounts. I'm usually happy to move and break things because it's largely a personal playground. For example, my website's SSL ciphers have frequently veered into the "not many browsers support" solutions.

I cannot properly enable DMARC. I have working SPF and DKIM on everything I send, but as soon as I enforce it, people stop getting my email. The sticking points are mailing lists, and anyone with a forwarder. I've been on this merry go round a few times. If it's this bad on this personal domain, I'm a long way from considering it in a business.
This is part of the plot of the Greg Egan book, Diaspora.
Could I ask where you did your MBA? I’ve been going back and forth about getting it for a few years. Did you do a local school? Online?
There's a lot of tricks you can try, but even rendering the first set of visible rows can take more than a 60fps time window will allow.
Offline meaning single player, streaming not withstanding, that's a lot of crap to go through (managing and maintaining many accounts and clients) to boot into a game that you're going to play by yourself (not multiplayer), and a lot of points of failure between you and your small amount of recreation time after work.
We do :) The Hyperfiddle Editor includes the whole ClojureScript compiler and standard library – because we are evaling userland cljs in the browser, obviously – but we will bake / pre-compile / dead-code-eliminate userland code in prod to get artifact sizes comparable to any normal ClojureScript project. We don't do this yet but it's straightforward to do.
Congress.gov Announces Beta Launch of Experimental Chrome Browser Extension
There's two means of number identification -- caller id (CID), and automatic number identification (ANI). ANI used to be a lot harder to spoof than CID; likely because ANI is always delivered out of band, and some early CID spoofing was done by just overplaying in-band CID. On the consumer side of things, you're allowed to disable CID on outgoing calls, but not to disable ANI.

Toll free routing may be less amenable to grey routes and things as well. International callers aren't "supposed" to be able to call US toll free numbers, which may make it harder to get to. I've seen some companies claim that they can use call routing information to toll free numbers to get accurate caller id information in some countries; but I would never trust it.

You also shouldn't trust the source IP, or the return address on a standard envelope in the mail, unless you have convincing evidence. It's hard to think of an example of a source address in communications that's really trustable.
The +50M annual revenue startup that nobody talks about
Godel's results are for the 1st order variant of the Dedekind/Peano theory of the natural numbers. Consequently, there is no contradiction with the inferential completeness (every proposition is provable or disprovable) or self-provability of formal consistency in the higher order theory.

Also, Godel's proposition "I'mUnprovable" does not exist in the higher order theory because it doesn't type check.

See https://hal.archives-ouvertes.fr/hal-01566393
You already have to do this to play any AAA title? I really don't see the issue?
Show HN: Dson.go – Doge Serialized Object Notation in Go
All this fear of foreign hacks when voter fraud is a big issue.
By that I mean dead people voting, vote counting, foreign nationals voting and tampering at the polls.

Whatever. We can ignore that and follow media narratives on foreign hacking instead...
A golang tool to generate keys required for using 3DES-DUKPT
Never understood people's infatuation with reading CEO biographies. I've read a few and never found anything in it that could relate to. May be I am not meant to be one of those people. Even if I worked hard, got in at work at 5 am every day, I don't think I could go from being a lowely team lead to cto or CEO of a multi billion dollar corporation. I don't think it just works that way. I could be very wrong, but that's my experience.
I haven't used callgrind, but wouldn't running benchmarks concurrently still lead to cache interference?
CJ Affiliate | Senior Software Engineer | Los Angeles, CA and Santa Barbara, CA | Onsite

We're the leader in affiliate marketing, and we're solving interesting problems at scale. We interact with almost 1B users monthly and drive over 100M transactions a year.

We are dedicated to personal and professional growth for all of our engineers. We send delegations to several conferences each year (Strata, Re:Invent, Defcon, React Rally, etc.), run lunch-and-learns and various working groups, offer personal study time, and foster a culture of teaching.

We value TDD, pair programming, automation, and dogma-free agile practices

We enjoy the financial backing of a Fortune 500 business while maintaining the independence, agility, and lack of bureaucracy of a smaller company.

Apply Online at http://jobs.cj.com/jobs/category/engineering/

or email me at snazarian at cj.com

https://engineering.cj.com | https://github.com/cjdev
VW, Mercedes, Porsche stop plug-in hybrid sales on new WLTP emissions rules
So is this must be the database that hundreds of relentless SAAS Sales Reps use to send me emails like "Hi there, wanted to bubble this up in your inbox and see if you'd be interested in a convo about your site and how we can increase xxx% revenue with our yyyy solution"
Yes! This happened to me too and is very alarming. It’s training users to fall for phishing.

I’m not sure what a correction looks like though. Should they call customers and instruct them to find or verify a phone number and call back? Instruct them to log into their online account? That would be fine for you and me, but I’m thinking of the average cardholder.
Microsoft are also reportedly working on their own game streaming service.
I bought and read the hardcover (0.91) and it was great, but the new version has enough new stuff i wont feel bad buying another softcover copy, while happily supporting the authors.
Elon Musk's controversial year sees him relinquish Tesla chairman role
THE RISE AND FALL OF THE COMPANY BEHIND ‘READER RABBIT’
To be fair, many of the problems you just described are specific to console games. But more specifically to your point this service would actually eliminate the need to keep the game up to date, as the centralized server would maintain an update product. So this might actually improve your game experience, as you would never have to wait for an update again!

Plus it runs in chrome so you don't even have to worry about installing/tweaking settings/finding the disk anymore either.
AltSource is a rapidly-growing custom software development company, headquartered in Portland, Oregon with satellite locations in Ashland, Oregon and Jacksonville, Florida. We have a fast-paced culture that embraces the principles behind the Agile manifesto. You’ll work with companies of all sizes, from a wide variety of industries, to help them grow their business through innovative custom software solutions that are perfectly aligned to their business. AltSource developers have direct involvement in the planning process with our clients, so we look for developers who are business minded, technology focused problem solvers.

Our current openings can be found here, and we are only hiring for onsite positions. Please apply through the web link below.

https://www.altsrc.net/Careers
Or even tape. For offline redundancy it’s still cheaper.
Nearly the entire sky in the early universe is glowing with Lyman-alpha emission
Maybe eBay saw the writing on the wall there and that's why they bought qoo10.jp.
Chromecast, too.
> browser extensions are a prime place for malware to enter someone's PC. Both Mozilla and Google have not given it enough attention.

Well Firefox has switched to webextensions for security reasons and they received a lot of flak because of it. So I'd say the opposite, since Mozilla pushed this hard and still working on better support.

> there's no clean way for two extensions to really coordinate between each other

I don't think something like this should be allowed, could be abused. Instead browsers should embrace the fact that they've become operating systems inside operating systems and implement some of the most used extensions natively.

I completely agree about extensions setting sync tho, it's major pita across all browsers not just chrome.
Ask HN: Information Security vs. Software Engineer
Career Advice,

This seems a little weird asking for career advice to a bunch of strangers on the net, yet I spend most of my time in-front of a computer. Creating this from a dummy account because I am somewhat nervous about this. I am in my late 20s that is currently working in a stable InfoSec job doing mostly threat-tracking. While its interesting, I feel as if my technical skills are leaving me. Some background, I started off in IT doing HelpDesk then progressed to System Administrator work then to InfoSec. I am have done mostly Information Assurance, from validating software that is being introduced to our environment and security testing but never done pen-testing. I understand at a certain point you must take off the tech-hat and put on the management hat, but I think I have gotten to the “middle-management, I NEED A PORSCHE” way to soon. I truly miss doing my work on a terminal, climbing under desk/fixing issues and helping to build projects. That’s why I kind of think that Software Engineer would allow me a new challenge while also staying within the Tech realm.

I guess my question is, does it make sense to switch over to become a Software engineer? Or does it make more sense to go the Cyber Security Engineering route. I would like to stay in “Tech” but I don’t want to live and die via emails and dashboard alerts. Has anyone moved from Cyber Security/InfoSec to Software Engineering? I have mostly seen people switching from other career fields within IT over to Cyber.
I have no formal education in IT/CS but have taken a python course and Java course previously. I am planning to take a Calculus course this fall to brush up on my math skills.