skysight-inc/HackerNews huggingface dataset:
I have the opposite reaction, I’m skeptical that the abstract “objections are goals” rule has significant value. But the concrete points about TCR are interesting.

To address the objections about fast and trustworthy tests, you could limit its use to code that already has good tests. To address the version history objection, you could use “git commit --amend” to limit it to a single commit. So in some situations TCR may actually be usable (and in fact it’s not too far away from the process I often use! Frequent small commits with --amend)
As much as I agree, the arguments are a bit tired, I think the criticism can be useful.

There's a tendency in web development towards using well known stacks, and some of them are quite poor choices for most projects. MongoDB features heavily in these stacks despite relational databases being a better fit most of the time, possibly because there's less visibility of alternatives in the JS community.
Salaried employee. Offered raise with an increase in hours. Is this normal?
I'm currently working as a 40-hour salaried employee. The company I work for recently said that I'm one of their most efficient employees, and has offered me a 22% raise if I increase my hours to 50 hours a week. The logic was "we know you're working a second job, so why don't you work those hours here?".

Now, I understand that this is a personal decision, but my math side is coming out here.

If my hours go up by 25%, shouldn't the pay go up by more than 25%? I understand that salaried positions don't have to stick to an hourly rate, but is this typical of companies and offers like this? If so, why?
This isn't how policy making works though.

An excellent example is Brexit. The Brexit referendum existed solely because of UKIP and UKIP have only ever won 2 parliamentary seats. And those were both for sitting MPs that had defected.

However, UKIP did get 4-odd million votes, plenty of local councillors, MEPs etc. In other words, they clearly had a lot of support for their flagship policies and that caused the main parties, that had UKIP voters in their constituencies, to take notice. Unfortunately.

This has also, to a lesser extent, been the case with green issues. The Greens increased their vote from the 80's onwards and the main parties started to adopt green policies accordingly.

So, in the UK at least, there are well worn paths to get policies, like climate change action, to the top of the heap.

I'd argue that there are a few reasons why they're not top of the heap today:

1) Other things are deemed more important. Clearly Brexit is one. Whether you agree that it should be more important, or not, it's fairly undeniable that it's true.

2) The folk that have expressed most interest in green issues have tended to not be very engaged in formal politics. <30s predominantly. That changed somewhat in the 2017 election primarily because of Corbyn (though Greens did particularly badly). So it may be that green issues become more important as a byproduct of other changes.

3) There's a strong argument that UKIP's popularity was, in large part, due to Nigel Farage. He may well be a cock but he's a cock that was on TV a lot reinforcing his message. I mean, I like Sian Berry (no idea who the other bloke is) but she's no Nigel Farage.
Airport mislays world’s most expensive USB stick
Saga dawa Festival 2019
Do you plan to monetize it?
Would you mind expanding on this?
Any of these work completely in iOS? I'm new in the field and want to embed everything in mobile
Ask HN: Apple DevOps question
Hello, I developed an interactive story app for young children about a medical device. I was given a license by the manufacturer to use its image. Apple will not approve it to its App Store, claiming that it is a non-iOS device. The intention of the app is to introduce the medical device to children outside of doctors' offices in a less-scary way.

Does anyone have any suggestions as to how to get an app published to Apple's App Store using a non-Apple manufactured medical device?
7 Bots Every Telegram Channel Owner Should Know About
The parent was responding to a claim that consent works as a base of processing, and only talking about that base. That other bases can work is true (I'm personally really curious how this is going to play out for ad-financed services), but just because they didn't mention it they aren't "confused" about anything.
also possible on STEEM blockchain along with Bitshares
Nice, dark if not nihilist summary.

Have to agree with you there. Things will probably get much worse before they get better. Now there are 2 possible attitudes, either depression from obvious lack of adequate action, or acceptance of what's about to come will come, whatever it is.

By acceptance I don't mean ignorance, by all means promote moral, 'green' solutions, recycle, vote for sane people who at least pretend to care (I am looking at you, US). Or do gazillion of other things that help, and avoid those which don't. I know I do my part, however insignificant.

But change is inevitable. Even though on paper we can still avoid most dark stuff, we won't. Mankind as a whole will react properly only when it really will start to hurt, globally, and rich won't be able to comfortably escape or hide from it.

Some will die because of this. Some will profit from it. On enough long-term scale, it won't matter unless mankind will go extinct which I don't believe will happen.

Do I like it? Not at all. Can I change it? Same answer. Am I content with it and not waste my time, energy and mood on being depressed about it? Absolutely.
Background

In MVT, there were separate carrier types (Q and L) for values and references.

Oh right, well that clears that up.
patio11 had a great back of the envelope calculation awhile ago on this. Turns out showing ads for a fridge right after you just bought one might be highly successful.

Say the average person buys a fridge once every 10-20 years, the probability you're looking for a fridge this month is something like 1/120-1/240, call it .75 percent.

Some percentage of fridge purchases end up being returned. Let's say 2 percent of them. If you return a fridge, you pretty much are guaranteed to need a new one, so around 2 percent of people that just purchased a fridge are very likely to buy a new one.

That's over double the likelihood of someone that didn't just buy a fridge!
I watched a film recently called Pandora’s Box about Nuclear vs solar.

They make the case nuclear is the best solution for environmentalists (the guys who made it were hard core activists) and that things like solar are toxic and leaching heavy metals.

They say Nuclear is the safest and cleanest solution and is the only viable solution if we want to solve climate change.
$2000 if it could reliably run an open source operating system.
THE OCTOBER 2018 SECURITY UPDATE REVIEW
Yeah, reason number one why I would never bike to work.

Even if I changed all my closed I doubt I would feel clean.
Show HN: Rocket – A go utility to automate deployments to any cloud provider
That one was quashed pretty quickly, as it became clear that the missile was fired by Russians not Ukrainians, oh and actually Putin didn't fly over Ukraine anyway...

https://www.mirror.co.uk/news/world-news/malaysia-airlines-p...
Hong Kong to build a giant artificial island housing 1.1M people
And eventually there will be smart contracts that are insured.
Please don't write custom memory allocators for production code without seriously considering the security implications of doing so. The glibc allocator has benefited from years of security hardening against very creative attack vectors.

You don't want a simple double-free to lead to an RCE bug, do you...
K&R includes an example memory allocator as well: https://stackoverflow.com/questions/13159564/explain-this-im...

To me, the K&R one seems much less readable and also doesn't include the global malloc lock, since even the updated edition of K&R predates standardised threading.

I note it also does the "bp = (Header *)ap - 1;" trick, so if that's undefined behaviour then it's a good example of how hard it is to write C without relying on UB.
Considering Apple has been making old hardware even more performant, that doesn't seem to be their goal at all.

I brought my out-of-warranty iPhone to the store last week because its battery was swelling, and they couldn't replace the battery due to employee safety issues. So they simply gave me a brand-new identical phone for the $29 battery replacement price.

In my experience, Apple goes further out of their way to give customers low-cost or even free replacements in far more cases than I've ever seen any other company do.
Secrets in serverless functions
Mr. Appleboum has made a tactical mistake here and let the kitty out of the bag.

This [edit: read: the original Bloomberg article] disinformation campaign appears to have 2 strategic goals.

1 - Penetrate Apple's data centers via a legislative attack vector. We all know that our congress is owned lock stock and barrel by AIPAC. They will pass legislation that will require companies like Apple to permit 3rd parties to audit their facilities. Enter Yossi and company.

1a - As an aside, this confirms for me that for the time being Apple products and facilities are in fact secure and have presented a serious obstacle to the Israeli intelligence services. Bravo to Apple's security teams.

2 - This same nation state actor is poised to pick up the "supply chain" missing links when China is removed from the equation.

https://news.ycombinator.com/item?id=18178028

http://economy.gov.il/English/InternationalAffairs/InvestInI...
> solves a problem nobody really cares about

DNSSEC was designed to protect from using forged or manipulated DNS data. Including all other records, like TXT, MX, CERT records, SSH fingerprints, IPSec public keys and TLS Trust Anchors.

I care that I can verify all this.
> The frustration people feel over the USA's crappy warranty and consumer protection policies is real and well deserved,

It also lead to lower or possibly lowest price of electronic products in US compared to rest of the world. Once regulations for better protection is in place and price also will adjust.
> Where does the part happen where using computer code is cheaper than using a piece of paper?

That's the case for almost all internet technologies. In the case of smart contracts it allows instant settlement.
The "questionable conclusions" on the first suspect have been confirmed by UK and US officials.
Ask HN: How to switch off from work?
Like mentally. Not just physically. Taking breaks, strategic time-outs are all ok but many times that isn't much of help.
The headline is truncated and thereby misleading. The full headline is:

"Brief aerobic exercise immediately enhances visual attentional control and perceptual speed. Testing the mediating role of feelings of energy"

In other words, this study took some amount of cognitive enhancement across the subjects as a given and was designed to test for a correlation between that effect and reports of feeling energized by exercise, which the authors did report finding. If the numbers and methodology back that up, it suggests a couple of obvious (and not mutually exclusive) possibilities:

1) There is a primarily psychological mechanism, with the belief that a practice is energizing being a key factor. Note that the control group practiced relaxation techniques, which is arguably the opposite of an energizing practice.

2) Both the experience of feeling energized and the increase in cognitive performance are mediated by some physiological difference in exercise response. For example, it may be that some portion of the population has subclinical exercise intolerance (which is mostly studied in relation to cardiovascular disease, but has also been linked to mitochondrial dysfunction, neurological conditions, and sleep apnea).
My interpretation is that it's not a statement about writing code but running it. It's accurate IMO but probably not terribly important in the grand scheme of things.

> I doubt many non-Emacs users are particularly interested in programming Emacs Lisp

By definition, if you're programming Emacs Lisp, you're an Emacs user. Emacs is the interpreter.
> HAL carried out a number of remedial actions once it was informed of the breach including reporting the matter to the police, acting to contain the incident and engaging a third party specialist to monitor the internet and dark web.

Ooh, did they sign up for their Free Dark Web Scan?
Not when you consider total cost of ownership. Anything you have to replace frequently, spending time and money, is not cheap by any means
Experts? That's exactly his point. They're far from being experts. What I meant by balanced was as a balance to all the views being expressed here. I probably misused that word.
I like this project. It's hard to find high-quality mockups that are free for learners like me to use
How to Evade Expensive Phishing Filters with One Simple Trick
> even the most brutal roaming charges won't come to more than a dollar or so for a single SMS

Receiving SMS is generally free (or goes against your monthly bucket) while roaming.

I’m actually not aware of any cell carriers (and I have SIM cards from over a dozen providers each in different countries) that charge for receiving anymore, but leaving a little wiggle room in my statement above just in case there’s an odd ball out there.
Discovering Hidden Email Gateways with OSINT Techniques
The parent is not correct however you can use consent as your lawful basis and deny services to users who do not consent under any business justification as long as you have one.

If targeted ads give you more revenue and you choose to use solely targeted ads because thats your business model GDPR does not forced you to provide a free service or a service that generate less revenue.

So no #2 doesn’t have to be as #1 this is confusing things with the single purpose clause in which case you can’t make X and Y being co dependent.

E.G. while I can perfectly refuse service if you do not accept ads I can’t refuse to sell you something for not wanting to join my mailing list.

Also not only that does nothing stopping you from having multiple bases for consent it’s actually the recommended approach.
Synchrony Bank is the shittiest banking vendor I have ever encountered; cancelled my Amazon Store Card because of how horrible they are. (also the Amazon Prime Chase card gives the same 5% benefit)
It is true. Learning any Lisp changes how you think about programming. Learning Emacs Lisp will make you wish all development was like that.
Setting Up an Email Server for the Direct Email Spooling Attack (How-To Guide)
Good. Maybe that will reduce the need to throw away perfectly working things just because the new model is a millimeter thinner.
Dell replaces (or used to anyway) failed-upon-receipt 'new' machines with refurbs. You order a new laptop, it comes and doesn't turn on, you return it, ok so far. Then you get a refurb in the mail as a 'warranty replacement'. Paid for new, got used. How do they get away with it?
HOW TOPinterest Strategies to Help You Grow
Honestly, that's not what I would expect sandboxed to mean. By that definition installation in /opt/$vendor/$software/$version would also be sand-boxed.
Japan doesn't appear to be doing much better.

https://securityaffairs.co/wordpress/53856/cyber-warfare-2/d...
I agree. The only changes I would make to the UX is a larger font by default and make the visited links a different colour. I find it hard to easily see what I visited when looking at the list.
Measuring all the DNS things
your rate should go up at least as much as the time spent working. so you are right to think that. However, an employer isn't obligated to give a pay raise on every offer. an offer is just that, it's not the same as a raise. If they project to you that it is a raise in pay while its not, then that's actually not ethical, and depending on the wording and where you live might even be in breach of some terms/laws.

For example in my country it's not really allowed to reduce someone's pay, but if you agree to it and sign it is allowed. (so they can offer it and you are allowed to deny it without that reflecting back on you negatively...). This means that if they would want to lower your pay they will think of something creative like the offer you got, to try and reduce pay compared to productivity and wrapping it up in something that might get accepted by someone who doesn't dig a bit deeper.

I would advise just to make a counter offer, and say what you explained here, 'if i'm working 25% more i expect that much more in pay' , or if the other job is actually paying you MORE than these extra hours would yield you, you can even haggle with that and tell them the other job's hours are worth more to you. don't accept anything that feels like a step back, if your employer insists in putting you down like that, perhaps it's time to find a more decent employer.
Are you advocating to simply spout out a random number when asked for an estimate on how long it would take to implement a feature in an application?
In my experience, the usb ports for those were locked down by the manufacturer and would be pretty hard to get at unless you were somewhat determined. The point being that, in this scenario, it (probably) wasn't some hostile agent that exfiltrated this data, but a unknowing employee
True. Too many people accept the evil of false convictions because they believe in life eternal, that unjust suffering during life will be rewarded afterwards. I'd rather get things right now than roll those dice.
Thank you for sharing this. It's a dangerous geoengineering project, but it's also a quick solution to a part of the problem.

Dangerous: we don't know how the nonlinear weather systems will behave. This may also compound the problem in the future - lots of unknowns.

But very quick: We can cool the earth down rather quickly using this method.
Well just look at the recent Reddit redesign. It made the site much slower without adding any apparent improvement to usability.
I have a suspicion that, if this is true, sales will also drop dramatically in China after this.
> Apple also began dipping batteries in a special dye that could only be seen under a high-frequency light to authenticate them during repairs.

That's marketing speak for "they used invisible ink and a UV lamp"
Exploring the New Trends in Dental Marketing
or 3) the cognitive improvements were imaginary. If they didn't measure them, we have no idea if they were real?
Out of curiosity, which industry to you work in?

I do agree that modeling is useful in every industry, but there are some industries where it matters more than others.
The difference is that Bellingcat, unlike Reddit, appear to have a network of agents in Russia able to obtain official government data, either via hacking or plain bribery. Eg passports, vehicle registrations, etc.

This brings their investigations much closer to simple join-the-dots exercises.
So about a year before the crazy growth I interviewed there. Their platform at the time was on heroku and all the services were managed services.

So ya they had a ton of tech debt to deal with to handle hyper growth.
The stated goals are not tied to any business value. This is putting the cart before the horse. TCR is a means to an end, not an end itself.

Dale's essay on "Resistance as a Resource" is very good, but this is not how I would apply it.
Tesla Model 3 safety claim is Tesla's alone, NHTSA reiterates
Another way of looking at this is: all advice is conditional. It only works for people in certain setups and environments. People rarely specify their conditions, and may not even be aware of the other possibilities.

So when offering advice or suggestions for process improvement, always try to add at least a couple of sentences describing the context at the front. It'll reduce the amount of objections you get.
Okay, then to take the OS analogy:

GitHub: Windows
Atlassian: MacOS
GitLab: ???

You could try on Linux for size, but I don't think it fits.

So either as an analogy it doesn't work, or this idea doesn't scale. :) BeOS is the only OS I've used that I both liked and that had a single design vision behind it. I think that this is most likely an artifact of it not being successful, though. If it had been widely adopted, it would have gone the way of MacOS or Windows.
Agreed, the personal data leaked was limited to a screenshot from a video in which 10 or 50 people's dates of birth and passport numbers were visible. As data breaches go, that really wasn't one.
Like when they re-did the Slashdot interface. I remember it was crap and I stopped using it then. That's probably 10 years ago now.
If I'm reading the docs right, the Stellar smart contracts are extremely different from Ethereum smart contracts - in fact, it almost feels like a stretch to call them the same name. Like "animals" vs "plants".

Ethereum smart contract are actual virtual machines. They are tiny computers that run whatever bytecode you want. You could calculate pi to a million decimal places in a smart contract, if you had the money for gas.

Stellar smart contracts, on the other hand, are simpler. A transaction can only choose from 13 operations (Buy, make offer, change trust, etc). On top of the operations, you can add some restrictions to the transaction - Stellar has support for built-in multi-sig, built-in start and end time limits, and built in transaction grouping. By combining these restrictions, grouping transactions, presigning this, and handing out that, you can make something that's smarter than a single person doing a single transaction.

As an Ethereum blockchain developer, using Stellar smart contract feels very limiting, and outside the simple cases, very convoluted.
Python: World’s Most Popular Language in 2018
What's your second job and how much is it paying?

Also, what's the work like? do you enjoy it?

Seems like it's a one way street to. If you decided to quit your other job you could always stick to 40 hours. If you go to 50 your stuck at 50.
Core ML is going to be your best bet. Most training is still done server side using frameworks like TensorFlow, Keras, and PyTorch. Once you've trained your model, you can convert it to Core ML with coremltools or export it to Core ML directly if the platform supports it.

Apple has a couple tools, Turi Create and Create ML, to train ML models specifically for mobile use, but their not nearly as fully featured or widely used.

If you're interested specifically in mobile ML, check out https://heartbeat.fritz.ai. We've got a bunch of resources for mobile machine learning. If you're looking for ready-to-use models or tools to manage them in your app, check out Fritz (https://fritz.ai). Disclaimer, I'm a founder at Fritz which sponsors Heartbeat. Happy to answer any questions!
Having written a lot of C++, constructors are a bad idea. Two main reasons:

1. Error handling is difficult - they don't return anything, so you are forced to use exceptions, and throwing exceptions in constructors is awkward. Go doesn't even have exceptions so it can't do that.

2. They don't have names. Often this is fine - you only have one way to construct an object. But if you have more than one, then you have two unnamed functions that do different things. And if they have the same parameters you end up with crazy workarounds like adding dummy parameters.

The way Rust does it is far superior. Basically you have a static function that creates the object. It's a normal function, so it can return errors (or the object), and you can name it, so you can have `Circle::new_with_radius(float r)` and `Circle::new_with_diameter(float d)` with no confusion.

Much better.