skysight-inc/HackerNews huggingface dataset:
FFTW author is commenting on LOC and Github appears to be going off of number of files. Github also incorrectly counts C headers as C++.
That economic growth came at a pretty severe cost though.

The budget deficit blew out by 17% in 2018 as a result of the tax cuts.
> I have no problem with these guys as long as they are not doing military missions.

As far as I'm concerned, security of American assets and personnel in a conflict zone is a military mission.
Are you by chance reading "The Master and His Emissary"?
Also, you can't magically liquidate Treasuries to dollars. China would have to find a buyer for it's $1T in bonds. And I don't know who has that kind of money. They wouldn't get full price.
Talker's block
FWIW, if you disable Pipelines and push another commit to the repo, you'll clear the failed icon from the project page. The project page only shows the last commit and the failed status is associated with the specific commit, not the project as a whole.

The profile page, however, doesn't seem to update. My guess is that it's a caching problem. I've logged https://gitlab.com/gitlab-org/gitlab-ce/issues/52780 for this.
Fair comment, that's a reasonable answer. Thanks :-)
Maybe, but if you search for "trumpet" you will still probably see trumpets, so compared to other forms of discrimination, maybe it's not so significant?

One area where poorer people do get charged more is for loans.
Life Got You Down? Time to Read The Master and Margarita
From article "Note that some people (such as Frank) get confused because FFTW is commonly distributed in the form of precompiled C code. That is not the source code. Most of the C code is generated by OCaml source code"
Is this speculation, or sourced? The article seems to contradict you:

> Google said it would sell a license for a package including its Google Play app store, Gmail, YouTube and Maps. Another license will be available for companies that want to pre-install Google Search and the Chrome browser, allowing handset makers to team up with rival services. The company did not say how much it would charge for the licenses.
Look at relative debt to GDP ratio rather than absolute numbers.
> Not everyone cares about this sort of thing though, and there are 70+ other options listed with various tradeoffs.

This is precisely pvg's point. The problem with your methodology is a systemic one that emerges in every crowdsourced threat modeling exercise. You've enumerated every possible security attribute and security feature of every software in a specific category, then tossed them all into a matrix of boolean values. But that does not result in a threat model users can competently assess, for several reasons:

1. You're treating all features as equal - if not in intention, then at least in presentation. Even if you don't intend it, the sea of green at the top is a loud proclamation of safety; likewise the sea of red at the bottom is a siren of insecurity.

2. You're not allowing any nuance in assessment feature or attributes. Boolean flags cannot capture all the nuance inherent in cryptographic security. Which specific party was responsible for an assessment? What are their credentials? What did they find?

3. You're including features which most users don't and shouldn't care about just because some minority might. Moreover you're not being opinionated enough, which is something that comes with expertise - for many of the "features" you listed, the minority that cares probably shouldn't if they only care because of a vague notion of security.

4. You're leaving out important features which should absolutely be considered for security. Where is forward secrecy? Where is authenticated encryption? Where is consideration of specific algorithms or primitives? Where is nonce misuse resistance?

5. Most importantly: you do not have any explicitly called out methodology that allows someone to audit what you've done. If you begin by pre-supposing that a given feature is worthy of inclusion because it's an important security metric, your conclusion is just going to end up magnifying that bias. Therefore it's paramount that you call out methodologies explicitly and early.

We see this time and time again in security. People try to first principles the security of an entire category of software by being exhaustive about every type of threat and security feature they can think of. But they invariably leave out important threats/features, underestimate the importance of some and overestimate the importance of others. Exercises which attempt to give users the world almost always end up "empowering" them to boil the ocean. People looking at this spreadsheet are approximately all unqualified to make an informed decision based on a critical assessment of all those features, which means they're likely to just go with the most green option (or worse, proselytize the most green option as the most secure one to their friends and coworkers).
Latest IDM ELEKTRO Uploads GEMS in YOUTUBE Channel Pleasurable Pain
Not Navy SEALs, but Army Rangers:

https://en.wikipedia.org/wiki/Raid_on_Khataba

Does the killing and attempted coverup described there rise to your category of "extremely serious?"
I wonder who will be left to pay for the deficit when all is said and done?
People wouldn't say "free and open source" or "a permissive open source license" if "open source" was already sufficiently descriptive, so I think in the back of their minds people already believe what I put forward here, at least a little bit. If the source code is available to the general public, it is open source. The source code is in the open. If a company decides to release source code with no license at all to redistribute or modify, solely so people can verify that their software does what they say it does, they still should be applauded for at least sharing their code rather than keeping it closed source, and what they would be doing would in my book still be "open source". Once again, if the source code is open, it is open source. If this wasn't the common definition, then people would never say "permissive open source license" because it would be implied.

Instead we have created this environment where if you aren't willing to "go all the way" and give people the right to modify/redistribute your code in some permissive way, you are basically pressured to not release your code at all. As a community we would have access to more code bases if this wasn't true. I totally agree that companies should embrace permissive open source licenses, but when that doesn't make sense, I totally think they should embrace non-permissive open source licenses. This is a minority opinion, however.
How to Build a “Netflix” website (open source project)
Last week's stock market mini-crash is getting blamed on interest rates increasing a few hundredths of one percent [1].

How much would interest rates rise if $1T gets sold into an already weakening market?

I don't pretend to know the answer, but I'm pretty sure it's greater than zero.

[1] https://www.cnbc.com/2018/10/11/trump-says-the-stock-market-...
A couple previous threads:

https://news.ycombinator.com/item?id=6543277

https://news.ycombinator.com/item?id=17159992
Do you have a link to whatever project you are working on? I'm interested in Joy but not aware of anyone working on or with it in recent decades.
Bruce attempted to register a certification mark (a type of trademark), but the application lapsed in 1999 after OSI discovered that there was virtually zero chance of registering the term "open source" as a mark, as the term is too descriptive.

OSI has "OSI Certified" as a registered trademark (a certification mark).
Google is a creatively and morally bankrupt company. The original spark is long gone and it’s just another soul-less big company now.
Dropplr
snapchat++ – snapchat plus IPA 2018 free for iOS iPhone and Andrid
The most important part of that episode is the way Odysseus develops a plan to hear their song and live to tell the tale. Today it might seem minor, but people have been fascinated by this character for centuries (Fatti non foste a viver come bruti, and so on).

To sum it up, Odysseus is the pursuer of knowledge par excellence, hero and everyman at the same time. And this is arguably one of the cornerstones of the (western, at least) way we see ourselves.
Workers who are being surveiled should do the bare minimum while developing skills during free time that benefit future employers and not the current one.
Crypto wasn’t involved - this was just a publicly available database of all their users.

The crypto version of this I guess would be to store the plaintext copy of the encrypted content as metadata on the “encrypted” content?

No amount of correct encryption or (in this case) API access policies saves you if you just publish all the data publicly
Wat. FF on Android has ad blocking, which alone results in huge bandwith savings, not to speak of privacy and general annoyingness.
Also created https://gitlab.com/gitlab-org/gitlab-ce/issues/52779 to discuss not making Auto DevOps pipelines show failure at all.
what.cd
> How else is he supposed to discuss it?

Most Google employee that didn't like the China or Pentagon collab protest by leaving.

His memo from the get go divided people into groups. Is that really how to sell an idea? So the people reading this either going to like it or not. It made it so easy for the reader to fall into a group because it did it for them. Is being blunt a good thing at all? The things he said about women, whether or not I agree with it, being blunt about it is such a bad way of presenting his idea. Bringing up negative stuff over and over instead of positive is not a good way about trying to convince people to your side. You can just focus on whatever strength/positive your solution on your side and address little to none of the other side negative. There are books out there for persuasion; it's not some evil technique, it teaches you how not to come across as a social lunatic when talking about sensitive subject.

If you don't agree with it's fine because for me, it's not a mole hill worth dying for.
Also interested in more competitors, as I'm researching and developing machinelearning for microcontrollers. Two libraries I have made are:

https://github.com/jonnor/emtrees
https://github.com/jonnor/embayes

These are likely to be consolidated into one library/framework in some weeks, along with some other models and tools I have lying around. Like simple neural networks and audio feature extraction.
Actually, swearing fealty to another nation's military by swearing in, in fact, counts as intending to relinquish your US nationality. I have had this discussion with people working in multiple different American consulates, because as I mentioned, I was offered a position teaching at a European infantry school which would have required me to join their military.
Some donations can be tax deductible, and even it they aren't they boost the donor public image as soon as it become news.
I'm not saying Gates, Allen, Rockefeller or anyone else donated to charities only as a form of personal advertising, yet there's certainly a good incentive to do that which should be taken into account before making an opinion about someone.
Because it's still a bad effect that takes time to adjust to. And there might be other factors.
TIL Tim Wagner did a thesis on IDEs before the serverless thing. The man has a passion for developer user experience.
It sounds like the main source of this story is the owner of the private mercenary company. It seems like he thinks publicizing his teams actions will some how drum up business.
According to DJB, what makes it so fast is deceptive benchmarks, https://cr.yp.to/djbfft/bench-notes.html

Maybe something has changed in the 2 decades since that? Their benchmark page seems to have not really changed in at least a decade.

I would guess that folks making use of GPUs could probably get quite a speedup on this type of numerical workload in 2018.
In both of the articles you mention the biased effects were quickly remediated.
A few years back when I was looking at Tour de France stats, IIRC a lot (most?) of those guys spend all day around 120 bpm too. The difference is that they are putting out pretty much twice the power that I do for that same effort.

And probably you too, given I have a hill around the same size on my commute that takes me around 7 minutes too.
It’s not as simple as you are implying. Multiple times Intel made deals with PC vendors just to deny AMD access to computers. It is anticompetitive and in the ling run it damages consumers by limiting competition and innovation. Good thing that AMD wasn’t killed during those moves and now we see rise of AMD. I would not be surprised that AMD was able to catch up just because of same regulations - Intel was punished for anticompetitive actions and now playing field is more or less level.

Google is dumping prices for all products and by that it kills competition unfairly - google maps as a standalone product would not survive because it does not generate ad revenues and it’s free to use. Gmail was also unsustainable for really long time because it was free and without ads. So it’s not as simple as you are saying.
No, the OSD according to the OSI requires much more than seeing and modifying.
it's the blood parasitic bacteria nematodes that harbor and load the heavy metals and release poisons, crawl up the brain and die off and the bodies inability to fight them off because parasites by nature mask their ability to be detected in the body and try to keep their host alive as long as possible. Heavy duty detox protocol with Ivermectin, ALA, NAC, binders prevent this. I've brought this up to many researchers and authorities including showing them CDC, and nobody cares. Alzheimer's is a huge money maker they don't want to find the cure. Cutting down sugar helps kill off the parasites because they can't grow as much. Also the parasites are GMO and sold and used in organic certified food since 1996.
there is no registered mark for the term "Open Source". It's too descriptive.

Therefore, it's not genericized and nobody holds it.
> The fact that cryptocurrencies have managed to grow and hold their value for so long is in itself proof that the financial system is not working.

The market cap of all stock markets is on the order of $100T. Total bond market cap is of similar scale. The total market cap of cryptocurrencies is $200B (and shrinking).

Cryptocurrencies could be 10 bigger than what they are today and they'd still be a rounding error compared to the overall financial markets.

The only thing proven by cryptocurrencies is that, at a global scale, the long tail provides enough opportunities for niches to exist.
Bruce attempted to register a certification mark (a type of trademark), but the application lapsed in 1999 after OSI discovered that there was virtually zero chance of registering the term "open source" as a mark, as the term is too descriptive.
You're comparing income-statement numbers (GDP) with balance-sheet numbers (debt, market cap).

Money is both a medium of exchange and a store of value. The "medium of exchange" function is traditionally represented in accounting with the income statement - it's a measure of how much money changes hands in a given time period. So a company's GDP measures the total value of all transactions performed within a year.

The "store of value" function is traditionally represented by a company's balance sheet, which is a measure of how much value has been accumulated at a particular instant in time. So when local governments in China have $5.8T in debt, that means that some other entity has previously loaned them $5.8T, collectively, and at some point in the future, has a claim on that. Note that this time period might be very long; it's not unusual for debt terms to be 30 years (eg. with T-bills or mortgages). Note also that everybody's debt is somebody else's asset; for example, you could have $5.8T in debt where each local government just deposited their working capital in a bank in the next town over and borrowed from the town to the other side, with no actual outside holders. (This is actually fairly close to the situation with the U.S. national debt, where 50% of the debt is actually owned by other portions of the government - notably the Social Security trust fund and Federal Reserve - and another 10% is owned by state governments.)

Here's a classic parable that illustrates the difference:

http://scienceblogs.com/evolutionblog/2009/06/15/an-amusing-...
My brain dump with links can be found here, https://github.com/jonnor/datascience-master/blob/master/emb...
I don't know if this is a genuine question or attempting to catch me on hypocrisy. Yes, that's egregious, why wouldn't it be?

I was talking about the desecration of dead bodies of enemy combatants which people make a big deal about it.

I specifically mentioned that killing civilians (five were killed in the raid you mentioned) was entirely different.

Trying to destroy evidence that you murdered civilians by removing bullets from their bodies is not remotely the same as desecration of a body.
Mine's even more out... I'm a full 20 bpm higher than that formula would suggest. Mid-30s and still do over 200 bpm at the end of a 5K.
Yeah, lld with bolt
I audit tools myself, my employers, or partners consider and if I find obvious flaws then I file bugs for those products and generally we either don't use them or limit their use.

I feel qualified only to certify that a tool is obviously insecure, but I don't think -anyone- will ever be qualified to solo certify something as totally secure. (but sadly that is how clean audits are generally read). I have in the past hired 3-4 audit firms and each would find flaws the others did not, and that mine did not, but fail to spot flaws that mine did. No one has the full picture.

The only relevant one not under embargo atm was my recent casual 2-3 hour audit of Lifesize which I found right away had a number of alarming issues the company would not address. Some of these may of been found to be non issues under further inspection, but there was more than enough to assert security was not a major focus of the platform.

This cursory look was all it took for me to feel confident in ending any consideration of that product to protect the interests of the entity considering it.

I reported all these to the company and there was no response for over 90 days and made my findings public after due warning.

They are available here: https://gist.github.com/lrvick/6e600d8484cfb415d1e2b06e8b345...

(reminder: this was only 2-3 hours of work and by all means grain of salt)
Try Hosking's The First Socialist Society: A History of the Soviet Union from Within.

Mind, it's just an intro. And its not a happy book. But one doesn't need to exaggerate or parrot shallow condemnations of a part of the world that had its triumphs as well as its tragedies.
Aren’t PWAs only supported on Google’s very own browser?
Show HN: Tools for tracking cigarette litter in SF (and more)
Hi all,

We're working on tools to map and clean litter. We have an iOS app and a fancy "picker-upper" you can see in this video:
https://www.youtube.com/watch?v=bZ9crcWoqqc&t=0s

We're validating whether businesses and residents sponsoring regular cleanups is a viable business model for us.

This is reddit post we made, using our data, about the cigarette litter on Polk Street, SF, over the course of a month:
https://www.reddit.com/r/dataisbeautiful/comments/9lc2ir/tob...

That was one of our first attempts and we're working on more substantive visualizations of different parts of the city now.

We're also thinking about launching a kickstarter for the picker upper, since a lot of people have been asking about it. It wasn't initially in the plans - but people seem to like it.

Feedback is always appreciated!

Thanks,
Emin

Link to the App:
https://itunes.apple.com/us/app/rubbish-love-where-you-live/...

(Head's up: You need Google or Facebook to sign-in at the moment. Adding generic sign-in is on our list of things to do. We'll be releasing a pretty big update later this week.)
There is news about this today.

McConnell is demanding that the Democrats work with Republicans to cut entitlement programs.

Even though they control all three branches and are the ones who passed the very expensive tax cuts.
UI would be amazing (and presumably this puts pressure on GitLab to invest in it).

The Actions UI is going to be huge for user adoption.

I can't say how many commits I had of various .gitlab-ci.yml files with just tiny changes in each one.
Nurx (YC W16) Is Hiring Senior Software Engineers
Meanwhile, household debt is at it's all-time high, $13.3 trillion... surpassing its previous peak in 2008. https://www.newyorkfed.org/microeconomics/hhdc.html

This article seems like fluff/propaganda.
I mean... no one should be surprised by this at all... unless you've had your head under a rock for quite some time.
You’re not wrong that the chart shows that rank didn’t change for some reason, but if you look at the 2017 report you’ll see the US was number 2 last year.
I think it has been competitive for a lot longer than that. Despite all the bad news about partisanship, Trump, wealth inequality, there is a lot of innovation in the US and intellectual output from research universities and the private sector. It's why the rich Chinese keep coming here and keep buying up the real estate and applying to the most prestigious of universities. There's more good news than bad even though the former gets so much attention.
[video]The Bay Area's tech boom is hurting businesses
I wonder who will be left to pay for the public pension crisis and the $4 Trillion Shortfall? http://knowledge.wharton.upenn.edu/article/the-time-bomb-ins...
Japan has run much bigger deficits relative to GDP for a long time and yet inflation and bond yields are rock-bottom.
> also partly attributable to artificially created demand.

What is artificially created demand for real estate? Isn't all demand for real estate "real", whether as a home or an investment.
Sorry, but you're also misinformed - I spent literally years as a contractor in an active combat area, doing HN-specific things (networking, telecom, Internet infrastructure), I've worked with people from some of the largest US federal contractors in a number of roles. The facts at present are that the sheer number of private contractors that were in place in Iraq and Afghanistan from 2004-2011 or so are greatly diminished now.

For every one person that's currently been able to get a new contract under the LOGCAP contract doing stuff at KAF, in the year 2018, there's 19 unemployed people who used to be $160k contractors at KAF who are back in CONUS working ordinary civilian jobs at normal employee rates. Many of them in places where salaries are a lot lower than you would see in California, where you can buy a 3BD house for $130k, somewhere in middle america. Saying that people are working for $30k jobs at Waffle House may be a rhetorical flourish of exaggeration, but it's not very far off the mark if you look at the number of people who used to make $120-165k for Dyncorp who are now working for small town police or sheriffs departments in Kansas or Minnesota, as ordinary cops, for $40-50k.

The US presence in Iraq is presently about 3% to 5% of the size of what it used to be, both in active duty military personnel and number of US-citizen contractors. In Afghanistan, about 5-10% of what it was at its peak. This is why people who used to work for organizations like Dyncorp, ITT-Exelis, Blackwater, Triple Canopy, PAE and others are now going to work for even more shady contracting organizations based in Dubai (like Erik Prince's new company), and end up doing weird things in Yemen, ultimately under the command of the Saudi and UAE militaries.
The only objective definition of Open Source I know of is OSI's. Everything else is a hodge-podge of whatever the user of the word feels it's open. Is it reading the code? Modifying it? Redistributing it? There's no consensus besides OSI.