skysight-inc/HackerNews huggingface dataset:
> "you always need to type public static void main(String[] args) for your program to work", as opposed to teaching students what that means.

I've always wondered how practical it is to truly teach that though. Programming is incredibly abstract, and the less abstract you make it the harder it is to learn. I feel like making that leap from "just write this to get it to work" and understanding what's really happening will always take individual initiative.
Any book recommendations out there on this subject?
It depends how you look at that. Currently about 1/3 of our carbon emission are absorbed by the ocean [1]. H2O is pretty much entirely absorbed by the ocean, and then re-released (the well-known water cycle in the nature). Now, when people say that the half-life of CO2 in the atmosphere is 1000 years or so, they generally neglect that part where some CO2 is dissolved in the ocean, presumably because it can be re-released later. But that's (trivially) the same with H2O.

[1] https://en.wikipedia.org/wiki/Solubility_pump#Anthropogenic_...
Thanks for saying it. Client-side scripting can't protect against a compromised server when the client scripts are provided by that same server.
And then it's back to "it's not happening".

Contrarianism is a mouse wheel, not a ladder.
Effect of Wearable Technology on Long-Term Weight Loss
The abstraction is not really file but stream of bytes. It turns of any object with stream of bytes will need similar set of operations: open, create, read, write, close, seek etc. This is fairly generic and powerful abstraction.
Chrome will always block an HTTP javascript call by an HTTPS page. So given the growing prevalence of HTTPS, I think this setting is probably doing less and less for you.
Yes, Mosh definitely uses OCB3 and is apparently unaffected (just added a FAQ to the website). Still pretty scary though -- this could easily have been Mosh's first real security vulnerability and it would have sucked. We first implemented Mosh's crypto in 2011, shortly after OCB3 was released. If I had started working on Mosh six months earlier, I probably would have picked OCB2.
Modern cred stuffing is done by botnets. When I see a cred stuffing attack, it's maybe 1-3 attempts per IP address spread over 100-500k IP addresses.
Often you'll have a family of legitimate users behind an IP address that's cred stuffing you at the same time.

Throttling by IP address may have worked 10 years ago, unfortunately it's not an effective measure anymore.

Modern cred stuffing countermeasures include a wide variety of exotic fingerprinting, behavioral analysis, and other de-anonymization tech - not because anyone wants to destroy user privacy, but because the threat is that significant and has evolved so much in the past few years.

To be entirely honest, I'm kinda surprised Google didn't require javascript enabled to log in already.
This makes perfect sense for Google. This will objectively greatly increase the account security of their users. Remember 99% of Google users are not at all like people on HN. Google is helping the 99% at the expense of the people paranoid about tracking - but if you have a Google account, you've already lost that battle.

This is a completely reasonable business decision and trade-off.
Could you post a video clip of the output? It sounds like the effect from "A Scanner Darkly" perhaps -- loved that effect in that movie!
More relevantly, if people actually read the blog post, they'd see that this has been merged into the core Python extension, and is being worked on there.
>"... Hawaiian Kingdom"

Who is the king of Hawaii?
For further background, here's Will Falk, one of the earliest protest organizers, explaining his reasons for protesting -

https://deepgreenresistancegreatbasin.org/civilization/colon...
Gab's own (verified) Twitter account posts anti-Semitic slurs and retweets white supremacist garbage. They openly court white nationalists. They've since tried to delete posts, but, of course, many of them have been screenshot. They don't even have the courage of their own convictions. The idea that they just happen to have had some nasty users is a scam that they're trying to get the rest of the world to buy into.

Argue whatever you'd like about whether, on the modern Internet, they're entitled to use mainstream providers on FRAND terms. You can build a coherent argument on either side. But please don't amplify their bogus claim of being an innocent victim.
Comparing man made emissions against natural is somewhat misleading. The damage caused by carbon emissions is related to its atmospheric concentration, which _is_ increasing at an alarming rate. It doesn't matter if man-made emissions is 3% or 300% of natural rate, as long as the net emission, as a percentage of the carbon already in the system, is large. Carbon naturally exists in a cycle, so natural emissions is always roughly in equivalent to absorption.
Third of Britons have stopped or reduced eating meat
Can you elucidate why the Finder is "garbage"? From what you describe it seems that you're not familiar with its conventions. As a Linux/Windows/Mac daily user, I have never been able to find an objective list of bugs or problems with the Finder. Are you sure it's not just unfamiliarity?
That's the sort of argument that was made in court, but see the link I posted above for more background on why they feel so strongly about this.
Nope, both spellings are fine: https://www.merriam-webster.com/dictionary/busses
He has what looks like a bot running posting articles from major new sources about 1 per hour. A couple of those articles did well on HN and those got him the Karma. Nice Karma gaming.
No it is many more than that. From the percent I remember seeing and the number of engineers Google employs, more like 1500+? 7 is a high, difficult to get to level, average employees are not expected to pass 5, but Google is so large that's a lot of people.

Google stock grants vest over 4 years, so 8 years ago doesn't matter, but there is something to just tenure in that yearly refresh grants really add up, and used to be similar size to the first grant, so pay would really escalate over the first four years for many (most?) people.
David Kalakaua was the last one, in 1882.

http://www.royalty.nu/America/Hawaii.html
Which MacBook Should You Buy? MacBook vs. Air vs. Pro
FastMail supports CalDAV. I use my FastMail calendar with Thunderbird (Lightning) and on my iPhone; works great. They also support CardDAV for contacts. /satisfied FM customer since ~2008 or so
Of course, the company doesn't need to pay you for what value you're able to create - they pay you what the labour market clears at, and pocket the difference.
I separately assume a salt is part of my hash function. Salts only help with rainbow tables (an admirable goal, but not my one here).

I can trust the site to deploy the correct javascript more than I can trust it not to steal passwords because

- That is auditable - it is impossible for a malicious site to do so without risking being caught.

- The HTML/JS can be served from static cloud storage that is far less likely to be hacked than the server running a DB verifying passwords.
Running JavaScript means parsing text from outside source plus executing the program from outside source. Both requires really complicated code counted by the unit of M LOC(Mega Line of Code).

It's still under-esitmating.
Also hunting (in stores, second-hand places etc) for particular records is quite an enjoyable experience and the climatic moment of finding something special compared to clicking a couple of buttons, and waiting for the download to finish
PanGu iOS 12.1 Jailbreak Tool: Everything You Need [How to Use and Download]
Iridium didn't escape national regulations. Why would this?

If this system is to be operable in China, an agreement must be reached. That might mean a firewall for all people in China, all Chinese citizens everywhere, or both.

Operating without permission from China would generate a complaint to the USA. The USA is obligated to enforce international RF restrictions on satellites operated by US companies.
> how to get access to the "real" filesystem.

If you click on the icon of your main drive, it will take you to the root folder.

You have to do the same in Windows, click on the C: drive.

How is this opaque?
Levels can be submitted here: https://www.levels.fyi/create.html

Compensation we get separately through this form:
https://www.levels.fyi/addcomp.html
That’s a beautiful vision of the future. But I’m pretty sure convincing my family to go live without human contact, might be difficult.

Some people can be alone, but most of us actually enjoy the company of friends and family.
The problem I always had with this was that Windows has this whole layer of objects and what might even be elegance in places all hidden under the hood, and unless you're a C++ hacker you can't actually work with most of it. CMD and the GUI tools never exposed half of it to you; Powershell helps, but it's all still very hidden and hard to get to.

In comparison, Unix provides all the tools needed to take it apart and put it back together again. When you do need to interact with some syscall interface, there's almost always a complete CLI around it. It really makes it much easier to get into the nooks and crannies, inconsistencies aside.
There’s a new space race: India vs. Pakistan
p.s., I'm reading up on the Burgundians. They do seem like a bloodthirsty lot. Thanks for pointing them out.
A new approach to liquid-repelling surfaces
FU money and exfiltration to USA. Kids go to US colleges and live happily, ever after. Just so he doesn't insulted :) mention that Iran could be better without the mullahs.

No doubt, USA already has the list of employees and knows their weak points.
As they should. It isn't a charity. A candidate without competing offers also represents a greater risk, because you don't have that additional signal of "somebody else wants this person too." But compensation ramps up quite quickly if you are good, likable, and not too unlucky.
Besides what has already been said by the 2 parent comments: Textmate grammars had the advantage that setting up syntax highlighting for a new language (e.g. for a simple DSL) was a pretty easy and low overhead process, and that enabled getting highlighting for dozens to hundreds of languages in lots of editors.

Developing a language server is however a more complicated task - even if there would be a template that does most of the boilerplate. Therefore I would continue to welcome in-process highlighting mechanisms like textmate grammars and tree-sitter as a baseline. They could be augment by LSP features whenever a plugin author feels it's necessary.

Regarding tree-sitter itself: I've read the documentation, and it looks super-interesting. I've developed textmate grammars before and wasn't really satisfied with them, tree-sitter looks like it can provide a lot better results.

I would love to see those getting into VsCode and other editors too. Then good grammars can again be shared between editors! Maybe getting it into VsCode is now easier, since both are now somehow Microsoft editors? :)
never once in all her years of being in classrooms with computers...has there been any opportunity to learn to type...I'm agog we don't invest in such a basic skill in our schools.

I know typing used to be taught in typing classes at school, but, these days, is there really a need for that? Typing-tutors can be downloaded or used online (e.g. http://www.typing.com or, as mentioned by a commenter above, http://www.typingclub.com ) to develop typing skills on one's own time -- students just need to be encouraged/mandated to use them.

Perhaps students should spend a few minutes in class trying them out to get exposed to them and then told that they'll need to demonstrate a certain basic proficiency by the end of the week -- I think some sites can save results for entire classes, schools, etc., so a teacher could just login and check results that way with a few in-class spot-checks to make sure students don't outsource the work to a ringer.

The programs are already gamified, but you could add a bit more on top by doing competitions for a prize or certificate or something. And you could do things like this over the course of the year to make sure people are keeping their skills up.

(Of course, if students don't have access to computers, then perhaps there should be a lab in school to give kids access, but, again, the programs can be run by the kids themselves during their free time or after school, etc.).
> you should absolutely be able to interview in the language of your choice.

Except the choice is between Java, C++ and Python. They are very clear about that, asking what your preference is during the scheduling phase.

I went through the interview process this year, and even tried to ask my interviewers if it was ok to do Kotlin instead of Java. It wasn't.
One of my friend working for a big tech once told me, if you go back in time, you'll see powerful men had many women. Why do you think at Google it will be any different? Being one of the most powerful organizations, it attracts power hungry people. Not only those who want money and fame, but those who want others to submit to them and make others do whatever they want. Cleary such people see sexual harassment in similar way as coercing a small startup to be acquired or be demolished.
Some speculated, efforts to increase diversity is to get executives access to more women.

Half of the women when given a choice between being ghosted or being promoted at a company, will choose to sleep with you in return of promotion/soft cornering etc...(as most of them are liberal and it happens behind the scenes anyways, sex is no longer taboo, Tinder hookup culture is very popular and accepted). Everyone will see your new Tesla and Instagram lifestyle but who will ask who you had slept with to afford this new car and lifestyle? No wonder, executives know this. Very few victims (most don't see themselves as victim but as hackers who gamed the system and ended up with more return) actually retaliate. Most are imposters, who don't believe they are good for anything. So they welcome any favour coming their way.

Executives aren't crazy to film while having sex as some other crazy hookup culture people who you might find on Tinder. Sleeping with them is relatively safe and more rewarding. They've reputation to lose and skin in the game.

Those executives probably slept with 100 employees before they got busted. Surely, they feel it was worth it.

I am simply outlining how the thing works so that people can fix the incentives around this and come up with a better system to fight sexual harassment.

Please don't fight strawman by downvoting because reading this hurts your feelings. Contest point by point, what is your company doing to avoid situations like these?
All of Qatar's traffic used to be routed through 82.148.97.69, though that was back in 2006-2007. At one point it was banned from Wikipedia, which unintentionally affected the whole country.

https://simple.wikipedia.org/wiki/User_talk:82.148.97.69
Good bandwidth and terrible latency is satellite Internet
Australian here too - I do remember occasionally using yellow US-style pencils but I think they were usually crappy knock-offs from cheap shops because the wood was always low quality, the graphite broke all the time and the rubbers (erasers) on the top were always useless and left black marks everywhere.

The standard pencil we had at school was just plain red with a straight cut top so you could see the graphite - I think a staedtler HB (bit like [1] but didn’t have the ‘minerva’ brand name on it). A lot of automatically marked tests needed 2B pencils to mark the answer sheet and we almost always used the red and black striped ones like your link.

1. https://www.supplyme.co.nz/shop/Stationery/Pens+Pencils+Mark...
Is this an accurate representation of comp? For the equity portion, for example if the value is calculated at 2018 peak stock market levels (RSU are granted in # of shares, not value of shares) then shouldn't all the equity values be discounted by the 10-20% drop in FANG stock values?
The energy efficiency advantages in class D are incredible. When my old Technics receiver stopped working because it started overheating, i replaced it with a class D amp on a half-credit card sized circuit board from dx.com and taped it to the back of the TV. 20W per channel, which is plenty for my casual TV watching. The Technics was the size of several stacked pizza boxes, with fans and heat sinks etc.
I mostly code in Python. Debugging on VSCode is a nightmare. Especially if you're debugging large matrices in numpy or PyTorch. VSCode just hangs if you try to evaluate large matrices. PyCharm on the other hand works like a breeze. Not to mention the PyCharm debugger is so much better than VSCode.
I'm pretty familiar with XSS prevalence and I agree with them.
It's not about buying the office. It's about getting your message to be seen without investing huge resources. No one with a job can afford organizing rallies and laying significant groundwork unless they are already rich, backed by major party or otherwise having most of their time free to do political activity. Ads are cheap way to try to get people to look at your message. It challenges monopoly of the media and gives platform to new players.

I am not sure why you talk about buying votes. Getting people to look at your message is not buying votes. Making crazy promises like free cash for everyone or flats for everyone as human right is.
Fifty Fizzbuzzes
If we can’t have the list of scissor statements, I wonder how much work it would be to generate the lists. He mentioned spending a few k on AWS resources, but shouldn’t be that expensive if you already own a few workstations and servers with decent GPUs.
A password manager is a client side method that only works for people who opt into it, Google needs to deploy a server side method. Likewise with hashing my own passwords client side. HSMs.

As for writing my own crypto. Indeed, if anyone actually used the scheme I suggested they would be making a mistake. I wrote it not to be used but to demonstrate that we can do better in an easy to understand way. Unlike me, Google has the resources to read the papers, do the math, carefully implement this, and do it properly.

Keywords for how to do it properly include "zero knowledge password proof" and "password authenticate key exchange".

PS. It's irrelevant to this conversation, but putting all my passwords into one program has always struck me as a monumentally stupid idea. I use one for passwords I don't care about, I memorize unique passwords for passwords I do care about.
A 6-figure salary, + bonus, + options / RSUs is quite achievable for an above-average software engineer in London.

It's much easier to do as a contractor / consultant. If you are looking to be hired as a senior engineer, it's hard to get an offer much over 85k, but that number is even easier to get to.

London is not northern CA. Depending on whether you value outdoors or culture, it might be better or worse. I far prefer London, and proximity to the continent. CA is fantastic if you like outdoor stuff though.
among retail investors, maybe. not among pros
Nginx-Socketify
With credential stuffing, isn't it unlikely the perpetrator wants to make more than one or two attempts per user ID?
Become a Jenkins Ninja on MS Teams
There's always been explorers. It's biology.
My experience with taxation out side of the US, currently Australia, is that they are ridiculously reasonable and probably more on my, that is the business owners, side that I would like them to be.

It would be a net benefit for everyone, including the US, if it's broken taxation system becomes a national emergency and finally gets fixed.
{quote} ... I connected it to a pair of 30-year-old, three-way Panasonic speakers, which I frequently use for testing.{/quote}
Ummmm. I'm tempted to dismiss the author's entire project based on that. Why not use a pair of decent speakers or some high-end headphones like the Stax electrostatics or Audeze planars? Weakest link in the chain and all that.
The thing is that my whole management chain is going to the protests and have said they are for it (and they also have been changing sexual harassment policies the last few years anyway). The protest has lost a lot of value because the people we ostensibly protest against are already there agreeing with us.
Thanks! I think I will
It's also showing that the Internet is being controlled by an oligarchy.

If a site cannot get hosting and IP connectivity from /somewhere/ then there's a problem in the system.

This is a definite wakeup to the fact that if you want to do anything a little bit controversial (freedom of speech is the very first US amendment, how controversial can that be?) then you need decentralized, uncontrollable systems like Tor hidden services and NameCoin.
I am not super familiar with all of the variations on LL(k) parsing, but my understanding is that the reliance on multiple tokens of lookahead makes incremental parsing a bit more complex, whereas it fits very cleanly into the framework of LR(1)/GLR parsing.

My hope is to make parser development with Tree-sitter easy enough that you wouldn't have to pave a new path for your structured editor (unless you wanted to) - you could just create a Tree-sitter grammar for your DSL and implement your custom editing logic as an Atom package.

I have tried to make Tree-sitter more approachable than, say, Bison in a several ways. Usually, once a language's basic structure is in place, the process of adding a new feature is pretty declarative and easy. But it's still true that in the course of developing a grammar from scratch, some understanding of LR is important.
can you give a brief history on the use of the word 'embedding' ?
This comment is at once so endearing and so alarmingly indicative of the bubble we live.
The Jupyter notebook is here: https://mybinder.org/v2/gh/quasiben/fiftyfizzbuzzes/master?f...

The code on GitHub is here: https://github.com/vihart/fiftyfizzbuzzes/blob/master/Fifty%...
They absolutely will not buy time. The developing world is, right now, growing in carbon emissions at what appears an exponential rate while the West is reducing emissions, both absolutely and per capita.

We can't succeed at what the climate advocates think we need to do without addressing the problem of the developing world.

Let me state the point more clearly: if the West drops to ZERO carbon emissions yesterday, it won't matter.
Not sure which bit you're replying to, but with this constellation latency is expected to be < 100 ms, more likely on the order of 35 ms.

I've heard reports of the test satellites achieving 25 ms, but haven't found a source yet.

The reason of course is that these satellites are in low earth orbit, so only a few 100 km away, rather than geostationary orbit like most internet satellites that are at 35 000 km away
Have you thought about a pure Javascript implementation of the parser, or compiling the runtime to WASM? Since a parser shouldn't really use any platform features it should be possible - and it could enable using the technology in pure browser based editors (like Monaco, CodeMirror, etc).
Yes you are right, my definition of "touch typing" was incomplete because it didn't mention the tactile element. There have been some prototypes where the screen has a surface that can produce "bumps" in response to electrical impulse, which could lead to having on-screen keyboards with some sort of tactile feel[1], however this is not available on the consumer market just yet.

[1] https://www.youtube.com/watch?v=JelhR2iPuw0
You can continue using your email address for your Google account even if you've got someone else handling the mail now. You can also sign up for a Google account with an email account from any domain or provider.
Thanks for the tip! Interestingly enough, this appears to be browser-dependent. Apparently including a pdf in notebook markdown using an img tag like

<img src="DenverUPbExampleData/KJ04-70_distribution.pdf" align="left"/>

works in Safari but not Chrome or Firefox. Switched to SVGs for now.

So much for reproducibility :/