skysight-inc/HackerNews huggingface dataset:
Interesting. Those that decide to self-host this stuff, do you ever worry about the maintenance burden? While obviously this doesn’t help privacy concerns and I’m sure certain other things, for those of us with less serious OpSec needs this looks like a _lot_ of stack to update, patch against vulnerabilities etc.

For me personally, I’m happy to cede some small degree of control and whatever else to a good quality third party provider who has a team that is paid to actively maintain and secure the product, leaving me to spend more of my limited free time with my family rather than debug why the letsencrypt certificate for my self hosted mail server/VPN/cloud store/whatever hasn’t auto-renewed correctly etc.

I’m sure there will be plenty of “i’ve ran my own mailserver since the 90s and nothing has ever broken” wizards here, but everything works until such time as it doesn’t. I’d be curious to hear from people who have had trouble.
Great tool! One bug: As soon as I remove the last `div.item` the whole `div#root` becomes empty hiding the whole UI but the `nav.navbar` (Chrome 70)
I'd like to hear you elaborate. You seem to be very invested in your concerns, but it's hard to understand exactly what they are.

A single, clearly articulated response would do a lot more than a fusillade of terse barbs to help others understand why you think this is a bad idea.
Maybe bring that issue to Bitwarden's attention on GitHub or other channels, and not just a comment here on HN?
How is it possible to write this article without mentioning MAD? The presence of nuclear self defense is what keeps nuclear armed nations from engaging in aggressive wars with other nuclear armed nations.
> SCTP is a plain text protocol,

There's an old phrase: better to keep your mouth shut and be assumed a fool, than to open it and remove all doubt.

SCTP is not a plain text protocol. I'm not sure how you managed to convince yourself of this one.

Here is the bit-by-bit format of the SCTP header, in case you were ever confused again:

https://tools.ietf.org/html/rfc4960#section-3.1

In the above post, I was talking about SCTP over UDP, which is an IETF standard already. You have moved the goal posts by talking about unencapsulated SCTP. We all agree that this is a tough problem. However, QUIC is also encapsulated over UDP, and when encapsulated, has the same advantages / disadvantages as SCTP over UDP.

SCTP over UDP over DTLS already constitutes a good portion of web traffic, since WebRTC (and hence technologies like hangouts, facebook video messaging, etc) is based on it.
I feel that I have sufficiently explained my thesis through my other comments.
I don’t like the name. RTTY[1] is a thing, and this repo is not related to that thing.

[1]: https://en.m.wikipedia.org/wiki/Radioteletype
First You are Awesome for wanting to help out!

Second I'll let you know that this is actually incredibly difficult. Generally speaking NPO (503Cs)aren't set up for technical volunteering. so you will have to search a little. They generally default to paying consultants mainly due to just a complete lack of familiarity.

Here's a couple of strategies:

- find a charity that you are interested in volunteering to. Charity Navigator keeps tabs on them and you can find a charity that fits what you are looking for. Email them and hopefully they will contact you about helping.

- Reach out to whatever University is in the area. The computer science department will often get requests for help with pro-bono projects... they can probably put you in touch with the right person/ project.

- https://www.donatecode.com/

- Open source! Don't forget about open source projects. they need love too

- Organize Charity hackathons and get people together (Here's one we ran that was enjoyably successful: https://www.meetup.com/IPAs-and-APIs/events/249340851/)

and lastly if you want to give us a hand we'd love some help (https://github.com/jppope/academic-intervention ). We're working on a project to help reproducibility and open access in science. We work on the project every Thursday night after work. We have a couple of PhD candidates advising and a small team of coders working on the build.

Hopefully these suggestions help! I've had similar problems trying to give my time and technical skills away for a good cause, so I feel your challenge.
I agree. This seems to focus on practical information rather than the history of the language itself. How is the name of the language's creator something that you need on hand while working with the language? It is a handbook, after all.
I think you can usually say if something will take hours, days, weeks, months or years. Anything more detailed runs into problems.
Facebook Fugitive Paul Ceglia’s Three Years on the Run
Thanks for the memories. The last cameo is going to be very emotional for viewers.
This is my approximate proposal and estimation process:

1). This is a new and unproven client, and if so, I go with the gut feel estimate e.g. 3 months, 2 weeks, 6 months to see if they understand how expensive software development (or any custom professional services) could be.

2). Understand if a rough or precise estimate is required. Are they looking for a fixed-price bid? Convince them that fixed-price is not in their interest. If the client insists on the fixed bid and the project is large and undefined, bow out. If the client is looking for a rough estimate, or the project is smallish (< 2 months), continue.

3). The client relationship is existing or the client and I are on the same page with the rough costing. If the project is large, explain that the estimation task is large and time-consuming, and ask to be compensated for the task. If the project is small (<2 months), eat the estimation cost.

4).
a). Gather understanding and very rough requirements over several meetings, and create a document capturing this information.
b). Procrastinate and then break down larger system areas into "epics"
c). Create a set of releases that each deliver value to the customer
d). Estimate each "epic" and assign reasonably buffered estimate to each release.
5). Walk the customer over the document, timelines, budget estimates.
I knew this day was coming, I was waiting for how I might feel for me to experience the death of someone that inspiration for me. But unlike musicians and actors that often die 1/2 or 1/3rd (or 1/4th) this age, I was expecting and content with the outcome of his life.

Aside from the shock of the headline finally coming out, I think I can be content just saying so long.
Project VisBug: an experimental design tool in the browser
It is boring. I got into it because I did electronic warfare in the military. But it has its uses.

Plenty of other stuff is boring and mostly useless, e.g. most of the raspberry pi stuff I've done. A $20 Google Chromecast or Roku is wayy less of a PITA than a rPi media center but I did it anyway to learn to hack it together. Same thing with a lot of radio stuff.

And at like $30 bucks for a baofang and about a week or two of study for the technician license it's not a lot of cost or effort.

So what would I do with it? Aside from a backup when hunting, just talkin w/ folks -- I'm in central Canada, so it's a far apart place with spotty internet access -- and I consider messing with radar tracking and even something more like a look-down-shoot-down style of radar, mostly as a hack to see if I can do it.

Lot of demand for Radio Engineers if you want to do full-time cell phone or wifi stuff, too.
Scientists bring polymers into atomic-scale focus
Even if YouTube could afford to do this, nobody else could, which would lock us into an EU-sanctioned YouTube monopoly...
Where did you find it? I’ve read some of the associated writing and didn’t find it convincing. But I would like to see the film.
I'll put it this way: "perfection" is too overloaded of a word to be particularly useful in this context.

I prefer to say it this way: I want software to adhere to a contract. That implies that we want people that use the software to understand that contract. To be more precise, I'd say that:

(1) a good contract defines the scope of correct behavior.

(2) a contract may (or may not) give some bounds (or constraints) about what happens outside of the scope of correct behavior
Civil law copyright does not have enough safe harbor provisions for that.
SEEKING WORK | Full Stack Developer | Dominican Republic | Remote
Full Stack Developer with 9+ years of Software Development Experience with 2+ of them working as a freelancer.

* I can build a Product on my own (Frontend, Backend, Software Architecture, gather requirements from Customers).

* I have plenty of experience working with Angular 1 and 2, React, NodeJS, Android and Java on the backend.

* Functional Programming experience (Javascript, typescript, and Scala)

Specialties: Javascript (ES6+), Java (8+), NodeJS, Angular 1 & 2, Play Framework, JAX-RS, Android

You can reach me at pedroantoniohidalgo at gmail dot com

Medium: https://medium.com/@pedroantoniohidalgo

My Online CV: http://pedrohidalgo.me/

Cheers,
Most of their outages appear to be regional, and only part of their site. This one also appears to have been regional. So it's hard for us outsiders to know the statistics.

These kinds of outages are pretty typical for "move fast and break things" development -- instead of spending huge effort making sure that no outage ever happens, spend effort testing and limiting outages to a small part of production. The intended benefit is much faster development.
Total agreement on the market opportunity. I'm not technical in any way like most of the people commenting here. I run a small financial planning business and I'm paying "a lot" of money to Typeform and to Wufoo to gather client data. Both of them have their advantages and disadvantages but I'm ready to move on to something else if it fits my needs which aren't that complicated.
For people wondering why people in cults do appearingly 'abnormal' things, there's science to this madness.

One is escalation of deviant behavior. Which means over long periods of time behavior slowly becomes deviant after past behaviors become normalized.

So no, people dont just join a cult on day 1 and on day 2 they kill themselves. It's a slow ramp up. It might start with singing and songs, or lectures about the after life. It might then escalate to giving everything up to the leader. Like money, possessions, etc. It then might lead to abnormal norms like dressing up and or acting out sexual fantasies that at first seemed a little strange but over time normalizes. By the end of a 3 year run you can have all kinds of horrific acts that appear completely normal to people on the inside but horrible to outsiders because we didnt come along for the ride.

I can dig up my college notes and books if anyone is interested.
>Why, do you work on TMW?

oh, no. i'm just curious
This is a great idea. One interesting consideration would be how it would handle symlinks. Would it follow them? Could that be used as an attack vector to exit the user-specified directory?
Super interested in this, will try it out. Thank you for building it.

A couple of questions:
- Can I deploy this to a Digital Ocean droplet or similar? (I am assuming it's the case, but just checking).
- There's openvpn, and there is pi-hole. Can I assume that if I connect a device to the VPN, I'll also get ad blocking via pi-hole as a bonus, or do I have to edit my DNS servers on the device separately.

A couple of software suggestions:
- I'd love to see Wireguard instead of openvpn. The setup/speed is just amazing.
- I'd love to have Matrix (https://matrix.org/blog/home/) as a messaging option
The problem is that the lowest paid workers everywhere are those who are going to buy a cheap laptop or phone and who aren't going to make choices intended to keep other workers from being exploited (They can't - their other choice is not having a lap or phone at all).

The solution can't come from consumer choices. It has to come from either labor militancy or the state putting forward some kind of solution - basic income, minimum wage or something else.
I actually wonder about this too. At my previous job, nobody was using IntelliJ despite developing in Scala and Java. The code base was complex, not using an IDE had a noticeable effect on the kind of code people were writing. The code was much less cohesive, and looked more like a series of scripts than well architected.
In Denmark the law is very clear on what you can require in a non-compete, and what level of compensation you must at minimum include. Maximum of 12 months, and they must give you a 150% old salary one time payment at the onset. And if you are either unemployed or working in a significantly new job type after 3months they must supplement your salary up to 50% if you old one for the duration of the contracts.

Owing to the very clear rules, I have never heard anyone from Unions saying they where unenforceable, so I’m curious if you have any reference on that part?
When Talking About Young Voters, It Is Essential to Analyze Attitudes by Race
This looks really nice, and is similar to my homelab, except that mine took many tens of hours to setup and tune.
Since someone else went to the trouble to explain to you why that argument is neither the law, nor logic[0], I’ll spare us the repetition and just assume you are arguing in bad faith.

0: https://news.ycombinator.com/item?id=18319358
Yes, and that would be fully warranted. One is a criminal organization that kills dissidents and is entrenched in corruption. The other is the Canadian government.
Within my company, we list tasks and assign a duration and cost to them (could be fixed, hours or days). We use this to generate a quote. Our software of choice is the projects module of https://usebx.com/app (we built this, and it's a glorified to do list, but it really works for us, even on large complicated projects).

We make it clear to the client that the quote is indicative, and may go up if their requirements/operating environment turns out to be more complex than originally described.

If they try and pin us to a fixed cost, we generally refuse the project, just because people are very bad at keeping track of what they originally asked for, even when it's in writing.
Retirees have less of a concern of future, hence they are less likely to abuse drugs. Pensioners also have the necessary income, and will not suffer income-related problems.
You're dead wrong, unfortunately. I was just in a thread on a Tesla forum about a wireless phone charger kit, and people were bragging about cancelling their order from one place that sold it for $x in order to buy it from another place that ripped it off and sold it for $y.

There were justifications, of course. "oh, they're all made in the same factory anyway". "company A probably didn't even design it in the first place, they just want you think they did. It's all marketing". "They didn't lower the price when they removed this one component that's no longer needed".

These are all people who don't need the gadget in the first place, and can easily afford to pay the higher price for it. In fact, they were going to in the first place, before the cheaper option came along. They think they're wise consumers. They think they got a bargain. They think you're a sucker if you "overpay".

Lots of caveats, sure. I have no idea who designed the product. Maybe they're both ripoffs of someone else's part. Maybe they are built in the same factory. Maybe the only difference is who is making a huge profit off the markup, and how much they're making off of it.

But the point stands. People want to pay as little as possible, they feel virtue in that, and they'll invent reasons to justify paying less, no matter what.
Yeah, it's just a combination of WebRTC + TTY. Not really the cleverest.
I’ve found that “educate” is a losing game.

By all means educate, but don’t forget that

1) there’s a never ending list of things to educate people about, from climate change to personal finance, cyber security, fake news, hoaxes - and those are the flavors of the current cycle. There’s already too much to teach people

2) it doesn’t always take- and people are often too busy to sit and absorb more info. Especially that which is not directly linked to their immediate goals.

Finally - I think fixing learning is a proxy for making society work properly in the first place. Educating people is not the solution, but a side effect of getting things working correctly - meaning affordable education, nutrition, healthcare, safety, good teachers, available jobs- these are all pre reqs for teaching people, and having them be able to learn and absorb information.
Oh, I see. You intend to use purely EC2 or GCE instances and just run everything one would run in a colo on them. All right.

That's a pretty manpower intensive way of operating. I think the fact that you get cloud agnostic this way is probably not worth it.
you lost me at Angular sorry...
I'm sure this was just a clone or a body from an alternate dimension and we'll see the character resurrected in the next season.
IMO mutually-assured destruction only really guarantees that powers won't use nukes against each other.
Simple and clever. I hope it works. Also; how about FreeSalad, you know, something for the health conscious? ;)
Cat is already out of the bag :)

https://savannah.nongnu.org/projects/rtty/

They do call out the potential confusion with radio.
Man, I just thought he would live forever. Rest in peace.
Stan Lee had a profound influence on both my childhood and adulthood. I can't even imagine how many other people he's inspired and touched through his works. Rest in peace Stan Lee; you will be remembered by all of us.
I know it's hard to pick, but what do people think is Stan Lee's greatest creation?
As I suggested - the photographer may decide to highlight the brush strokes, for instance - or subdue them. Both approaches would be a faithful (as such things go) reproduction of the original artwork; its appearance would depend, among other factors, of the light you saw it in.

That being said, I am not convinced such reproductions should have full copyright protection on par with that granted an original work of art - but there ought to be some mechanism to recognise the effort and skill which went into creating it; otherwise there would hardly be any incentive to create high quality reproductions.

Tricky, that.
You are free to stay on C89 or C99. They are not going away anytime soon, too much code relies on it.
MAD is not necessarily a silver bullet preventative here. If two nuclear-armed states are fighting, for either of them to bring out the nukes would be a huge, difficult decision. It's entirely possible to imagine them settling into an unspoken "gentleman's agreement" to stick to conventional weapons only, as long as the conflict stays within certain parameters (i.e. the war doesn't pose an existential threat to either).

India and Pakistan fought a war in 1999, despite both having sizable nuclear arsenals (see https://en.wikipedia.org/wiki/Kargil_War). The risk of escalation kept the scale of the fighting limited, but it didn't prevent the war altogether.
I don't get the incessant desire for terseness by seemingly the majority of programmers. Terse != better. I'd much rather see

area = width * height

then

a = w * h

As a simple example but it seems most programmers feel some sense of accomplishment the using the least number of characters and lines possible with no though to readability or maintainability.

I'd much rather see

const areaOfRect = rect.width * rect.height;
const areaOfCircle = Math.PI * circle.radius ** 2;
if (areaOfRect > areaOfCircle) { ...

then

if (rect.width * rect.height > Math.PI * circle.radius ** 2) {

...

Even more controversial I'm not sure I like the new common pattern of destructuring as in

const {first, last, address, phone} = props;
...
...
<div class="name">{first} {last}</div>
<div class="address">{address}</div>
<div class="phone">{phone}</div>

vs

<div class="name">{props.first} {props.last}</div>
<div class="address">{props.address}</div>
<div class="phone">{props.phone}</div>

Because the second style provides more info on each line. I know where the various values are coming from where as I don't with the first style.
We're talking about places where they don't even bother to put up nets because it's cheaper to scrape them off the ground.
Cure53 just brought it to their attention, that's what this thread is about.

I'm simply questioning their justification/excuses for not fixing an issue Cure53 quite correctly flagged. Me opening an issue on Github that mirrors one from Cure53's audit report wouldn't be constructive.
Once they become big they will be forced to keep that data. It is really difficult to force them to change the client or the protocol but not to force them to keep data they have access to on the server.
Nice tool!

It would be really nice to be able to save the estimate to send to clients. Don't necessarily need backend for that - we can store data in the querystring for a fast & easy hack.
Stan Lee: Marvel Comics co-creator dies aged 95
It kinda surprises me that Google is the one to jump on this rather than Mozilla given that Mozilla has already implemented version of a lot of these APIs (at least the mobile-related ones) as part of FirefoxOS. I guess maybe not having that skin in the game anymore prevented those APIs from becoming standardized?

But these are also very useful for desktop applications. Anyways, this is a great initiative, it's about time a real effort was made to close that gap.
Kudos to the work that Google continues to put into optimizing v8. For me async/await is makes a huge difference in terms of the developer experience with Node,js and addressing the remaining performance and debugability issues is a huge win.

The benefits of the v8 engineering efforts continue to multiply beyond just Chrome and Node.js with new uses cases like Cloudflare workers springing up. Even more so when you add WebAssembly to the mix.
they certainly can and have referred their cases to law enforcement agencies for criminal investigation
The price of the device is not at all correlated worker exploitation. Genuine apple devices cost 10x an average phone you could get in China, yet who does Foxconn produce phones for?
I wish this botnet would delete the infected hosts facebook accounts.
Like it asks fb for deletion, then hides the confirmation mail. After 30 days when the account is permanently deleted , it would erase itself from the host + patch the vulnerability.

I would've awarded the worm author the prize for contributing to the mental wellbeing of the society.
Intro to Git, Linux and Open Source Development
The Stan Lee cameo.
Sysget 2.0 released: The package manager to rule them all
But other companies can build their phones without such appalling working conditions? Don't they?

https://www.theguardian.com/technology/2017/jun/18/foxconn-l...
Let me preface this by saying I don't want to diminish what these guys are doing at all... this is an incredible feat, no matter what.

However, I'm genuinely curious, and I'm sure other people are as well: Looking at the map, the definition of "across" Antarctica seems a little bit squishy to me. Does crossing one small portion of one side of the continent count as going "across" it? Is this the New York Times trying to grab attention with the headline? Is there some known definition among these types of adventurers as to what counts as "across"? Will there be debate later?

I suppose Charles Lindbergh didn't exactly fly across the widest part of the Atlantic either... still, I'm just intrigued.
The rest of us that sees the world a tad more nuanced than whatever CNN spoonfeeds us realizes that there have been numerous conflict, ethnical-cleansing and wars since WWII.
How to Build a Vue Customer Service Chat App (ie. An Intercom.io Alternative)
Any readings on how European unions work?
99.998% sounds great, but 99% here not so much:
https://basecamp.com/3/uptime
It would be better if it would show a more precise number.
Damn... RIP
This is a great thoughtful reply to my terse, shallow comment. Thank you. It’s insightful