skysight-inc/HackerNews huggingface dataset:
It seems like most franchisees are not starting a business, they are buying a job.
Here Are 6 Ways to Gain from Blockchain Marketing Technology
> the absolute wealth of people does not stop discontent and violent revolution. The gap is what matters.

So, politics of envy. It's a disgusting state of affairs if it's not enough to enjoy a high quality of life, but it's also imperative others' must not be significantly higher.
> Not a lot of good solutions.

There are a lot of easy improvements; there's no perfect solution, but this is a perfect is the enemy of the good situation.

> Can't let everyone in.

There are two halves of this:

Not everyone is personally acceptable as an immigrant; there are reasons for prohibition based on individual history.

You can't let everyone who isn't individually prohibited in for free because assimilating immigrants has costs.

The US has a basically reasonable approach (perhaps wanting some tweaks in details) for the first, but less than ideal handling of the second; most notably, aside from issues with the design of some of the available visa categories like H-1B, hard per-category caps and even moreso, per-country caps on visa categories exacerbate supply/demand imbalances for which the natural consequence is illegal migration.

> No one cares for merit based immigration like other countries

US preference categories, which are the basis of virtually all legal immigration, are merit-based, though you may not like then particular notion of merit on which they are based.

> and no one wants quotas

We have both per-category, and within each category per-country, quotas, and lots of people want them (and many want them to be smaller.) It's not a good policy, but many people absolutely do.want them.

> because it'll clamp down on immigration from countries with large populations (China and India).

Well, the particular formula effects countries with large number of people qualified and seeking to immigrate, which depending on the Visa category includes Mexico, the Phillipines, China, and India (and I think a couple others in a few categories.) Population has an indirect role, but it's not the direct driver of quota imbalance.
" I don't think OCD is a cause for concern unless it interferes with your daily functions"

When I ran into the formal definition of disease in University, that definition let me discard a whole load of thoughts and worries.

It's like that pipe of nirvana and heavenly thoughts that I was basking in and drinking up heavily? Well that's a sewer pipe now. Shut your mouth and let it pass.
Mastodon metal AF what's wrong with that?
enjoy your made up rights, euroslaves
it’s just an interrogation tool. everything about it makes more sense holding that in mind.
Startup Darling Berlin – Dethroned at Home?
Another pet peeve of mine is the absence of a discussion of why turbulence is a hard problem to solve. The reason is actually quite simple: the computational cost for directly solving the Navier-Stokes equations is far too high. They could have shown this in the video; the estimate is actually rather straightforward. (Estimate the "Kolmogorov scale", the scale of the smallest eddies that need to be resolved, and combine that with the CFL condition to get an upper bound on the stable time step, etc., as I recall.) So in practice people typically solve lower cost (but less accurate) equations derived from the Navier-Stokes equations. They could have briefly described the "closure problem" for this, and maybe some basic turbulence models. Well, they could hypothetically do all this in a future video...
I'd like to hear HAL in a baritone anyway. "WHAT ARE YOU DOING, DAVE?"
This is answered in the second paragraph of the article, so it seems like a waste to ask it here.
The 44-year-old operating system bug
> C++ is not a strict superset of C.

I know that. I use both C and C++ practically daily. The post was partly joking. But only partly (for example of course I could live without templates if really needed but seriously they make some jobs a lot better and easier). Hence I aptly phrased it some kind of C hoping (idly it seems) no one would trip over it because it's obviously not C.
I'm not just referring to the commute though, I mean is the neighborhood you're living in itself built around not requiring a car? I live in a dense part of Manhattan where the majority of people don't own vehicles and most needs can be fulfilled simply by walking a few blocks; is this true of South Hayward?
What is easier or more reliable about iMessage?

Consider that large portions of the world (among them Germany with its extremely old population) use WhatsApp pretty much exclusively; they don't seem to have a problem using it.

Whereas something like iMessage would be a complete nonstarter with its semi-iOS exclusivity.
The point of the article is that a unusually high number of businesses targeted for these actions happened to be critiques of corporate 7-Eleven, or engaged in lawsuits.

And yes, I would worry likewise if it were taxes used as the underlying cause for these kinds of raids.

Again, I'm explicitly not calling this "fascism". I said "emblematic of fascism". I actually don't think we've descended into fascism yet. But as a country, we're getting comfortable with situations that could lead us to a very bad place.

Finally, could someone please vouch for my flagged top-level comment, as it's not breaking any HN guidelines as far as I'm aware?
And the liability for lawsuits from employees, customers, or the government!
I found https://tomharrisonjr.com/uuid-or-guid-as-primary-keys-be-ca... has a good rundown of the pros and cons.
Data from Millions of Smartphone Journeys Proves Cyclists Faster in Cities
Maybe a I am an outlier, but I only use iMessage. If for some reason I have to message an Android user, I just let it fall back to SMS. In the US, unlimited SMS is a thing.
>Previously used Lastpass for 8 years.

As a longtime Lastpass user, this is the comment that made me go check it out. Are there any big pros or cons you have run in to compared to Lastpass (aside from the ones you listed)? I'm asking about actual functionality, not about the it being open source and such.
Related: https://www.ted.com/talks/ben_saunders_to_the_south_pole_and...

https://www.ted.com/talks/ben_saunders_skis_to_the_north_pol...
I can't talk about proposals, but for estimation, I recently started using three-point estimation method which I highly recommend: https://en.wikipedia.org/wiki/Three-point_estimation
Was it Stroustroup or Malmsteen who said: "I have a philosophy: More is more!" ?
I think the basic idea is sound. If all you're after is learning to program and running little toy programs, then web based REPLs are a great choice.

My primary development environment is vim combined with CLI commands (and some wrapping with vim plugins to simplify the workflow). However, when I want to play around with something in Go to figure out how it works I will often go to The Go Playground (https://play.golang.org/) and play around there.

However, as soon as I'm done (and maybe shared my findings with a peer, which I can't do as easily with my local vim + CLI environment) I'm back to my regular development environment because very little that I work on is trivial enough to stay in Go Playground.

All that said, I've seen plenty of developers who seem to get by sticking to the basic feature level of Notepad. Whatever works for you.
When I last tried it, it didn't support generating passwords with English words ie. A 4 work Random password: hack-flipper-jump-london.

Edit: looks like it does support this now.
It's not a matter of belief. People of these times wrote down what they witnessed.

"Perhaps" is not an argument.

The first and only way to win a war is not to start it.
That lowest plan lets you connect a custom domain and publish to Read.Write.as -- there isn't much more to it that isn't already included in the free plan.

If you want to try out everything on Pro, though, let me know your username [0] and I'll get you on a trial.

[0] https://write.as/contact
Ask HN: How do you make sure your team completes the tasks they commit to doing?
What kind of criteria should you set for the team to meet their commitments for the sprint? Do you punish underperformers or just give underperformers less responsibility? If that's the case, how do you build up their confidence and velocity?
Amazon’s New Neighbor: The Nation’s Largest Housing Project
You are right, that was a bit harsh and ignored the profitability angle. However I think this shows that FB isn't an innovative company (à la spaceX, MS, biotech, etch.) and yet are perceived that way.
>Usable and capable compared to what?

Compared to pretty much anything - honestly. Pythonista is the gold standard. It has a fully feature integrated syntax highlighting editor, a built-in GUI form designer, graphics and media libraries for games, an integrated debugger, custom keyboard, a selection of Python third party modules such as scipy and Matplotlib, all the standard Python docs and tutorials and included module docs, full integration with share sheets, notifications, widgets, it's a universal app for iPhone and iPad, it integrates with the Github client apps such as Working Copy and it has built-in iCloud syncing for script folders. You can get Dropbox and Github Gist sync scripts pretty easily, I used to use an FTP server script a lot before iCloud integration came along. It's hard to imagine what else it could really need.

But let's compare it to the other major phone and tablet OS for a start. You even say so yourself. The dev apps for iOS are streets ahead of anything on Android. You seem to be arguing that in theory Apple's policies _should_ be holding iOS dev apps back compared to Android, but in reality that just isn't happening, even slightly.

I can certainly sympathise. About 6 or 7 years ago I was seriously considering getting an Android tablet because I expected the on-device dev story there to pull well ahead of iOS in the near future and wanted to be able to take advantage of that. What actually happened was I started using Codea, and when Pythonista came along I switched to that, and nothing comparable on Android ever materialised.

War story - I had to do a programming exercise for a job interview. I did most of it on my iPad on the train, including a custom compression exercise that involved writing my own bit-twiddling routines and a server remote control script using Paramiko, which of course Pythonista includes. I was remote controlling some Linux VMs running on my Mac in Virtualbox, using ssh from Python scripts directly from my iPhone!

It's a terrible shame and I don't understand why Android is so far behind on this. I suspect it's because the Open Source and Free Software communities have never really embraced Android and spent the time and effort to tool it up. Meanwhile Apple has been paying very close attention to this area and judiciously relaxing their rules in consultation with dev app authors. Whatever the reasons though, if you want to write scripts locally on a phone or tablet, iOS is clearly the way to go right now and that doesn't look like it's going to change any time soon.
I don't know how I feel or what I think about running mission control from a browser. Seems like it'd probably lead to lower defects to build something very simple very close to the metal — and probably not at a prohibitive level of cost, either. The advantage would be cutting out the OS, the desktop environment, the fancy GPU software, the browser, the JavaScript interpreter, the JavaScript dependencies &c. from the critical path. The disadvantage of course would be running homegrown software which performs some (but not all!) of those functions.

Maybe I'm wrong, though. I'm certainly open to being persuaded.
Ah yes, I left off the track-sc0 from my config. Good catch. I tried to stay away from regex or long strings. Ty for verifying that it looks ok.
> Wondering how they will address the current cryptographic scheme though.

The only cryptographic weakness Cure53 identified was that a malicious API server could exfiltrate encryption keys.

Cure53 deemed it a hard problem to solve. I wrote a proposed strategy for mitigating it: https://github.com/bitwarden/core/issues/392

Regarding Bitwarden's cryptographic security, a cursory read through their code yields the following:

* It's using RSA-OAEP to encrypt AES keys (EDIT: formerly "some data") https://github.com/bitwarden/jslib/blob/b4fad203b94da53d3369...

* It's using AES-256-CBC https://github.com/bitwarden/jslib/blob/b4fad203b94da53d3369... + https://github.com/bitwarden/jslib/blob/b4fad203b94da53d3369... + https://github.com/bitwarden/jslib/blob/2045e7047a66599b2c8a...

It doesn't appear to be authenticating the AES-CBC-encrypted ciphertexts in all cases, which makes me suspect padding oracles are still in-scope.

https://robertheaton.com/2013/07/29/padding-oracle-attack/

RSA-OAEP is the better RSA mode. (You don't want PKCS1v1.5)

In closing: As long as you're not for some reason storing unauthenticated AES-CBC ciphertexts in the server, the encryption is really boring.

(Boring is good for encryption.)
I generally believe that stating your hourly rate and providing frequent updates and milestones is a much better practice than giving an up-front project cost.

Software dev is a very difficult task to estimate. Giving an up-front project cost is either pushing uncompensated risk onto the developer, or overcharging the customer for hours of work that may not occur, depending on how tough the project turns out to be once down to the nitty gritty.
Thanks for sharing. Great read so far
Coming from ActiveRecord gem, pgbouncer has been great. I'd say the real advantage is transaction level pooling, which will free up connections when they're not actively in a transaction (vs request level isolation). I don't see how this is possible across a large number of isolated servers without a cooperating agent like pgbouncer.

I would advocate for pgbouncer at the DB ingress level and your languages connection pooler at the application level.
Except "blockchain" doesn't decentralize anything. It's decentralized in the sense that none of the big powers of the world care to try and take over things like Bitcoin, but it is fundamentally based on rewarding those who can gather the most autonomous resources.

Blockchains are one of the worst methods to decentralize anything, because they don't require any consensus from the "governed" - they do exactly what whoever has ansible/puppet/chef connected to the most computers wants them to do.

EDIT: Let's put a very real example on this - if blockchains controlled anything powerful, then there becomes two superpowers - nvidia and AMD. All they do is retool their business cycle so GPUs coming off the line go into N-months of burn-in doing blockchain things in an air-conditioned warehouse, and then get on-sold to consumers.

Blockchains reward compute capacity, and nothing else.
I agree here - the first few weeks after I discovered FS, I read it regularly, but after that there were quickly diminishing marginal returns.

Once you are familiar with the core mental models, most of the intellectual self-help genre (FS, James Clear, Ryan Holiday, Tim Ferris, etc.) is just rehashing the same core ideas over and over again.
Do you use a tool that supports this methodology or do you calculate it manually?
Microsoft alumni play one last game of hallway putt-putt before demolition
It was confirmed by multiple aircraft on Shannon ATC. It's certainly real and happened, but UFO is any unidentified flying object.
A line graph like that isn't easy to render or interpret once you have many hosts. Take the example in the blog post I linked: utilization of 300 host (5,312 CPUs).

Here's the data visualized as a line graph: http://www.brendangregg.com/HeatMaps/lines-allcpus-image.png

Here it is as a heatmap: http://www.brendangregg.com/HeatMaps/cpu-utilization-heatmap...

Which one conveys more information?
How is repl.it different from a bunch of other web IDEs that came and went without leaving a mark?
AI audio software: The future of technology?
> iMessage is not materially adding new feature against what Messenger and Whatsapp already offer

Sure it does: it isn’t sending all of my data to an advertising company.
Open source, free sync?
> I was generally horrified.

So was I and I immediately finished my relation with WhatsApp.

There’s no one there I can’t get on Facebook, Instagram or signal.
/**
* GCC and Clang extension to call cleanup function at exit
* from the function with pointer to given function as argument.
*/
#define defer(func) __attribute__((cleanup(func)))

#ifdef _CRUST_TESTS

// Sample destructor, to test defer
static void _tst_charp_destroy(char * * value) {
if(*value) {
free(*value);
*value = NULL;
}
}

// Test case
it(defer, "must deallocate object at the end of the function") {
defer(_tst_charp_destroy) char * s = calloc(1, sizeof(char));
(void)s;
}

#endif
This is so true and easy to overlook until a post mortem. A great exercise is to audit how connections are maintained in your application, before it's too late.
> why should the place of your birth dictate the rights and opportunities accorded to you? Why should nation states claim the right to bestow and strip citizenship?

These questions give rise to an ethical dilemma. On one hand you're absolutely right: The birth lottery shouldn't determine your opportunities in life. However, communities also have a legitimate right to try and ensure their continued sustainable economic welfare, which might be endangered if there are more immigrants over a period of time than that economy can reasonably handle.

This is why - again - economic development not only has to tie in with but often is a prerequisite for pursuing desirable ideals.
In my experience, it all depends on the client and the project size.

The larger the project, the more documentation, planning and budgeting. And no tools really help with this in general. But if it's big enough, I will do mockups, everything else is just a well formatted document.

For my regular clients I've worked with for years, a simple email/phone call > deliver product > invoice is enough of a work flow if the project is small.

A few large projects I've spent a few months documenting, planning and having client meetings before any work started. I suppose, some online collaboration tool could have been useful there.

But also I have large ongoing projects with long term clients where monthly work is done, and monthly meetings are held. But since most of my clients aren't technical, there's no need to involve them in anything other than front-end review, testing and publishing. So we get most of this done at a monthly face-to-face and a few emails.

I do have a nice formatted LibreOffice document template with header, footer, logo, etc... I tend to use this for new clients. (PDFs only though)
You make it sound like their leaving is probably a good thing.
Apple shares drop after iPhone supplier Lumentum cuts forecast
Telegram.

I know half of HN hates Telegram and I like it less than when I started moving (and to my defense that was before WhatsApp improved their crypto from close to nothing to state-of-the-art.)

It has served us well but I don't like the constant bragging combined with breaking a number of best practices and I'm looking for alternatives now and might start moving users to a system that stresses me less sometime during the next year. Alternatives right now are signal, matrix etc.

(Did I regret moving away from WhatsApp after they fixed their crypto? Not at all: they still uploaded all chats and sneakily tried to use all WhatsApp data to feed their spam cannon.
> I'm not one to stand by and allow someone to get away with making contrary statements backed up by false facts

To be blunt, teach yourself not to do that. If you can't, then, as you surmise, it is likely to damage your career significantly. Having witnessed several such incidents over the course of my career, I never came out of it with anything other than decreased respect for both parties involved.

Some arguments aren't worth trying to "win".
Well, I actually do all my professional work inside (neo)vim.

I even use to have a remote instance for developing and testing... I can definitely do all my work in a simple (multiplexed) terminal, whenever it is online or offline.

Of course, given a stable connection.
so your saying that in TCP, a connection orientated protocol, at each hop the router/firewall/kernel is _not_ doing basic validation to see if that connection is valid, and not coming from a spurious source?

The client does all this when you open socket.connect()?

no, no, you're not and no, it doesn't, which is part of my point. Lots more noise will be forwarded to the client directly, after all, stateful connection management is impossible. With more noise, comes a bigger attack surface.
John Titor will fix it for us.

https://en.wikipedia.org/wiki/John_Titor
I followed some of Mike Horn's trip last year. Unfortunately I don't know enough about the differences between these attempts and Horn's trip. Wasn't Horn's trip last year the first unsupported crossing of Antarctica?
Although, I guess if you hit the 'worst case' scenario, you look stupid?