skysight-inc/HackerNews huggingface dataset:
Ah yes, "Sign up for the Microsoft Network"
Despite what everyone says, I've spoken to several different people at several different highly-regarded banks who say that they do, in fact, use floating point for money amounts in some of their systems.

What experience do people who work in banks have?
Nim forum is written in pure Nim[1] and is using httpbeast[2] as a backend.

[1]: https://github.com/nim-lang/nimforum

[2]: https://github.com/dom96/httpbeast

In terms of features it's powerful enough to build a Discourse-like forum enough. In terms of performance it's very well performing in the TechEmpower benchmarks[3] it is competing in. It even grabbed first place on JSON serialization on Cloud hardware.

[3]: https://www.techempower.com/benchmarks/#section=data-r17&hw=... and https://forum.nim-lang.org/t/1152#27100
He downloaded the source code, not the database, so no user data.
Still questionable to some degree, one could demonstrate the problem without a full download
Yes and that's a lot of work for what would be a two-liner in JS.

Every time someone says "just make a process and a supervisor, put it elegantly in the supervisor tree, go think through the failure modes, ponder a bit about these 3 or 4 edge cases and potential race conditions, and you're done! hooray!" I get a bit grumpy.

Elixir is awesome, but there's a simplicity to a single-threaded execution model that takes away a lot of the things that make concurrency hard.
yeah, Erlang-wise, most loggers have done these checks for years. There's always a big concern in terms of avoiding the most work possible as early as possible so all that filtering takes place early on.

The handler and filter structure with both global and per-handler filters is fairly clever as a way to turn these things on and off easily, and the module and level checks are done the earliest since they can allow to eliminate the most amounts of logs the cheapest way possible.
Simplicity: High-Assurance Smart Contracting
I can see how performance might be a concern but I've never run up against issues with this in my own implementations using redux-form. Maybe if you do some exotic stuff it could be a problem, but yeah, never had an issue with this.

What I do love is the use of redux dev tooling -- for literally every action on my form, I have a log of when it occurred and how exactly it affected the state of the form. This is simply awesome. Yes, there are probably ways to do the same thing with a non-redux implementation, but if I'm already using redux I get this for free in the same tooling I already know and love.

For what it's worth, I have in the past (before understanding the tradeoffs of where redux state vs component state makes more sense and trying to do everything completely 'purely' in redux state) foolishly tried to keep all inputs and other UI components' state in the redux store, in a completely hand-written element id based mess. I totally agree with the sentiment that it's not necessary or worth the effort to manage one-off component state in redux in the general case.

However in this specific case, redux-form encapsulates and manages all of that complexity and you don't have to think about it at all. Actually ironically other than the redux dev tools part I don't really care about the 'in redux' part. I just like the library and its API.
>A lot of the economy is driven by NGO's and that money all ends up in the pockets of the rich home, hotel and restaurant owners. Meanwhile the poor sell each other mangos and meat in the streets.

Sounds eerily similar to the situation things rapidly deteriorate from at the start of the book, which was set 60 years ago now.
How to develop secure applications using Azure Cosmos DB
What are higher visibility pastures that is not web frontend?
Pretty much every island near the equator looks like a tropical paradise. But appearances can be deceiving. A lot of these places are poverty stricken because of their distance from economic centers of the world. And many of these island paradises ( especially in the pacific ) have suffered ecological disasters due to introduction of invasive species by european explorers.

I think Attenborough did a documentary a while back on how the introduction of invasive cats, rats, snakes and even spiders would wipe out local fauna on these islands because the local fauna weren't used to predation. Pretty interesting stuff.

Also, the local population of these islands are suffering extreme health issues ( primarily obesity related ) due to all the junk food they are eating.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC1533815/

The nature is beautiful for sure, but it isn't all paradise. And we haven't even touched on the impact of global warming on these islands and the fact that some of these islands might have to be evacuated in the next few decades.

https://www.businessinsider.com/islands-threatened-by-climat...
Yes, it was necessary to download all the code to prove for example that it wasn't just unrelated data in that repo. Furthermore a big part of this issue is that database keys were stored in the repo. Source code of the site alone wouldn't have been so critical.
Timothee Cour who's a heavy contributor to both lang did a comparison 8 months ago: https://github.com/timotheecour/D_vs_nim
When buying a wedding domain, you can buy domains like .party and .dance, which adds a nice touch I think.
You can now create canvas prints with Unsplash photos and preview them with AR
User Agent sniffing, traffic analysis, port sniffing and new phones might even tell them. The carriers are already doing a lot of load balancing among all the devices attached to their network. It wouldn’t be too hard to detect.

Years ago AT&T sent me text right when I connected to my hotspot. I can’t see the tethering data use on AT&Ts dashboard but I can see usage per line.
Preinstalled crapware for Windows based PCs has been the norm since I can remember - along with physical crapware stickers.

When I buy PCs, I only buy either the business line from Dell or from the MS store.
I suspect this is common enough that a list of who DOES use SRI would be shorter.
This would be really neat, and not that hard to build from what I know about building extensions. Basically just store a hash of file, whenever external files are loaded see if their hash exists in your list, if not block it from loading until it's been reviewed.

As an extra (paid-for?) feature hook into an online system that keeps track of hashes of known-good popular libs, and can mark as untrusted when a vulnerability is found with a version of e.g. jQuery and auto-flag that for users.
Ah, thanks, wasn't aware of this and will certainly check it out!
ESCORTS LIZA – ESCORTS ATHENS – CALL GIRLS – GREEK ESCORTS GDE
Interesting! perhaps this is why there was no reward offered - there's no real customer data being threatened? Just the passwords/source to their wordpress site?
The source doesn't matter, only the content. If the hash of the file matches the hash you've already approved for jquery-3.3, then the file is (unless someone's found a collision in the hashing algorithm that hasn't been disclosed) jquery-3.3.
I view all of these in my web browser. I don't store these locally.
/g/ is a discussion board on 4chan(nel). Last year's global leaderboard winner (anonymous user #193354) was part of a private leaderboard for /g/ users.
Weekly Machine Learning Opensource Roundup – Nov. 29, 2018
I have studied in Europe (Italy and Germany) and now I am in the academia in the USA. Having student evaluate professors has been the standard practice for many years in Europe. I also do not think that American students have a worse attitude towards their professors than their EU counterpart. In my limited experience, I have actually found the opposite to be true: I found American students to be more actively involved in their education and less passive than Italian students (on average).
This thread so far has a sleeping dragon and bunch of Cthulhus.
Tech News: Mexican Govt Uses Spyware, Russian Hackers Probe Power Grid and More
Running Android in the Cloud with Amazon EC2 A1 Instances
Suppose I purchase a laptop from Lenovo. Do I have a surefire way to easily decrapify the laptop?
I don't know. I'm pretty sure lots of aeronautics engineers have an actual professional answer to this. I mainly hoped with my comment that someone that had actually ran the numbers could chime in.

Taneq's answer above sounds fairly credible so I'm probably wrong about this.
I'm a bit surprised to see floating point being used for multiplication, division etc. I would have expected to see this implemented with integers as well (with each operation changing the position of the point).
Happens every time at re:Invent
>spent lavishly on a fleet of luxury cars, two French villas, and a large yacht ... lives ... on the Black Sea, where Russian officials have declined for years to arrest him

It's a shame the Russians aren't a little more cooperative with stopping this kind of stuff.
You don’t actually pay more for the Windows license. The cost of the Windows license is usually offset by OEM installed crapware on consumer PCs.
Yeah, especially if it's detecting a payment information form, just like they do with passwords atm. They can detect CC forms just fine (with their autocomplete functionality).

I'd also like browsers to do automatic integrity checking - they should be able to have an internal list of signatures, tracking releases of well known libraries.
How we redesigned our APIs at APImatic
VPN’s do Not magically make you untraceable
Thanks for that benchmark link - puts the claims of the article in perspective.

That said, I want to try Pythran to see how it works for one of my at-home side projects.

I had to learn a bit of Julia about 20 months ago - an old customer got in a pinch when somewhen left before a deliverable so I was immersed using Julia for two weeks. At first I liked the idea of Julia but I didn’t fall in love with the language.
This has been known for a long time. It's a myth that mtDNA only comes from the mother and was based on a misreading of an old paper decades ago. I don't know why the myth has so much traction among geneticists who should know better. Many claims have been made deriving from these assumptions. Nearly all research purporting to date past branches of populations based on mtDNA mutations by assuming a maternal clone is passed, and any differences are mutations, is completely off. All that research is and always has been invalid.

1996 paper on paternal mtDNA inheritance: http://www.pnas.org/content/93/24/13859.full

2002 paper on paternal mtDNA inheritance:
https://www.newscientist.com/article/dn2716-mitochondria-can...

Wikipedia's been updating this article since 2006: https://en.wikipedia.org/wiki/Paternal_mtDNA_transmission
I'm disappointed by the response he got which said

"This appears to be more of a risk acceptance rather than a vulnerability."

I understand that some risk is acceptable but surely that is proportional to the cost of removing the risk and in this case that cost is so small.
As that’s an example of it being funny-bad, I’d have suggested AI news writers instead: https://en.m.wikipedia.org/wiki/Automated_journalism
The biggest problem I see with it is putting all your eggs in one basket. One company could easily become untrustworthy without you realizing it. A lot of people trusted Enron before the scandal came out.

That problem could potentially be mitigated by doing best-of-three or best-of-five with multiple trusted parties.
Yes, or just taking decent backups of your data.
Never break userspace means that if you break userspace, that's a bug. The effort spent on preventing bugs is another matter.
Payment Card Market Segmentation, Global Analysis, Emerging Trends, Demand
Fed Warns of a Particularly “Large Plunge” in Markets
I think what they meant is how do you identify the authentic content the first time around?
https://stackoverflow.com/questions/3177338/how-is-the-linux...
dd if=/dev/zero of=/dev/sda
Tech Blurbs: $30M Russian Porn Hack, Dell Breach, MSFT Army Contract and More
Yeah, that's not even bad... What AWS doesn't tell you, is elastic beanstalk creates new security groups and what not. So if (like me) you manage 12 Apps and you try to destroy one environment, the environment won't delete.

Apparently, they all try to create the same named security group (as well as other components). This happens even if you change the security groups after launch. So it'll error out and be unable to delete the rest of the components. Leaving a "ghost" environment.

That's just one of my many, many frustrations with it. I'm considering moving back to digitial ocean (where I was). However, the billing breakdown is nice to share with clients
> Literally the entire reason for having a coding standard is to have a well-defined subset of the language you're using.

that's a perversion of what "standards" means. Standards are originally there to codify existing practice, not to put new practice into existence. "#pragma once" is common enough that it has its own wikipedia page : https://en.wikipedia.org/wiki/Pragma_once with the list of all supported compilers.
If you can't put the thing you're testing (method, class, application) in the state you want to test using only public methods you are not testing something useful. If you're doing to get 100% coverage be happy: that's dead code you can remove.
First, the WHATWG is better to finally settle on the hash standard, and produce a final normal standard document. But it being WhatWG, will not do that.

Second, do not ever use 3rd party code served on payment pages, or, even better, have a wholely JS free payment page.

Third, that fact alone that people are using all kinds of js frameworks for super duper critical code, tells of how little concern is given to security there.

Fourth, PciDSS, where are you when we need you? Weren't it already against the rules to allow loading of code from third parties on payment pages???
Backups are active measure, that you have to do on purpose. Changelog fs just works
it is illegal in Poland
Are there only four products in each category? (Browsing on phone if it's a bug).
In the age of low-cost DNA sequencing, shouldn't this be simple to figure out?
Last time I was going to try it, I got sidetracked reading up on rules for identifier equality, prompted by noticing that the nim package bundled its own grep (nimgrep).

Basically, Nim ignores case (except for the first character) and underscores in identifier names, so the following is a valid Nim program and all those names refer to the same variable:

var myVar = 1
my_var = 2
mYVAR = 3
echo(myVAR)

Most people wouldn't actually write code like that, but I personally found it to be a turn-off.

More on this: https://nim-lang.org/docs/manual.html#lexical-analysis-ident...
It really depends on whether you think Nim and C are on the same level of abstraction. If they aren't then yes, Nim is a compiler.

I personally believe that they aren't. But I know of a lot of people who disagree.
Just scroll down - the correct controller is on the end of the examples.
No sqrt, sin, cos functions?
The Keymakers have arrived
Is this just for Americans? The site doesn't seem to mention anything at all about availability, but the signup form just had "state" and not "country".
How does the "RSVP to google sheets" work?

I don't know how the wedding website works, but I've done some basic recording data to google sheets like so:-

1. Create 'google forms' one-page survey, gathering outputs into a spreadsheet.

2. Use browser debug tools to figure out form field names, which will be things like 'entry.1150050082'

3. curl "https://docs.google.com/forms/d/ 1xFOZk3D1...wnIjGAf0/formResponse?ifq&entry.1150050082=FOO&entry.1477423851=BAR&entry.592766186=BAZ&submit=Submit" or the appends a row to the google sheet with the values FOO, BAR and BAZ.

I assume if your site embedded a form that sent the same request as that curl query, it would do the same thing.

Obviously, this isn't going to win you any awards for highly maintainable professional design at work. But if you want something quick and you aren't fussed about whether it works a year from now, it can get the job done.
http://www.pnas.org/content/early/2018/11/21/1810946115
Under "Allowing access to the database" theres:
Click on “Add Rule.” For “Type,” choose “PostgreSQL,” and for “Source” choose “Anywhere.”

Would recommend not to do that. Create Security Group, add EB to it and allow that only.
The problem is that we let experts design curricula. Experts don't see a problem with the old way, because that's how they learned it, and look at them - they're experts!

It's the same reason a top-down effort to use tau instead of pi can't get momentum. People who struggle with math find it a game-changer, but mathematicians just shrug and say they don't see the point.

I expect a similar dynamic explains why open source software has such terrible user interfaces, and why legalese is so impenetrable: the people with the power to change it, don't see the problem.
Second that. I moved my app from Elastic Beanstalk recently (just before the price hike) to Hatchbox.
In the end, I was troubleshooting my Rails app on Elastic Beanstalk so much I could have probably just set it up myself on a VPS. Solutions for issues were sometimes hard to find. I'm not sure if the documentation is up-to-date. You can't get an answer from AWS (unless you pay a lot which is not worth it for side-projects).
Hatchbox was a little bit more difficult than Heroku but Chris was very helpful. You can email him anytime and expect an answer (even on Sundays). Documentation could/should be improved as well. There are still some hiccups but can be resolved (and I expect it to get better over time).
This resource is pretty decent https://medium.com/outsystems-experts/how-to-achieve-60-fps-...
Major players using it doesn't mean it's used for large-scale projects. I've seen several companies testing it but none of them uses it for any of their core production systems.
So basically what i said. We do not know how to statically type it, just try to provide some false safety.
Why would they? The RU government is likely directly involved with these kinds of attacks/campaigns
How DuckDuckGo Generates Revenue
Hacker News Wikipedia entry
I think you misunderstood me. It’s not the abstraction that’s important. It’s the problem solving that comes with knowing how the understanding.

How can you really be tasked with solving problems if your first response is to look for a node package that does it for you? And that’s what JavaScript teaches you.

I’m not saying you shouldn’t use node packages. But learning to do that as your first steps into programming is robbing you of learning how to use code to solve problems.
You're responding to someone saying "this is too much work" by saying you work holidays too (and that this is apparently normal). You've succeeded in making it seem like you work too much as well, but not in making it seem like not too much.
Exactly! I think they did a great job of creating some discussion that wasn't purely about the game at hand, while still having some great analysis.
I agree emphatically, and it’s why I’m a member of the BCS (British Computing Society). It’s absurd that we have people building essential public infrastructure with close to no repercussions when their failure screws people over.
It's funny - it is for most people. Yet the institution isn't under investigation, merely two employees are:

> > Investigators are looking into the activities of two unnamed Deutsche Bank employees

That's funny.
The stack is too large, complicated, and abstracted to put the blame on a single engineer.

Vulnerability in struts? Go after the open source engineers.

CPU vulnerability? Go after the engineers at AMD and Intel.

Bad firmware? Go after the network engineer who setup the box.

In a time when even the highest people in companies are basically untouchable, for example Lehman Bros, and you want to start going after the engineers?
Didn't MS-DOS already do this with letters? (e.g., a:, b:, c:)

Maybe I don't really understand Fuchsia's approach. But I do really like OpenBSD's approach in unveil.
Elevator music was, in retrospect, pretty much what I a decade ago in a failed effort to be a Mac shareware developer. Mostly games, and their background music was procedurally generated, no real beginning or ending.

Drunk walk around a key, with randomised reset locations whenever the walk went out of bounds. Very good for fake oriental music, acceptable for action/scifi, terrible for theme development or classical style.

Nothing special, except that I totally failed to know anything about any of the previous efforts until years later, so it was all wheel-reinvention.

And then Apple deprecated Java, so it became obsolete.
> What's especially annoying about this, is that the CDNJS website has a "one-click copy" for SRI.

Actually, from the screenshot it's clearly "two-click" and "one-click" provides a link without SRI. Obviously the vast majority of people in a rush are going to use the "one-click" option, secure or not.

There's no reason why the SRI option shouldn't be default on CDNJS when the URL is specifying a specific version.
Don't trust consumers to be competent, help them out with good UI patterns. We should be advocating default = secure here.
I love your wedding date. 09 + 09 = 18. It's beautiful. I know I'll probably get downvoted for a "Reddit-style" comment but it's worth it.
> Nearly all research purporting to date past branches of populations based on mtDNA mutations by assuming a maternal clone is passed, and any differences are mutations, is completely off. All that research is and always has been invalid.

This is a drastic and totally implausible statement that is not supported by any serious geneticist, nor by the Wikipedia article you've linked to.

mtDNA does not have to come exclusively, 100%, no-exceptions-ever from the mother, in order for population research which uses to be valid! 99% is quite sufficient. It is at least 99.9% accurate: as the Wikipedia article helpfully points out, there are 1000x as many mitochondria in an egg as in a sperm.
Watch SpaceX push the limits of rocket recycling, again
> We should be advocating default = secure here.

Leaving no room for them to screw it up is always a good option. I know (some) Junior (or really any) devs don't always consider security at all, so they will take the quickest option even if it's wrong or insecure, so long as it "works".
AR technology helps the blind navigate by making objects 'talk'
The fact that the issue remains unaddressed just tells us the organization (as in, the management chain) is fundamentally broken from a tech point of view.

From there, it is not surprising that they would not bother to compensate white hat hackers, because we have established that the organization is fundamentally broken.
Would love to see the original HyperCard reappear.
The method for the BA hack was not from javascript hosted externally.
See https://medium.com/asecuritysite-when-bob-met-alice/the-brit...
I used to only use MATLAB, which for a lot of research code applications is actually nice for getting a prototype running quickly. Now that I have the freedom to choose, I typically use Julia as I'm trying to gain skills in opensource languages that are actually valuable in the job market. The choice of Julia over python is probably due to my nature of going against the grain, which flies in the face of my previous point.

Was there anything specific that turned you off from Julia?
Spotify may be coming to India in early 2019
Ah yes, hadn't had my coffee yet. Prefix is the word I usually use more commonly instead, not sure if there's a huge difference between the two.
> It would be a good idea for Chrome to display an alert similar to the non-HTTPS resource loading if integrity checks are not present for externally loaded scripts.

It would just teach users to ignore warnings.

> The danger of serving external JS without integrity check its is very similar to having non-HTTPS connections in your website.

No, it's not similar at all.