skysight-inc/HackerNews huggingface dataset:
They're cheap and fit a huge variety of sizes, if poorly. If you have larger breasts, you just wear two. Not the most comfortable, and doesn't look as nice under clothes as a bra that fits, but cost-effective.
How people are making up to 30k a month on Amazon
After reading the post, I feel like maybe not everything needs to be optimized for well-defined priorities. :)
Happy to answer, found out when our single Chinese dealer contacted us saying he's able to buy 1000 of our parts of the shelf at a place he knows. Got one it, saw it's a green circuit board and not the color we use. They had lifted my code from the micro using a voltage glitch and placed it on theirs. Works great... cause it's my code.

Basically I think the rule is don't even consider legal action unless you would be happy to dump $500,000 on it. We make much more than that on my product but for a variety of reasons wouldn't go down that route.

Longer answer on prevention is that if you're making a "dumb" device today, expect no reasonable protections if your price point keeps you in a standard microcontroller range. So, if you're using anything from PIC/AVR to Cortex M7, assume you will give firmware away somehow. In our case, the next product is BLE connected and will self-authenticate via our server, we looked at PSK and PKI, and found a way to do it cost effectively because of a unique scenario that it has to mate up to the part number on another product. Basically I can just watch the database for mismatched pairs and ban them from being used. Not perfect, and someone could make one bad unit for themselves, but not thousands.
> And again I don't have numbers but it does seem like the new generation is MUUCH larger and much more active on mainstream social media. Hacker news must seem like what slashdot seems to me.

Part of it can be attributed to growth. If the population of programmers grows by 100% every 5 years (an estimate I remember reading somewhere), then at any given time, half of the workforce has at most 5 years of experience. This explains why our industry seems to be so full of "js-first" developers - because in fact, it is.
Have an email address I can send my CV to?
This reaction is pretty interesting.

I was doing some webdev back then, and whilst everything you said was true it was the lack of cross browser CSS and Javascript testing which led to the real frustration.

Back in 2002/03 IE6 had over 90% marketshare, and justifying testing in anything else was a constant battle.
I don't think climate change is the dominating variable here, like the article describes, the devastating fires are a product of our encroachment into forests and aggressive firefighting practices. If you have some references though, I'd be very interested in learning more.
DO makes backups easy.

It Rarely ever goes down (maybe twice in 4 years? I have to think really hard to remember an outage, it's just kinda always....there.)

I periodically run:

sudo apt update
sudo apt full-upgrade

Honestly it takes very little of my time, and Zimbra is a really awesome email system.
Maybe that's not that bad, considering the fraction of Java libraries that used simultaneously in Android and Java ecosystems isn't very large. OTOH if Fuchsia wins, we loose the open source mobile OS, the major one, the only one, with tons of apps and ways to ungoogle.
I'm surprised to see them showing Taobao app there. I know it is done in Weex, without anything like Flutter.
Capital Uber alles
No advantages that a css/html rendered version of the same thing doesn't have, with the loss of accessibility that you'd get using the alternative approach.

This is just "the easy way out". Justifying it otherwise is wrong, in my opinion...
Seriously, How did they not think about busting. Like... they didn't know that there is a Google search?
SK Innovation announces the largest scale EV battery plant in the US
This should have a 2016 tag :)
I smell like acquisition.
Amazons sales seem to be doing ok.
I'm not sure about that - my N=1

I went to a State school and got an economics degree, I started my career as a SQL-lackey for a B.I department in declining midwestern retailer, but I treated my career like graduate school insofar that I worked hard at it.

About 4 years after my first day of professional work, I started as a data scientist at a FANG. My team of 9 had 3 Ph.Ds (all science Ph. Ds). As I understood it, the Ph.Ds do receive higher compensation but it's not that much more (~18% higher base) and if I really kick butt, I can out earn them with bonuses.

But I think my path was much easier and lucrative. I was able to save ~$100k, I had a standard of living above that of a regular graduate student and I had flexibility that they would dream of. I made 4 years worth of contacts of my profession, I

I'm sure some Ph.Ds are worth it as investments, but if you're interested in renumeration, get working.
It's an interesting principle, but if you want people to adopt it, I think you have to show how the benefits are greater than the costs.

America's first copyright law goes back to 1790, or about 200 years before most people owned computers. It was adopted because people saw benefit in rewarding the people who created books and maps. We've extended IP protection over the years for reasons bad and good.

If you want to get rid of that, you need to explain how we'll get the same or better benefits with your approach. Because from my perspective supporting the current system means means I favor writers and musicians and researchers and artists getting paid for the good things they create over abstract principles.
Vue Development in 2019: What You Need to Know
That's a neat idea, and probably kind of feasible .. I wonder if anyone will take up the challenge and produce a clean C-portable version .. I'm guessing some of the folks around ContikiOS might be intrigued by this idea. Off to other forums to discuss it further ..
You can try putting double-quotes around the model number. This is Google’s syntax for exact matches. For a good example, try searching for NYC both with and without quotes around it. Without quotes, you will get a much larger set of results where Google is trying to figure out what you mean when you say NYC… including results for New York City.

This doesn’t always work exactly but in general if you are looking for exact matches for certain terms, put those terms in quotes.
I think your major problem is going to be orchestration, which is not easy to solve.
Do “good” solutions to things like E2EE, authentication actually exist?
The web seems like a clusterfuck of people arguing.

I found Signal Protocol and it seems to be the end-all, be-all answer to how to do encrypted messaging correctly. Anecdotes or discussions of small companies or users implementing solutions on top of the protocol appear to be nonexistent.

Virgil Security seems to be a recent entrant to providing a secure, CSAAS platform to enable developers to build secure applications. The only discussion of Virgil I could find online is on Reddit, and just a couple of guys arguing and throwing names back and forth. This seems to be the normal, not just for this company, but discussions about crypto implementations in general.

As for authentication, everyone seems to be deadset on Auth0 in 2018, but their pricing model can be cost-prohibitive if you need certain features only available to Enterprise accounts. In my past, authentication was always taken seriously but never considered too difficult to build in-house. Something like Django with one of the many OAuth python toolkits worked just fine. Now, it seems anywhere I read people say “don’t roll your own, it’s too easy to fuck up and you have to remember 100,000 different things to do it correctly.”.

Am I letting the Internet cloud my judgement?

Is there a good, digestible answer to building stuff like this with limited technical resources (small teams or one-man teams) that can stand up to production users?
Also, if a crash does happen, it is by default fault of the person driving bigger vehicle. Particularly, between car and motercycle. To some extent, I felt it also goes with who is driving more expensive car when it happens between cars.
One of the great pleasures for Republican state governments is to hobble liberal city government initiates in any way possible, whether that be withholding funding or outlawing logical courses of action. I do not want to live in a place with regressive red state politics that are always in such conflict with the progressive goals of cities.
Show HN: Jql – A JSON Query Language CLI Tool Written in Rust
Tossing this out - lost the comment this was a reply to:

I'm not sure about that - my N=1

I went to a State school and got an economics degree, I started my career as a SQL-lackey for a B.I department in declining midwestern retailer, but I treated my career like graduate school insofar that I worked hard at it.

About 4 years after my first day of professional work, I started as a data scientist at a FANG. My team of 9 had 3 Ph.Ds (all science Ph. Ds). As I understood it, the Ph.Ds do receive higher compensation but it's not that much more (~18% higher base) and if I really kick butt, I can out earn them with bonuses.

But I think my path was much easier and lucrative. I was able to save ~$100k, I had a standard of living above that of a regular graduate student and I had flexibility that they would dream of. I made 4 years worth of contacts of my profession, I

I'm sure some Ph.Ds are worth it as investments, but if you're interested in renumeration, get working.
Due to a couple downvotes I want to explain by way of a question: Can it to your knowledge be proven that QEMU is fully secure?

Given that bugs which have been found in it previously have been fixed, can we know from now on that it’s 100% safe?

As far as I know there does not exist a way of rigorously proving that.

fwiw my interest in theoretical computers and formal verification based on this fundamental aspect.
Both GTK and Qt can render to HTML
Know Your Team: Software That Helps You Become a Better Manager
A Breach, or Just a Forced Password Reset?
For reference, I was a seasonal firefighter with Cal Fire (CDF at the time) for 6 years.

First off, if there is a fire burning on state land, federal land, BLM land, a national forest, a national park, etc. I'd call it a forest fire, it's just common parlance. To some that know better, I may use the term wildland fire. So, if it isn't a structure or vehicle fire, it's probably a forest fire. Specifically though, many of these fires are considered in the wildland–urban interface, that is where homes and wildlands meet or intermingle.

There is a problem happening and I'm not sure how to solve it. The amount of wildland-urban interface land keeps increasing. This land is much more difficult to defend against fire; structure protection is much harder than straight wildland fire management. We've aggressively fought all forest fires (see above), especially when there is a threat of homes being destroyed (again this is increasing due to the wildland-urban interface increasing). Forest fires are natural and should happen on a regular basis, when they do, they clear fuel from the ground. Note, some trees require this for seed release (serotinous cones), resprouting, and germination (fire activated seeds). When fires don't burn and the fuel loading increases (due to aggressive firefighting), a catastrophic fire can burn, one we can't easily put out. These fires burn so hot, they can jump into the tree canopy (crowning fire) and kill the tree, they can completely burn fire activated seeds and make them nonviable, and they typically burn much larger sections of land. This is all bad.

I'm really not sure how to deal with this. There are some steps homeowners in the wildland-urban interface (within 1/2-mile of the wildland) should do to protect their homes including defensible space, fire-resistant roofs and siding, enclosed eaves and vents, etc. These steps should be enforced through insurance company's policy (vastly reduced rates for "safer" homes, and no insurance or drastically higher for "unsafe" homes), keep in mind, these unsafe homes put firefighters at risk. Ideally we stop encroaching into the wildland, but I'm not sure how to stop that. But we do need to let forest fires burn more. We need to set more prescribed burns (controlled burns) We need to know that some will get out of control, but there shouldn't be any lawsuits for this, fighting fire is tough.

(I previously posted this on a CleanTechnica discussion)
How to determine which commands failed/succeeded in your Bash_History file?
I have a python application I use for taking notes in markdown. It automates several tasks for me and one of those tasks is parsing my command history and logging certain commands to a markdown file.

Parsing out the command and even the timestamp of each command (if your bashrc is setup correctly) in the Bash_History file is easy. However, what if one of these commands was typed wrong or perhaps I forgot a parameter or flag which caused the command to fail. There isn't any bash/zsh environment variable I can set to add this bit of information to the bash_history file like you would for including the timestamp.

How can I effectively and most easily solve this problem?

To be extra clear. Say I have a bash_history file with the following commands. How can I distinguish between failed/succeeded commands?

---Bash_History File---

lsla

ls -la

cdd

cd

---END OF FILE---

For simplicity, lets say I want to parse this file and log all these commands that succeeded but ignore the commands that failed which are <lsla> and <cdd>. Obviously <lsla> is wrong as it's missing the space and '-' character. The <cdd> is wrong cause (for sake of argument) lets say I fat fingered this command. That leaves two commands that succeeded. For a Bash_History file of 5,000 commands this becomes more complicated as each command could have several ways it could look (such as different params and options). So a lookup "dictionary" type of method wouldn't work here.

Therefore, how can I easily determine which commands succeeded and which failed?

What method would best work across both bash/zsh?

Are there environment variables I have to set? For example, to see the timestamp of each command I set the following variable in my bashrc

HISTTIMEFORMAT="%d/%m/%y %T "

Do I need to write my own bash_history program for this? Would like to avoid that.
I think this is a lot more defensible. Eg (real example) if I search for 74HCT350, I would probably be okay, if not actively happy, to get results for 74ACT350 (a socket-equivalent chip in a somewhat faster logic family). It's much less defensible if "DCP-L2550DW" is quoted, since that's a clear indication that you want the exact string, but it's still better than outright ignoring half your query the way google does.
Does anybody else also get a broken webpage ? I can't scroll in Firefox 63.0.3 (64-bit)
Cosmic cacophony of colliding black holes continues (gravitational waves)
Uncapped stimulation and convenience. A typical month may look like this -

- Manhattan rent: $2k-$4k (depends if you are sharing or living alone)
- Not cooking: $1-1.5k ($5 lattes, $15 salads, $20 meals, x 30 days)
- Socials & drinking: $1k (~$150 x 4-6 per month)
- NYC events: $1k (gigs, comedy clubs, festivals)

Young professionals with established careers do not move to NYC to think about how much they could save if they lived in Tennessee instead. The narrow focus is to soak up available opportunities and maximize revenues, instead of minimizing costs. It's a risky gamble.
Austin lacks the public transportation, bike infrastructure, and arts culture of all of these cities, along with what you’ve said. It’s more dense than most places in the south, but I could never realize the dream of being car-less there. Having to drive to social functions is probably the biggest differentiating factor, in my mind, between expensive coastal cities and cheap southern cities.
> IRC has, for all intents and purposes, been replaced by Discord.

Yeah you can keep saying that but it doesn't make it true.

IRC has what most people need a text chat. A lot of the new features that these new programs have are unnecessary. End to End encryption being the most useful one, fortunately there's things like Matrix.

> In other words, a large number of communities I frequented have re-formed in Discord, and are much more active.

A lot of communities don't have a Discord server/channel so how active are those ones?

I wouldn't correlate activity with quality either. Typically I have found I get better/more knowledgeable responses from mailing lists, those are as old as email itself.

> There's still a few holdouts, but it's usually just 3 or 4 good-ol-boys who haven't left the server for 12 years.

If anything the introduction of Matrix has meant those channels are even more active with bridges especially on Freenode and OFTC where such bridges are officially supported.

> It's interesting to watch contenders like gitter, slack, mattermost, riot/matrix, etc,

Gitter is accessible by Matrix, Slack I've never needed to use as with mattermost. There's just so many 'options' out there that.

For private business stuff I'd probably use Rocketchat because I can self host it and not depend on some other company. It's good for sharing code snippets.

Matrix, particularly Riot still needs to become more mature. It is not as mature and dependable as IRC yet for general chat yet.

The Matrix spec isn't even finalized and is subject to change. That said it is making good progress. Their effort in regard to bridges makes it far more appealing than any of the other dozen proprietary options. If anything has the possibility of displacing IRC it will be Matrix.

I have seen that already particularly for developer communities.

> falling to the rise of Discord, which was for gaming communities but now it's like the reddit of chat servers.

Yeah but that's not developers, and yet despite these subsections using it I've never had the need. Next year it will be something else. The only reason Discord is as popular as it is is because Twitch ran a very aggressive advertising campaign.

For gaming you still can't beat a private mumble server.
Tramp is even more convenient if you set up an ssh config (which you should do anyway). Then you can just open ssh:myserver:somefile

Tramp actually does something more clever than an scp too, so it even works on servers that don't support scp.
Insufficient bounds checking in bhyve(8) device model
so for example, if you want to do

M = [1 0 0 0
0 1 0 0
0 0 1 0
0 0 0 1]
v1 = [1,2,3,4] (column vector)
v2 = [4,5,6,7] (column vector)

you can either do (M * v1, M * v2) on two cores as

r1a = [1 0 0 0
0 1 0 0] * v1 (core 1)
r1b = [0 0 1 0
0 0 0 1] * v1 (core 2)
r2a = [1 0 0 0
0 1 0 0] * v2 (core 1)
r2b = [0 0 1 0
0 0 0 1] * v2 (core 2)

then

r1 = flatten([r1a, r1b])
r2 = flatten([r2a, r2b])

OR, you could just have the whole model in each core:

r1 = M * v1 (core 1)
r2 = M * v2 (core 2)
on a 2 year window its pretty accurate. https://fred.stlouisfed.org/series/T10Y2Y Max view

also true that 2 years a very long time for an economic/investment hypothesis to play out
Is that the behavior you actually want, though? In many cases "this value is explicitly unknown" has dramatically different semantics from "the computation that produced this value had an unexpected NULL input", and if you interpret the latter as the former, you've likely just corrupted your data.

Monadic Maybe (in higher-level languages like Haskell or Rust) has the semantics you describe, but the advantage that you only get it when you explicitly ask for it. If you care about data integrity you usually want to be particularly precise about the results of your computation; it's helpful if your type system can sanity check them as they propagate through every operation.
One of the biggest misconceptions I had about the federated/decentralized web getting into it a decade ago was this customer v. service provider model we're so used to everywhere else. These free[0], decentralized services rarely prioritize building a big user base. Their goal is to liberate the web, most often for their own use, and so the approach is generally "do-ocratic": something bugs you, you fix it, or you wait for someone else to come by and try. The beauty of this approach is it weeds out the impatient, "I want this now, do it for me" types, leading to more intelligent, polite interactions on the service.

[0] Both as in free beer and as in freedom: https://en.wikipedia.org/wiki/Gratis_versus_libre#%22Free_be...
No. You can trade on material, nonpublic data as much as you'd like. Insider trading is not illegal unless you're breaking a confidentiality agreement or fiduciary duty.

If you manage to discover confidential data in a way that does not compromise such an agreement or duty, you're fine. Obviously you should engage with an attorney instead of taking legal advice from a random HN comment, but there's really no issue with this. Information asymmetry is a fundamental part of the market and not illegal on its own.

Source: I used to work in financial forecasting using significant amounts of alternative data.
The point is that being self-reliant on oil does not insulate you from the geopolitics of oil. Even if the US is self-reliant regarding oil, it still has national interest in what goes on in other oil-producing countries.
Aus Gov to pass laws forcing tech companies help police access encrypted msgs
Thanks, very interesting.

It appears that there are no direct financial penalties, only indirectly through restrictions on government subsidies and issuing stock, as well as increased scrutiny in general and especially regarding patent applications, all mediated via the social credit system, including the much-discussed travel restrictions.

At least that's my take based on my middling understanding of Chinese.
I'm from a middle class family in Delhi, and we never had (or could have) afforded a driver full time. Maybe now, my father can, but it is still expensive and not worth it. Most middle class families don't have a driver IMO. Much more common with upper middle class. However, we did hire driver for couple of days in rural areas every now and then.
Same experience. Oh well. All good things come to an end. I wonder what happened?