skysight-inc/HackerNews huggingface dataset:
> I was planning on taking on porting Emacs to the iPad

I thought that was impossible anyway, given Apple's prohibitions on both GPL code and software runtimes in iOS apps? However I suppose Emacs could be sideloaded onto jailbroken iPads.
I agree. Saying your editor doesn't suck implies that all others do suck, which is just shitting on everyone's work.

Don't be that person
SMB/CIFS on FreeBSD
I just say 'Yes' after each question. Robo-caller puts me through to human where I continue to say Yes. Eventually they cotton on and hang up.

Hopefully they will blacklist me and no longer annoy me.
The road to homeownership: buying a house in Philadelphia
Because doctors in the US can easily make $300k+.
For those not interested in electron, you can give VNote a try: https://tamlok.github.io/vnote
> I'd point to the Google logograms as a "smart and fun [easter egg]" per your definition but they are definitely one of the more sinister corporations.

That's a fair angle :)
JWT is simpler to implement and more scalable than the sessionId approach so why would you use the more complex solution to get an inferior result?

With JWT, you only need to do a single database lookup when the user logs in with their password at the beginning... You don't need to do any other lookup afterwards to reissue the token; just having the old (still valid but soon-to-expire) JWT in memory is enough of a basis to issue a fresh token with an updated expiry.

It scales better because if you have multiple servers, they don't need to share a database/datastore to manage sessionIds.
Yeah that’s a big one. Also if you have an emergency and go to a in network facility your doctor might be out of network. Most decent insurance plans do say that in emergencies they treat in network and out of network care equally, but definitely not all plans work like that.
If Huawei and ZTE are shut out from US markets, Ericsson and Nokia divide the US market between the two. Good news for them.

Base stations are not the most critical parts in mobile networks. Using Huawei's base stations would be probably OK. Several countries and operators have inspected and monitored Huawei's hardware and traffic they generate for over ten years and nothing has been found.

Buying operating services and the most critical hardware and software from Huawei is different question.
Few time I see casual flicker (EXWM, nvidia, NixOS with compton)... Oh nothing really annoying!

I have far more annoying problems with floating windows and casual (newly introduced) bug that "lost" my physical screen size forcing to restart X to recover...
How do you then defend Patreon hosting radical leftists calling for political violence on their platform, and not taking it down after its reported? But banning a viewpoint opponent of social justice for what seems to be clearly political reasons?

[1] https://www.patreon.com/intlantifadefence

[2] https://www.independent.co.uk/news/world/americas/antifa-dom...

[3] https://www.patreon.com/chapotraphouse

[4] https://www.reddit.com/r/ChapoTrapHouse/comments/9k14nf/why_...

[5] https://en.m.wikipedia.org/wiki/Political_violence

How do you defend them employing someone that is a public supporter of the domestic terrorist organization antifa?

[6] http://www.returnofkings.com/125075/patreon-employee-aaron-r...

Something is rotten in the state of Denmark.
I thought the concern was security.

Anyway HTTP2 would hopefully address that (through header compression), and things like zero-RTT TLS and keep-alive further minimize the overhead of an additional request.

Plus doesn't CORS only make preflight requests periodically, not for every request?
I tried Emacs via various hacks on Android... Mostly to have org-mode there... With a touch only UI it's not usable. With a physical keyboard I see ZERO reason to choose such crappy OS instead of a small ultrabook...
Package validation (using a checksum or signature) is definitely on our radar. We just haven't gotten around to it yet.
If you mean that HttpOnly for cookies protects against XSS, you are mistaken. The attacker will simply generate requests to the secure endpoints rather than steal the token and use it from somewhere else. HttpOnly does not really protect you against XSS at all.
This won't help consumers. The prices (both charges and what Medicare pays) are already effectively public:
https://data.cms.gov/Medicare-Physician-Supplier/Medicare-Pr...

The problem, as some other comments point out, is that they're way too complicated. The link I posted, for example, is just the provider charges. A hospital visit typically has a facility claim and at least one provider claim. Depending on the type of service received and the agreement between insurance and facility, the facility fees can be billed a variety of ways (diagnosis related groups, ambulatory payment classifications, or HCPCS). Each provider that sees you or performs labs, x-rays, etc can bill separately, and each could have a separate or no contract with your insurance. The latter is how surprise 'out of network' bills happen.

It's a total mess and hopelessly complex for the average consumer.
Considering the patients have no idea what is going on and therefore no way to tell if what they are being sold by medical care providers is appropriate or not, insurance (who also have doctors reviewing the cases) is actually the only entity that is auditing the work of the medical providers to make sure they’re following the proper procedure and prevent overcharging.
I hate gif inclusion.
It's a classic template: https://craphound.com/spamsolutions.txt

The Last-Modified header says it's from early 2004.
That's just because Java and C# (or whatever) are fast languages. C++ is only a little faster. Try it with Python or Ruby.
Bethesda is unbanning modders from Fallout 76, but only if they write an essay
Quirky sounds apt. How about awesome-quirksmode as a historical reference? :P
How have I not come across this website before?

Check out the projects page.

Props to the Author
I also supported myself through the loans and working part time (in a supermarket from 16 - 21), but I don't think your comment is really fair. Bear in mind:

a) Prices for accomodation have gone up a lot in the last few years. At my university in the south west, rental prices for off-campus accomodation have roughly doubled since I was studying a decade ago (and at the time they were one of the most expensive in the UK). Even with the maximum maintenance loan it would only just cover the cost of accomodation (assuming you only need to pay for term time).

2) The means-tested grants and loans expect higher earning parents to support their children at university, but a lot don't. I believe in this case your parents can make a written declaration that they won't support you, which allows you to get the full loan and grant, but this option isn't made clear.

3) A lot of people are just bad at managing finances, and spend money on things they don't really need. Schools really need some sort of financial education, but I guess it's too profitable to bankers for people to be educated on how to be sensible with their finances.
All zeros in a bank card's CVC code
Yes. For example, stingrays could still locate your phone and deny you service.
Well, while claiming there is no pull factor, the Independent article is illustrated with pictures of migrants being rescued from a rubber dinghy with no engine...
I'd argue that people who think they should be using caching are heavily discounting the consistency issues they will encounter (no doubt at the least convenient time), and may well end up reintroducing the same problem they're trying to solve. If you have revocable tokens accessed via an authentication lookup cache with a 5-minute expiry then you've spent a lot of time and engineering effort to have exactly the same problem as if you had non-revocable JWTs with 5-minute expiry.
As I noted below ($25 vs. $1400 for my sore shoulder), the range of ways providers can "code" what they charge you for is not sane. And how my inpatient bill in a different situation reached ~$45,000 was clearly because the hospital knew how to pad the bill.
The flaw in this is that for-profit medical research optimises ... for profit, that is, the treatments for which most can be charged.

So they focus on illnesses of the rich gerontocracy while diseases of the developing world have to be addressed by public funding. Additionally, there's no real incentive to work on cost reduction.
Ask HN: I'm about to leave my job for my startup. Advice?
I'm in my early 30s, with a stable job and no particular obligations (no kids, no mortgage), living with my SO in a rented apartment.

For the last 6 months me and a friend have been working part-time (i.e. during nights/weekends) on a side project that is becoming more and more promising: we do not have any revenue yet, but we have developed 90% of the MVP and the idea has been validated with feedback from potential customers and people working in the field. Meanwhile, the situation at my job is becoming unbearable (bad management, hard deadlines, no chance to take even a single day off in the last two months, work itself becoming boring, etc...) and I believe it's only going to get worse in the next few months.

I've been pondering whether to leave the job for quite some time now, and I've finally made the decision that it is the right thing to do, but instead of jumping immediately into a new job I've decided to allow myself 6 months to work full-time on my project and see if it's gonna take off (we either find funding or clients). I've got enough savings to comfortably live slightly more than 1 year without any income and I do not think I will have any problem finding a new job after 6 months if things go south.

All things considered, it doesn't seem I'm taking on too much risk (worst case scenario, I find a new job in 6 months and I have 15k less in the bank), but as you may imagine this will still be a huge change in my life and I'm sure I will need to deal with lots of stuff that I'm not foreseeing right now. I could really use any advice, especially if you have gone through a similar experience or know somebody who has.
How to hack yourself to prevent other from hacking you?
I am learning to become a website and software developer. I want to be prepared for eventual future hacks on my apps and programs. I want to learn about ethical hacking so I can ensure the best security of my products.

I was looking for free beginner hacking PDFs to read, but there are too many of them.
Do you guys have any free PDF book recommendations on practical beginner hacking for websites and software?
The big objection to JWT is that it's a bearer token with no revocation support. If you're going to implement a bearer token with no revocation support, or a custom revocation implementation, anyway, then the criticisms of JWT apply just as much to the system you're building and you might as well just use JWT.
Rust both greatly benefits from and is encumbered by LLVM. Maybe there’s room for a different LLVM-like or perhaps LLVM compatible project.
Confessions of an Office Drone: This job is bullshit. I’m bullshit
The "supervisor model".
> It's a total mess and hopelessly complex for the average consumer.

But not for insurance companies; it's in their interest to compare hospitals and get the best care for the lowest price.

I for one hope this will trigger competition. On the other hand, it'll probably end up shafting the personnel instead of the ridiculous profit margins.
Off topic, but was given a brief guided tour of the egg collection at Natural History Museum at Tring when we donated my father-in-laws collection a couple of months ago - we were shown the 3 Emperor Penguin eggs collected by Cherry-Garrard and donated - fascinating! Here they are in a presentation by Douglas Russell, curator (who also showed us round).

https://www.youtube.com/watch?v=PdBT670fiCQ
Not sure how small you want it but there are smaller and less power hungry x86 alternatives too. The more server-oriented atom chips (2-16 cores) are pretty decent and the much more expensive but more powerful Xeon-D (4-16 cores) can both be found in mini-ITX motherboards and pretty low-power configurations.

Have not kept myself up to date in case AMD offers decent alternatives in this segment.

Though my hope would be for ARM to lower the price point for these kind of servers.
I won't contact you in that matter. I get an idea from what you've said, thank you.
GitHub forced a company off their platform for using the word "retard" to mean delay/hold back in signals processing context.

What a time to be alive.
I'd love to see this talk :-) so if you want to keep up to date with CFPs, the Mozilla TechSpeakers group maintain a Twitter profile at https://twitter.com/mozTechCFPs that tweets timely reminders to submit proposals to conferences. It might help you find places to submit your talk. I hope you do it in London then I can see it live but I'd love to see a recording as well :-D
Nope, if pilots fail to handle an emergency due to poor training, then it's the airline that trained them which is really responsible. Blaming individuals for failures of an organization is not a good strategy for improving safety

Also, in this situation disengaging the autopilot would not stop the nose down inputs. It's a new design on 737MAX, and whether Boeing informed airline about it well enough determines if they are at fault or not.
There are Android apps that block calls from non-contact numbers. Including open-source apps on GitHub. Maybe there are such apps for iOS also? It baffles me that this functionality isn't built-in.

edit: Nevermind I can block non-contact calls in Do Not Disturb mode in the LG phone I'm using: https://i.imgur.com/ZcRSXlK.png Maybe iOS DnD has this too?
Is the discussion of the intermediate language meant to rebut the claim of "reputation for overcomplexity" or "loss of users?"
In The Netherlands we have a "no-call register" for companies (https://business.gov.nl/regulation/telesales/#article-do-not...)

I never get robocalls. It's nice to live in a country that believes in smart regulation!
DIY Christmas Tree and Christmas Decor
>"its Amazing how much less sugar common foods in Germany have than the USA"

This news article from 2015 states that Germany is second to the US in sugar consumption. The data comes from market research company Euromonitor:

https://www.washingtonpost.com/news/wonk/wp/2015/02/05/where...

A more recent published report (some of which uses 2008 data) looks at the consumption of "ultra-processed" foods in Europe. "Ultra-processed" refers to food made in a factory with industrial ingredients and additives invented by food technologists.

Which countries in Europe consume "ultra-processed" food more than any other? The top three are: UK, Ireland and Germany:

https://www.theguardian.com/science/2018/feb/02/ultra-proces...
I kinda don't get why people end up building electron apps to, essentially, "act like it's native".

The app looks absolutely awesome, but i would have loved to just see it run in the browser, I'm kinda reluctant to install yet another memory-hog for basic tasks.
Ask HN: Alternatives to perkeep?
What are some good alternatives to perkeep worth looking into? basically I have a a bunch of content (web pages, pdfs etc.) that I would like to archive in a dedup system. Perkeep seems like a good candidate but their lack of clear roadmap and release schedule makes me question whether I can trust archiving my data with it.
The situation has been "getting better" for 10 years, it still terrible experience and will probably forever :(

The only solution is to buy native Linux devices such as from Dell, system76 or tuxedo. Any other device which only supports Windows toddler OS will be a terrible experience. I'm writing this from a $2k razer blade stealth which has been a horrific experience with ubuntu (NEVER gonna buy a razer again).
You should always have at least three and preferably an odd number of similar sensors so that you can get at least a vague idea of consensus. The British Royal Navy rule was: take one chronometer or three, never two because with two you will always be unsure which one is correct while with three you can, usually, just average the two that are closest together and regard the third as an outlier.

See also https://blog.ipspace.net/2017/01/never-take-two-chronometers...
Doesn't seem to work neither on Ubuntu nor Slackware Linux for me... It only outputs some error messages about "missing delegates for this format" and other errors (ImageMagick 6.9.7.4 and bash 4.4.18 in one case, and IM 6.9.4 and bash 4.3.48 in the other; same kind of errors).
Did he just gift the images to Google? Did he retain copyrights? Are they available under a license that would allow inclusion into an open repository of street view photos?
I've had an idea for a product I've put on hold for two years because it involves medical data and I just don't know if I can secure it to a level I'd be happy with from a moral point of view.

That's before the law gets involved as well.
I believe C would be a good example for negative space. The spirit of C [0] explicitly contains "keep the language small and simple".

[0] http://beza1e1.tuxen.de/articles/spirit_of_c.html
Yes I know, that's exactly what I meant by "breaking up the browser into different processes". They used to all be in the same process. Now they're in different processes, and communicate via messages and shared GPU memory using platform specific APIs like IOSurface. So it's no longer possible to write an XP/COM plugin for the browser in C++, and call it from the renderer, because it's running in a different process, so you have to send messages and use shared memory instead. But then if the renderer crashes, the entire browser doesn't crash.
There is no problem for a stasi wannabe to use legal process to extort the base station credentials from the phone company. There should be defences against carrier assisted MITM, like signed NONCEs and per-carrier station public key registers with accountable station data (location, station photos, etc)
This narrative is incorrect. The aircraft gave audio and visual warnings when there were multiple control inputs. And we can infer that the crew on AF447 noticed them because the 2 (IIRC) instances of dual input lasted less than a couple of seconds.
> as well as the quality of care, you’d expect the cost of healthcare in the US to be higher

If the quality of care is so amazing I'd expect Americans to have longer life expectancy, and they don't.
> I wonder if you have to a certain level of insanity for doing something like this.

My assumption is that people want and need some level of "excitement"[1] to feel like living a meaningful life. Say, in scale 1-10, if you only get exposure to level 1 excitement, you kill yourself to avoid a boring life, occasional level 5 keeps your life interesting, 7-8 starts to be so uncomfortable that you rather avoid and 10 is so much that you rather kill yourself than expose yourself to this level of excitement.

Now, the problem is that same things give very different levels of excitement. There are people for whom game of Monopoly is level 5 excitement. And there are people for whom game of Monopoly is solid level 1 excitement.

With this model you see why some people decide to take risks some other find outright stupid or insane. So next time you think someone is doing something insanely risky, you might want to think how fulfilling your life would be if the things you do to get emotions would be stripped from you before calling the persons with pejorative adjectives...

[1]no, I have no good definition for this word
NYT should have done this research instead of providing an ideologically tilted coverage. I want my newspaper back from the ideologues.
Personally, in my heart, I'm kinda keeping fingers crossed for a future where if one needs to/has to, one uses Rust (mostly where one would use C/C++ today, including for "squeezing the last drop of performance", and especially high risk everpresent libraries like libpng; plus as an extra, probably for highly ambitious parallelism like in Servo); otherwise, one just goes with Go (for the amazing general productivity and readability).

Though then there's also Luna-lang, which I'm hoping even stronger to become long-term a new breakthrough paradigm/tech in programming & scripting...

On a mostly unrelated note, but continuing with off the sofa predictions, I'm curious on a few more developments:

- whether WebAsm will become the new de-facto universal architecture — at least for VMs, but I wonder if we won't eventually end up living on purely WebAsm CPUs at some point in future? (Unless WebAsm has some inherently hardware-hostile design decisions; I'm not a CPU/ISA guy to know that.)

- then RISC-V; will it become the ultimate personal computer/device CPU in the meanwhile? Also, what may happen if both RISC-V and WebAsm start naturally competing in this domain eventually?

- Fuchsia off-handedly dethroning the Linux kernel & ecosystem (and maybe even Windows) as the sudden standard mainstream OS (and thus also, amusingly, suddenly swinging the Tannenbaum's argument up through a semi-random caprice of Google's deep pockets)?

Especially per the last point, I wonder if we'll eventually end up in a world with much more... "secure"... personal devices. And if yes, will it end up being net good or bad (or just neutral/hard to say/nuanced, a.k.a. both, as usually) for humanity. Given that I'm recently realizing that "secure" unfortunately seems to be a very close sibling, or even maybe just an other face of, "closed" — think DRM, walled-garden ecosystems, no more rooted Android or XBOX... or even no more control at all over your PC, a.k.a. no general computing for the masses, potentially. Though I personally stay mostly hopeful on this front; in part because I think I believe people are as a sum too chaotic for this to be able to happen completely.
What do they mean by "lose money"?

Even if I turn up at a private hospital here in Norway, I pay nowhere near what you would pay in the US. Which tells me that either hospitals are run extremely inefficiently in the US (orders of magnitude worse than here) or there are layers of pretty substantial profit margins.

I may be a bit peculiar, but I think a healthcare sector that is set up to mainly benefit execs and shareholders is a bit immoral.
There are no secure smartphones (2016)
https://news.ycombinator.com/item?id=10905643
HIPAA applies to all health data regardless of what you do with it. It’s one of the few things similar to ITAR that you cannot put off for later. The fines for not complying can be staggering ($50k-$1.5m).

I highly recommend talking to someone who knows HIPAA well.
Well, we eat the pigs so doing some science experiments on them should be acceptable considering we have so many food alternatives and still eat pigs. I believe people who eat dogs don't see an issue with dog experiments.
Back in 2014, a Moroccan guy did something similar, created a Street view clone for a 10 cities in Morocco huge challenge for one person, with limited resources: http://carte.ma/
Interpreting GP's comment using the Principle of Charity[1], I assume GP meant "older than C++ is now".

[1]: https://en.wikipedia.org/wiki/Principle_of_charity
I think you're right; at various times people have managed to build NetBSD, OpenBSD, and (I think) DragonFlyBSD and published instructions, but I don't think anyone has pushed to have those projects ship official images.

I don't blame them. It's a lot of work, and for most developers, if they need to run something in EC2, their need is satisfied once they have images -- whether official images are publicly available is irrelevant. I'm in the position of not just wanting to use EC2 now, but wanting to make sure it's available for me in the future -- so having a large userbase is important, both so that other people can find bugs before me, and so that FreeBSD is something Amazon cares about (the ENA driver was ported to FreeBSD by a team hired by Amazon... without that, it would have taken us years to catch up).