skysight-inc/HackerNews huggingface dataset:
> Not so with email, unless you write a filter that sends it straight to the trash.

Right, so how is that not the same thing as opting out on FB? Because it’s 3 or 4 clicks (in Gmail) instead of 2?
I have a friend who explored it very seriously. According to him, it’s not as advantageous as you might trying when it’s all said and done.
i mean, pretty sure you mean "Never roll your own crypto".. most people should be writing some bit of "security".. You probably want authentication, authorization, audit and so on in your app.

Now, I do think I agree in the spirit of what you mean: frameworks and libraries should make this stuff easy.. I think for the most part, they do, for example: django has authentication; ruby has gems like Devise; python has stuff like flask-security..

So they exist, there are solutions, it's just not always well known by developers. So they do what they have been trained to: just write their own (faster to reason about my own code than consuming another dependency with all it's archaic config!).
Wait list for a berthing that allows house boats is at least 9 months when I looked into this several years back. IIRC there's a restriction that no more than 10% of any marina's berthing can allow live-aboard tenants.
How to review your changes to Google docs in your email every night
Kids who still believe in Santa Claus and read Superman comics (if they read at all) are simply not going to have the background needed to discuss moral subtleties. They're not little adults. They have undeveloped, ignorant minds. You can't teach calculus before arithmetic.
You may do, but that isn't ubiquitous.
> is legally nonsensical.

I agree, and my initial iteration is probably going to far.
stock markets are a joke now, we have to give time for money to work or be invested by any company and wait a bit to see returns.

With micro-seconds investing by bots and algo, it has become more of gambling than investing.
"you have a right not to be the object of offensive conduct." is not a negative right, because the one that has to oblige to act upon it is not the one with the right. Not only that, for you to have that right the other person is obliged to figure out what might offend you which is quite an impossible requirement when speaking to a large crowd.
The line I’ve heard is “try locking yourself in your bathroom for a few days.”
So was it a free trial or were you paying for it? Your comment seems contradictory.
Ken Shirriff: Committee accepted proposal to add the mask work symbol to Unicode
https://nostalgic-css.github.io/NES.css/
Funny to quote Linus calling some security people “fucking morons” to make this point.

While such broad name-calling isn’t very productive, when it’s not aimed at anyone specific I find it very difficult to get so upset about. I think compassion or empathy can work in a lot of ways, and that includes endeavoring to understand what people mean when they say things that aren’t wholly positive instead of “calling them out”.

Anyway, if you haven’t come across some real crap code and thought “what idiot wrote this” only to discover the idiot was past-you, I can’t relate.
>Developers accommodate the Geforce cards for PC releases, but AAA going console-first precludes designing most content around RTX.

On the flip side, weak console performance is making the PC become the default platform for AAA games.

>but it looks like it's going to be very rough for Nvidia in the next few years if they can't find a "blue ocean" that needs both speed and programmability.

I don't see how. According to the steam hardware survey the top 10 GPUs used were all nvidia.
Home page with working examples linked to in the repo: https://nostalgic-css.github.io/NES.css/ (looks great!)
and we don’t talk about the enormous fees taken away behind the scenes in active investing
I know a lot of developers developers developers who are tactless, careless, and yeah basically idiots. So much of Silicon Valley is made up of this type that stands next to working legacy code and takes credit for it.
I agree with the overall sentiment. After having worked on backbone, then angular and now react/vue apps I find that we often spend more time figuring out how to do things and futzing with the configuration and tests than we spend actually writing useful app code. Our approach after much hard earned experience mirrors somewhat what he is saying - 1. Rails monolith with Turbolinks. 2. sprinkle React components as needed. We have rarely needed to go beyond this and we find it much (much) more maintainable and stable after a year or two.
> I do think our industry, overall, has a problem with what I call the "alpha nerd" clash, where people who have, if they're like me, often prided themselves on their intelligence (comparative to their peers) in their schooling etc. and perhaps been ostracised for their intellect and/or its pursuits, still pursue that need to feel smarter than others, which can lead to self-congratulatory sneering.

This, and I'm typing this out around a group of these people right now. This is just a local scope of problems that then manifest in more global and troubling issues like diversity problems and predatory behavior among employees in the workplace.
I've been wanting to learn more about DSP, and this looks like a good free resource, but the examples in BASIC are just so hard to read, between the line numbers and SHOUTY CASE.

While I suppose it would be a good exercise to translate the examples into the language of my choice, are there any good resources on DSP that use a more reasonable language for the examples? And I'd prefer to avoid proprietary languages like Matlab.
Why do you have such a profound desire to work?

In my life, this has been a coping mechanism. A way to ignore deeper personal problems. I have spent thousands of hours retreating to a fantasy world of code where I am in total control. The more time I spend here, the more I want to stay.

This entire process started at an early age for me. A poor childhood. I turned inward. No friends. My validation and meaning came from coding.

I have created application after application, thinking I was solving problems or doing something meaningful, but these were just rationalizations to avoid confronting my demons.

Might this be a similar case for you? Is more time to code what you really need, or is it something else?
This is the law governing these practices:

https://codex.vlaanderen.be/portals/codex/documenten/1023237...

What you will not find there is any requirement for any kind of proof (not that it matters because there is no appeal process, so they're not exactly making sure they follow this in practice).

Or, for "MOF" ("crimes", knowing that by far the most common youth crime is running away from youth services):

http://docs.vlaamsparlement.be/pfile?id=1427106

They're in the Dutch language.

And here is a report on what is done with the kids, again in Dutch:

https://www.vrt.be/vrtnws/nl/2018/09/03/lorin-parys-n-va-ver...

Meanwhile, they have appointed the person in charge of complaints about Youth services ... head of youth services. "Bruno Vanobbergen", who lied in Parliament about the reports he had received. Apparently there is nothing wrong at all !

Here he is doing just that:
https://www.youtube.com/watch?v=1bDeIb22uY0

(This leaked out because one of the parlement members had just adopted 2 kids with his partner and heard their stories about their situation in youth services)
Is this the first YC backed Space startup?
A lot of this may come down to learning materials.

If you go pick up some books and tutorials on how to learn X, I can pretty much guarantee that they're going to follow a pattern of "here's how to build a basic functional and maybe useful application" and security is going to be an afterthought if it's considered at all. As you continue to learn, there's a fair chance that you'll start with expanding on some of what you've already done in building that sample application - the one with no security.
How to ask for, and execute, a valley-style business introduction
I've heard about doing things on the other end of the spectrum as well: make insecure things harder to do. You want to look at this cookie? Well you'll have to go through some layer of encryption.
Agree! Rust and Go both have really good nuts-and-bolts frameworks for crypto (I especially admire them for having misuse-resistant interfaces despite the need for standard libraries to support bad crypto protocols). Go's TLS is also, I think, a pretty major achievement.
No...I feel like it works well as is...mostly... Even if the feature existed I wouldn't use it.
Another problem I have with this sort of security person is the assumption that security risks always trump other risks.

A few years ago we found some vulnerabilities on a server of ours, and some of the security folks were really upset we didn't immediately shut down the server. I argued that we needed to weigh the risks of the vulnerability vs the risk of shutting down the server immediately. Both actions involved risk, and we needed to weigh which was more severe.

Just because something is a security risk doesn't make it the most important thing automatically. It has to be analyzed in the context, and triaged in similar ways as other risks we discover in our work.
But with Atlas, you can VPC peer if you need that level of security and performance between your app and database. https://docs.atlas.mongodb.com/security-vpc-peering/
The way you have defined "developer", you have defined an idiot. An unethical, incompetent idiot.

Our purpose, as computer engineers, is to convince piles of carefully-cooked rocks ("computers") to do a very specific thing repeatedly ("computing"). Since humans are terrible at understanding specificity, we design languages and abstractions that help us encode our goals into computer-readable codes.

At no point is "build something cool" the goal other than during recreational programming; our goal is not even to build, necessarily, but to understand the requirements of our users and to help them use their resources more effectively. To this end, "cool" is totally worthless; it is a facet of design, of product, and of marketing. Let them focus on the spectacle. We must focus on the specification.

Why don't developers care about security? Because we have raised them to not care about security. We have failed to instill a desire for security into our culture. Consider: Computers have been remotely hackable since the dawn of the Internet. (Check out the history of SSH or email for terrifying examples.) We do not have the cultural norms necessary for getting security correct; we barely know how to distrust soliciting strangers on the street, let alone Martian or Christmas-tree TCP packets.

How can I help? Well, I can try to shove POLA [0] and capabilities [1] down everybody's throat, but so far, it's been like trying to convince people that the world is a globe [2].

Here's how you can help. Pick up a single easy security meme, think about it for a while, and then pass it on. I recommend starting with "security should not be optional" if you're a FLOSS developer, or "everybody is on the security team" if you have a corporate employer.

[0] https://en.wikipedia.org/wiki/Principle_of_least_privilege

[1] http://habitatchronicles.com/2017/05/what-are-capabilities/

[2] https://corbinsimpson.com/words/globe.html
Folks, regardless of the merits of one particular story or another, you know wag-the-dog FUD propaganda has the net effect of increasing us-vs-them nationalism ("See, this country, and therefore its people, are really horrible" stories) in various countries almost inevitably leads to situations like another World War, right?
"NES" is trademarked. And they are using copyrighted assets, from Mario and Pokemon.
The explanation I heard was more about capital controls. A fairly well-off middle class Chinese citizen cannot plan for retirement by buying into an S&P 500 fund and waiting three decades. Chinese bonds have negative real rates. And the fate of the stock prices of domestic Chinese companies are subject to the vagarities of the shifting whims of the Chinese government. Where else are they going to put their money? An apartment that sits there empty for two decades and then gets sold looks quite attractive in that context.
Isn’t Fossil making it round to match with its leading analog offering?
I think drawing the line at the OWASP top 10 is reasonable.
AI surveillance goes to school
I've got a better idea. Write people you actually give a shit about an actual email or ... god forbid a letter or holiday card instead of mass broadcasting what you had for lunch today.

Worked for me!
Copyrighted or trademarked? If they drew the Mario or the Pokemon (or got it from someone else who drew it and published it with a liberal license) it's not a copyvio.
Why not? A pilot that works beyond their duty day will get a manslaughter charge if the flight results in the death of a passenger or person on the ground. Whats the difference?
This was one of the critique of "Applied Cryptography", see https://blog.cryptographyengineering.com/2011/11/07/in-defen...

> The detailed argument goes something like this: Applied Cryptography demystified cryptography for a lot of people. By doing so, it empowered them to experiment with crypto techniques, and to implement their own code. No problem so far.

> Unfortunately, some readers, abetted by Bruce’s detailed explanations and convenient source code examples, felt that they were now ready to implement crypto professionally. Inevitably their code made its way into commercial products, which shipped full of horribly ridiculous, broken crypto implementations. This is the part that was not so good. We’re probably still dealing with the blowback today.

The follow up book from Schneier (Cryptography Engineering) included a whole chapter on "bringing in experts if you deal with cryptography).
>I think there's a strong argument to future-proofing 4k gaming experiences.

4k isn't that impressive for gaming with a monitor. Most people can barely tell the difference between it and 1440p, but there's a huge performance difference. For VR it does matter though.
Yes. It will be a while before they disappear
I’m a huge Navicat fan and it’s the tool I most miss since switching to Linux. Their Linux version is just running the Windows version in Wine.

I’ve been using DBeaver and I’ve been very happy with it though. Paid for the enterprise license to help support it too.

The biggest tools from Navicat that I miss within DBeaver are the data sync and schema sync tools.
It means context matters.
No, you were implying that I didn't provide you enough information to convince you personally that my daughter was actually exhibiting addictive behaviors.

Watching YouTube videos is fine. Seeking solitude is fine. What defines addiction is not what your behavior is, it's whether or not the behavior is disrupting your life. So remarking that it sounds like she just wants to seek some solitude is irrelevant. It doesn't matter if she was "just" seeking some solitude or "just" using some drugs or "just" gambling or "just" shopping. It only matters whether those behaviors are disrupting her life. And I've made it clear that was the case by using language that includes the word addiction.
#NotAllSecurityExperts

Only pointing that out, because apparently this was a big deal on Twitter a couple weeks back, where one group of experts were arguing that you weren't a real security expert without being able to code, and the other group arguing the contrary.
Show HN: Democratizing Deep Learning, with keras-pandas
> open source project used in radiation therapy clinics

If the software is something you yourself is using because you needed it (or is already capturing the value sufficiently), then opensourcing it is a no brainer.

However, if the software is being written, but not being used by you, then it doesn't really make sense to opensource it. The value being created by the software would then be captured by those who would otherwise have had to pay. This value should instead be captured by you, and that should then pay for the improvements. Eventually, when you decide to stop or when you feel you've made enough money and want to move on - then opensourcing it makes sense.
That drawdown is brutal
I find it surprising that they were looking for $5M raise with MRR of less than $50K.

Other sources suggest VCs are looking for a significantly higher MRR for series A
https://visible.vc/blog/much-revenue-startup-need-raise-seri...

Anybody have thoughts on that?
Can anyone explain the bug and how it was exploited in simpler terms?
Well, if at least one person reads the discussion, and then starts inventing the algorithms instead of giving up right away, I'd be happy :)

Because someone saying "How would I know? If, and when, I need to know how tree-shaking is implemented, I will go look it up." makes me sad. The tree-shaking algorithm was not given to us by ancient gods. As a programmer, you job it is to solve problems no one has solved before. Interviewing may be indeed broken, but the original article was not showing any evidence of this.
Security is not the most important thing. It's second at best.

I am reminded of Yegge's old platform rant[1], and the part about "Accessibility":

> When software -- or idea-ware for that matter -- fails to be accessible to anyone for any reason, it is the fault of the software or of the messaging of the idea. It is an Accessibility failure.

> Like anything else big and important in life, Accessibility has an evil twin who, jilted by the unbalanced affection displayed by their parents in their youth, has grown into an equally powerful Arch-Nemesis (yes, there's more than one nemesis to accessibility) named Security. And boy howdy are the two ever at odds.

> But I'll argue that Accessibility is actually more important than Security because dialing Accessibility to zero means you have no product at all, whereas dialing Security to zero can still get you a reasonably successful product such as the Playstation Network.

1. The first copy Google found for me is here. People should read the whole thing: https://gist.github.com/chitchcock/1281611
Ok, but if you're drawing the line at the vulnerabilities that have gotten the most promotion and documentation and not the ones that have the most impact or prevalence, isn't your standard cosmetic? For instance: you've let developers off the hook for SSRF.
I have a close family member who did this in Auckland, NZ and it certainly didn't save them any money. The main issue was that boats are expensive to keep afloat and maintain, and depreciate in value over time (unlike a house).

Maybe the Bay Area is so absurdly expensive that a boat is a good investment, but I would be highly dubious about it myself.
There's rarely a bright line for competence in anything. But I'd say that, at least, everyone should know about something as basic as XSS. I'd throw in SQL injection and CSRF as well. As you get more obscure, you still expect most people to know about it, but it gets less astonishing if a given person doesn't.

Also there's a legitimate case for vulns that exist so far outside of your stack that you never run into them. It would be surprising, but not actually dangerous, if a pure Java developer wasn't familiar with buffer overflows, heap spraying, ASLR, etc. Same for most application-level developers and hardware-level issues like Spectre. But I maintain that the author's example of XSS for a web developer is way unreasonable.
To Save the Sound of a Stradivarius, a Whole City Must Keep Quiet
If you are thinking about starting a Seastar project, definitely check out SMF [0]. It's a highly optimized RPC framework that uses Seastar, and makes it easy to build high-performance servers and clients. Seastar itself is RPC agnostic, and this project has a great implementation of functionality most developers will eventually need.

[0]: https://github.com/smfrpc/smf
Thank you for your research ADD is very near and dear to me.

Here are some questions rattling around in my ADD head, feel free to pick any that interest you:

0. High-speed porn and excessive masturbation is a widespread phenomenon of our era. When started from a young age, frequent daily orgasm releases a cocktail of neurotransmitters and hormones, with prolactin being a big one. Prolactin has been shown to inhibit dopamine as a component of the refractory period (sexual satiety) in men. Could this excess prolactin release affect cognition/executive function to the point of being mistaken as ADHD symptoms in adolescents/adults? See: https://www.yourbrainonporn.com/research/

1. Are there any bio markers to test for ADHD more conclusively?

2. Is ADHD genetic?

3. What are the long term effects of daily amphetamine usage e.g. irreversible dopamine down regulation, increased risk for Alzheimers/Dementia/Huntingtons etc.

4. Are there any new novel/promising medications currently being studied?

5. Has there been any attempts at measuring dopamine receptors in an ADHD brain vs neurotypical brain? What were the findings?

6. Is ADHD a vestigial trait from Neanderthals or, said differently, what is the evolutionary advantage that allows ADHD to propogate from generation to generation.

7. Since ADHD is linked to risk taking behavior e.g. gambling, criminal activities etc, what % of the prison population has ADHD if you had to guess?

Thanks for any responses in advance!
Yes. At least for Postgres autocomplete is very handy.
>And 8GB is more than enough, heck if AMD memory management worked as in dev's would've used it then 4GB is enough for 4K even today, there are plenty of GDC talks about it and how some games on average only accessed 3GB of memory for a given level the biggest ones were from Doom and Witcher 3 iirc.

It's "enough" because it has to be. Game developers need to constantly pay attention to these budgets because people who play their games have hardware with limited performance. If everyone had more of a resource then none of them would say no to that particularly now that GPU compute is becoming more popular in games.
Been a user of DBeaver for years - across all my platforms. Its does most things well enough that it has not been a problem to use across SQLite, MSSQL, MySQL and various file based data. Easier to use than SQuirreL which used to be my fav. All of these are java tools I think primarily because of starting from JDBC for which there seems to be a driver for just about everything on the planet.

So DBeaver scratches my itch of needing same tool across platforms, across databases.
I'm not sure how to respond to this other than WTF?
It is more and more common to have frameworks include blueprints for login pages, but it used not to be the case at all. I wouldn't say that it's that common nowadays either.
The government should make a law saying that houseowners shouldn't keep a house empty if there's someone offering even a single rupee or yuan a year, plus paying the insurance premium to protect the homeowner from any damage done by the tenant, plus deep cleaning to restore the house to a rentable condition when the tenant leaves. A landlord cannot keep the house empty if there's at least one person offering the above, say prepaid for the next one year to protect the landlord from having to chase down non-payers. As long as someone is willing to do the above, the landlord can't keep the house empty. The landlord can, at any time, ask the tenant to move out, refunding the prorated amount that he already prepaid, provided the landlord isn't going to keep the house empty.

With this, millions of people who're homeless will suddenly find a home. Investments that have already been made will be useful to society, which should be the case to begin with.

If this policy deters investment in housing, rents will eventually rise till it again becomes sensible to invest in building houses. The market takes care of itself.

Instead of a ban, perhaps a high annual tax, say 30% of the value of the house, if it's left empty for more than a month a year.