skysight-inc/HackerNews huggingface dataset:
Cyber Security Tracker (RMF, DIACAP, SCAP and STIG)
https://cyber.trackr.live
Clicking RMF will show you all the RMF controls NIST published. The colored buttons at the top of this page filter what controls show up in the table at the bottom. In the table at the bottom, clicking the 'blue' control button will show you the details for the specific control you selected. In the details view, you will also see buttons for other related RMF controls, DIACAP controls and CCI Items. Those are all clickable to present the referenced information.
The DIACAP link will show you all the DIACAP controls, with similar filters at the top. Again, clicking the blue DIACAP control button will show you the specific information on that control....along with related RMF Controls, DIACAP Controls and CCI items.
The STIG and SCAP pages will show you a list of all the tracked STIGS and SCAPS. Clicking on the STIG or SCAP title will show you all the requirements for that STIG or SCAP. The requirements are also linked with 'blue' buttons to view specific requirement details. If multiple versions/releases of the same STIG/SCAP are tracked, there will also be a compare button on the main listing page that will allow you to view the changes in the specific STIG/SCAP over time.
Finally, there is a custom built search engine that will allow you to search on keywords, terms or IDs. For instance, searching for 'CCI-002095' will show you that there is one RMF control linked to that CCI (CA-8) and one DIACAP Control linked (VIVM-1). Searching for 'V-1080' shows about 90 individual SCAPs/STIGs related to that vulnerability ID. Searching for 'SV-29474r1_rule' returns about 24 STIGs/SCAPs that have that rule contained.
The search engine also allows for quoted phrases, so if you search for "password complexity" you will see related RMF, DIACAP, CCI and STIG/SCAPs.
This is a brand new site at a very beta level, but it might prove useful with what you do. Check it out sometime. Feedback is always welcome.
Yea, but people still do all kinds of other numerical work in Fortran like Power Systems and it is much easier to read than the new C++ replacements I've seen.
You can actually get the RSS feed for a publication when you add /feed/ in front of the publication's name, for example https://medium.com/feed/the-new-york-times
1. I am using datetime (enddate or "how long in your list"), vicinity, opening times, shared users and parent to childtask hierarchy at the moment.

And yes you are absolutely right, that there are several factors which determine importancy. So as I am not yet able to reading my users' minds (Im working on it, believe me :)) the result will never be 100% accurate. But I think it is already good enough to be of valuable help and it will only get better from here.

2. There are frameworks out there which you can use, but as the sync is mission critical to my app I do not like to be dependent on any framework. So I rolled my own sync solution, based on Nodejs with a postgresdb in the back :)
What sort of drawing are you thinking? Dragging the mouse around on the screen or navigating with the arrows?
When such statements in the style of "you don't have to learn a new language" is uttered, it is usually completely ignoring the fact that solving the problem at hand is many times harder than learning some new syntax. Learning C when coming from Python is not hard because as a language C is hard.

To generalize, I have the impression that the general CS/programmer culture values initial easy of use much more than long term usefulness.
And that's not directed at the younger generation, you will find plenty of old farts that only want to use or learn git when it's been thoroughly lathered the thick sugary syrup of a pretty GUI.
But is that even an option? I used to pay for NYT and WSJ (not cheap) and was still bombarded with ads.
Bioplastics would be a suitable replacement, and if properly incentivized, local municipalities could collect it in a separated waste stream for conversion to energy (which would contribute towards offsetting the collection cost).
Some people, this depends hugely on the culture/upbringing of the individual. For-profit corporations on the other hand are arguably psychopathic by definition.
The term definitely means something. But it’s only useful when axioms and constrains have been established and verified.

To be honest, my biggest issue with it is that often those who use it don’t realize that the burden of proof falls on their shoulder. And it just happens that it’s much harder to proof that something is impossible than the opposite. In one case you to prove you’re right once. In the other, you have to exhaust all possibilities.
This definitely looks interesting. I like their viewpoint on privacy (and the fact that it's written in Golang)
>I spent a while following blogs of the IT / radio support guys who were working down South

Any that you particularly recommend? Or have all the ones you followed then now all finished up and gone home?
What if your function signature needs to change and it's in public API used by thousands of call sites? The viral nature of it IMO is by far the biggest issue. That and much harder debugging / worse stack trace readability.
This is bullshit. Entrenching TLS in web standards is just handing the keys to the internet over to malicious government entities.

We need security without TLS.
2019 Art Market Predictions: A “Moore's Law” for Diversity in the Art World
Thanks for all the great info. I have a _decent_ collection of records and my parents just gifted me their collection, which is excellent.
Good thing we don't live in a closed system and instead have a giant fusion reactor in the sky to heat the outside air.
This! So much this. JavaScript-the-language is in decent shape now, but JavaScript-the-ecosystem is a complete and utter mess. Having even a small standard library would go a long way towards cleaning that up.
Its the time accuracy that matters, if its for frequency stabilisation then you need granularity in the order of seconds, rather than minutes as I believe smart meters are at the moment.
Ask HN: Who is using AWS spot instances?
Are you still using spot instances? And, What do you use it for?

I wonder if anything has changed due to the increasing popularity of serverless alternatives.
Wow - I had no idea thats who their real customer was. Brilliant.
Show HN: Terminal UI for Hashicorp Vault
Wow... some bad ass watches he had made.
I love using Python for getting stuff made fast, and then only if needed accelerating a few function calls to make it fast. I have used scipy, cython, and even the C-API for this, but this looks like a interesting new take.
Yeah, there is a huge difference between nukes, which have a deterrent capacity, and a nuke program, which is pretty much an anti-deterrent, especially when it comes to US action.
What changed in the Big data landscape from 2013 to 2019
Work effort seems like a collective action problem. It's a race to the bottom, trying to beat (or not be the worst of) your team. Unions are one way to solve this (collective bargaining).

Another is just competing over workers. As the economy specializes and jobs require more and more training, I wonder if this competition is getting more limited. Industry X is treating workers better than industry Y? Too bad you can't switch because you've invested years of training (and student debt) into Y and you'd have to go back to school to get into X.

Side note: I also wonder whether that contributes to software engineers having it so good. As software eats the world, every industry needs software, so switching from the entertainment industry (netflix) to web search to social media isn't that hard.
There are terminal emulators that can display images, make clickable hyperlinks, track the mouse cursor, and dynamically update the title bar with custom text. None of that was possible in the 70s. To say that this is impossible is to ignore how terminal emulators have actually evolved over the years.
> a class in most languages is just a group of related static functions.

In class oriented languages like C# and Java, sure. JS with ES modules has the alternative of using functions exported directly from a module.

The latter approach has the benefit of better tree shaking than the class based equivalent.
What if someone runs a script that registers all the names with random passwords? Don’t you need an email validation or something to prevent that?
Don't disagree, but for React users onClick={this.doStuff.bind(this)} is pretty common for newbies who just read it somewhere and don't know of the perf implications of bind.

But personally I prefer prototypal inheritance and the everything is an object mentality.
I loved Doc Savage books as a kid.
I'm always shocked when people place so little value on the well being of others.
what I took from what you just said is that batteries would already work fine for periods of peak load, i.e. they work when they are needed.
This is a great initiative.

I've emailed Amazon about stopping using plastic bubblewrap mailers, and use cardboard ones instead. No reply :-(
Git CLI is universally agreed to be absolutely terrible, with its manuals actually making it worse. Just flick through one or two blog posts you can find here, many of which already made HN:

https://www.google.com/search?q=why%20git%20cli%20sucks
What's wrong with Fortran? You're argument seems to be "it's old." What are the main features you find to be lacking? What language would you propose should be used for the use cases of Fortran, and why?
Top Compile-To-JS Languages
I have showdead enabled. Dead comments are rare, surprisingly non-trollish and higher quality than normal comments on other websites.
The area of most concern from my perspective as an American is how long the USA maintains its military superiority operating as a relative CPU, should China focus its massively parallel GPU on advancing its military tech?

It's not like China has been signaling a lack of interest in this area, quite the opposite.

The USA is going to increasingly interfere in China's progress through other means, like crippling the economy, effectively starving the GPU of amps. If it doesn't, things are going to get interesting real quick.
Looks nice.

But my advice is: don't getting in to the business of hosting other people's stuff. It's just not worth it these days, unless they're paying. But even then, it has potential to be a huge can of legal worms these days. So much so that it'll suck the life out of you and the project, along with whatever you make on 'upgrades'.

IMHO: Self-hosting (and installing your software) should be the way (back) to go.

Very nice UI though. :)
John Ruskin: The Power of Seeing Review – Oddball or Visionary?
When I get a product that comes with a paper manual, I scan the manual and throw the paper one away. I'd be fine if manuals were just URLs that I can download.
Yes. TFA mentions it in passing, but to me JS’s main issue is not the language but the ecosystem. You can’t install an npm package without inheriting hundreds of dependencies. Reading a typical package-lock.json file makes me cringe. I feel that a fully-fledged standard library (python’s comes to mind) would help a lot in that regard.
Previous discussion: https://news.ycombinator.com/item?id=12559169
I'd disagree with your characterization of GOG. I'd say they're more like a DRM free Steam. Just like Steam they also charge 30%. I also have a somewhat negative bias against them because several years ago they announced they were shutting down in under a week. This turned out to be a PR stunt but I haven't bought anything from them since.

They're also an excellent example of how tough this space is. Even though they're owned by CD Project Red you can still buy games like the Witcher on Steam.
Everything been explained?
It all happen logically?

I couldn't watch original Twin Peaks series, or the 2017 season, when released, I did it last week and enjoyed it a lot, but what made me have the best time was reading IMDb comments from furious people that found it a waste of time.
Whilst Java the language has progressed, Enterprise OO is sadly far from dead :(
How to Make a Viral Website Like Buzzfeed
Given that Costa Rica, Uruguay, Iceland, Norway, Paraguay, and Tajikistan already run on 100% renewables (and Tokelau runs on 100% solar + batteries): I would judge this to be extremely solved.
A smartcard is still fairly convenient and allows you to tick the two-factor box (card + pin)
Providing features that users want. So terrible.
What’s the Dress Code for Job Interviews These Days?
My god, the table join optimizer can use a genetic algorithm. Fascinating. I would not have thought an SQL database would have a need for such an algorithm!
My point is, why continue bloating javascript if its main weakness are some of its historical design issues (preserved only for backwards compatibility.)
Do What Amazon Can’t Do “WACD”[video]
Object.defineProperty('senior', {
value: true,
enumerable: false
})
3D Printing onto Fabric
They're not common. I'm not sure we quantified things.
The Right Needs to Grow Up on Environmentalism
Runescape has a pretty old player-base at this point, mostly because the only people who play it any more are people who played it when they were younger
The free hack of coding
His Queen
Is there a way to secure my andriod Stylo 4 from greykey or any other method of hacking
From my experience, what makes program slow more often have to do with memory than CPU cycles.

More memory use mean more cache misses, and cache misses have a huge impact. Roughly, L2 cache is 10x slower than L1 and RAM is 10x slower than L2.

With C, when you want to allocate some memory, you typically precalculate the size and malloc() just the right amount. In C++, you are more likely to use containers, which are safer and more flexible but tend to introduce some overhead. GC languages like Java have the GC overhead in addition and dynamic languages like Python are the worst because they also need to keep track of object types.

Now there are some applications that are really CPU-limited, like complex calculations. But in that case, chances are that you'll probably want to offload things to the GPU.

Still, I really liked the article. That's another great tool to have when it comes to performance. But it won't change the general case where C > C++ > Java > Python when it comes to performance.

A little caveat when it comes to C vs C++ though. C++ can be faster than C if you use C-like memory management, but that's not the usually recommended way of doing things.
> I see a flaw in a lot of subscription models in that they lead to companies optimizing for "engagement" rather than maximizing the value of my time as a consumer

This is really interesting. I suppose the question is how do you measure value delivered?

Typically people show that they value something by paying for it. Normally you pay for goods with money, but many subscription services and F2P games are happy for you to pay with time. I feel like using "time paid" is a valid proxy for how much value customers get from the service. What doesn't make sense to me is why it appears that so many people value their (free) time so lowly.

Perhaps if Netflix offered a second PPV service its recommendation engine would have different incentives. With that model you also have payment friction and discovery friction. But honestly I'm not sure why they don't do it -- Amazon has been for a while.
Tangentially related.. like HTTP, Websockets currently operate over TCP.

Is there plans to port them to QUIC as well? It's been many years since my networking class but I'd assume Websockets would stand to gain quite a bit as well.
Interesting... Seems legit...
honestly, I would see dropping features and select a leaner ES6+ version within the html tag as a very good "feature". The strict mode also does not fix some historical inconsistencies and design bugs just preserved for compatibility, for example methods on default arrays vs methods on the querySelector results.
> They have a fiduciary duty, don't they?

Not necessarily.
Would be nice to be able to vote at two dimensions: quality and agreement/disagreement.
All long gone now I'm afraid -- my first visit south was nearly 10 years ago now.
You absolutely can automate the GUI. People make very good money doing exactly that. The key difference is that the barrier to doing that automation is higher than automating a CLI.
> I don’t understand why anyone would stay in a job

Today’s Dilbert includes the answer:

Dilbert: Give me one reason why I shouldn’t quit right now!
PHB: Because every other company is just as bad.
Those are worth very little when untargeted.
how is it broken? (I do know our search results page isn't ideal, but if you search a tag there's a link that takes yo to that relevant page)
It's actually very easy to detect OpenVPN on port 443 because it isn't really TLS traffic. Much better to use OpenConnect with ocserv, it opportunistically uses DTLS over UDP on 443, and if it can't do that it can use normal TLS. Much harder detect and gives you the performance boost of UDP when possible.
The Modern Corporation Sole
Learning C is easy, but getting a piece of C integrated with your Python code isn't. It can be done well, but bad software is littered with things that could have been done well. I recently had a project at work of ripping out a bad C implementation of a high-performance section of code and replacing it with faster and shorter piece of numpy, so this is definitely a practical issue.
Previously ( June 2017, 106 comments )

https://news.ycombinator.com/item?id=14610110
He could also totally still use SSH for this. He just has to tunnel something else over it instead of using a TTY. SSH itself is somewhat agnostic to whether you use a TTY or not.
Migrating to React Hooks [video]
I do not think discipline is a reliable factor in many aspects... once you try a good compiler or a well designed/consistent API there is no way back. Look for example at C++, no one knows all of it and the newer a developer is the more they want to use all its features, and then there are the templates... which do not add much of clairity or sanity.
Could you expand your thesis a bit?
Clickbait aside, this guide is really solid. Though I will warn newbies that it will take YEARS of 1 hour practice a day (in the editor and tutorial), that you will have to build stuff (not tutorials), that it isn’t easy money, and that language doesn’t matter if you pick the top 10. Languages are tools, so pick the best for what you wanna do and do it! You will have to build stuff at one point outside of websites with an blank screen, so get to it right now. Also, programming requires focus, calm manner, patience, and most of all, time. You can get started rn, so do it for at least 30 minutes and build stuff!

Edit: Bonus points if you know how to Google properly (don’t say the PC is not working, say bootloop issue Windows 10 October update), know that the community can be jerks, now how to navigate PowerShell/UNIX terminal (UNiX > PowerShell though powershell is decent), and here’s a bunch of free coding books.

https://github.com/EbookFoundation/free-programming-books
Amazon Hack #9: Pay with Bitcoin, Save on Amazon
Well... At least this got 28 points...
Carl Malamud – A Rebel Without a Pause
The promotion board pays attention to what your co-workers say. More attention to that, then what you say, actually. If everyone says you're an asshole in your promotion packet, you're going to have a hard time getting promoted.
Also no sign of it on Twitter, seems like people using it would likely talk about it on social media (maybe it's a private beta for airport employees?)
It'd work if people just simply posted the direct image, so you don't have to load their massively bloated website. Then again a direct link wouldn't support them through their monitization methods (ads), but if I'm already running an ad blocker..
The other one isn't a safety driver.

And having the safety driver doesn't tell you all that much about how it would perform without.
I remember that! We guided first-year CS students through implementing a complete BitTorrent client.

I put a lot of work into that project (giving extra presentations to students who had additional questions, uploading unofficial slide decks with extra information about the protocol etc.)

It's one of my favorite memories of EPFL! We had a ton of fun organizing it, and it was exciting to have students work on something closer to the real-world than usual. We did hear from the network admins once everybody's implementation started working, though... they weren't exactly thrilled!
Best Buy’s Secrets for Thriving in the Amazon Age (2017)
(SPOILERS AHEAD)

> "...if Netflix wants to make any of their original content one of the most-watched media events of the year, they can do it, regardless of the quality of the content itself."

birdbox isn't the first promoted original content. it certainly drives success, but ultimately to get 45 million views, probably more than 2x all of who have ever seen game of thrones (16 million is their highest rating ever), is big.

I did think the movie was kinda derivative, a mix of the happening and vanishing on 7th street, but its still a must watch if you are into horror.

every game in town is 2nd guessing their models, because they are extremely outdated. Comcast's (NBC etc) entire model is based around market share - broadcast television. Hollywood is around big box office high spending action movies to make global sales. These is fine in some senses, but it means there are types of content we havent seen much, and while Netflix could satisfy niche customers, it was generally thought that it couldn't compete with large budget content producers. Now maybe it can, and that requires content providers to re-think.

>"The idea is that Netflix was able to coerce more than half of its subscribers to watch this film. That's crazy. The result, as we see in the article, is a tidal-wave of Bird Box achieving near-meme status. How does that feel to someone who does not have a Netflix subscription? What big joke/story are they missing out on? For only $14.99 a month, they can win social acceptance by being "in the know" of the current big thing."

for the longest time, ironically this has been hbo, especially with game of thrones. i feel like they must be paying reporters lots of money to go on about it so much, because its not really watched by that many people - compared to how much its talked about.
Actually it is a pity that so many languages compile to JS but have an FFI which is not really friendly towards the programmer or that requires some code to write adaptors etc. Let's see how it evolves with asmjs.
Sure but it's outside of the design constraints because whenever anyone tries to improve on VT100 crustaceans come out of the woodwork saying "nooo.... that's not proper Unix!"
When shopping for the things I shop for on eBay, there's a non-trivial arbitrage based on delivery time. Items from Chinese suppliers are marked up when shipping from US warehouses based on <= 1 week delivery within the US versus ~2-6 weeks typical for delivery from China.