skysight-inc/HackerNews huggingface dataset:
"If packages are too small it can get hard to understand the code if your not familiar with the structure yet."

I solve that with describing the context of the package in the opening prose section. I think this section is underused in every language community I've seen, even though all the automated doc systems support a top-level summary/contextualization/etc.

I think that an advantage of small packages is precisely that it is easier to understand if you're not familiar with the structure yet, by isolating how much structure you have to understand. Large packages, or languages with loose barriers, force you to eat huge swathes of the project at once to understand the code. Small packages are both bite-sized on their own, and also the packages that use the small packages often allow you to gloss over the used package while you're learning that package.

I don't end up with much indirection caused by the package boundaries. (Where there are interfaces I would usually have them anyhow for testing purposes.)

This tends for me to be one of those places where I wonder if I'm just doing something really different than most people. Another example is all the many people over the years who have tried to convince me, with varying level of politeness, that testing code should only use the external interfaces, or dire consequences like having to rewrite all the testing code if I tweak the package will happen. All my testing code uses private interfaces unless there's a really good reason not to, and maybe once in ten years have I had a serious rewrite of the test code come up. The threatened problems don't seem to happen to me. (And I am pretty sure I'd notice them if they did, although I guess I can't completely discount the possibility that I'm just too oblivious somehow.)

Certainly, if they cause you trouble, either because your style is different, or your problem domain is different, or whatever reason, don't use small packages.
Facebook Ups Surveillance of Users to Keep Tabs on People Who Don't Like It
I know paypal won't process transactions where users mention that the payment is for fantasy sports or brackets. I'm assuming it's for some kind of legal reason. Why is Balto allowed to process transactions for sports betting?
Yup, most of them are Android tablets and I believe all the media that is served is stored on a central server via SQLlite on the aircraft.

Knew someone that worked for a company that builds those in flight experiences, and that's where everyone would get their dump of "insert airline" watermarked movies for the month.
The Surprise Cult of Modern Monetary Theory
Type Choice, Political Choice
https://hub.docker.com/editions/community/docker-ce-desktop-...

(Full disclosure: I work for Docker)
Hah agreed :) We had one project that kept breaking in Travis, and we started to realize that starting over in Circle was easier than the troubleshooting / feedback loop in Travis.
I'm always torn on whataboutism. On one hand, yes, these are all problems that should be addressed, and you shouldn't dismiss one just because there are some worse problems elsewhere.

But I think a lot of what we sometimes label whataboutism is just people marveling how people in general are just so terrible at risk assessment that they'll latch onto minimal-risk items and get outraged about them, while at the same time engaging in higher-risk activities in the same context.

But there's also the fact that the "what about"-er has no idea what the parent poster is concerned with; saying they're "ignoring actual privacy violations being done by e.g. Facebook or Twitter, or the millions of ad networks" might be entirely false. Maybe they're concerned about both things.
I do hate CA.
But given my disability, it's a lot easier to stick around than move around from state to state
Personally, I want cameras on these things. It's an airplane, not a private space. And a camera is useful for all sorts of things from video conferencing to gesture based interaction.
Keep in mind the Makerspace kit is ostensibly aimed at arming a whole classroom or workshop full of people, though it looks a little light to me in major components for that. However, it's not meant to be a personal starter kit.
In that case they don't have a picture, but they do know what they feel like, and if they don't, it just takes one ornery TSA agent for it to happen.

It's a thoroughly miserable process no matter what way you slice it.
> If you want something like COI you can use deltachat

COI is deltachat.

https://fosdem.org/2019/schedule/event/chat_over_imap/
Yeah I think the insane costs are a disease that mainly afflicts the major coastal metro areas. Families end up paying in some combination of high mortgages, high property taxes, direct private school tuition, or insanely long commutes. There are different choices you can make along those dimensions, but total cost is high regardless.
This is very true. I have family members that just read on their phones while sitting on the beach, and when I explain to them why my kindle is better suited for the task they don't seem to understand why. "I just invert the colors and it makes it just like that." They say.
I wouldn't like it and if I noticed I'd politely ask them to stop. However, (and I'm not a lawyer) I don't think it'd be illegal or even unethical. If someone was recording me napping on a plane I'd treat it the same way as if I was napping under a tree in a national park. It would be a non issue for me.

Privacy is something I control by not exposing sensitive information in areas where recording is a possibility.

I already take precautions when flying by not working on my laptop or having sensitive conversations with family or coworkers.

I generally don't consider information on where my gaze is looking, facial expressions, or if I'm awake or asleep sensitive information unless I'm in a private space like my home, a hotel room, or a bathroom.
> Everything you're buying at that tier is going to last.

I respectfully disagree. Luxury goods are often flimsy or expensive to maintain (e.g., Toyotas vs Porches) so research is still required.

As for private school and housing, these are exactly the expenses I'm talking about not getting wound up in. I went to private school almost my whole life, and I understand what it is to not want to be pulled away from a community, but the reality is that $500k—let alone $1m—is more than enough to afford a good private school and a good home in any city. The struggle to live on $500k / year is an artificial, self-sabotaging one.
> I think podcasting is somewhat shielded from this by the fact that you really don't need an insane amount of capital to put out a good product.

You could say the same thing about the web
Hi all, OP here. I hate both Data Cleaning and QA so I built an API and Web App to do it in a straightforward way. Feel free to ask questions and give feedback
InfluxData Secures $60M in Series D Funding
But you can pay spotify to have no ads, which makes spotify good in my book.
Yup, it's satellite TV. JetBlue pioneered it (and Delta started it with their JetBlue competitor Song in the early '00s IIRC) and some other carriers have it too.

JetBlue uses the NYC satellite feed for its local stations (FOX, NBC, CBS, ABC) and I think Delta's might rotate (it's def not the local Atlanta stations) and like satellite, if weather is bad/obstructed, your live TV sucks/goes out.
>For example, CA is a "two-party consent" state

IANAL, but AFAIK one/two party consent only applies to private conversations (eg. phone calls). Public conversations are fair game in all jurisdictions.
Hi, Andor here.

I'm the uploader of the video. I'm not the Todd Fernandez, the speaker for that HOPE09 talk. I happened to give a talk at the same congress (Digital Security in Healthcare Institutions, pretty outdated as of today), watched Todd talk, and loved it.

My upload is published every once in a while in HN or Reddit, but I'm not the author, just a, ahem, freeloader.

I uploaded the talk with intention of subtitle it for my deaf teacher in particular and Spanish speaking people in general, but I lost control of the account, I think it was related of some sort of Google+ problem.

So here are my explanations
Roderick from Backblaze. That is true. We do not currently use SSDs for data storage. We do use them in some specialized areas where they make sense, as we described in a previous blog post that is linked in today's post.
If you got three offers in four weeks, I'd at least consider taking another four weeks to see if you can find a job in your preferred location.
>In our case, the problem is no longer to calculate Fibonacci numbers – the problem is now to find a way to multiply large integers together efficiently. As far as I can tell, GMP is already state-of-the-art when it comes to that, and tends to come out ahead on most benchmarks.

And actually, the best known method of multiplying large integers is achieved with an FFT over the integers mod 2^n (which is what GMP does). So then your task is changed yet again to optimizing a modular FFT algorithm...
The left wouldn't support UBI or government-led environmental projects?
For all the crap we give China and their authoritarian government, airport security is FAR easier at every Chinese airport I've been to. Walk through a metal detector and get a quick non-invasive pat down.
I will never understand this mentality.
What kind of lifestyle business are you looking to start? do you have experience in it? You could also look at buying business which would be a whole lot less risk.

Also, if its some kind of food thing just send me half your money now and you save yourself a lot of time and trouble. ;)
Philanthropy in a general sense? No. People can give whatever they want.

The laws that allow so few to accumulate so much, when the rest of the world has so little? Something seems off about that. Like the systems we've built aren't really working very well, not for everyone (though they're working great for a few.)

Counting on philanthropic efforts to replace services provided by government? Absofuckinglutely. You've just replaced democratically-governed society with "what a couple of rich guys think is a good idea for now". It's hard to be less anti-democratic than that.
> Yes. In fact, an acquaintance of mine is staying at a psychiatric hospital being treated for schizophrenia. He has absolutely nothing to do all day and wants to read books from the library. But he can't easily access the library.

Nice. I guess this is the psychological equivalent of crappy hospital food right when your body is recovering and has the highest need of nutrients.
Don't forget the brainwash about their company they make you watch while you're strapped into a seat with nowhere else to look.
Because you're in the wrong industry. Very big in automotive.
I do wonder if we're doing society a disservice by wanting "powerful women" to happen so much, that we abandon all reason. I'm not a big fan of how we put "powerful people" up on a pedestal in general, and our reverence for leadership/ management. These things need to happen organically, and these people need to be relentlessly criticized for this type of behavior. They have power, so they aren't. This isn't limited to Holms, it's been a big problem with Steve Jobs and Elon Musk as well.
I think the struggle to find meaning in jobs is correlated with just how abstract the jobs have become nowadays. Most people don't directly interact with their customers or they don't see any tangible effect of their work. Their work is so specialized and niche that they cannot figure out why the economic machine needs them doing this.
> group messages go into some archive-window (instead of showing up in the chat window like in every over program), sometimes the archive misses them...

Not sure what that even means. Worth reporting.

> pictures are a link to the server, so I have to manually download them all.

I think you need to install the image preview plugin.

For gajim make sure it's a recent version.
Dino-im https://dino.im/ is decent.
poezio https://poez.io/en/ if you want a text client.
converse.js https://conversejs.org/ for a web client.

Public server wise I don't have any recommendations (but i'm sure others have plenty) other than movim. https://movim.eu/#try they have a baked in client (and do a whole bunch of other stuff like micro blogging) but once you have a account, there is no reason you can't use any client you want.

Encryption with omemo is a issue and usability could be improved (I believe people are working on that).
If you have large folders, the web interface is an order of magnitude faster than IMAP. See https://stackoverflow.com/questions/18553453/what-protocol-d...
Pretty sure someone could experience serious ramifications if they persisted recording you after being asked to stop. They might even be met by police at the destination and banned for life if they refused the commands from flight attendants after their inevitable involvement.
Deterrence is important. It is unacceptable for any company to be this negligent about highly sensitive personal data. What leads to these kinds of situations is that the company didn't care about security at all. Even now the company reported the journalist to the police.
Could it be instead a sign of increasing profitability of podcasts? (That advertisers are willing to pay for ads on podcasts.)
I believe you're correct, 'cept that Wilson was Winston.
If the hardware exists, and just because it is likely disabled (or not utilized) in software by the airlines, does not mean it cannot be enabled by a nefarious actor.

Security researchers have shown it is possible to gain access to the on-board computer systems:

https://thehackernews.com/2016/12/hacking-in-flight-system.h...

https://thehackernews.com/2014/08/airplanes-can-be-hacked-th...

And one man appears to have elevated that access to actually control the plane:

https://www.wired.com/2015/05/feds-say-banned-researcher-com...

https://www.cnn.com/2015/05/17/us/fbi-hacker-flight-computer...

So, no, I don't think this is a distraction whatsoever. We have the capacity to cover both of these issues.
I'm curious about what you mean by this exactly
Issues Hunt Powered by GitHub API and React
Issues Search App using GitHub API. Save time searching for "good first issue" or "help wanted" labels. Encourages more people to contribute to open source.

https://github.com/fulin426/Issues-Hunt
Es un tema importante
> [...] all the citizens have hidden cameras in their TVs.

The cameras weren't hidden.

> We also have the customary day of rage [...]

It was the Two Minutes Hate.

> Don't get me started on the butchering of the English language...

In the book, the changes to English -- to make it into Newspeak -- were controlled. No such control exists in the real world.

> It's ironic [...]

It seems not to be.
After clicking a password reset link Django performs a redirect to a change password form. The initial link tracking redirect still occurs, it's the second (domain-internal) redirect that is the issue.
My advice would be this: If you have a specific reusable component.. Make a package to contain it.

Use init() to compile any regular expressions and store them as variables within that package, so that you don't

Split out related code in a folder, remembering that the included code is done in alphabetical order - so shared functions within the same package you should alphabetically make it the first to be included.

You can register components of a larger system by using the init() function to call a function in the base package, and within the calling package (usually main) import the "plugin" using the underscore space prefix (sql database drivers use this method)

Use the new go modules system; its great. But sometimes it doesn't include the latest packages, just modify the go.mod file and anything after the package name remove it and just put master instead.

One last thing with error handling. Everybody does if err!=nil. I tend to go the opposite way, if err==nil and nest these, if err isn't nil i drop out and deal with the error. If it is ok, it will return ok.
There are quite a few very large XMPP deployments in industry. I'd hardly call it dead. As a protocol it's alive and well.
Allowing any one group of people to amass so much wealth and influence seems anti-democratic.
I haven't looked around, but the 10x10mm form factor seems quite small for an A7 product. And they have some shared memory which should be an advantage over a serial interface between two separate processors.
Building a dumb system will also provide a much better audio quality if you're willing to spend some time researching what to do. Plus it's of course more flexible as all parts are replaceable separately.
The substantiating factor for me has two dimensions: scale and intent.
This book is a great read for writing maintainable code:
https://www.amazon.com/Clean-Code-Handbook-Software-Craftsma...
Some Details of My Personal Infrastructure
Try doing that as a Uyghur
There's a formula in there that reads:

Invested Time x Motivation
-------------------------- = Results
Inhibition

As an engineer without formal education, this rings very true. When people ask "how'd you get into this?" typically my answer includes the phrase "interest times time." The inclusion of inhibition in the formula crystalizes something I've been feeling for a long time.
Google Ends Forced Arbitration for Employees
Caring or not aside, the psychological and emotional "friction" from the constant din of surveillance takes it toll. Worst case, it influences your decisions / behavior to becomes less "suspect". There's no need to care, you've already been assimilated.
Outside of the scope of elaborate CI pipelines, I wonder how useful this can really be.

Big CI pipelines are one of the few instances where I can think of Bash being both an appropriate choice AND the resulting product being large, elaborate, and sensitive to failure - which would benefit from being tested. Most other applications of Bash are generally just so simple that fundamentally altering how you write scripts ("Bash scripts must also be broken down into multiple functions, which the main part of the script should call when the script is executed.") for the sake of testing them seems like it could easily fall into the category of over engineering.

Beyond the CI pipeline use case, wouldn't the tools in which this would actually be properly useful be better off written in a proper programming language?
You happened to pick some features where there hasn’t been much development work, since other things were prioritized. And one feature that’s not mostly compiler internal.

This is not the general case for unstable features. And promoting the use of them too heavily can cause a lot of problems. It undermines trust in the language, especially given rust’s pre-1.0 reputation (which was well deserved at the time.)

Stuff that’s unstable isn’t in Rust; that’s why it can be changed or even wholesale removed at any time. The distinction is very important.
KeyChest – Free HTTPS Expiry Monitoring for 500 Domain Names
Shortages of the special military GPS receivers (which support decrypting the encrypted signal) resulted in the US military having to use ordinary civilian GPS receivers instead in many cases. So, limiting the accuracy of the civilian signal was having a negative impact on the US military's own operations.
I have some very good memories from Broughty ferry beach back when I was at university.
Technical Consultant, Manager “ Static Application Security Testing
I'm wondering if anyone has real world experience implementing or moving from document.cookie to http only cookies? Or any stats on lost cookie coverage for iOS devices?

We're currently about to push an update to our system that uses a http only cookie on the shared 'action' domain and writes non-sensitive JWT to client domains for pre-fill and sending action data to CRM/ESP with document.cookie

Now, I am leaning towards rethinking the client side and potentially just move everything to hosted subdomains so we can set http only JWT on client domains - would echo out a JS var with the user so JS can still access instead of document.cookie. Critically this JWT contains not login / donation / sensitive info I assume it's publicly accessible even though we dont have 3rd party JS outside of GA on these domains.

I guess could just keep current setup with identity http only cookie on separate domain and just return JWT in a JSONP/cors request only send it back for 'verified' domains. But that seems hacky and adds http trips (and critically for pre-fill etc want it to be instant not flickered), though would be a lot easier than managing a bunch of subdomain cname stuff.
Yes, and I think the quoted paragraph has so much more to do with coding around interfaces (behaviour) than with abstraction using non-exported package symbols.
Some journalists care. Don't conflate journalists or HN forum with the general public. Most people likely don't care at all.
This is why I find more casual listening like a podcast good. Listening to a book you can really hamper understanding of the later parts of it with low retention of easier parts. A lot of podcasts don’t really require your full attention at all times to understand later parts.
> A plane seat is semi-private or at least has always had that expectation.

Really? I've never had that expectation. I consider it the same as sitting on a seat on a public transit bus or subway train.

I still think the airline should disclose when and how they're recording me, but an expectation of privacy? Nah.
I said this in another comment, but it really depends on the type of flight and class of cabin you're in. Singapore Airlines has showers in first class. Emirates, Qatar, Singapore, and Air France all have private first-class suites with doors or full-length curtains.

The big trend in international business class (both with US domestic and foreign carriers) is to make the seats as private as possible. Delta has doors on the A350, Qatar does something similar on the QSuite (which can be configured even for four people to have their only little pod and a double bed for couples), and others are following suit.

For those of us who travel extensively for work (especially international travel) and are expected to be ready to go upon landing (I sometimes have meetings or stage rehearsals within ours of landing after a 10+ hour flight -- though I usually try to arrange my travel so I have at least a night before to adjust, that isn't always possible), sleeping on planes is imperative and it's why you pay thousands of dollars for a lay-flat seat in a private cocoon for business class.

Also, people who do video conferencing on airplanes are the worst. The absolute worst. (Unless you're in one of the private first-class suites I'll never be able to afford, then knock yourself out.)
Not in my experience. Felt about the same as US security, with one major difference being they made you take all electronics with cords out, such as phone chargers. This was both for international and domestic china flights.