skysight-inc/HackerNews huggingface dataset:
Don't do this. The entire premise of a password hash is that the authenticator, in its entirety, is disclosed; the job of the password hash is maximize the cost of backing the authenticator out to the password itself.

Of course, it's good to make it harder to exfiltrate the authenticator! And that's really what things like "peppers" are trying to do. But if you're going to build up that defense, be serious about it: move the password hashes entirely out of the application and its accessible storage (don't just spread it across two different kinds of storage the application already has access to!).

So, rather than pretending like you're improving security by keying the password hash, just stand up an authentication service. Give it "verify(user, password) bool" and "enroll(user, password)" and nothing else. Write it in a managed language with a minimal runtime (Rust, Go, or Java, no framework). Then, before you ever think about monkeying with the hash constructions themselves, get to work on segregating it out so that it's in its own AWS or GCP account, enforces rate limits, &c. You will never run out of better ways to secure the authentication services than this "pepper" nonsense.
Learning any of C, C++, Rust or other systems languages takes way, way more than a week or a month. For C, the simplest of the three, it is usually rated at 3 months.

What happens is that if you are already proficient in one of them, one of the others takes way less time (specially in the case of C++, given it forces you to learn almost all paradigms).

In addition, writing a small program does not mean you have learnt C, C++ or Rust.
You can have options and have good default values for those options. Good default values are those that are reasonable for most people most of the time such that they don't need to be (or hire) domain experts to properly configure their tool.

My opinion of a bad default would include a language toolchain which defaults to dynamic linking and requires one to opt into static linking (Java, Python, JS, etc, etc, etc). Worse than that is an anorexic toolchain that has no defaults whatsoever and requires you to pass every little detail directly to the compiler--bonus points if your language has a massive ecosystem of competing tools which are meant to manage these sorts of details for you but utterly and uniformly fail to do so (looking at you, C/C++).
Associated means correlated with.. I gave you an analogy of chromosomes being associated with physical traits.

>>How are chromosomes associated with behaviour?

The same way they're associated with physiological traits. Personality traits are not all learned. There is a large genetic effect on behaviour. There is plenty of scientific evidence for this.

>>Is picking one's nose a "behavioual trait", for example?

How am I supposed to know that? Why would any researcher conduct a study to uncover that?
Fail early, fail often

deploy anyways
My company uses Qt5 via Python fairly extensively. While it's great almost all the time, we've definitely encountered a few weird issues with segfaults, especially on Windows. Some our fault, some due to weird Qt/graphics driver interactions.
Or it could be a subscription still. Like Slack for example who are also a desktop app on Electron* . The advantage with a subscription is you can charge less upfront, and you are being paid for your maintenance and bug-fixing time, rather than supporting a bunch of people who paid you $50 or whatever ten years ago and still expect updates and support.

* Yes they have a mobile and web interface too, but I mostly use the desktop app anyway.
Apparently there's a documentary coming out about Alex Honnold's free solo ascend of El Capitan. It's called "Free Solo"[1]

[1] https://www.imdb.com/title/tt7775622/?ref_=nv_sr_1
According to the 2019 roadmap, QWidgets is very much not dead and will get new widgets this year: https://blog.qt.io/blog/2019/02/22/qt-roadmap-2019/

My personal opinion of QML is also contradictional: QML on the desktop to me just feels like a glorified Electron, resizing windows is choppy, controls feel slightly "off", the "single page" approach just feels like it misses the platform's defining features (dialogs and multiple windows). Best example is KDE Discover. But I'd like to be proven wrong, I'd love to hear of QML desktop software that is genuinely high quality, but I haven't heard of any.
What's the correct way to use typescript when you're directly working with the Dom, and using minimal jQuery? It seems to really not like it if you're explicitly asking for things you know you have in your document, but it reports an error.
For those who are unfamiliar (as I was):

"The WAM is an abstract machine consisting of a memory architecture and instruction set tailored to Prolog. It can be realised efficiently on a wide range of
hardware, and serves as a target for portable Prolog compilers."

(From the book's foreword.)
Further more, this lack of concern is probably what encourages them back into the life of crime. What else do you do when society is hell-bent on shunning you?
I normally wouldn't value those things as highly but I find that compiler speed and tooling makes a huge difference to me for front-end dev specifically, because I'm constantly doing the code->compile->use cycle, and a slow compiler is a pain there. But I'd happily use PureScript again, and am still considering returning to it for this project at some point.
There should be a process in place for routine testing on each target environment. Testing on BeOS shouldn't just be done because Bob happens to like doing his development on BeOS.
Even the selection of lense and film alters the photo.
I have a fair amount of experience with pandas, and find the notebooks very help to refer to! I would say it's worth noting that his book is organized by technology (e.g. numpy, then pandas, then plotting), which makes it feel more like a technical reference, than a walk-through of basic to advanced DS activities.

It's also worth checking out the notebooks for Wes McKinney's data science book. Daniel Chen doesn't have the code from his DS book on GitHub, but does have some useful notebooks he uses for workshops.

https://github.com/wesm/pydata-book

https://github.com/chendaniely/pandas_for_everyone/tree/mast...
I have a sneaking suspicion that Kubernetes is another Ruby on Rails waiting to happen:

https://trends.google.com/trends/explore?date=all&geo=US&q=r...
It's not a sunset, it's light pollution.

You can view a more detailled version here: https://www.flickr.com/photos/albertdros/19838085444/in/date...
I think you have a point, but it's not a terribly surprising one to most people here. This is pretty much the same thing people had already realized with Node.js, after all. I'll even go as far as to say the use of uvloop is fair, it's a reasonably generic piece of software that applies to a wide range of problems. It fits the Node.js comparison well, too.

But personally, I don't see how the usage of hiredis is so much different from literally taking a part of Redis itself and embedding it in Python. As a thought experiment, if I did take Redis's parsing code and embed it in Python, would it still be fair?

I'm not really convinced that a pure Python implementation of the Redis Serialization Protocol would actually be meaningfully slower than the Python bindings to hiredis, so this whole thing may be a bit moot.

I think your project is cool. Perhaps some changes to the README to explain exactly what your benchmarks are meant to show about Python itself would help the criticism.
> Ok, Falcon 9 costs 62M$ just to bring something on earth orbit.

That is false. Where are you getting your info? Falcon 9 costs a lot less than that to deliver cargo to LEO! And the price is dropping every day.

> Why you would ever think that 40M$ worth of tickets to bring a BFR on Mars would be profitable?

There's no need to be condescending. First, I did not state at any point that $40M per launch would be profitable! Please don't make things up and say I said them. I merely stated a large source of revenue. I said there would be other sources as well, I made a big point about that!

Elon has stated many times that the Starship/BFR would cost less to launch than the Falcon 1, amortized over many reusable launches. Falcon 1, not even Falcon 9. So the cost of launching a Starship would be dramatically lower than your made-up numbers.
Vivo iQOO with Snapdragon 855 SoC
Of course it's not suitable for production, but it was still quite common to look at a rust project and find that it used the nightly compiler.
ORMs, until i wrote my own.
Imagine if we just worked on fixing up the place we live on already that has air we can breathe, abundant liquid water, and isn't inundated with deadly radiation.

Funny, but extremely high altitudes of the atmosphere of Venus could fit the bill in the context of places in the Solar System. Temperatures and pressures are around room temperature and pressure there. The thick atmosphere of Venus provides some radiation protection, and water can be extracted from the clouds of sulfuric acid droplets there. You couldn't directly breathe the air, but oxygen could be produced in-situ, and bags full of breathable atmosphere would be buoyant, so you could easily suspend cloud cities there just by using the atmosphere inside the environment domes.
You can immediately pick up the direction of the argument from the order in which the alleged reasons were listed (hint: welfare before military spending).

And, as expected, the inefficiency of the US welfare system was not even brought up.
And what other languages have you written something like trumped.com in? What was it about them that required more effort?
Ro15-4513 – An Alcohol Antidot
The answer should almost always be yes (you have enough funds) because in most cases it’s wiser to stay at your day job and bootstrap a side project.

I don’t know why general advice is to leave the day job and go all in. IMHO that is terrible advice.
The average Chinese today would not agree with you. Tell them about American democracy: they see Trump and a mess of irrational, petty infighting. Tell them about European democracy: they see Brexit and a perpetual stall in economic development. Now look to China’s leadership: while they may lack the freedoms of Western societies, the trade off has been such an incredible increase in quality of life that people born in 1990 to abject poverty can be living in solidly middle-class conditions nowadays (I know many such folks personally!).

The Chinese people as a whole are only going to agitate for democratic reform when (or if) their system of government stops serving them. Maybe a poor leader will emerge and shock the country into realizing they’ve centralized too much power; maybe the level of corruption will begin to significantly impede growth; maybe a rise in fortunes will make people yearn for freedoms they don’t have.
It's an interesting thought. Object oriented responsibility is as archiac as object oriented data analysis because since the rise of ML we know that the larger objects were just mental models for human decision making. However they erred by covering through averaging of more granular inputs that had conflicting information. I.e. if I'm a CEO and 3 of my VPs are good but one is terrible is it my fault that only one has become a risk. Under current object oriented thinking, yes but with granular analysis no it's the VPs fault.
I've tried a number of approaches to a personal data repo: plain text files, custom database tools, dropping everything in a file folder...

My current approach - which I really like - is vimwiki saving to markdown instead of the default .wiki. it's on a self-hosted NextCloud instance, giving me access across all my computers as well as my phone.

It's not perfect - I'm extending it with some standardized project templates and other things - but everything's ultimately text; it's self-hosted, so not dependent on a third-party service that might disappear; and I can easily extend it to meet my requirements.
> the "one-take" test

Except double exposure.

Except 10 minute exposure time.

Except…

1856-57 same sky used with 3 different seascapes: "Although Le Gray never publicly acknowledged his method, he did leave some inadvertent clues in the pictures themselves: the same spectacular stormy sky looms above the horizon in at least three different seascapes, providing irrefutable evidence of Le Gray's canny manipulation."

p47 Faking it: Manipulated Photography Before Photoshop

https://books.google.com/books?id=nGvTg_HC32YC&lpg=PA22&ots=...
The example data is not great, the column names are not very informative.

But if you load some real data then it gets interesting.

Took me a few tries to kind of "get it" but basically I drag my index / name into the main area (in "bar chart" mode) and then tried a few operators on some columns and it gave pretty good results quickly.

I feel like there is a lot of depth but as I'm not used to spreadsheets / pivot tables too much I just used the basics.
I did the same but it worked for me (said hn), why didn't it work for the parent but it did for me?
Paywall bypass: https://outline.com/VBgvaj
>>If Beijing wants something, and the provinces don't, it's probably not going to happen.

What if the Party wants something what will happen? Not sure 100% about China, but in such systems you either go with the flow or...best case scenario you'll get audited, Chinese style.
I would pay decent money for the version of this thing that automatically found all the PDFs in my Pinboard account and loaded them in.
That may be, but the main point I was making is that information doesn't seem to appear in places it doesn't belong. Information that I know FB has pops up everywhere.

Note that I'm not trying to say that the information FB or Google collects is OK or not. Only that I think this is why the general public is pissed off at FB and not (as much) Google.
Indeed, music probably helps only when used as a tool to cut off distractions or to tune our mood. I used to work in an office where junk music (local popular radio) played aloud all day long so I listened to a nicer kind of music in headphones (although what I actually wanted was perfect silence).
The CEO's decisions matter. For the most obvious example, see Apple. A series of CEOs drove Apple to near bankruptcy, then Jobs became CEO. With the same employees, plant, equipment, culture, etc., he turned it into the largest company in the world.

He did something similar to Pixar.

Microsoft is another example. Same company, same staff, same products, 3 CEOs, stark difference in results.
..and I came here thinking I would see an article about an amazing indie games studio from the 90s :-(
Same, except I realized this after starting my first (and current) job as a C developer.

I now get way more annoyed by the in-house build system than the huge C codebase.
Human vs. computer: Becoming more employable than an algorithm (2017)
>Your UI being off by a pixel won't break your application, so if a test hangs on that, then it is not a good test.

For brevity in the previous comment, I didn't fully flesh out the background on why fragile UI tests get created. It happens accidentally.

What sometimes happens is the the UI tester uses a "macro recorder" to record mouse movements and clicks. But then, a programmer shifts the position of a zipcode field by one pixel which throws the script off because it expected UI elements in a different spot. Fixing the broken UI tests is time consuming and can leave a bad impression that tests create a lot of effort for very little payback.

The return-on-investment of UI tests depends on the business circumstances. I'm guessing Boeing and Airbus have automated UI tests that sometimes break when programmers change things which causes rework. However, the pain of fixing the UI tests and keeping it sync'd with the UI code is worth it for avionics software.
Gun laws where guns take the most lives
The Weirdly Quiet Sun May Get Even Quieter (and BTW, Earth Is Still Warming)
California bullet train plan to run out of money is more than sufficient to convey what the article is about. It provides more than enough info to decide whether to click on it.

Shorter is always better when you want to attract someone’s attention.
"These notebooks are just Python code. They even have #-comments instead of markdown.
For awesome Python notebooks, see

http://norvig.com/ipython/README.html "

https://news.ycombinator.com/item?id=12470109
The market is going to price in expected change in fundamentals due to the new CEO. They're going to price it in immediately - before the fundamentals actually change. The market does not proxy change in fundamentals. It proxies change in expected future fundamentals. These are different things.
Despite the gendered terms, what makes me cringe is the belief that X is somehow "better" than Y - if you know Python, and have access to Python, and express yourself in Python faster, then use Python. I use sed, awk, cut, Python, as needed - whatever lets me solve my problem faster.

No flexing about how you use X needed.
f-strings really are great. As someone who has to do a lot of string manipulation, they're both easier to maintain and easier to read than any other Python alternative.
I'm working on a better sync framework to easily drop in systems like this to discovery notes, documents, URLs, etc.
OP here. Yes I have 5 years worth of expenses covered in liquid savings. My target is to make enough income to break even with my personal expenses before I run out of savings.
Annual Letter by Bill and Melinda Gates
Yes, I suppose that's rather misleading, and that sentence contradicts with the actual behaviour that described later in the original comment. For a fixed set of dependencies, versions are only checked and changed on an explicit 'cargo update' run.
Author is ignoring factors which are inconvenient due to the difficulty of measuring them.

Let's take a famous example - Steve Jobs. Booted from his own company, then NeXT was a middling success (because of its acquisition), and Pixar was a much larger success but much more because of John Lasseter than anything Jobs did. Was there anything there to suggest that Jobs was going to be as successful as he was with turn-of-the-century Apple? How could somebody who was that successful at the helm not have similarly suceeded in his previous ventures? At the same time, can any sane person say that Apple was destined to take off like a rocket, that Jobs was merely lucky to be in the CEO role when it happened and take all the credit, that therefore anybody else could've been CEO and Apple still would've turned out to be wildly successful? That is patently ridiculous.

People are not islands. People can be more than the sum of their circles. Jobs was as successful as he was because he was in the right company plus at the right time plus with the right people around him (Jony Ive present, John Sculley absent, etc.).

Now, the author doesn't mention this because the author has no way of quantifying the, for lack of a better encompassing term, "cultural fit" of any given CEO candidate with any given corporate setting. But just because the author does not understand the relationship does not mean that the relationship does not exist. That the economy fails to judge CEOs properly and offer the correct opportunities to the correct candidates does not mean that all candidates are appropriate in all roles with their performance more or less in the hands of fate. Getting a random result for non-random inputs is not evidence of randomness but evidence of misunderstanding the inputs or of a poor metric.

Postscript: boards are completely justified in firing CEOs for poor performance ostensibly due to external, macroeconomic factors. The captain's job is to weather storms, not return to Spain with naught but an excuse for why the King's colonial riches have sunk to the bottom of the Atlantic. Maybe the captain hired the wrong sailors who would've fared better in fairer weather. Maybe the captain was brought aboard a boat with a hole in the hull. But part of the captain's job is to make sure the ship is properly staffed and that holes are plugged. If they're not, then the captain doesn't get to cry foul for a storm exposing his incompetence. Jobs had his storms - the dot-com bust and the 2008 recession. So what?
Does anybody know what Figure 2a and 2b are trying to show ?
Agree with most of this. Right now they’re lucky to have had a string of decently good leaders - but that could easily change.

I will point out though that the current Chinese leadership does care a fair bit about the environment. It’s not evenly applied, but in many cases they’ve been working very hard to reduce pollution and environmental damage and pursue sustainable developments (hydroelectricity, electric vehicles, widespread electric scooters and bicycles, public transit initiatives, etc.)
You have to browse with Score -1 visible to see things like those.

As I understand it, HN (by default) also hides comments that have been moderated away.
France is hardly short of taxation revenue.
Open Cloud Mesh
A social network that build relationships rather than extracts value from them.
Depends greatly on how you count. Is the Veterans Administration under Defense, Heathcare, or social welfare? At what point does a highly targeted tax break count as spending? How about loans? Do you count debt interest as it’s own thing or part of what caused the debt in the first place etc etc.

The US tax code and spending is designed to allow politicians to tell very specific narratives, making this stuff very difficult to measure objectively.
In various circles it can be called pling, bang, or shriek. These are names for the symbol, whereas "factorial" is the name for the function.

In particular the opening line of a (U|Li)nix script is:

#!<path>

and that's sometimes called the "hash bang".

From wikipedia[0]:

In the printing world, the exclamation
mark can be called a screamer, a gasper,
a slammer, or a startler.

In hacker culture, the exclamation mark
is called "bang", "shriek", or, in the
British slang known as Commonwealth
Hackish, "pling".

[0] https://en.wikipedia.org/wiki/Exclamation_mark#Slang_and_oth...
The team has been testing a new ranking formula, keeping you posted tomorrow.
Time to join the future and rewrite the huge application I work on? I sure hope not.
>So either the people born in the US are overwhelmingly more likely to "just be scum who belong in prison for some reason"

There's a lot of people who literally believe this, and most of their reasoning boils down to "Norway is all white". Have you ever heard "America is different, X can't work here because America is so diverse"?
I see that there is a smart contract in the Solidity docs:

https://solidity.readthedocs.io/en/develop/solidity-by-examp...

Doesn't mean it is bullet-proof, but certainly good enough for trying out.
No, the incease in social welfare spending has been overwhelming. The statistics on that are clear. It's a much more leftist/government-dependent society than it was in the 1950s.

Just consider all of the social programs that exist today and didn't exist in the 1950s. The federal Department of Education didn't even exist then. Neither did the EPA or the OSHA.
> I don't have much experience of Rust

Oh, then that makes more sense.

It's always possible improve. But Java is pretty much king when it comes to compatibility and maintainability. (Not so much in other areas, like verbosity, language features, type system, memory overhead, etc.)