skysight-inc/HackerNews huggingface dataset:
Good question. I believe that whilst there are a few drugs that have different rules for different sports, in general it is easier to just have the same rules for all sports. It's possibly this doesn't make sense with regard to "mind-sports" like Bridge; there's probably some politics involved.

Back in 2004, I remember drugs were broken down into categories and almost all categories were either blanket banned, allowed out of competition but not in competition, or allowed. Very few categories (possibly only beta-blockers?) had a more complex classification. While that was 15 years ago, I think the system is still similar.
From the news I hear (which is quite slanted, I will admit, since I write very little JavaScript) the issue with npm is that it's too easy to publish things on npm and use them, which leads to a dependency mess and breakage when things are removed or get hacked. Is this something that the JavaScript community needs?
Really? At what income level in California are you paying half your income in taxes?
Huh, TIL - thanks.
> if one candidate is willing to do more work ... that's one person showing they are willing to put more effort into a job than another

I'm not happy with this logic. It's harmful. If you extend it further, it motivates everybody to work more hours too.

"If a person is willing to put more effort into a job than another let him do that! Oh and by the way, let's fire those who are not and hire those who are".

And we're back to 12+ hour work day and a lot of great specialists are out of their jobs or forced to sacrifice their time with families, friends, hobbies, physical activities, etc.

There are ways to conduct interviews without whiteboarding AND without take home assignments.
This is super interesting, as someone with that mutation that gets extra sedated/euphoria from drinking and is predisposed to alcoholism, from a family tree full of alcoholics.

What do you think the lsd did to dampen the effects on opiate receptor to release endorphins? I have experimented with naltrexone and it works well to block my opiate receptors when drinking. It just scares me that I'm blocking all euphoria and how I'm messing with neuroplasticity and encoding long term memories... Thoughts?
No culture war on HN please
My friend got "up to 270 days" on a Skoda Superb.

The wait for a very specifically optioned Prius in my country, in which barely several hundred of these vehicles are moved annually, is at most four months from commission to getting the keys.
I don't think the social credit system blocks you from all forms of transport. From my understanding it's more like you don't get to use the high-speed trains and airlines. You still may get access to the lower speed trains/busses.
Systemic harassment, no fly lists and personal surveillance of muslim people happening in USA makes your sentence a joke.
I think theres a drift over time.

If you're inputting hand assembled hex, then an assembler is high level. If you writing ASM, C is high level.

C is now thought of as low level, I'm sure many formerly 'high' level languages will become low level also.
And experience. Knowing what to look for, even if it's just the HTML source of a web page, is rather important in the first steps of breaking the system. How do you learn what to look for? Well, certainly there are blog posts and even playgrounds with virtual systems and components one can have a go at.
F# is extremely similar. To put it in perspective how similar, I just ported a project for work over from F# to ocaml in a few days - mostly adding "in" for let blocks and parenthesizing nested match blocks where necessary, and replacing data structures with their ocaml equivalent. Large chunks of that code base didn't require any modification - I'd drop a 500 line source file in, run it through the ocaml compiler and have to deal with a handful of syntax tweaks to make it go through.
Pretty much answer to all of this is yes - terrorist blacklists powered by cameras and surveillance in public, Guantanamo Bay with prisoners without due process and oversight, police killing black people without punishment and military industrial complex lobbying established government all exist.

From the outside, USA with its more noticably overbearing propaganda or China with its disregard for US set morality don't seem that hugely different. These moral arguments from US side are laughable for anyone who was sitting on the other side of diplomatic table.

Lesson here is that we (as in europeans) need to get rid of dependency on both of those nations for core services.
Yes, and that is why the "both amused and horrified" comment makes perfect sense. Other thing that makes perfect sense is the characterization of it all as "the advice was to subject some of the women to be second class citizens" - yes,
in exchange of other women being more protected.
How Do Mixture Density RNNs Predict the Future?
啊啊啊
啊啊啊啊
I first moved to Palo Alto in 1984 and can assure you that luxe it is not.
Using pepper to increase the security of stored passwords
Spectre is an AI-powered long-exposure app for the iPhone
Hi there, I am the Recruitment Business Partner for Maersk Digital and we have a vacancy that might be suitable for your experience. You can see the advert here: https://jobsearch.maersk.com/jobposting/index.html?id=GF-202...

Please feel free to reach out on farhana.mohammed@maersk.com
not saying in this case, but i’ve heard it can often be more effective to group bug reports into more or less accounts. obviously privacy is a huge concern in a bug bounty program and i find it absurd how much the vendors charge small companies
Setting Up Vim for TypeScript
Coal plant emissions contain toxic substances other than CO2. Also consider the fly ash disposal and the environmental disruption of mining.

So, yes, aside from CO2, continued energy production using coal is an unsustainable strategy.
Paul Graham wrote a great essay on this:

http://www.paulgraham.com/submarine.html

From what I've seen, it's definitely true, most "news" is at least influenced by PR firms. Part of why (now old school) blogs are so refreshing to read in contrast. I remember working at a startup, and our marketing person once asked the engineers to do some quick data analysis to get a soundbite just like this.
Increase your Clickbank affiliate sales,sending bonuses to buyers automatically
How is this Hacker News?

This story should be flagged.
This reminds me of the destkop publishing revolution that started in the 1980's. Some dire predictions about the devaluation and trashification of printed material, from books to newsletters, and of the printing industry, now that anyone could relatively cheaply and easily print what they needed on their personal printer using the newfangled personal computer instead of having to take their work to a professional printer to have it printed for prices that were unaffordable for most individuals.

Now no one thinks much about them anymore, but personal printers were once new and considered to be a radical disruptive technology.
Improving software maintenance with error catalogues
Pretty much every developed part of the world requires permits for such things. Why permits? Because building codes are as old as civilization.

https://www.lexology.com/library/detail.aspx?g=5181e80b-f307...
Containing a yearly supply of tens of giggatones of a gas that has very little commercial value seems orders of magnitude less practical than actually avoiding producing that gas in the first place.
I think the worst kind of intellectual DOS attacks are those with high compression rate. Those that sound vaguely plausible at first ("Just do away with ALL the taxes, people will sort it out and enterprise will skyrocket") but require many more words to refute. When the politician in question is also a fast talker, and has a master's degree in Philosophy, he can appear to be smarter because no one can keep up with him and it's by definition impossible to refute all compressed arguments in the same amount of time. A Polish politician I have in mind goes by initials JKM.

My point: an intelligent, educated person can cross over to the dark side and it makes it all the way worse. Some people praise Dan Brown for his intelligence. So what, he doesn't write books for intelligent people.

In the past, centralized media kinda kept those guys in check because it had higher respect for formal education. The "compressed argument" still worked very well for populists in space-constrained media like TV debates (time) and print (word limit). Now, the Pandora's box is open.

To succeed in social media, you don't need to construct good arguments. Some charisma and a way with words will go a looong way. Ordinary people no longer seem to respect education, logic and wisdom. This is a problem because no one can be an expert at everything. In the end, we trust some people. What if a lot of people put trust not into expertise and experience, but into charismatic, cheeky figures? What if they prefer appeals to nationality, bloodline (son of a heroic activist)?

Is there a strategy that works against populism and isn't intellectually dishonest?
I think both can be true, depending on the details of the strategy and the conditions in which it’s valid.

Sometimes common knowledge of a strategy can lead to the elimination of the situation in which it works. Participants can anticipate it and so the conditions no longer occur.

In other cases so many participants pike into the strategy, in which there is only so much money to be made, that returns get so thin that only the very most efficient and smart participants can get anything out if it. Arbitrage is a good example, once its known it can get traded out of the market very rapidly.
Completely clueless. I'd say just clueless were it not for the "force" word.

Even though you used it in the same sentence with the word that describes an institution that (unlike Uber or AirBnB) has monopoly on the use of force, you still believe it may be good (for whom, exactly?).

Incredible.
The US isn't perfect, but the events you're talking about are in no way comparable to imprisoning a million Uighurs in camps. Or executing Falun Gong practitioners and harvesting their organs.

https://www.bbc.com/news/world-asia-china-45474279

https://en.wikipedia.org/wiki/Organ_harvesting_from_Falun_Go...
Compared to PyPi it looks like npm packages are much more granular. You'd see the functionality of a popular Python package spread out into multiple npm packages.

Both approaches have their advantages. I'd say that for security and reliability, you really need to know what packages you are running. Often you can delegate the responsibility to bigger upstream projects/groups.

For example if Facebook works with and on React, you can put a good lower bound on the reliability/security of React and the packages it pulls in. I'd be a lot more suspicious of packages which are rarely used by significant other projects.
I was 23 and living in York and we were sent "protect and survive" by the government, to ensure we understood how to conduct ourselves in the event of nuclear war.
Stopping fossil fuel burning is always preferrable to carbon cleanup technologies. It's simply cheaper and easier.

Also "CO2-neutral coal power plants" is a scam. You'll always have emissions left. Digging up coal causes emissions (the coal is not alone, there's e.g. always methane coming up with it that you can't capture). No Carbon removal tech can remove 100% of Carbon from emissions.
(There was actually a lawsuite because Vattenfall called one of their CCS testing plants "carbon free". They lost.)
You need about 1.5-2x the amount of coal to provide the energy for the clean-up systems. So you can expect politicians to "increase efficiency and reduce dependence on foreign coal" by turning them off.

Also, I can't find figures easily but it still wouldn't be as clean as solar, nuclear or wind.
> Have you ever had one of those notepads with the kind of paper that made you want to write something, anything, even though you had nothing to write about?

That's exactly my experience with F# (not surprising, knowing how similar OCaml and F# are), but until I read your comment I didn't know how to explain this joy of reading and writing code in it.
I have a 4-bedroom house in the country and the mortgage for it is 5 times smaller.

Absolute madness.
I do this for my super important accounts in my password manager. I have a simple prefix that I use which isn't stored in my password manager, such that if my manager got compromised they still wouldn't have my banking/email passwords.

Over the years I've found a few annoying password policies that didn't like my prefix, but overall it works great.
Google tends to build tools that make you more productive on the open web, while Facebook tends to build timesinks that make you less productive in a walled garden. The value proposition is different between them, and so we give Google more slack because it's more valuable to our lives.

And at least Google doesn't tend to reset our privacy settings to "share freaking everything" every year or so like Facebook did. On that, they're actually less scummy than my bank is with data sharing.
No that's the point, the generation script recognizes that the server issues an HTTP-compliant response (which 301 Moved Permanently is) on port 80 and dumbly generates that false-positive, not understanding that the only responses on port 80 are to upgrade to HTTPS.
> It’s not like static typing and the immediate feedback CL has are mutually exclusive.

While it's from the Scheme side of the Lisp family tree rather than the CL side, there is Typed Racket.
In the "user guide" it says it's a platform for math/stats PhDs, and describes a process for checking email addresses. It certainly gives the impression of unwelcome to people who are neither PhDs nor currently enrolled in a PhD program.

If you want people who don't have and aren't trying to obtain a PhD to participate, I think you should say so explicitly.
Another reason is they could make Reddit 'sink' comments criticizing the Chinese.

China is playing a really good geopolitical strategy game. If any other country was doing the same attrocities as them, they would be criticized and sanctioned. But China has gained enough power to stop that from happening.
Not all products make good businesses
While those are wrong, they aren't:

> imprisoned, tortured, or killed on the basis of your religious or political beliefs

You've entirely failed to refute the parent comment.
Jonathan Swift in 1710:

"Falsehood flies, and truth comes limping after it, so that when men come to be undeceived, it is too late; the jest is over, and the tale hath had its effect: like a man, who hath thought of a good repartee when the discourse is changed, or the company parted; or like a physician, who hath found out an infallible medicine, after the patient is dead."
It’s an okay operating system, but it could use a good text editor.
I think its more meant to keep spending / complexity controllable in the long term (ie. linear instead of exponential).

Howeverrrrrr you will need to make sure you are actually going to need that larger scale at some point in the future. Otherwise you are probably better off with an simpler solution like Terraform.

I think the k8s madness its a bit like the NoSQL craze in that sense.
> Error establishing a database connection

If you're not caching, you are irresponsible.
Square | Multiple Roles | Multiple Locations | Full-Time | ONSITE and REMOTE

Building the future of commerce. Square creates products and services that push boundaries and innovate business. We’re looking for curious, hard-working leaders to join our team and help empower our global community of sellers. Have an idea? Pitch it—entrepreneurial minds thrive at Square. https://squareup.com/careers

Seller - Square Point of Sale turns a smartphone or tablet into a complete point of sale. It helps sellers take payments and so much more. https://squareup.com/careers/jobs?team=Seller

Capital - Square Capital is a simple and straightforward approach to lending funds that help businesses grow. https://squareup.com/careers/jobs?team=Capital

Caviar - Square teamed up with Caviar to help restaurant owners increase sales and deliver outstanding service—plus the best food in town. https://squareup.com/careers/jobs?team=Caviar

Cash App - It’s like real cash, but better. Square Cash is the easiest way to send money between friends or accept payments for your business. https://squareup.com/careers/jobs?team=Cash

Hardware - Square’s Hardware Team builds the tangible connection to Square. https://squareup.com/careers/jobs?team=Hardware

Risk, Information Security and Knowledge - We keep Square and our customers safe & secure. We also build world class AI/ML Platforms and Knowledge systems. https://squareup.com/careers/jobs?team=Risk%2C+Information+S...

We are hiring engineers in: Atlanta, Dublin, Kitchener, Melbourne, New York, San Francisco, Seattle, St. Louis & Toronto. https://squareup.com/careers/jobs?role=Engineering
Don’t be so sure you know what a lowercase G looks like (2018)
I would love to see a breakdown of which company paid the most :)

Shopify, Uber used to be at the top of the list.
Note however that this is a ranking of perceived corruption from a group of adjudicators, which isn't necessarily the same as actual corruption.
There’s a very similar saying in my native language (Romanian) that roughly translates into English like this:

> One fool person throws a rock into a lake and ten smart persons then try their best to get it out
What Is the Difference Between Domain Rating and URL Rating in SEO?
Bored with people bagging Flat Earthers, we get it you're smarter.

This is a self inflicted DoS

Flat earthers are no different to 6000 years-ers (Or religion in general). Science goes on.

Issues with replication in science is a real issue.
I don't think a significant proportion of the people who want to live in New York would cite Wall Street in their explanation.
I hope not. It is hideous and unnecessary.
It’s almost like feelings are a very subjective matter and not the same for everyone. Not everyone thinks the same way as you do.
In the intervening years there've also been some nice posts about this. In particular I agree with one that argued that using this style in professional setting is indeed a good idea, to emphasize that what you're presenting are hand-waved assumptions.
That's pretty much how we wrote the virt tools[1], basically we rely on the OCaml compiler, findlib, and not much else.

[1] https://github.com/libguestfs/libguestfs
When you figure out how to game the system charge others to do it.

People would pay to create fuzz in their records.
I hate to say it but after reading all of your comments this on in particular think I'm sold on the idea and I was really against it when I read your first comment. I don't know if will catch on but I would definitely give it a chance.
Ask HN: How do you relax without drugs/alcohol/sex/exercise?
True, but it’s better than two lay-people having an argument on a message board :)
I've never heard of receiving antibiotics for dysentery?

I've been to India numerous times, and have had dysentery a few times. Once was pretty bad, essentially rendering me bed (and toilet) - ridden for a couple of days. Never once would I have considered seeking medical attention for it. Unless you're vulnerable for some reason, I'm not sure anything can really be done about it.
Archive link https://web.archive.org/web/20190303084556/blog.benpri.me/bl...
> It’s very likely that a lot of your user’s passwords are going to be cracked

While I agree that peppering your passwords is good practice, this is just flat-out wrong - with a salted modern hash algorithm it should be cryptographically infeasible to crack passwords from a database dump, and if you are using an insecure algorithm, it is just as easy to recover the pepper as the passwords.

> Very few will make any mention to how password policy plays a significant part in ensuring the security of any stored values.

As a reminder, the NIST recommends enforcing only minimum length and known-vulnerable password requirements: "Verifiers SHOULD NOT impose other composition rules (e.g., requiring mixtures of different character types or prohibiting consecutively repeated characters) for memorized secrets." [1]

[1] https://pages.nist.gov/800-63-3/sp800-63b.html#sec5
Do you pay to charge?
I feel very strongly that proposed technical solutions to de-carbonise need to explain the energy cost of driving CO and CO2 into carbonate complexes. If the proposal is to make something like methane clathrates in extreme depth there is a pumping cost. If the proposal is to inject into fracking and have it form complexes underground there is a pumping cost. Most carbon intense energy sources depend on big pressure drop across the turbine so there is little energy in the stream and the smokestack for the fuel is decoupled from the steam anyway so either there is a reaction energy (coming from where?) Or it consumes power being generated which reduces overall system efficiency.

I just don't get it: there is no free lunch burning coal to make heat to make steam implies combustion which necessarily makes CO and CO2 and it's in gaseous form. It's diffuse. So making liquids or pumpable gas expends energy and making to flow over a reaction surface to make carbonate implies back pressure on the flue gases.. it's just hard work.
The author talks about using SHA-256 as a password hashing algorithm. This doesn’t inspire confidence in the rest of the piece.

tptacek in 2016 on peppers: https://news.ycombinator.com/item?id=12550375

The current best practice of simply hashing passwords with bcrypt is fine, and anything past that which doesn't doesn't involve (probably per-password) use of an HSM adds only marginal value.

I wouldn't want anyone to read this and get the impression that "secret peppers" and multiple hashing rounds and HMAC were important components of a password storage system. They are not: they're things that message board nerds come up with.

If you want to be a step better than just storing passwords with bcrypt, your next step is to create an authentication service that runs on separate hardware with an "is this password valid" and "enroll this password" API and nothing else. The stuff people do instead of this is basically cosmetic.
The floors were less likely to be perfectly level than modern floors so a three legged stool or table would be less likely to wobble.
That's a good idea - I should start doing that myself, thank you for sharing.
Life threatening? Cold weather and lack of electricity kill far more people than global warming.
I don't doubt this has happened but also just as likely they did know about it but some dumbass product owner decided it wasn't a high priority until someone external reported it. My company has hundreds of similar (not just security) issues just lying around.
As a counterpoint: I have a reasonably complex app that gets data via WebSocket pub/sub and dashboards it, does things like stream logs from remote devices, open up SSH consoles, draw canvas diagram with network map etc. It’s split up into lots of component files and I think I still have less than 50 files. So no, I would not say 1000 file app is normal (which is not to say they are not doing something grand that justifies it).

With my app size I can get away with no Webpack, just a Makefile that links together required file list into a template file, which is then included into the page template on the backend.
What-the-pack: ultra-fast messagepack in JavaScript for Node.js and browsers
Why I Teach Coding via Facebook Live
Sunfish are amazing. You see sunfish and manta rays on the eastern seaboard of Australia. What's weird is where it is, not what it is: it's a well known fish
Lol damn this should've been in show tab. Fuck