skysight-inc/HackerNews huggingface dataset:
My bigger concern would be that the shelf life of a job seems to be getting shorter and shorter, and it is harder to transition careers with a trade degree than a more general 4 year degree. Not saying that people learn more / are better prepared by a 4 year degree, just that it is easier to get past the resume screening phase of a job hunt.
The six main arcs in storytelling as identified by an AI
It's an obscure product with few providers
> Some folks, myself included, reel at the conventional wisdom that a small screen necessarily means reduced functionality.

Right. We used to do perfectly serviceable work on extremely small screens, sometimes displaying as few as 40 columns and a dozen rows of text, and with keyboards that were so painful to type on that most commands would be abbreviated to 2 or 3 characters. Current versions of Linux still include a "quirk" for supporting an uppercase-only text mode that was common on early terminals and microcomputers. So no, hardware capabilities are not an inherent obstacle here. Providing an information- and interaction-dense UI on such limited devices is definitely a challenge that will require some added work, but the kind of 'convergence' that Purism is talking about is a necessary building block.
And by that metric losing 2% of 1000 is a far bigger problem than losing 10% of 100,000. I agree that length is the most important factor, I'm just saying that character pool isn't very important to final security.
Happy to see urxvt among the top performing, it's been my go to terminal for more than a decade!
The author is saying that signing certificates are something that FOSS authors enjoy using, but they have no practical purpose outside of that enjoyment.
besides the fact it looks now it's zfs, on linux 0.7.13 xD which would be silly at best
Why bother checking the signature of dependencies if the main executable integrity isn't being checked?

What really surprises me is that the author of something as great as Notepad++ isn't making enough money from the project to easily be able to pay for the certificate.
I remember the good old days when people were actually trusted to do their own research before downloading a potentially dangerous exe.

Now all we have are app store and certificate rackets. Im looking at Google and Apple too. Shame on the industry for accepting 30% revenue share on their services. The idea of an app store is great but not when it excludes other legitimate ways of installing software on device.

These practices are anticompetitive and monopolistic.

Good for Notepad++. I couldnt agree more with its sentiment.
I'm sorry, can you explain how we "average" the utility?

For me, it has zero value.

For another person, it saves their life, and they would pay literally anything they could.

How do we average that?

My hot take: We can't. Buy medicine in bulk, give it to people for free, progressive taxes to pay for it.
Fighting with Java – Generics
Greed, mostly.

Digicert lists EV code signing certs as $664/yr. But if you are to enter their site through a side door or just plainly cry into the support's jacket, then the price magically drops to $104/yr. And that's for an EV cert! So the only reason there are $600 certs is that there are people who do pay that.
By "access", do you mean "forced"? There is no limit to the access of free education today as continuing education after forced public school.

I completely agree that people should continue their education throughout their entire lives. However, I do not think it should be forced, and I don't think that people who pursue a different style of education should be looked down upon. Especially when the standard and accepted system has so many flaws.
Is code signing part of what you get from Apple for your $99 developer fee? If so, then that suddenly feels like a bargain.
Ic. Thx!

I'm working on a project similar to the YaCy one. The main difference is that I do not want or even require that each node trust each other. I let the user decide who they trust.

https://github.com/kreeben/resin
It's up to you. My go-to recipe for the Aeropress is 30g coffee for 240g of water.
I don't see how this is "cynical". If you have no way to discern the difference between good and bad employees, it makes sense to at least hire somebody you know.
Pretty ballsy of the WaPo to suggest such a thing, considering their utter lack of interest in the heinous acts carried out there at the time.
Why people are choosing Masonite over Django
> while waiting for the way-too-slow kettle to boil the water

How is it Americans still don't use electric water kettles? Everyone else on the planet that has electricity has one. It's faster, more convenient, kinda-sorta safer. And you can find ones with digital temperature control on Amazon for like $25.

https://www.amazon.com/s?k=goose+neck+electric+water+kettle+...

Look at these things, there's hundreds of 'em. I picked the cheapest one and it works great. I can set the temperature to exactly 205F and the gooseneck works for pourover, or I can bring the temp down to 170 for green tea. (If you make big batches of tea, a non-gooseneck pours much faster)
Codesigning certs are a racket... the 'chain of trust' and documentation requirements mean they are expensive and hard to get as an individual, yet oh-so-essential for releasing software. Which also makes them status symbols, which the author is rejecting.

I kind of see them like taxi medallions
> It does so more directly by being a PC without Microsoft Windows pre-installed or proprietary BIOS.

Ah, so it does so by redefining the inconvenient bits completely out of bug #1.
Oooh wait, a new one! Every time I go to the site, it says I have 1 unread message, but it goes away when I open messages. This keeps me on the site long enough to look at my messages and click "mark all as unread" again.
Handling Complexity in Lambda Functions
It's not an insane idea, but it's also totally unfounded to assume that people who buy art are primarily "lonely" with "low self-esteem".
If you use a metal filter with the drip/chemex devices, you can get the volatile oils in your coffee as well. Same for the Aeropress (which does have a metal filter option as well).
This sort of very specific benchmark is never particularly useful as single instructions on one architecture or another can yield magnitude differences.

The T2 security coprocessor in the Mac -- a minimalist ARM implementation to manage a few very specific parts of the Mac -- does HEVC encoding (e.g. dramatically more complex than decoding) thirty times faster than the Intel chip it sits beside. I can't say it's a 30x faster chip, however.

High TDP Intel chips definitely are much more powerful than Apple's A-series chips right now. It will be interesting to see what Apple can do with a larger power profile and active cooling, however. That's theoretical, but they should have an enormous amount of headroom to exploit.
The culmination of your message was "Let's just collectively admit it, finally - you can't write safe C++ in a codebase this complex.", that's your point.
It's probably correct, but also meaningless as I mentioned, because:

a) most codebases aren't even nearly this complex

b) no one will likely write such a codebase again

So the entire "point" is just trivia. It can't be used to decide whether to program something in C++, it can't be used to decide whether to use Chrome, it's not actionable at all.

Frankly I'm peeved that a superficial comment triggered such a long discussion and monopolised the top spot in the thread instead of making space for technical explanations or more interesting discussion.
>(minus the windows UAC thing)

As Windows only project, UAC is the only thing that matters in this equation.
I feel like there's a large delta between lazy shitty journalism that is pumped out for news websites and real investigative journalism that is incredibly eye-opening and insightful.
Do all programmers program on 64 bit x86 machines? I am not an embedded or systems programmer so I don't have the answer to this question. But does your statement hold true for all of the other chips that uses in the embedded space? If not, then teaching those pointer heavy structures is useful for programmers that go on to use arm or other non x86 chips.
what about this https://www.telegraph.co.uk/travel/destinations/asia/philipp...
My point is, you shouldn't need one.

- "But my code base is so big and complex!"

Make it smaller.
I wonder if Lets Encrypt is working on code-signing certs? That would be a huge win for FOSS
Let's not forget the freighters that pass through the Bay and travel up to Pittsburg and Stockton -- incredible!
Hmmm, hadn't thought about the oil part of the equation - I just assumed the oils would pass through a filter as well as through the mesh on the press. I'll have to try pour-over sometime to see if I notice a difference. Generally I prefer a rich, chocolatey, nutty flavor - I guess that's what you describe as earthy?
Similar situation and yes I have done that and far beyond. I even work in a field where it is just assumed I have a degree and people are always extremely shocked when I mention that I do not.

I am under the impression it is not possible to CLEP computer science classes or in any way get recognition for this. Is that correct?

Edit: specify CLEP for computer science
While I agree insurance companies do harm, encouraging generics is probably a net benefit. Doctors, just like anyone else, respond to marketing, so they remember 'viagra' more easily than 'sildenafil' and write prescriptions accordingly. There's often no medical reason a generic isn't 100% suitable.
I’d rather discuss issues with people who actually believe in them and can back them up, or acknowledge they hold their opinion for sentimental reasons.
'Snail's pace': BAML says economic gender gap to endure for centuries
There are also places where the incentives just are not there for in depth code reviewing. You could work in a culture where you are literally hurting a junior's chances of promotion by being tough on their code and asking for changes, because their peer on another team is getting twice as many tickets "done" because his team just "rubber stamps" LGTM on everything.

Many teams would never actually put in the effort to trace issues back to individual failures in a code review process, when they could be spending the time just fixing the problem and moving forward.
The Tor Uplift process later continued in Firefox 55 when Mozilla added a Tor Browser feature known as First-Party Isolation (FPI), which worked by separating cookies on a per-domain basis, preventing ad trackers from using cookies to track users across the Internet. This feature is now at the heart of Project Fission and will morph into a Chrome-like "site isolation" feature for Firefox.

This is just factually incorrect.
Millennials are piling into Tesla following the announcement of its $35k Model 3
Decolonize the Curriculum? Better Restore the West’s Telos Before It’s Too Late
Yes, many and a lot. High quality random sources are not a general availability, for example in small devices.

The best would be to have a strong random nonce and a counter, or some combination of these, for example 64 bit counter appended to a 192 bit random vector.

Even just a 64 bit sequential counter would last almost 600 years at 10^9 encryption operations per second.
Whenever people discuss about contemporary art I get reminded of these incredibly poignant Soviet war paintings [1] which manage to partially describe what the atrocities on the Eastern Front meant for the people involved, but which are nevertheless a lot less well-known compared to contemporary art "darlings" like Jackson Pollock whose works don't tell me absolutely anything and who had his career propped up by the CIA at some point. [2]

Later edit: I mean, compare this Soviet painting called "The Last Letter" [3] to Pollock's "One, Number 31, 1950" (taken from the artist's wikipedia page). The first painting instantly made me feel the blood flowing through my veins, even though I had last seen it 7 or 8 years ago (when I also left a related comment here on HN), while Pollock's painting doesn't make me feel anything.

[1] http://www.allworldwars.com/Soviet%20War%20Paintings.html

[2] https://www.independent.co.uk/news/world/modern-art-was-cia-...

[3] http://www.allworldwars.com/image/008/SovietPictures065.jpg

[4] http://www.moma.org/media/W1siZiIsIjIyMzgwNSJdLFsicCIsImNvbn...
I suppose we could all demand a refund.

Edit: downvoted? The project is GPL, not a revenue source.
the F means it has native floating point, right?
A lot of the issues mentioned there stem from platform differences though. The packaging hurdles and out-of-place UI style wouldn't be an issue on a convergent platform, though the difficulty and slight ugliness of QML/Kirigami wouldn't change.
Correct, many folks don’t realize how much can be derived about them from even anonymous data.

Personally not interested in all this auto pilot stuff anyway. Deceleration when approaching an object and rudimentary lane assist are all I’d care for and shouldn’t require machine learning.
The writing is very long-winded, lots of words with little content.
You could have the compiler produce a fully explicit version (I'm not sure if Rust can do that out of the box at the moment)
Rust is bad at managing DOM memory in Firefox.
I went through a similar search for a cheap homemade espresso and ended up landing on the 3-cup Moka pot. It's not exactly espresso, but I find it's good enough for me, especially if I put it into a cappuccino or something else.
>>Do you trust any

The only test that matters to me is the one where a customer says "Yes, good!"
Social skills allow you deal with the things around coding that lead to bad code. Social skills are underrated and we could all develop better ones.
In one of the companies I worked for we had this really nice semi-automatic espresso machine. The type where you have to unscrew the handle, put the grounds in. I loved making coffee in it! A little break from coding, some manual task to do. Make the coffee, steam the milk, clean up. It was a nice little break.

Then some part broke and instead of fixing it the company bought the fully automatic machine. It was downright terrible (and crazy expensive!). The coffee tasted terrible and more importantly the ritual of making it was gone :(
>> If you're working in a domain, is it really that much to ask to become familiar with it? Especially if the domain has a large theoretical component.

If the domain has a large theoretical component. Here, we're talking about statistical machine learning and neural networks in particular, where this is, for the most part, not at all the case.

>> And you would immediately lose the ability to quickly and easily recognise similar patterns and abstractions that mathematical notation so fluently allows.

I disagree. An algorithm is mathematical notation, complete with immediately recognisalbe patterns and abstractions (for-loops, conditional blocks, etc).

And, btw, so is computer code: it is formal notation that, contrary to mathematical formulate that require some familiarity with the conventions of a field to read and understand, has an objective interpretation- in the form of a compiler for the language used.

So machine learning papers could very well notate their algorithm in Python, even a high-level abstraction (without all the boilerplate) of the algorithm, and that would actually make them much more accessible to a larger number of people.

Mathematical notation, as in formulae, is not required- it's a tradition in the field, but that's all.

However, that's a bit of a digression from the subject of the naming of variables. Apologies. It's still relevant to the compreshensibility of formal notation.
Came to post this, too. Sounds like he led a full life of boundless curiosity. Really inspirational.
If you are an empiricist worth your salt this (the fundamental lack of objectivity in human knowledge) is a vital piece of understanding. Being blind to the flaws of your instruments is a terrible way to do science. Also I find it ironic that this quote is probably apocryphal and yet is offered in defense of objectivity.
I was thinking of moving from GNOME to Plasma as my daily driver, but the Konsole results are kind of disappointing. I can use another terminal when on Plasma, of course, but now I feel less inclined to change.
https://edition.cnn.com/travel/article/maya-bay-closure-thai...

nature landmarks damaged by unmanaged tourism, now countries are looking at limiting tourism.

https://www.escapehere.com/travel-tips/8-destinations-puttin...

don't put such a narrow view point into public space. you sound like you wish for celebs to not have any privacy, just because of their popularity.
That's probably what you're looking to see. Many, me included, will never pay if there's an avenue to get it for free (regardless of legality).
Show HN: Riot, like React without the brain load
That's conflating two unrelated issues. The issue reported by EdgeSpot is much less severe, and a Google engineer hinted that it may not even be a vulnerability. CVE-2019-5786 has nothing to do with PDF files.
I'm a developer/power user and I don't find the product very compelling. I'm not a mobile developer though. I see my phone as an appliance: I just want it to work (and it does that very well, with the exception of touchID).

My laptop is where I do all of my serious computing. I have no desire to run bash or vim or tmux on my phone.
In the RTX announcement speech, they repeatedly mentioned the savings for offline rendering (taking fewer computers less time and fewer watts to render the same quality). I came away from watching that thinking that the card was primarily positioned for offline rendering.
Thanks for your contribution. It's really good. Your sentences are definitely not too long. You definitely understand the difference between a comment and an essay.
I don't know about the limitations of C++, but something like what you describe would happen in Smalltalk. Take for example a Canvas object and a bunch of different shape objects (square, circle, etc):

"Square class"
drawOn: aCanvas
aCanvas line: (some point) to: (some point).
"etc"

"Triangle class"
drawOn: aCanvas
aCanvas line: self leftVertex to: self rightVertex.
"etc"

"Canvas class"
drawShapes: aCollection
aCollection do: [ :shape |
shape drawOn: self ]
Condolences with regard to your brother.

I'm just not sure that all of this is down to material prosperity?

Blacks and hispanics have been much more poor, with far fewer prospects, for much longer, and yet this suicide and opioid overdose issue seems to affect whites disproportionately. That suggests maybe two things, either blacks and hispanics have been poor for so long that they are accustomed to it, or the suicide rate doesn't have as much to do with material prosperity as you seem to suggest.

It could have to do with material prosperity, I'm not saying you're definitely wrong. I'm just pointing out the fact that there is evidence, in black and hispanic poverty rates, that agitates against that explanation.
Fascinating. love the occasional HN insights.
It's inside the paper. They used Freelancer.com and gave 100EUR/200EUR to 100 developers.
They created a fake company website and asked the devs to completed the sign-up portion of their fake social network because of one of their fake developers resigned recently.

They used 2 tier of payment to see if the payment had an effect on the security of the code.

> Final Study
For the final study we recruited freelancers via direct messages. We searched for all freelancers and filtered for the skill
“Java.” Unfortunately, Freelancer.com’s search function also
returns JavaScript developers or developers where we saw
no connection to Java, so we manually pruned out developers
whose profile did not include Java skills.
Based on our experience in the pre-studies we added two
payment levels to our study design (EUR100 and EUR200). We only
accepted freelancers’ submissions if they were functional
Intruiging. How long time does it take you to make a cup? How long time for the grinding?
It does include location if you stop at a supercharger. They need to know where you were in order to charge you properly. I don't think that's one you could opt-out.
Your claim of "whataboutism" is a tired old attempt to dismiss your own hypocrisy. It's not fooling anybody. The moment you mention it, you have confirmed what is obvious: you don't actually care about the issue, except to get in a dig at the president, and would not hold other presidents to the same standard.
Low quality grinders will result in unequal sized grains of coffee. Given that the flavor of coffee is largely based on the degree of extraction, having an even sized grounds will improve the consistency of the produced coffee.
Change their entire business model and act as a trojan horse for the US government? No that won't fly in the US (yes I'm aware of NSLs, there's a significant difference in degrees).

In China that's standard procedure. Party says you switch up everything you're doing for their whims you do it.
I mean we are celebrating the next massive milestone of electrification of cars. Things like stock price and investors seems irrelevant
~~It can't.~~ See below, it can!

I tend to find, personally, that this kind of thing doesn't interfere strongly with reviewing. I think this is because I have an extensive background in dynamically typed languages and ones with strong inference like Rust, so I'm more used to it, whereas people who don't come from said backgrounds prefer more explicitness. YMMV of course!
ZFS needs double digits of free space to be happy. SSDs need double digits of zeroed space to be happy. Overlapping these requires TRIM.
I feel like the only computer user in the world who wants his computers to act like computers and mobile devices to act like mobile devices and to maintain a firm line in the sand between them.

"Convergence" is a pipe dream because of the differing and mutually exclusive expectations of those different user types, and "one size fits all" programming ends up underserving both segments. The only thing I would change is that mobile needs to do more to expose users to internals (things like access to the proper file manager), rather than hiding and abstracting away every detail that might confuse grandma.
The difference is that for GCM and OCB nonces with lengths different from 96 bits are defined (albeit not recommended), whereas Chacha20-Poly1305 doesn't support that in the first place.

The bug isn't OpenSSL throwing bytes away, the bug is OpenSSL acting as-if anything other than 96 bit nonces are acceptable.
Your landlord turns your apartment into a smart home. Now what?
>I'm wondering if they are aware of free alternatives like signify or pgp that would work just as well (minus the windows UAC thing).

Main advantage is that authenticode is built into windows and is easy to verify, unlike PGP. Not to mention that the certificates provide some assurance as to who the real author is, unlike PGP where identities could be generated on demand.
I'm not saying FB is harming you, I'm saying the probability of them harming any user approaches 1 as more data about them is collected and FB get more desperate for growth/money.
>I remember the good old days when people were actually trusted to do their own research before downloading a potentially dangerous exe.

Is there any evidence that was ever really a thing / effective?

How could you possibly know?

There are plenty of examples of previously trustworthy software becoming untrustworthy, same with sites you download the code from.

That line reads like the absurd advice that security experts put out about "only download something you trust" and ignoring that nobody has a clue how to evaluate that aside form say limiting them self to FOSS and reading all the code...