skysight-inc/HackerNews huggingface dataset:
The roads are already clogged with cars. Does it matter if they are ride shares or not?
>Does a chat app need to be fully searchable?

This is the main reason people pay for Slack instead of sticking with the free tier, so I'm guessing that for a lot of people, it does.
I got this too.
It’s kinda strange you read into my comment I’m pushing Ancient Greek ideas which include slavery and pedophilia.

>No need to appeal to the ancients. Appeal to facts instead.

I’m going to let you in on a secret, it’s a fact that the world has been influenced by Socrates and Pluto for 2,500 years and the world is going to continue to reference and qoute them for the foreseeable future for all sorts of reasons...the least of which will be to push slavery and pedophilia. if you’d like to take up the good fight to stamp out any references to Socrates and Plato by calling it an appeal to authority and pushing slavery and pedofilia, good luck.

>forcing people to commit suicide via hemlock ( as what happened to socrates himself ).

This is actually much more interesting. Socrates was indeed sentenced to death, but as was the way his friends/students broke in the take Socrates out of the city (like a quasi prison escape/excommunication) but he refused and had a debate as to why he would not escape and but see the sentence through. I’d share some of the dialogue but I know how you feel about quoting ancient works.
We probably get at least one user a day requesting Pocket highlight support. Although we’d love to integrate with Pocket, we unfortunately cannot because they don’t support highlights in their API. We tell our users to use Instapaper instead which does have an API.
I didn't realise that IRC was immune to white supremacists, sharing of furry paedophilic content, and … I feel like the last dig risks being seen as the pot calling the kettle black, to insult other people simply for having a sense of fun and whimsy — it is a network mainly targeted at gamers, after all.
Docker Hub Hacked – 190k accounts, GitHub tokens revoked, builds disabled
Received this email a few minutes ago:

"On Thursday, April 25th, 2019, we discovered unauthorized access to a single Hub database storing a subset of non-financial user data. Upon discovery, we acted quickly to intervene and secure the site.

We want to update you on what we've learned from our ongoing investigation, including which Hub accounts are impacted, and what actions users should take.

Here is what we’ve learned:

During a brief period of unauthorized access to a Docker Hub database, sensitive data from approximately 190,000 accounts may have been exposed (less than 5% of Hub users). Data includes usernames and hashed passwords for a small percentage of these users, as well as Github and Bitbucket tokens for Docker autobuilds.

Actions to Take:

- We are asking users to change their password on Docker Hub and any other accounts that shared this password.

- For users with autobuilds that may have been impacted, we have revoked GitHub tokens and access keys, and ask that you reconnect to your repositories and check security logs to see if any unexpected actions have taken place.

- You may view security actions on your GitHub or BitBucket accounts to see if any unexpected access has occurred over the past 24 hours -see https://help.github.com/en/articles/reviewing-your-security-log and https://bitbucket.org/blog/new-audit-logs-give-you-the-who-what-when-and-where

- This may affect your ongoing builds from our Automated build service. You may need to unlink and then relink your Github and Bitbucket source provider as described in https://docs.docker.com/docker-hub/builds/link-source/

We are enhancing our overall security processes and reviewing our policies. Additional monitoring tools are now in place.

Our investigation is still ongoing, and we will share more information as it becomes available.

Thank you,

Kent Lamb
Director of Docker Support
info@docker.com"
> Throughout Kotaku’s interviews, one name kept cropping up: Scott Gelb, Riot Games’ COO, whom current and former employees allege participated in “ball-tapping” (flicking or slapping testicles), farting on employees or humping them for comedic effect. “It just became so normal,” said one employee who witnessed Gelb’s behaviour.
Where do you get this from? They lost $3B in 2018. Uber's S1 clearly states as one of their risk factors to maybe never make a profit.
My understanding is that every US military base, while not American sovereign territory, is still subject to US law. Not a lawyer, so not sure how that shakes out. I'd prefer we stop playing world police, but that is not going to happen.

Why is there no backlash from the international community at large? There are always articles about human trafficking but no UN outrage over stuff like this. Is it because it's boys and not "defenseless" girls?
You're only using it locally for specific invariants. That doesn't have to depend on the system's complexity. For example assert(2+2==4) works the same, regardless of it's only a one line app, or in the middle of an OS kernel.
People who complain about "memorizers" are either low IQ or pathologically lazy. This explains the higher placements you describe.
You the man! Remember you are only in competition with yourself.

Btw: protip, I don't count to 70 or 60 and usually not even 40. I'll typically count to 30; than either just additionally count to 10, or more often just to 5, and than add the sums as I go--but then reset to the lesser count as I continue that set of push-ups. A great psychological trick, at least for me ;) .

GL!
Credit Karma is legitimately bad software.
If panic() can be caught, then that is not equivalent to assert.
I'm not sure I agree. There's a very, very small limited set of conditions that a client can recover from a condition that would trigger an assertion failure. Dont want an abort? Then use the release libs where those have been preprocesed out.

Conversely, at a former employer we used a set of 3rd party database libs for ODBC on Linux that for the smallest config error would emit nothing to stderr and call exit(1) from a shared lib. that was beyond annoying
>Please remember how this all started, with a dirty dossier

Nope, it began when some foreign diplomats gave us a heads up that George Papadopoulos was bragging abroad that the Russians were going to help Trump by releasing dirt on Clinton. That the investigation was predicated on the dossier is a common misconception. If you are getting news from sources that get this basic fact wrong, you may wish to downgrade those sources' credibility in your estimation.
Assuming that nobody in Sri Lanka is implementing DPI on ISPs' edge interfaces, the safer solution would be to run your own vpn endpoint hosted in the USA or Europe, as openvpn in tcp mode, or wireguard, on port 443. Without pwning your client device, they're technically incapable of properly MITMing TLS1.2 and can't break the internet so thoroughly by blocking https/port 443 traffic (which would also break gmail, all other popular webmail, and a huge chunk of everything else with hugely popular public websites where port 80 is redirected to 443 for TLS end-to-end).

So unless somebody cares to inspect your traffic flow in particular and notices that it's openvpn traffic on 443 and not normal TLS1.2 traffic, it's likely to work.
This Twitter talking point is ignoring the fact that the whole point of this effort was to investigate collusion with the Russians, regardless of any particular crime the investigated are accused of. The report's title is "Report on the Investigation into Russian Interference in the 2016 Presidential Election" no less.
> The assert() macro in C is roughly just if ... { panic() } in Go

The article very clearly says that (unlike normal C behaviour) it's a no-op in release builds of SQLite, because otherwise they get a ~3x slowdown. Does Go compile away those `if` statements?
Are there any numbers on how much crypto is being used as a currency (i.e. actually buying things) vs. how much is being used as an investment (i.e. buying and holding/trading with the hope it goes up in value)?

I'm curious how each compares to traditional currency and how much this affects the competitiveness of it as a common currency. My initial thought is that so many people look at it as an investment it may limit it's ability to be a good medium for exchange.
Sure. I work in data and AI, so I'll focus on those as I know them best.

We stood up and currently manage the trading platform, integration layer, data lake and analytics infrastructure, event messaging, on-demand machine learning compute provisioning and model management, API middleware, front end web app, and about 500 various service touchpoints therein of the largest oil and gas upstream finance trading desk in the world.

We've developed a ton of standard demand planning and SKU-level pricing forecasting pipelines, ingest, storage, processing, model training and deployment, and consumption. In some ways that's our bread and butter as you can re-use 75-85% of the IP and focus a lot of energy on feature engineering and edge cases.

We do a ton of IoT work in the mining and energy industries. Mostly (again) developing the infrastructure to ingest and process that data, building ML models to predict anomalies, production trends, workflow to connect that to SAP or some other ERP system for work orders, remote operating center dashboards, etc.

We do a lot of HSE initiatives. One cool one we did recently was use some Zebra beacons and some computer vision to identify people entering dynamic "red flag" geofences (think mobile equipment, forklifts, cranes, wrecking balls, etc.) on field sites so we can instantly stop work.

Anyway, I'm the first to admit Accenture's a mixed bag, but one thing I've learned since coming to work (under/for) them is large-scale delivery is very, very, very hard to 1) scope, 2) de-risk, and 3) price.
If you got an email you should:

- Change your password on https://hub.docker.com

- Check https://github.com/settings/security

- Reconnect oauth for Automated Builds

- Roll over effected passwords and API keys stored in private repos / containers

Quick take:

- Password hashes

- Github tokens

- Bitbucket tokens

- Your Automated Builds might need new tokens

Checking my github logs - It looks like they've known about this for at least a full 24 hours. Most people aren't going to have this looked at until Monday which kind of sucks. Hopefully there is more of a postmortem coming.

Is anyone from github able to comment on this as well?

There doesn't seem to be a way for us to tell if a repo was read by these keys over that time period.
You should be tipping nearly every single time you take Uber/Lyft/taxi.
At the very least, it would be more polite to anyone that might need to support, troubleshoot, remove the files with shell tools after removing your software, etc.

I suspect it's also still a performance issue with many popular filesystems. See https://lwn.net/Articles/606995/ for more info.
I think you overestimate the desire, motivation and technical capability of sri lankan ISPs to start doing netflow analysis and DPI on individual subscribers' end user connections.

Unless you were to attract the attention of somebody in government, and they forced an ISP to escalate an issue to the 3rd or 4th tier of network engineering running the core of the bigger ASes there, they're not going to be doing that. It's not the chinese GFW.
> Very few I speak to are doing it full time to make money.

Interesting. Anecdotally, in Sydney it seems almost all Uber drivers I meet are doing it full-time now. A few years ago, it was just a side-gig for most but I think the demographics have shifted quite a lot.

> They don't need to break even, they needed the car anyway, it would depreciate roughly the same amount anyway.

Not if you're driving it 10x more than you normally would. Mileage affects the resale value and increases the likelihood of additional maintenance work (especially if you're doing city driving which is substantially more stressful on cars).
On completely random data, Timsort is just a mergesort with some extra bookkeeping. Its advantage is on arrays that have sorted subarrays of non-trivial size, which is often the case with real data.
> 100% of the appeal for this phone is that you'll be able to run GNU/X11 on it.

I just got rid of X11 from all my desktop PCs, no way in hell I'm using that pile of shit on a phone.

Also, it appeals to be because it's a phone that will support mainline Linux, NXP has been willing to support their products for longer terms than Qualcomm, puts the user firmly in the drivers' seat, and is being designed for eventual mainstream appeal.
Sri Lankan here.

Historically, the people here have engaged in "knee-jerk" violence following an initial inflammatory incident; see:

https://en.wikipedia.org/wiki/Black_July

https://en.wikipedia.org/wiki/2018_anti-Muslim_riots_in_Sri_...

In the second incident listed above, social media was used both as a vector to spread hate speech and misinformation, and also to help mobs organize.

Regarding the current social media block: at the start, I felt this to be reasonable, as it made sense to slow the spread of misinformation/hate speech for a couple of days, until people's emotions cool down. However, the blocks still continue - and I see no clear justification for continuing them for so long.
But you don't actually know that a customer will remain a customer forever, whereas you do know that a truck will be worth 15% of its present value in 10 years.
> Other things were weirder, like this old post being soft recognized as a 404 Not Found response. My web server is properly configured and quite capable of sending correct HTTP response codes, so ignoring standards in that regard is just craziness on Google's part.

I've noticed Google does this when you don't seem to have a lot of content on the page. I think it "guesses" that short pages are poorly-marked 404s.
I meant accept as not spam.
Only 7 views since April 22?
Up until recently it was used for ad targeting.
How do you do it? Lets say I follow someone that talks about games, and I love their insights posts on that. But 50% of their posts are political which I have no interest in. Are posts tagged in a way that I can avoid that topic.

Not a twitter user currently. Tried it a few years ago and that was the problem I had.
There's a very similar project called Interledger.

It uses the same mechanism of credit payments over multiple hops. But denominates each hop in a particular (possibly different) asset to help settling the credit between peers.
Ask HN: How to get a startup job if you lack resume?
I am starting to look around at jobs in several US markets. I’m primarily considering python and clojure jobs, even though my professional experience is .NET.

I feel a little trapped by the fact that I don’t have a lot of open source in those languages, nor have professional experience. For context I am 24, EECS major at reputable public university, Python experience from some small projects and a Django app in progress. Clojure experience with small wrappers and simple TODO list apps. 1 year of professional .NET web dev experience at Big 4 accounting firm. I feel like I’m a bit of a generalist as far as tech stack, but I would like to do more back end and work on something intensive.

Do you have advice for people in a similar situation on what your approach would be at maximizing odds of getting a good startup job in SF, Austin, or NYC?
If you have a github repo then please post it. It'll get some attention as this is a much more common sentiment than it seems.
bitcoin is just getting started..
This may just be me, but when I was in charge of hiring a team, I ended up passing on sleep-foregoing candidates (often that wasn't the only thing, but it was a big factor for me).

To this day, candidates that don't take care of getting enough sleep just to get things done, raise a red flag for me.
Not exactly. It prints exactly it's own source code as output but it doesn't run it again. You can run a quine output manually as it's by definition the same code that printed it but it lacks the ability to keep executing continuously like a worm virus would require. I guess you could make a worm virus that's also a quine but that would be a whole other problem.
I was afraid someone would mention preprocessing out the asserts :)

That also has its advantages, but would argue that it is impossible to selectively opt in or out.

Honestly, for a well tested piece of code, the point is moot, since the assert(s) will never evaluate false anyway.
Interesting how it's different to branch coverage. If you have

if(X) {}
else {}
if(Y) {}
else {}

"normal test coverage" is weaker than SQLite tests with the following lines added:

testcase(X && Y);
testcase(X && !Y);
testcase(!X && Y);
testcase(!X && !Y);

I wasn't sure when reading the article, to be honest, but making sure you test things you don't explicitly branch on is kinda cool.
My experience day-to-day is that the world is strongly divided between those who care a lot about crypto and those who care effectively none. Barring the brief time around peak prices where it punched through to the zeitgeist (when your uber driver is asking about it), it doesn't seem like it's growing, from the perspective of social/cultural demand or narrative.

There is a plenty healthy subset of the world population keeping cryptocurrencies liquid. But this etrade offering represents, to me at least, a level of commoditization that outpaces the underlying demand. In part because coinbase captures that demand very effectively, hence their valuation. I expect etrade's gains here are going to be from capturing new funds from current customers, rather than actually winning the crypto buying customer experience, where coinbase reigns supreme.

Speaking of coinbase, if etrade had to copy one thing of theirs, i wish it were the UI.

Another thought: how much of crypto's valuation comes from the contrarian narrative that it's a rebellion against exactly the stodgy old guard that etrade represents? Gold's contrarian narrative has survived the commoditization of gold trading. Will crypto's? Whether buy into it because it's a get rich quick scheme or a genuine financial disruption, both of those stories rely on a narrative that it's different/exempt from wall street bullshit. can that narrative exist in a world where the primary interface with the market is wall street bullshit?

The idea of a goldbug hedging against the apocalypse by buying gold on etrade is very, very funny to me. Crypto's a little better positioned since etrade doesn't own the blockchain, but gold's safe from a power outage. Apples and oranges...

No idea tbh.
If you are a legit company with pesky things like bookkeeping and accounting then you do not want Bitcoins on your books. You might accept Bitcoin as a gimmick by utilizing a third party service which buys them and gives you money (like BitPay) but there's no legic economy. How could there be when it is so volatile and it's basically held up by hype? The risks are clear for a business and what's the advantage...?
On a PC.
He's said several things about it, and has trashed the Russiagate conspiracy. He emphasizes both that the US interferes constantly in other elections, and also points out that Israeli collusion and interference in the US is orders of magnitude worse than Russian influence:

https://www.realclearpolitics.com/video/2019/04/01/noam_chom...
Really? It seems almost inevitable that they will do it, and be the first to do it as well..
well he was saying that as representative of the new government that couldn't afford to safe guard its citizens yet.

but use a quote to end thinking always a good way to avoid dogma.
> I suspect that some of us need heavy physical activity during the day in order to sleep well.

Yes, this is absolutely the case. I do software as a dayjob, but do an hour or two of heavy physical activity every day (or more on weekends), and sleep great nearly all the time.

When I've had injuries that prevent me from my regular exercise routine, my quality of sleep takes a huge hit. To the point that last time I had a severe ankle sprain, I'd go to a gym (which I don't normally do) just to use one of those arm bike machines to tire myself out.
On a 386 with AT hard drives.
Quick run all your analysis for secret anti-trump nuggets! Never mind the Horowitz report will be out in a month detailing all of the FISA abuse and overreach by those funding a partisan investigation started solely by Clinton-funded opposition research Dossier. Get ready for the indictments.
I can't find an announcement of this anywhere besides HN? Will Docker be publishing info via official mediums?
The US has been geolocating dishes [1] in order to see what they are pointing at, even in residential areas. You have to imagine, if deemed worthy, positioning a just-in-time line-of-sight intercept with a SIGINT satellite is passing in view is very easy to do. Pre-computing these targets is a well solved problem at this point, even down to moon bounce and esoteric methods from the 60s-70s.

[1]: https://luxexumbra.blogspot.com/2018/04/the-hunt-for-ghosthu...
Would be funny to see PagerDuty launch an auction/market for taking on-call slots. Price goes up until someone takes it.
You can't automate your way out of paying for a domain, too, and that costs significantly more than an IP.
If you were employee #100 in Facebook you'd make $200M.

If you were employee #1000 in Facebook, you'd make $20M.

If you were employee #100 in Dropbox, you'd make $10M.

Source: https://genius.com/Sam-altman-lecture-1-how-to-start-a-start...

These numbers are all calculated back in 2014, and they're probably a lot higher now.

Also, personality. Some people don't enjoy job security and want a little adventure. For those who have to do it, they just have to do it. It's similar to the pioneers from colonist era Europe going off into strange countries.
Well. For the most part, when we play world police, it's under the auspices of international law. Even the Bush Administration felt compelled to frame the Iraq War as a matter of self-defense under Article 51 of the U.N. Charter (regardless of the... questionable... intelligence they used - for the purposes of this conversation I'm talking about the legal framework used, not the merits of any particular application).

And there really isn't an international legal framework that allows anyone to enforce human rights in another country. The closest match would be if the issue creates a "breach of the peace" and the U.N. Security Council acts under Articles 39 and 42 of the U.N. Charter. Sometimes we take actions that look like it (e.g., our response to Syrian chemical weapon use), but we justify it under another basis.

The U.K. has recently taken the position that "humanitarian intervention," in and of itself, constitutes a legal basis for the use of force ("LBUF"), but it would take widespread agreement and years of state practice for that to become customary international law (CIL). It's also not clear what the legal standard would be.

The U.S., China, and Russia all formally oppose humanitarian intervention as an LBUF, for somewhat obvious reasons: none of them want either of the other two to claim a right to military force based on drastically different views of human rights, e.g., the U.S. using military force to free Tibet.

https://en.m.wikipedia.org/wiki/Use_of_force_by_states

Forward military bases don't typically apply U.S. domestic law. That's why the UCMJ applies worldwide to military members and also to civilians accompanying them in the field. 10 U.S.C. § 802(a)(10) available at https://www.law.cornell.edu/uscode/text/10/802. You may recall this being a major issue with Blackwater agents committing crimes while on security detail with the State Department and nobody being able to figure out a way to charge them.
"I felt this to be reasonable" haha ....