skysight-inc/HackerNews huggingface dataset:
It should be mentioned that Mozilla had once wrecked their reputation by allowing a corporate-supported study [1] (yeah, Mr. Robot one). It was a really bad PR disaster for Mozilla, and I think Mozilla has at least learned their lesson by not abusing the studies system in such way (as far as I know).

[1] https://drewdevault.com/2017/12/16/Firefox-is-on-a-slippery-...
In real life, whatever I look at is always in focus. It's actually very unrealistic to simulate depth of field without good eye tracking, because the user will end up looking at things that are simulated as out of focus but should actually be in-focus because the user is looking at them.

If you don't have good eye tracking, then rendering the entire scene in focus is most realistic, as whatever I look directly at will appear in focus and everything else is more peripheral and will be blurred a bit by my optical system anyway.
Repetition is the mother of learning, as the old Russian proverb states.

The point is making a phrase really get memorized.
>> You can make it harder to do on accident
>That's a major point of exfiltration prevention

But that’s not how it is advertised. Usually they claim is to catch hackers and mal intending employees.
That's true. They base their business model on providing HA clusters stored on AWS.

Thanks for the clarification.
You could have said the same about Cobol in the '90s
“I’ve never seen a happy man”

— Stalker

(from the movie Stalker by Tarkovski. A stalker is a guide that leads men to a place where their innermost dreams are fulfilled)
You need to understand difference between something installed on my computer (run by ME, i pay my HW, electricity bills and connectivity) and a website (run by someone ELSE, doesnt pay my HW or electric energy AND forces me to watch ADS for which I PAY for bandwidth).
The CJR skirts this issue by simply ignoring it. Color me surprised...
That fully Microsoft and windows stack has had ripple effects. At least from my perspective in South Asia. First the price was a deal breaker. Second, people who started with C# quickly found their only employment opportunities to be at large companies. Those who started with Java/Node/Ruby had a much wider array to choose from. Third, when people jumped to start their own companies, Java/Node/Ruby/Python/Go won by a large margin. Startups rarely had the cash to spare for Microsoft stack and MS stack guys had to change their skill sets which is a painful endeavour in and of itself. Fourth, after some time people, who had been in the market for years, started discouraging younger devs to committing exclusively to a full MS stack. People rather interpreted it as dumping the MS stack. In my batch, only a dozen or so people were interested in pursuing C#/.Net. By the time we graduated only one person was still pursuing that stack.

TLDR; Price was a big factor which only large companies could afford. Not everyone can be employed by large companies. This had a lot of secondary effects.
As I'm reading these comments, the Unverified addons warning popped up :) Well, I refuse to use the internet without uBlock Origin. Looks like this is going to be a productive day.
The Holding Company That Is Revolutionizing the Blockchain Industry
How does this impact CloudFront origin domain names? I have an s3 bucket as a CF origin and the format the AWS CF Console auto-completes to is:

<bucket>.s3.amazonaws.com

Do I need to change my origin to be, Origin domain name: s3.amazonaws.com, Origin Path: <bucket>

This is a sneaky one that will bite lots of folks as it is NOT clear.
This is why I'm hosting GitLab myself even if I'm the sole user of the instance. For one thing I'm less of a target, the other is that this is not the first major problem with the hosted GitLab. I have better uptime for my instance than the hosted version.
If it is a major setback, I generally have taken a day or max two days, and I just go do something totally personal and unrelated to let my mind reset. I limit the time I allow myself to dwell on it (something learned from my parents), but I do recognize that I need to let my mind flush it, categorize it or whatever you want to call it.

99% of the time, I handle almost every setback large and small in stride and just keep moving. But I have had a few where I just couldn't do that, so the above method worked well for me. When you are younger a lot of setbacks look major, as you get older, you realize most setbacks aren't that bad and the ones that are affected a lot more than just you.

Losing a big opportunity to me sucks but it is just part of a journey, there are always more opportunities for people who don't stop. IMO people who get stuck and can't move forward get trapped in the past and not the future, this does no one any good. Recognize it, learn from it, and put your foot forward and move on. Nothing good comes from dwelling on the past, learning from it though is invaluable.
No sex please, we’re millennials – Social conservatism on American campuses
Instant restore after a media failure [pdf]
The full article available here - https://outline.com/xxTDbh
// Re-enable all extensions

async function set_addons_as_signed() {
Components.utils.import("resource://gre/modules/addons/XPIDatabase.jsm");
Components.utils.import("resource://gre/modules/AddonManager.jsm");
let addons = await XPIDatabase.getAddonList(a => true);

for (let addon of addons) {
// The add-on might have vanished, we'll catch that on the next startup
if (!addon._sourceBundle.exists())
continue;

if( addon.signedState != AddonManager.SIGNEDSTATE_UNKNOWN )
continue;

addon.signedState = AddonManager.SIGNEDSTATE_NOT_REQUIRED;
AddonManagerPrivate.callAddonListeners("onPropertyChanged",
addon.wrapper,
["signedState"]);

await XPIDatabase.updateAddonDisabledState(addon);

}
XPIDatabase.saveChanges();
}

set_addons_as_signed();
But once you get to deployment, particularly if you're using shiny new containerized orchestration, in my experience, it is safer and easier to allocate the host node's memory to the redis container and keep it protected from application layer fires.

Same as you would do with a database.

It speeds up CI/CD and keeps things safe / reduces downtime in cases of roll back (assuming you're versioning your keys).
So they'll put it directly in Normandy instead of wrecking Studies?
Write a Ruby interpreter in Ruby ( &C)for Ruby 3 [pdf]
Re GitHub keeping unreachable data, if I understand it right, isn't that GitHub painting a giant target on their back?
Wouldn't that that imply every secret accidentally committed and then 'deleted' is still accessible, when one would expect it not to be?
It's one thing to have your source code in the wild, but pairing it up with thought-to-be-deleted secrets would be an absolute disaster.

Certainly one should not ever keep using a secret once it has escaped into a Git repo, but I'm sure it happens quite frequently.
I agree with much of what Gary Marcus says. Using trained deep models with out of sample data in the real world will cause problems. There is a good reason that self driving car companies want millions of miles of training data: to reduce out of training sample incidents.

For almost four years, my work has been almost 100% development of sometimes novel, sometimes mundane deep learning models so I am a fan but I still wait eagerly for breakthroughs in hybrid AI systems, new Bayesian techniques that can work with less data, handle counter factual conjectures, etc.
One thing that’s still unclear to me is whether you must disable this entry of about:config even if you go through the traditional privacy & settings drop down menus and disable the Firefox studies and usage stats options.

If the _only_ way to prevent having a remote entity modify your settings unannounced (even if not for malicious purposes) is to enter about:config and change app.normandy.enable to false, that seems like a situation where the absolute best case, most charitable interpretation is to call it an incredibly deceptive dark pattern from Mozilla.
I just "fixed" mine, at least temporarily, that is if this still an issue for all/most. I just did a "refresh firefox" option, which clears and reinstalled all my locked add-ons/extensions and theme.

A fix? votes out, this could very well be temporary...but my customization is gone/reset, so there's that bit of nuisance.

try it if still stuck.

https://support.mozilla.org/tr/kb/reset-preferences-fix-prob...
You're right that Java is entrenched in a lot of the enterprise space, but I think you're being quick to dismiss entrants that have gained steam in the last few years.

For example, Go is becoming the default in Kubernetes applications. It's eating tech companies that became large in the last few years like Lyft and Uber. It'll spread to other large tech companies like Amazon or IBM with ease. It will possibly get picked up by a significant number of universities for undergrad courses within a few years as well.
Ever tried to "sell" an alternative language in BigCo Enterprise? Where I work, Javascript is still a front-end only language and just tolerated as a toolchain for compiling LESS, ECMAScript etc.
It sounds like these employees do indeed have stable positions with fair salaries and benefits. What's the problem?

If the work is worth more than $20/hr, who's going to pay it? One person's work is "worth" what someone else is willing to pay. Markets are conversations, and all that. OSS is an arena where the supply of potential practitioners is huge.
https://groups.google.com/forum/#!forum/racket-users

(`racket-users` is where most of the action in Racket is, and the community members, including the core developers, actively answer&discuss questions. The other venues are mostly outposts for discovering Racket.)
Firefox is fully open source. Runs locally and even works offline. How is it SaaS exactly?

The auto-update mechanism exists almost exclusively for the benefit of Windows users. None of the Linux distros use it.
I didn't realise Firefox came with that sort of backdoor.
I said LLVM and webassembly.

LLVM has replaced JVM as a programming language target bytecode in the last 10 years (except Kotlin no new JVM language). JVM has lost web to JS 20-15 years ago, and Webassembly is now taking shape as proper web bytecode.

I do not know what will be the most dominant language + bytecode in 25 years, but I would bet $10000 that it isn't Java and JVM.
No, happiness is the result of making others happy. Unhappiness is the same thing but for when you treat people badly. A person riding waves of happiness and unhappiness is doing so because they do not understand this fundamental reality of human existence and have not learned how to treat others accordingly.

We alone have free will and the Law of Karma (reaping what we sow in others) is the universe's feedback mechanism to nudge us away from animalistic competition at the expense of others and towards humanitarian cooperation for the benefit of one and all, no matter what their superficial differences.

To become consumed with universal compassion for all others and therefore be committed to helping create happiness in all those around us is to have become the owner of a deep abiding peace and happiness that cannot be shaken irrespective of external circumstances.

Becoming consumed by active, selfless love for all others is the zenith of human self-evolution and is the ultimate meaning of life. That so few understand this absolute truth is precisely why so many suffer and those who gain riches are left so very empty.
Maybe everyone should set app.normandy.user_id to "anonymous".
I have already edited, but to elaborate:

> In addition, think hard about the update strategy of applications that need to support that moving web.

If you want the web and accept that the web is moving and you can't do anything about that, then it should be recognized that the web browser is hard time catching up. I actually hate most auto update things, but it had been too hard to use any web browser without such facilities. I use Firefox because at least I can see---and have a non-zero probably to alter---what happens to this moving platform.
Oy gevalt this escalated fast. I thought this was about typing in a language called Yiddish, and you're bringing the discussion to Kahan and Goldstein? Can you imagine if this was an article about typing in Pashtun and someone escalated it to talk about the Taliban? At the very least it's not very HN is it? (Ahem, moderators?)

My friend, I appreciate that from Israel you might identify Yiddish with Haredim (religious Jews) because they're the main ones who speak it in your country anymore, but what I am trying to say is that Yiddish != Haredim. Yiddish is a language and a culture that is a millenia old. It exceeds anything you might find in Mea Sharim. Clearly you are secular and anti-religious but stop projecting that onto Ashkenazi culture as a whole.

Here are some secular Yiddish things in Israel you might want to get check out.

https://international.tau.ac.il/Yiddish_Summer_Program

http://yiddish.co.il/en/about/

https://www.facebook.com/oydivision

https://www.youtube.com/watch?v=3bE6uhKxmYU

Now quit being a nudnik and a nar and let me work on the keyboard. Onyva!
Agreed, but happy he posted. Bookmarked and will respond when I am ready for this.
Luakit – fast, extensible, and customizable web browser
If you're opposed to guns, isn't this a good thing? You make money and destroy 18 gun companies in the process.
The more people who use adblocker, the more ads websites need to make the same amount of money. It's been brought up that many twitch streamers don't receive ad revenue from more than half their viewers.

I can only find a source right now for YouTube, but they're out there for twitch too.

[1] https://www.vg247.com/2015/10/30/around-40-of-pewdiepies-aud...
Berkeley already uses electricity for finding instant solutions to quadratic optimization problems[1], why do we restrict ourselves to some primitive digital mode in humans? In addition, we already know neurons do some form of protein-based computation, alongside to what looks like spiking/timing-based electric computation. Some neurons can be 1 meter long as well, interfacing with many parts of brain. Can we rule out some super clever electric potential optimization or even something better isn't going on in the background? I am not saying Penrose is right that brain can compute BQP and is using collapses of quantum gravity to solve halting problem, but why can't we keep open mind about it?

Hypercomputation is a cool theoretical device, again the models are way too primitive for now and likely any finding in nature would have super complicated mapping to the current theory. But hey, there might be some graduate student with an idea already...

[1] http://www.mpc.berkeley.edu/research/analog-optimization
Vendor controlled auto-update is worse than SaaS. It's effectively a control over your machine. Your entire security depends on a random employee of a random organization you entrusted with this control to not get compromised, not compelled by the government, not made shady deals with other parties to ship a backdoor to you.

But if speaking about the issue. Why Mozilla even need so much control over extensions? Seems like they built an infrastructure to be able to disable any installed extension remotely. That's just evil.
"Armstrong no doubt had privilege — she was white, straight, wealthy, beautiful"
Yeah check your privilege. Reading this makes me feel nauseous.
>mojibake

These days, those that are promoting the idea of plain text as a long term archive format are assuming UTF-8 by default.
I'd be curious to see if there's a marked increase in net sales during the time that this snafu is ongoing just because uBlock Origin is disabled and users are forced to see more ads.
Certificate issue causing add-ons to be disabled or fail to install on Firefox
These are blatant racist tropes about religious Jews!
Frustration with Duolingo and Memrise when learning German led me to build a tool that could generate sentences in German and English simultaneously, while obeying the grammar rules.

In my opinion, the handful of hand crafted sentences they provide bundles way too much complexity together at random.

In a traditional text book, you'd get a dozen questions that are very similar, changing one or two aspects of a sentence.

Ich habe ein Buch.
Sie haben ein Buch.
Ich habe zwei Bücher.

So, I built a ClojureScript app that did just that. Sitting down and churning through hundreds of those allowed me to build an intuition for grammar rules that I knew on paper but would mess up when attempting to use them.

But it took quite a bit of time to write, especially when the sentences became complicated, so was almost certainly a net negative to my personal learning.

I had thought about building it out further, but I don't speak German so would need a partner, and ended up getting funding for something else so life took me in a different direction.

I do wish there were a product like it though, if anyone knows of anything similar I'd love to know. It's not that exotic, just a digitized textbook!
Actually we can jump up a level directly with fewer than 4 mistakes. To take the level 4 test we only need to take three additional tests which would cost only about 20 minutes.
Not a new language, as it’s based on/similar to Ruby syntax, but the latter is interpreted while this one is built from the ground up for compilation/LLVM:

https://crystal-lang.org
Daily yoga, tai chi, qigong, or another such gentle body movement activity is the way to go for able folks of all body types and situations.
The developer changed the pricing model about a month back (?). People who got it before the change were grandfathered into the premium service.
I believe Google has also bolted enough ML to search that they couldn't really recreate current search with just code.
While I enjoy reading some of the political reporting on Brexit on the guardian, they are amongst the least balanced newspapers on general societal and cultural issues.
Life Under Predatory Capitalism Traumatized a Nation
Aren’t SVG and MathML standard in HTML5?
Duolingo felt Like a massive waste of time to me. I don't remember it helping me beyond reinforcing my hiragana a bit. Multiple choice vocab training doesn't work and the amount you learn per day is way too low considering I did 30 minutes per day. After I switched to Anki my vocabs took off like a rocket. Duolingo basically cost me 3 months without learning anything. Of course back then I was lazy so maybe Duolingo helped me get started without losing interest quickly.
I guess the application changing it’s behaviour remotely, as is the case with Normandy, can be somewhat reasonably considered SaaS.
Also worth mentioning kdb+ since the title doesn’t seem to limit choices to open source TSDB only.
While I'm certainly not in a position to turn down the money, I'm hesitant to think about what kind of dependence this could create for folks like me.

Am I going to end up the code-monkey equivalent of an Uber-driver - paid just enough to keep coming back, but not enough to pay my bills?

Is this going to disrupt real, bill-paying programming jobs? If so, is anyone going to realistically pay their bills, with the huge pool of hobbyists going out there chasing after this?

Is my hobby going to stop being fun, since someone threw money at it?
In this case it is being used to push a new certificate which goes beyond the ability to change default preferences and therefore raises questions regarding the full capabilities available to Mozilla through Normandy.
Huh, didn’t notice you can’t post till now. Maybe it’s in the works?
Looks awesome! Functionally speaking, it reminds me of Snapcast. Compare/contrast?
I have a feeling people who steal bees for a living might not be the most technically savvy people.
Scott McKinney, the guy behind that library, is also the guy behind Gosu [1].

Selling a new language is hard, selling a library is easier,
even if this one has a hook deep in the code of javac.

[1] https://en.wikipedia.org/wiki/Gosu_(programming_language)
You can just use the web server that is already running on the machine.

You (normally) don't want downtime in your website, so you just let your regular webserver serve the acme challenge instead of stopping it.
Well if they believe similar things they vote accordingly. It's not a loophole, just two governments having similar views about those issues. It's for the better as well, if you allowed sanctions for refusing immigration policy you would end up with huge backlash and likely several countries exiting EU.
> Personally, I don't really recommend taking an in-person class if you already use an app and a textbook to learn.

I think there are cases where it really pays off to have a real lesson to improve your experience. There are situations which are not possible to explain in a concise/picture way, duolingo-style. They may be also hard to figure out from generic rules from a book. But having someone to ask - "so what is the reason behind this specific use?" can save you hours of study and many mistakes.

Even worse, learning without interaction with someone who can correct you may result in you learning something that's not true. But you kept repeating it and it only became harder to get rid of the issue. That's my experience from learning Japanese from Duolingo and Rosetta.
Yes, this is broken on ESR, but only somewhat broken.

The hotfix extension does two things:

1) Install a new certificate for "CN=signingca1.addons.mozilla.org/emailAddress=foxsec@mozilla.com", effectively replacing the old certificate that expired. This should work.

2) Then it tries to import the internal "resource://gre/modules/addons/XPIDatabase.jsm" module and calls XPIDatabase.verifySignatures().

This does not work on ESR, as "XPIDatabase.jsm" is a new-ish thing that isn't present in ESR yet. In ESR the function is still in "resource://gre/modules/addons/XPIProvider.jsm" (XPIProvider.verifySignatures()). Thankfully, the non-existing module is imported using ChromeUtils.defineModuleGetter, which only lazily loads the module on first of the imported property, so after the certificate-adding code has run.
It's better the subtitle: "Using the plant like scaffolding, scientists built a mini version of a working heart, which may one day aid in tissue regeneration."

I prefer a modified form: "Using spinach leaf like scaffolding, scientists built a mini version of a working heart"
"Adblock Plus has the ability to not block ads that conform to a certain standard"

Not my standard. Ad blockers should be rebranded as "tracking blockers" so everyone calls them that. Then sites would have to ask you to "disable your tracking blocker", which sounds scary as hell to users, as it should.
Changing a default setting is SaaS?
When I was using c++, the pain came when I discovered that I had to refactor my types because of some cases I didnt know about... Maybe that's easier with more modern statically typed languages.
That was pretty obvious to me. When I studied in Sevilla, Spain, there were bike lanes everywhere, but they are segregated from traffic, at the sidewalk level. I felt quite safe, I can't say the same for London for example.
Wow, this looks like a god-send. The @Jailbreak annotation would give mid-2000's Java coders a heart-attack :)

The only contentious point I find is that they are basically replicating Project Lombok's @SneakyThrows annotation via "Xplugin:Manifold stringsexceptions" or ModelMapper in their Structural Typing.

Furthermore it seems it should be structured in sub-projects, eg. the String-templates and ManTL in one lib, Structural Typing in another so we can mix & match.

But overall, very impressive!