skysight-inc/HackerNews huggingface dataset:
> Then users have to reload all the addons

I'm pretty sure Mozilla will implement a fix in a way that users only have to update their browser, not do anything to all their addons.
Honest question, is pydist just a hosted version of devpi (https://github.com/devpi/devpi)? What features distinguish pydist from devpi?
Forced "public service charter" (class B corp) for repeat, no-regret offenders (like a corporate version of public restitution, but in perpetuity)
That’s not in the obituary?
I recall one particularly difficult evening/night after I decided it was a good idea to cook a delicious, chili heavy thai dish for my wife.
They should be able to obtain a new certificate based on the same private/public key, in which case I don’t think any add-ons would need to be updated.
If you're a procrastinator, get more done if you throw away your to-do list
My post had nothing to do with creationists nor were they a principle feature of the thread. I’m not really interested in this tangent. If creationism is a metaphor for pseudoscience in general, then my beef is that the Guardian publishes it exclusively and gives comparatively little time to evidence-based positions. Or more accurately, it talks about evidence-based positions deceptively and in bad faith, cherry picking and gas lighting. This is all pretty abstract and I don’t especially care to debate it in depth (not here, anyway)—if someone disagrees with my characterization, that’s fine—my position doesn’t require everyone everywhere to agree with me at all costs.
Oh cool! GitHub link?
Central air is a giant waste of energy, tantamount to leaving the hose on all day. Better construction materials and techniques obviate the need for AC - check out Passivhaus engineering http://www.phius.org/phius-certification-for-buildings-produ...
It was pretty damn hyperbolic. I seriously haven’t seen that much of an anime advertisements anywhere except near konbinis and stores related to them.

There might be an collaboration with some anime and product once in a while but from my experience (and this is an experience of an foreigner living in japan) it’s far from norm.
https://start.spring.io/

I have looked at sqlites code. Large and extremely many corner cases yeah but overall nicely done.

Platform code can absolutely be clean.
Ask HN: How do you manage your development team?
Hi HN,

I lead a modest team of 4 developers, and our entire company is 7 people.

We use Pivotal Tracker [1] to keep track of bugs and features, and a spreadsheet with a high level roadmap set quarterly.

Monday morning we have a development team meeting to review current/future tasks based on business/dev priorities.

This process is okay, but we find there are ad-hoc, mid-week challenges I'd love to tackle better:

a) How best to triage ad-hoc requests from sales (feature improvements/requests) or customers
b) Resolving product bugs/integration issues that may appear and need to be resolved that week
c) Responding to ad-hoc requests from BD (eg, produce a report). Google teaches me this is 'toil' and to look towards automating these tasks, which were done, but there are still fringe requests.
d) Allow development to work in their own priorities (internal improvements, refactoring, bug fixes, tooling, ...) amongst feature requests and customer-facing bugs that need to be resolved
e) Ideally we had someone dedicated each week to resolving issues/bugs, not new features, but never done this.

We have some techniques to address many of these, but I feel we could do a better job so that during the week we are shielded from ad-hoc changes of our priorities mid week.

Any feedback appreciated, thank you!
Disclosure: I work at AWS and played a part in building the Nitro system

The Nitro system does use SR-IOV, and it can take advantage of hardware virtualization features like VT-d posted interrupts to lower interrupt virtualization overhead. But VT-d posted interrupts isn't a factor in avoiding polling. I'd go further to say that the Two Six Labs blog post has some inaccuracies, so I wouldn't depend on the information it contains much.

Polling is often more efficient, and lower latency, than interrupt driven operation. If a CPU is mostly doing IO, polling for work can be a much better approach. Jens Axboe has been working on adding polling to the I/O stack for a while [1], and has recently added a new API for submitting I/O that is very promising [2] (25-33% performance improvements on I/O heavy workloads).

[1] https://lwn.net/Articles/705315/

[2] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...
Ah, the "whale" model. Of course, what's to seperate a whale from an investor looking to goose the numbers to get his % higher?
Forgive my ignorance but how are they being insulting by locking the issue?

They are working on it, and seeing 1000s of “me too” comments in the issue isn’t going to make things better for anyone. Least of all their customers, who, when they do update the issue with more info, won’t have to wade through pages and pages of noise before they get to the actual update from Mozilla.
Markdown comes to mind
Seems unlikely. If you’re willing and able to run code like the above, sourced from a random comment on the Internet, there’s no amount of security vulture that’s going to protect you from skillfully making your Internet experience unsafe for yourself.
So what is that, like 10 people total? It seems like we're always blowing the importance of the trans community way out of proportion...there aren't that many of them and a lot of them end up committing suicide...they, as a group, aren't that important in terms of impact on society
Not too long ago, we used S3 to serve large amounts of publicly available data in webapps. We had hundreds of buckets with URL style names. Then the TLS fairy came along. Google began punishing websites without HTTPS and browsers prevented HTTPS pages from loading HTTP iframes.

Suddenly we had two options. Use CloudFront with hundreds of SSL certs, at great expense (in time and additional AWS fees), or change the names of all buckets to something without dots.

But aaaaah, S3 doesn't support renaming buckets. And we still had to support legacy applications anf legacy customers. So we ended up duplicating some buckets as needed. Because, you see, S3 also doesn't support having multiple aliases (symlinks) for the same bucket.

Our S3 bills went up by about 50%, but that was a lot cheaper than the CloudFront+HTTPS way.

The cynic in me thinks not having aliases/symlinks in S3 is a deliberate money-grabbing tactic.
So you're saying you had good voice UI without muting other streams? Or you're saying you could listen and type in those commands while listening (and driving)?

Because I would rarely want it to be the latter - especially knowing how dangerous it is.
My bad, meant to link here:

https://www.denverpost.com/2019/02/28/carrie-ann-lucas-obitu...
This is the other reason to lay it on with a trowel. In speech I can be more subtle with sarcasm, online I hate the use of '/s' tags, so I flag it more by including surreal or ridiculous elements and making sharp changes in style.
Fortunately, it is no longer necessary to run malicious software on user computers. With latest "advancements" in Firefox security everyone can publish malware directly in Firefox addon center [1]. No review needed!

"We accidentally uploaded all your HTTP requests to our servers, but we will definitely fix that in next addon version!~"

[1]: https://arstechnica.com/?post_type=post&p=1340459
Maybe we're not that great at programming Turing machines afterall ;)
If there was no punishment, how much would it cost the city in more skipped fares?

That said, I don't think anyone actually goes to prison for a skipped fare. There are better punishments out there.
its interesting that they almost never have a large part of their salary connected to bonuses like salespeople do. They take risks for others and it’s an important job. But I do think it has more to do with culture.
Or you just get your grocery shopping delivered at home.
This situation isn't about encryption, it's about code signing.
Because if they survive the class war - and god knows they are surely exceptional individuals - then they can start the whole process over again fleecing the individuals with the redistributed wealth.
I was molested for a few years as a child. I ended up suicidal and frigid.

I spent a year in therapy in my teens and 2.5 years in my twenties. I read stacks of research-based books to educate myself.

It took me decades to learn to have sex safely without being some man's victim.
The biggest short-coming I have found with my approach is that I have not systematically mapped out the language nesting identity. At the moment I am utterly reliant upon rules in a given language to identify the thing that is nested. For example I know that stuff in an HTML style tag will be CSS, because the rules of HTML say so.

This approach has limitations where the relationship between an embedded grammar is not clear. Is a markup grammar that contains something like Liquid template tags HTML or XML? How do you specify the code by language name, because the embedded grammar is the Liquid tags but you want to identify the grammar of the template tags apart from other template languages. What if a markup language instance contains template tags from unrelated grammars?

I could auto detect the language each time the grammar changes, but that would be slow and introduce unexpected results. The precise solution would be to allow users a means to define nesting based upon syntax or structure and I have not thought through this yet.
The Mk13 isn’t an AI. The ya a 700 letters Stiller with an AI AX chassis. And yea, I wrote they haven’t switched.
Ask HN: How do you guys prevent back problems?
Hey guys,

Like everyone here, I probably spend way too much time at a desk and have been dealing with back problems lately. I'm trying to see what I need to do going forward to prevent my back problem from getting any worse.

I recently bought a standing desk with a mat so I think it's a good start. What else should I look into?
> I can think of many such reasons off the top of my head.

What are they, please?
Heh fair enough.
Yes, that seems to work on desktop. Thanks.
Tomorrow (or whenever this gets fixed), ad companies are going to have some great data about what the world would look like if adblock didn't exist. I really home someome does a blog post about it. Yikes, I hope it doesn't play out like a shark smelling chum.
“quite possible”
IIRC, I exercised yesterday.
The problem with this approach is that the expired certificate is part of the add-on package files (META-INF/mozilla.rsa; DER encoded PKCS7), not something that you can just swap out on some server. You have to replace the certificate in the add-on packages with the new cert, even if the new one reuses the keys of the old one. At which point you need to ship new add-on package files to users anyway, so key reuse or not makes no difference anymore.
What timezone are you in? I'm in UTC-4 (Detroit), and haven't seen any problems so far. (Also running Nightly on Arch Linux - I haven't made any previous changes to the addon signing either)
SoftBank is planning an IPO of its $100B Vision Fund
Presumably because how would it differentiate between a legit "already installed" extension with a signature that cannot be verified, and an extension installed by malware that also cannot be verified?
Looks really nice. I leave it installed but won’t be my daily driver until it gets darkmode and ability to post replies.
> Still, this type of oversight seems all too common even in large companies.

The npm self-signed certificate fiasco of early 2014 springs immediately to mind.
I made loads of drawings with this chalk, it’s all true: https://drawings.rey.sc.jas.life/groups/blackboard
No. The file system implementation uses the AWS S3 client, which will automatically use virtual-host style when possible (if the bucket name supports it).
It means two hops not one. S3 gets can be cached but then you have a whole host off issues. Better to get to the origin.
Embarrassing and amateurish, what a fuckup. Didn't expect Mozilla to be this incompetent. It's also Friday night, a lot of people won't be sleeping tonight.
Firefox has anti-tracking features that are enough to freak out reCaptcha regardless of adblockers, so that might not be as good for them as it seems. Be careful not to confuse hiding ads from view with preventing user tracking.
Site's down. Hackaday has a writeup: https://hackaday.com/2019/05/03/__trashed-28/

And Sorensen has been active on Reddit with this: https://www.reddit.com/r/RTLSDR/comments/bj61f9/24_hour_time...
Looks like the site is down due to an HN hug of death.
I'm curious to see what kind of impact on ad revenue we'll see in the next couple of days.
Whether a bias is good or bad depends on the observer. If you agree with it, it's good; otherwise it's not.

The parent post expressed hope they were hiring writers who would 'report on the objective state of the world, not pursue a particular perspective'. I was pointing out that these are not opposites.

We often think of 'objective' as the opposite of 'biased', but it isn't: it's substituting a personal bias with an impersonal one. This certainly has it's place - it's critical in the sciences - but objectivity has limits when you're dealing with people.

A key strength for any good journalist is the ability to contextualize a story for their readers - not just provide objective facts, but answer the question "What does this mean to me?" A journalists' background and personal perspective - their bias - are relevant because they inform that context.
> Why has it become acceptable to assume so much about someone's view of the world based on their race, gender and sexual identity? Why has our definition of "diversity" become so narrow and stereotypical?

US Supreme Court jurisprudence more or less. No one actually cares about diversity as a goal. The political coalition that passed the Civil Rights Act looked around, saw they’d won and wanted more stuff for their constituents. Affirmative action was one of the ways to get more stuff. It’s also illegal under a plain reading of equal rights. For reasons I’m unqualified to opine on a quota system is too blatant legally (also explicit points based systems with group X getting Y extra points) so the Supreme Court went with diversity as an acceptable workaround to get to the desired goal of getting more stuff for the desired interest groups. This all happened in the context of university admissions and the buzzword spread from the case law.

Same as free speech or state’s rights people who genuinely believe in them are rare compared to those who use them as talking points when convenient and drop them when not.
The fixed costs still depreciate. You still have to either pay upfront for the car, finance it and pay interest, or lease it, and the car has a fixed lifetime. Repair/maintenance should go in there as well.

I'd be curious how many miles the grandparent has on the car though. My per-mile costs are also sky-high (because it's 10 years old and only has about 40k miles on it - I think it works out to $0.75/mile or so), but the flip side is that if this drives like a normal Honda it should be good for another 150k miles and, if I don't get into an accident or change my driving habits, I will never need to purchase another car.
Event sourced persistent actors in cluster mode is where it's at!
A glitch is breaking all Firefox extensions – TechCrunch
any book recommendation on the basics of compression?
Mozilla doesn't seem to have communicated the issue well. I could imagine a lot of unsavvy users have tried some wild things in an attempt to fix the problem, and maybe made a mess in the process. Doesn't Mozilla have a mechanism for blasting out a message to all Firefox browsers? Also I have a Firefox account, why haven't I been inboxed about this?

Otherwise I'm not bothered. I won't be switching as long as this gets resolved within the next few days.
How does the App go past pay walls like the New York Times?
Sadly, what they "stand for" and what they actually do are two different things. This is exactly the kind of centralization that a company supporting a "free and open internet" (to use their words) should be against on principle, let alone pushing in their only product of note.

This should not be possible.

Worse, had they not taken the paternalistic, nanny-like stance that you can't even disable the signing checks, I could roll out a script that would make this a non-issue for my users. But no, thanks Mozilla for ruining my Monday.

Might not be the most substantive comment I could possibly make in the circumstances, but I'm pissed. The only appropriate response feels like a string of infuriated profanity directed at their incompetence and decision-making.
Free text? You can just as well pipe structured binary data (such as audio or images) through one or more processing elements. The processors need to understand the data, of course.

There are also other IPC mechanisms, like D-Bus.
What major stories have the Guardian broken in the last two?

Obtain an issue from even five or six years ago when they were breaking the Citizenfour story and one from this past week.

Is it comparable to the Daily Mail? No. Is it moving in that direction? Demonstrably so.

Read an Owen Jones column or two and tell me it's still a bastion of reasoned perspective.

The Daily Mail is a rag. That the Guardian is trying to become one to get back in the black is tragic.
Patches to workaround the issue were just committed. Those patches were tracked at https://bugzilla.mozilla.org/show_bug.cgi?id=1549010. At the time of writing this comment, that bug is not chained up to the bug linked by this post.
> Maybe if economy can be crashed in 15 seconds it should be crashed in 15 seconds do we can have a saner economy?

How do you know that would be the outcome?
Personally I despise the idea of the software already on my pc being dependent on signatures stored on a remote server. I installed it and Mozilla can fuck right off. It's my responsibility to police what software is on my computer, not theirs.
If it impacted Amazon’s (or whoever is targeted) bottom line then I would expect they would be open to dropping domain fronting support. But I admit I don’t know this for sure - time will tell.

China has blocked GitHub and Akamai before. https://www.latimes.com/business/technology/la-fi-tn-great-f...
True, but the reference is to Riker's island which is a public prison.
Regrettably. My med student samples were tiny, and a decade ago, but the best any of them managed for "how big is a (human) red blood cell?", with quite a bit of struggling (to for instance, remember the scale bar on some histology slides), was "really really small". Some, even when given the answer (in micrometers), didn't believe it. :/ I've continued to play the Sun color game with Harvard Center for Astrophysics students over the years. "A five-year old comes up to you and says, "I'm told the Sun is a big hot ball! Yay! What color is the ball? I really care about the color of balls - I'm five." What color is the Sun?" Adding "viewed from outside the atmosphere" as needed. And rejecting answers like "6500K" with "Five-year old!". Now CfA, in addition to being a first-tier astronomy research center, is also a leader in astronomy education research. And of the few students who get it right, about half (but small N) learned it in a seminar on common misconceptions in astronomy education, rather than from their own atypically successful and extensive education in astronomy. A sometimes follow-up question of "what color is sunlight?" often triggers something like an "oh, wait, that doesn't make sense, does it". Suggesting two bits of incompatible knowledge, bumping together for the first time.

These examples were selected for drama. But the failure modes they illustrate seem widespread. A failure to develop a sense of scale, and a rough quantitative feel for reasonable values in one's field. And a failure to integrate knowledge, with misconceptions persisting far beyond introductory courses. The software one-liner is "if it isn't tested, it doesn't work". And current testing... has poor coverage over the set of skills one might hope for all students. On the one hand, these failures have been remarked upon for decades. On the other hand, as concept inventories spread across fields, a common pattern is "I'm sorry to waste your time taking something so basic as this new concept inventory" followed by "oh bleep, I had no idea". Which is perhaps a metaphor for the bigger picture. It seems we sort of know it's a disaster, but that hasn't quite sunk in yet. Or something. The instructor of a bio lab course saying the thing they most wish their incoming students had, was a firmer grasp of central dogma... and this in a second (or third?) year course, mostly bio and pre-med majors, at a first-tier department and university. When they've likely seen it, repeatedly, since primary school. And yet how many pre-college biology educators view themselves being profoundly unsuccessful?
I've seen some embedded SVGs get rendered differently by different PDF readers.
You'll always be learning. I've been coding since grade school and every day I learn something while programming.

The best way to stay motivated is to take on tasks/projects that are interesting/new something you haven't done before.

You'll learn a lot doing something beyond a tutorial and you'll want to work on it/figure it out.
I don't think UB has any particular bearing on a conversation about the "strength" of a type system, actually. There are plenty of non-type-related UBs, and those UBs that are related to types do not necessarily make the type system weaker. C's type system is weak due to things like explicit casting that can circumvent any type safety, for example.

Python does no runtime checks of types. The type system employed by Python is effectively a structural (not nominal) system. So long as you provide things with the right structure (i.e., your objects provide the correct fields/methods), everything will work. But many people would like say that Python just "doesn't care" what you want because of the lack of any nominal type checking at any point.
That bug seems to have affected only users on Android versions earlier than 4.3 and in Brazil or Chile.
Upgrading your profile from Release to Nightly, which occurs automatically when you open it with Nightly, is a one-way irreversible step. This could prevent your profile from being used with Release without crashes, or lose profile data such as bookmarks or saved passwords when later used with Release, depending on what work is underway in Nightly and if it happens to be backwards-compatible. Be sure to backup your profile if you choose to switch channels.

Note: I am told that Developer channel uses a separate profile, but there are instructions below showing people how to override that, at which point this warning becomes relevant once again.
> I've slowly come to the conclusion that instead of assuming my friend who doesn't like static type systems is misguided, I should try to figure out what aspects of static type systems need improvement so that a person like him would use them. Even if I don't agree with him, I can still use his point of view as a different perspective.

Ah yeah, that's a very pragmatic view on things! And totally reasonable. I intend to work on improving type systems, so this is definitely the mindset I strive to maintain more often than not haha.
> Fat-shaming attitudes do a lot of harm here.

How so?

> You might not know any _successful_ fat people because society doesn't afford fat people the opportunities it does thin people.

Fair point...but in all honesty, would you want to hire/work with/look at/listen to some disgusting overweight person or someone who looks attractive and healthy?
We could attempt a summoning. Quick, make a wildly inaccurate claim about the correct way to implement an encryption library.