skysight-inc/HackerNews huggingface dataset:
Jumping onto this: what about accessibility? On iOS at least, if you use the native controls you get a ton of accessibility support either for free or with relatively little effort. VoiceOver has some really deep hooks into the system.

How, if at all, does this work with Flutter? Seems like it would be like trying to get a screen reader to describe a game.
That's what 308 is for
this reminds me of the documentary "the fog of war"[0] in which robert macnamara talks about the conventional type bombing of japan's cities with firebombs before using any atom bomb.

[0]https://en.wikipedia.org/wiki/The_Fog_of_War
That's what standardized testing is. It has a bad failure mode where the curriculum starts to cater to the evaluator instead of the teacher's pedagogical needs.
You should maybe try to find and/or include a reference for such a claim. Because it sounds unlikely, borderline impossible. To actually work, it would have to include all hardware and most software on any devices that have access. So no Windows on any government or bank PCs in all of SK?

As it is, this comment, even if framed as a question, may well leave some unfounded hypothetical in peoples’ minds, which of course some will repeat more assertively.
Time of reporting matters here. Some report every 15 days. others with a different time frame. Probably that's the reason for discrepancy?
> It’s a problem with these security focused applications. They often sacrifice usability on the altar of best case security; making applications that are hard to use for anyone but the most ardent of folks.

I actually feel like Signal has done a better job than most in this respect. The interface is attractive, they make things like key resetting reasonably parseable, and there are nice mainstream features like built-in gif searching.

That said I've fought with syncing problems at times, mostly surrounding the desktop app. Presumably it has to do with the authoritative copy being phones in peer to peer mode, instead of a server, but it's still pretty annoying sometimes.
I’m pretty sure we’re inundated with violent entertainment because powerful people want us to kill each other. Ever wonder why this stuff is considered ok, but a glimpse of a woman’s nipple is not?
yeah their marketing isn't great
No, nobody uses quantum-proof encryption yet (usually called post-quantum encryption). Google and others have experimented with it for https and it worked fine, but nothing is deployed yet and standardization has barely began. So if someone records your traffic today, they will be able to decrypt it in a couple of decades.
He didn't RTFM actually. They performed Crew Resource Management, and he was able to focus his attention on controls the other two pilots didn't have time to manage. Hence noticing the trim wheels running amok.
Imagine if you could only borrow a fixed amount of packaging at a time, and you had to return the excess (properly sorted and cleaned) before you could buy more. The more non-R material (light weight plastic like strawberry shells) the more your waste costs would go up.

And why not rigid and reusable ABS trays for strawberries? Would the trucking cost for returning to the distribution centre be excessive? Or is it just that the entire supply chain assumes trucks return empty?

An interesting example is CHEP pallets. They are only loaned, pallets come back eventually. Interesting operations research problems in moving pallets around.
It definitely will never go to $1 again. This would imply trivial rewards for miners and would destroy the network's security. A lot of people don't realize that Bitcoin is as much about incentives and game theory-based security as it is blockchain technology.
Please don't take HN threads further into partisan flamewar. The more that happens, the more predictable comments become, and the idea here is to avoid the predictable.
Also: https://www.donkeycar.com/
Keep in mind that some (though not all) of Signal's UX "weakness" is a deliberate consequence of tradeoffs Signal makes for end-user privacy. Signal didn't even have user profiles until relatively recently, when the team came up with a privacy-preserving way of implementing them. There are UX features that are relatively easy to build, and par for the course in chat applications, that are much harder in Signal's model because they don't keep server-readable directories of who's talking to who.

If you seriously care about privacy, when you look at chat app features, think "how would an ordinary developer be most likely to implement this feature, and what would that mean the application was tracking about me as a consequence?" One nice thing about Signal is that as a general rule, you can assume they're not trading privacy for convenience.

It is also reasonable not to care as much about privacy as Signal does. If you want something with more UX niceties, but something close to (and, in most cases, cribbed from) Signal's security model, Wire is a good bet. Just remember, Wire has a lot of metadata about who you're talking to that Signal would treat as hazmat.
Paper is proven to last a few hundred years without issues, if stored properly, and we know all the kinks of storing it properly.

It's easy to read, contrary to a DVD (you need a DVD drive).

It's also cheap.

Why make things complex when they could be simple.
> How hard will it be to switch to post quantum encryption globally once it’s clear publicly that there’s at least a proof of concept for a quantum decryption supercomputer?

In theory switching could be "simple" but depends very strongly on what post-quantum algorithms we end up with. If we have a good replacement for Diffie-Hellman (the current candidate appears to CSIDH[1]) then you could replace effectively everything with it because the protocols could be left unchanged. The keys might be a bit larger but who cares.

However, if there is no safe Diffie-Hellman replacement then we'll need to change our protocols to accommodate the new crypto. Symmetric-key crypto appears to be mostly safe (Grover's Algorithm can only provide a square-root improvement and so we can just double our key sizes to 256 or 512 bit) so we only need to fix the public-key part, and can work on replacing the rest later.

[1]: https://csidh.isogeny.org/
There are also these kinds of slip ups: https://news.ycombinator.com/item?id=18234849
Yeah, until you start hosting roms I don't think Nintendo cares (although possibly begrudgingly). Once you do though... bad times.

Nintendo has even used existing open source emulators themselves in commercial products.
Satellite timelapse showing the devastating effects of deforestation
Ask HN: Company raised $6M last year, seems to be blowing it, best thing to do?
Hi,

I'm a software developer at a startup that raised about $6M last year. The company sells hardware + software (I'd prefer not to say more so the company stays anonymous). The business is doing OK. The revenue is growing slowly, but no "hockey stick growth". There are no realistic ideas how to get to that hockey stick.

Lately there have been talks we'll need another round of investment soon. Maybe I'm wrong, but this indicates the company is burning investor money at a high rate and this is worrying.

Some observations about the company since we raised money:

- A bunch of time (and money) is wasted on employee lunches and team-building activities.
- There's a lot of slack.
- People are just not working as hard.
- Even the managers that have considerable equity stake are "taking it easy".
- The company hired a bunch of new people, mostly in "<something> manager" roles. The new folks mostly know nothing about the product, hardware or software we sell. These new hires spend their days mostly in endless meetings, not having any visible output.
- The politics is slowing down software development productivity.
- The productivity in the software development team dropped as well. Our managers don't seem to care.
- One guy is working literally 1-2 hours a day and getting away with that. This has been going on for many months at this point.

I have focused on negatives above. Here's some positives: my job is pretty good. The engineering problems are interesting, there's not a lot of stress and I like working with my colleagues. There's nothing that's bothering me "right now" with this job, but "negative signals" are worrying.

Is this normal for a startup? Will the company do fine, or it will eventually crash and burn? What's the best way to think about this situation? Am I better off just finding a new job?

Thanks
I'm sure there's a market for this. But I'm not in it.

If I want to buy a painting, I'm looking for technique, style, color usage, materials usage, ability to craft a message and convey a mood. The individual artist and their story matters to me. A facsimile of a digital photo is probably not what I'm looking for.
This comment seems a reply to the headline more than to the article. And given that headlines are almost never chosen by the authors of articles, it may be worth coming up with an alternative headline to the article.

As I read it, the article is the author mentioning that as a student he had a poor idea of what professional mathematicians did, that he received a lot of encouragement from his athletic coaches but not math teachers, and finally wishing that as a kid he knew what excitement was possible from mathematics. So if I were picking a title for the article I might choose “I wish math students got the kind of motivation [from their teachers] that athletic students get [from their coaches]”. (This is wordy and poor as a headline of course, but it's probably a better reflection of the article.)

How much of the differences you mention affect these points, do you think? That might be more illuminating.
It doesn't look like UI framework (templates + some MVC + components library) but more like set of small helper libs for JS.
> I had another technical career previous to this one

This seems to be the huge differentiator.

I've had really good experiences with boot camp grads who had a previous technical career or came from a STEM phd. Camps are great for getting already well-educated people up to speed on how to hack together a website, which is an enormous value add to an existing skill set.
> Google and others have experimented with it for https and it worked fine

To be clear, Google didn't experiment with actually using post-quantum crypto. Their experiment was to figure out what was the largest key sizes that browsers and networks would accept before you start degrading connections. Their "post-quantum keys" were just padding bytes. This was gone through in the Bernstein and Lange talk this year at 35C3[1]. This is a good thing, given the history of the security of post-quantum candidates[2].

[1]: https://youtu.be/ZCmnQR3_qWg?t=1457
[2]: https://youtu.be/ZCmnQR3_qWg?t=208
If you do 2 years at a community college, then 2 years at University of Maryland, your degree just says “University of Maryland”. There’s no reason to break it out on your resume either.

Anecdotally, it seems like the people I know who went the community college route ended up finishing their degrees at more prestigious universities than they would have if they went straight to a 4 year school.
> 8. Every single open source project I use or contribute to uses github. If GitLab were to, say, add a github integration that lets me work with all the github repos I care about, but using Gitlab's UI, I would be intrigued.

This does exist:
https://docs.gitlab.com/ee/user/project/import/github.html#m...
Here are some unprompted recommendations :)

If you like puzzle games, Tetris, if you like adventure games, Link’s Awakening. If you like platforming, I’d recommend any of the Super Mario Land or Donkey Kong Land games!
So the problem is more about transparency and reliability of the software than about government access? I don't think so though because otherwise anyone proposing government backdoors would neutralize opposition by saying let's make it a front door, we'll have our certificate trusted by those same CAs and be open about it.
What a great idea moving away from buy one, download and install

over to online cloud, pay yearly model

Hows online sub cloud system working out for you

Still going to double down and use adobe software still ?
It fits the intesests of those aurhoritarian, so called "civilizational states" to cast doubt on progressive tech in liberal democracies. At home, Russia dictates,"build out 5G infrastructure." In the West, the propaganda questions, "Are you sure 5G is safe? Also, are those vaccines safe? Pest resistant crops, whoah, you're gonna eat them? You might die."
You need docs about the media type, which is not exactly the same thing.

But you've documented how your API works anyway, right?
Seems fair, most (all?) of the big ones currently have technical issues severely limiting transaction volume/latency/throughput right?
Atlanta Hawks Online Shop Hit with Credit Card Stealing Attack
Myself curious to write a GB emulator... how do you get images? After a quick search I see a list of "homebrews" on a collection repo on GitHub [0]. Is there a particularly good place to find games?

[0] https://github.com/gbdev/awesome-gbdev#homebrews
>The internet economy today resembles the earliest days of the nuclear industry. We have a technology of unprecedented potential, we have made glowing promises about how it will transform the daily lives of our fellow Americans, but we don’t know how to keep its dangerous byproducts safe.

This is one of the best analogies about the internet that I've ever heard.
Some lifters swear by the poorly studied Starr Rehab Protocol. The tl;dr of it is for severe muscle injuries, low weight, high volume.
Ask HN: Why does Oracle worry the Java community?
Almost every conversation I see on HN about Java/JVM includes some comment about how the future is uncertain with Java.

I have done a bit of research, but I keep finding conflicting information.

How exactly does Oracle worry Java users and companies? Is the licensing really messed up?
Even if they're skewed, it's still borrow on the existing floating shares?, no? I mean directionally - can it not mean that - even a small piece of good news will cause exponential movement due to shorts having to be covered.
Not the OP, but my understanding is that the problem is a matter of practice: there are so many tiny packages with such complicated dependency graphs that the exposed surface for attacks is two steps past gigantic.

As someone who doesn’t use much JS/npm, but who did work with dependency graphs in software systems in a former life, my (largely academic) study suggests that this is an intractable problem in npm — that is, a solution is such a big change from npm foundational usage that it’s far more likely to be solved with an npm replacement than an npm change. I would welcome sources that either refute or confirm this.
In which aspect is it not a reasonable Signal alternative? I know that you have expressed a dislike of Matrix before, but I'm not sure if your point here is that it isn't a Signal alternative or that it isn't reasonable (in a crypto sense).
People are freaking out about CA because it maybe helped Trump target people political ads based on demographic information even though every candidate does the exact same thing and no one seems to mind when others do it.
I can push the changes in a repo if you are interested.

Thanks. That would be great for the people that want to follow the Compiler Construction book. (Thanks for posting the link for the 2017 version)

Oberon-0 is a toy subset of the full Oberon-07 language.

So I can write small Oberon-0 programs and try these using Oberon-07.
There was a homeless person who was well known in my home town (not a town that you'd typically find homeless people living in. In fact I think in the couple of decades I lived there, he was the only one I ever saw). He never seemed to beg, always politely refused any aid. He was so well known, people had offered him beds for the night, but no. He liked being outside in the fresh air.

Eventually he passed, and of course it was mentioned in the local newspaper, along with the revelation that he was, in fact, wealthy. He just chose to live that way.
If they gave it a stupid name, why would they be any smarter in the development of the system itself? The name clearly indicates a lack of wisdom.

First impressions matter.
Been thinking about such possibilities. With the advent of serverless, what executes a controller action does not need to be a server executing every other controller action in an application.

We don't need to keep two machines alive, one each in two different availability zones to provide the bare minimum uptime. Not if any controller action can quickly be given part of a machine on which to execute. There is no uptime or downtime, other than that of the service administering this fleet of machines.
Deceptive Dev Tools
There's a truth to your quip, I think.

Phrases from the article that jumped out for me were: The real world will eat you alive. Everyone was fake.

Much of that cruelty and superficiality arises from the dominant ideology driving corporate culture. It can be tough and heart-breaking growing up in such a world.
The other commenter is right about canary testing. We have an issue open to make this more clear: https://gitlab.com/gitlab-org/gitlab-ce/issues/61503
> As they've always done through the media? The hardest thing to swallow, for some people, is that these things show very openly how democracy is deeply flawed.

If you study a bit of History, or look beyond the western world, you will see how terrible the alternatives are. And you will see that democracy is something worth fighting for. Democracy is not flawed, it is hard. We have to fight for it, and the next generations will have to fight for it, and so on. It's real life.

I haven't resigned myself to living in a Black Mirror episode.
You can think of language barriers as firewalls for this virus, and translation and localization as the ICE breakers.
TFA explicitly excludes fractures and “catastrophic injuries” from this suggestion.
how so? it's specifically asking the poster about a process. Then some other service is telling them about their own process while advertising their site, which is also a direct competitor to theirs.
Thanks for the correction; fixed. I had always thought that Wire implemented the protocol explicitly, but I guess not.
I wish there was a simple guide somewhere to install Riot on a Rpi so that I could try it out.
Which is the exact reason why when people ask for a language suggestion to start with/learn, I tell them all the same thing: "Oh sure, go through the CS50 manual on MIPS!" Personally I can't think of a period of study that affected my ability to problem-solve/reason about problems more than my time studying MIPS.
A bit more to flesh that out:

https://mashable.com/2012/11/15/airship-ventures-zeppelin-br...
This is fantastic, thanks for writing it and for your testimony!

my favorite bits

"The emergence of this tech oligopoly reflects a profound shift in our society, the migration of every area of commercial, social, and personal life into an online realm where human interactions are mediated by software."

"Consumers will just as rightly point out that they never consented to be the subjects in an uncontrolled social experiment, that the companies engaged in reshaping our world have consistently refused to honestly discuss their business models or data collection practices, and that in a democratic society, profound social change requires consensus and accountability."

Brilliant!
This article doesn't seem to account for the idea that removed and the announced have a different latency compared to a new announcement. For example if we withdraw a prefix and then announce it 10 minutes later propagation is WAY faster than if we announce a new prefix or withdraw for a few days and then announce again.

Edit, but cool article.
I am in starkest disagreement with this claim from the top-level comment:

> I think that a lot of students don't have what it takes to learn the mathematics curriculum they signed up for, no matter how you teach them.

Unless “a lot of students” means “the < 10% of the population with a severe mental handicap most of whom never went to college”... which okay, I am happy to concede that.

I also dispute that with all else held equal, certain people are inherently “10 times faster” at “improving” at mathematics. This just doesn’t seem plausible to me. For context, I have observed close-up several of the smartest math students in the world, and also spent a decent amount of time trying to help people who were heavily struggling with remedial coursework.

I would even claim that the latter group were “improving faster” than the former group.
What in your opinion is the mechanism that puts a floor on the price of bitcoin? Where is that floor, roughly?
If there is one company I hope gets the spotlight in this debate it is Plaid. I think there are among the least transparent when it comes to what data they collect, have zero way of auditing/ensuring compliance among devs, and arguably dealing with some of the most sensitive personal data (banking, transactional).
So if hello world is that slow, imagine launching anything non-trivial in debug mode to debug it :P
Being copyrighted, it's not legal to redistribute them. You're favorite torrent search engine might be able to help, though. Or you can buy them off eBay and dump the image yourself. I'm not sure what the current state of dumping hardware is, but 10 years ago I hacked together one that used a PC parallel port.
I once observed a "become a web developer quick" RoR-based course, where they made people write their "hello worlds" as full-blown RoR apps with full MVC project scaffolding - meaning dozens of folders, and having to create 3 files (M, V, C) and write a lot of code to put something simple on the screen. I realized then that people finishing this course lack what I consider one of the most fundamental insights in writing client-server web software. I wonder if the person from your story lacked it too.

The insight is this: a browser is a program that reads text that it gets from files or servers, and that text tells it what to put on the screen, how it looks and what can be done with it. When you're learning the basics of a (backend) programming language, you first learn how to put text on screen. The same way, you can put text into a file, or (with some more tricks) into a network connection. So if you write a program that prints HTML to stdout and make browser read from it, you get a client-server web page. Boom, that's pretty much all. Everything else you'll ever learn is just managing complexity. Modules, MVC, database connections, etc. - it's all serving the goal of generating the right text that gets shipped to browser.

I was surprised by the ways people (sometimes junior programmers with little web experience) didn't get that. Some didn't know that browser simply reads text (happens when you're exposed to frameworks instead of raw HTML). Others thought MVC is something fundamental to web apps, instead of just being a way to keep your "print HTML to stdout" code from very quickly getting out of hand. So whenever I teach something the basics of web development, I always start with this - raw HTML as text, the connection to "your program can print text to stdout, so it can print HTML to stdout too", and we build up from there.
I don't believe Google sells your psychological profile to third parties seeking to target ads. Google might be able to ascertain my political leanings based on my behavior, and other parties may be able to target ads toward people with my political leanings, but Google never directly gives them actual knowledge regarding my existence.
Truth: Democracy has dependencies. Just (fair) access to education and opportunity is absolutely necessary for democracy to function.
How does Docker work?
This information is very jealously guarded. The best public info I know of is here: https://cdn2.hubspot.net/hubfs/3400937/White%20Papers/ANA_WO...

I'd welcome any other info, public or not so public, people care to share.