skysight-inc/HackerNews huggingface dataset:
> men constantly hold the door/say "after you" and let me walk through the door first

I think it may not be a good idea to draw conclusions from this without seeing if they do the same for guys too (which you may not be able to observe during an interview). In my workplace everyone pretty much holds the door for everyone else if they're walking in a group. The first person who gets to the door will open it and stand behind it while the others walk in first. Sometimes we'll throw in a lighthearted "after you" too. I'd really hate for someone visiting our company to get the wrong idea about our culture from a common courtesy, especially in an interview scenario where the interviewer may just be trying to be nice to the interviewee regardless of their gender.
Ugh. MBAs? No thanks. Usually it's interactions with MBA-holding folks that gives me heartburn. They try to mechanize everything. I agree that an MBA education is probably fairly useful for developers, as long as you can retain your perspective and balance the two worlds--they are very different after all. I'm _very_ business-minded (though I don't have an MBA) and I still run into extensive frustration when I get these kind of queries from the business: why is this taking so long? As this article laid out well, the change or new feature is often conceptually simple but there can be _so_ much required to make conceptually simple things actually happen. Unless you have real development experience before becoming "management", I doubt it's possible for a developer to truly convey that complexity to you. Ultimately it ends up becoming a matter of trust, and frequently competent managers realize over time something along the lines of "well, if every developer I've ever had has taken a long time to deliver conceptually simple things then perhaps that means there's a lot to do to deliver things I think are simple." Sadly, there remain some managers who remain convinced, in the face of all evidence to the contary, that all developers are lazy, slow, and just need to be whipped more and harder.
I like Logitech G400s, it feels very ergonomic.
Everytime I show up at a company with flask-sqlalchemy, step #1 is to remove it. Raw sqlalchemy is better, but we always end up with SQL. It's probably my personal bias of writing 4 SQL parsers, but I find it better than the alternative. Although it's very nice to have something which can safely map the types
And despite all that the economy is doing as great as it is.
Think about that.

Not sure why you don't think I have a point. Europe is the same problem. They've been having a good deal with the US, now Trump want the juices to flow both ways.

He is re-negotiating all the deals, thats what he ran on and he actually do what he says. I support that fully.

The problem is that you don't actually do the full analysis of this an just stop at tradwars. Look at the bigger picture and you will se there is much sense to Trumps goal.
SQL query is a string. (that's where you don't pass the user input, not even quoted/escaped, as a policy) User input is passed "out of band", meaning not as a part of the query string. How exactly that happens depends on the RDBMS's particular client/server interface.

That's all that's enough to avoid SQL injections. And it has nothing to do with ORM.
Wow where do you live?
They are more like loan sharks who require human beings as collateral.
Most economists thought Trump would ruin the economy and have been wrong repeatedly.

Most economists are wrong most of the time about most things.

The proof is in the pudding.
That Rockchip has an ancient Mali 400 GPU (with no open source drivers) that won't be able to render a Flutter app at 1080p, or lower even.

The engine library alone is also already ~70 MiB. Running the Flutter Demo on my RPi3 (in aarch64, so the numbers are somewhat inflated) it's at 250 MiB of memory (with about 60 MiB of that for the system) and an additional 60 MiB of graphics memory. This is on a 1366x768, where the RPi graphics just about manage 60 fps (when warmed up).
God, I totally forgot about Famous. That was honestly one of the weirder things I’ve seen in my years of web development. Such a gorgeous website and yet I never really understood what they were trying to sell me on.

So much marketing, such little end result....never went anywhere, never amounted to anything meaningful.
Amazon HQ2 Proposal [pdf]
> That's only an effective approach if your goal is to cripple many of the companies that you fine

Yes, some companies should be crippled. With criminal sentencing, the first goal is to isolate that person from society as a punishment with reform being a second consideration. With criminals, judges or magistrates would level higher-end sentences as an example and you won't hear many people arguing against a criminal's 15 year sentence by saying it would cripple their economic output.

Society owes nothing to corporations and this "too big to fail" mentality creates a system where corporations are above ethics.

Seeing Facebook fined into to a point where they are seriously crippled as a company will make a lot of other companies change their tune, internationally, for the better.
I absolutely get why that would be useful to a prospective employee.

But I cannot understand how it would work in practice:

- Your former employer is giving out your contact information so you can help them recruit(?)

- Your former employer is asking you to essentially work for free

- But if your former employer offers you compensation now your opinion is biased

- You may have liability issues (e.g. you say something unfavorable OR favorable, and you can be sued by the perspective employee or former employer)

Rachel Nabors on twitter said it worked in the past, and I won't discount her experiences. I am genuinely curious to understand how the former employer arranged that with a former employee though.
Love the concept, love the push. But to be sincere, won't touch it with a pole because of Dart. However,...

Why o why is this thing not written with/for TypeScript?
I got one of these when it first came out. It cost something like $45cdn, which was absurd at the time for just a basic mouse, but it was so worth it never to have to clean that ball thing again. It worked just great until about 5 or 6 years ago when it was destroyed in a fire.
> You were a WWDC scholarship recipient, interned at Apple, and seem to base your career on Apple tech.

I dabble in Android and Linux as well ;)

> You are not a typical user, you will notice things most ordinary people would never think to notice. The vast majority of apps on a phone aren't even kept open by a user long enough for it to matter.

Agree on both counts, but I like to think that users aren't completely clueless. There are certain things that they do feel acutely: animation physics that differ from the system's (particularly for things like scrolling), lag, choppiness, lack of proper accessibility support…

> There's increasingly little reason to bother with the stack.

I disagree with this (this isn't just an iOS thing, by the way: I would say the same for every other platform I've interacted with). It is almost certain to be the case that the team that wrote the platform libraries is smarter, better, and cared more than you did about the UI (there are some very notable exceptions, but I think it's very obvious when this is the case). Going with the native stack means lock-in and sometimes more work, but in exchange you get a significant amount of functionality "for free" (sometimes without even realizing that this functionality existed) and automatically share a common design language with the rest of the system, which is a usability plus for users almost all of the time.
So after reading this thread my understanding of the "draining is a fallacy" view is

(1) yes genuine non-programmatic entropy bits accumulate at a slow rate and can be drained

(2) in practise no one should care about (1) because once you have ~256 bits to initialise a CSPRNG you can use the output of that CSPRNG until the Earth is swallowed up by the sun; thats what the S of Cryptographically Secure Programmatic Random Number Generator promises.

(3) the linked systemd code is silly to even provide a function genuine_random_bytes that tries to get additional genuine non-programmatic entropy as every possible use case is covered by (2)

(4) The real fallacy is when people think that it might be possible to discover the seed of a CSRNG or predict its next outputs by examining a long enough run of its previous output. In practise such an attack should not be possible.

If I've got the summary right, the only point I would disagree on principle is (3). I can imagine that someone might rationally want "genuine" entropy independent of a kernel CSPRNG, for example for seeding their own CSPRNG.
Sure, but that isn't what theory people care about. Most real world SAT instances are tractable. But SAT is still NP-Complete.
It could be related though Fateman's latest Mockmma, linked from https://people.eecs.berkeley.edu/~fateman/. (He got a legal threat from Wolfram over the original version long ago.)

Other free general symbolic algebra systems are available, of course, like the venerable Reduce and Axiom.
Some people would like to have a giant daylight lamp shining in their bedroom window. I always wondered who those people were.
Or no network communication unless during initial page load. (I assume you'd have JS disabled anyway if you want this level of privacy)
Exactly.

Why o why is this not written in a way to support TypeScript?
to be fair even angular has sizing problems.
a "simple" app can easily grow to over 200kb gzipped content (including polyfills). and 200kb is a lot for a simple application.

currently our "big" application already grown to over 600kb gzipped js.
I'm pretty sure flutter has the same problem.
I think as soon as people start using a SPA their js size will skyrocket.
How many businesses volunteer themselves to be subject to regulation that doesn't apply to them, especially when that regulation gives their competitors insights into the company's R&D capabilities?

Tesla has sold over 50k Model 3s in California in 2018[1]. Regulators would be ridiculous if they put more value in the data from 111 Waymo vehicles compared to the data from tens of thousand of Tesla vehicles.

And once again, I am not saying Tesla is leading here or has superior technology. But people like you are letting their bias against Musk and Tesla cloud their judgement on this issue.

[1] - https://www.sfchronicle.com/business/article/California-s-su...
(I'm the Flutter TL.)

As a target platform or as a development platform?

We don't support targeting Linux out of the box today, but we support Linux as a first-class development platform (it's what I use). That said, we do work on Linux, and if you're willing to do a bit of work, you can use it to write Linux apps. If you want to target X11, you'll need something like https://github.com/google/flutter-desktop-embedding whereas if you want to target the hardware directly, you can do something like https://medium.com/flutter-io/flutter-on-raspberry-pi-mostly... .
It is, but I trust a Google team to get that to work at least passably well.
That's just typical management for American corporations these days. If you want a company you can really trust with human lives, you buy from a company that isn't run by Americans. Of course, that's no guarantee (see: VW Dieselgate), but American management these days is all about next-quarter profits over all else. Japanese-run companies are probably the most trustworthy ones; people there care more about the long term and personal honor. Too bad they don't make planes, but that's changing, as Mitsubishi is now getting back into the airplane business.
Google's service delays downloading the image until the moment it is requested by the client.
Agreed. I love Typescript and picking up Dart has been quiet easy. Of course there's much more than the language itself, but other than one detail or another, tha transition seems to be fairly easy.
Hmm, suggesting a social media company operate with autonomy may or may not be a good idea, but equating it with some untold number of people dying in fiery plane crashes feels a little forced.
ORM builds on top of mechanisms for prepared statements or parametrization.

Yes, ORM API can perhaps limit developers to such an extent, that they can't construct SQL themselves, and thus can't make the mistakes leading to SQL injection.
I got that part, but I don't understand why Soros bought shorts on a stock that he just bought.
(I'm the Flutter TL.)

We support targeting the Web (that's the tech preview we released today), and we support targeting Android, both of which ChromeOS support. We also support development on ChromeOS.
Qt vs WxWidgets all over again.
RSA-2048 is only about 112 bits of security because index calculus methods of breaking RSA-2048 (and DHE-2048) have an algorithm with ~2^112 steps to break it, not because of the amount of entropy used to generate the key [4].

An RSA-2048 keypair is generated by taking a CSPRNG like the one I proposed, generating 1024 bit numbers, checking them for being a prime number using Miller Rabin [1] until the chance of the number not being prime is below 2^-128 (generating new candidate primes if the current one turns out to be not prime), and then doing it all over again for the other prime. The two 1024 bit probably-primes "p" and "q" are the private key, their product "n" (with the public exponent e=65537) is the public key. Most systems precalculate some derived values used to speed up operations and store them with p and q, but you don't have to [2][3].

The RNG I proposed is absolutely good enough to generate RSA key pairs. There is no benefit to using "true hardware randomness" for generating candidate primes, after the initial pool of 256 bits of entropy has been generated.

1 - https://en.wikipedia.org/wiki/Miller%E2%80%93Rabin_primality...

2 - https://en.wikipedia.org/wiki/RSA_(cryptosystem)#Key_generat...

3 - https://tools.ietf.org/html/rfc8017#section-3.2

4 - https://crypto.stackexchange.com/a/8692/24949
Icahn owned a bunch of Lyft stock before the IPO.

Lyft, as a company, issued new shares in an IPO. As is standard practice for an IPO in which the company issues new shares to raise money, Lyft required all of existing stockholders to agree not to sell stock on the public market for the next 6 months. So for 6 months, the shares trading under the "LYFT" ticket, will represent only those shares sold by Lyft to public market investors, and then passed on from one public market participant to another. After 6 months, all shares will be equal, and early investors and employees can sell their shares.

Icahn couldn't sell his shares on the public market. But he was allowed to sell shares in a private transaction (to an accredited investor, with all the usual qualifications for a private stock sale). The only relevant restriction Lyft imposed was that Icahn get his buyer to sign a similar agreement with Lyft, under which Soros can't sell those shares for the same six months.

The restriction is actually a little stronger than just not selling those pre-IPO shares. They also aren't allowed to engage in any financial maneuvering which in any way has some of the effect of selling pre-IPO shares.

But Soros didn't mind. By the time he bought the shares from Icahn and signed onto the agreement not to sell them, he'd already sold them! Well, he'd made what was effectively a binding agreement to sell that many shares of Lyft, at a price to be determined immediately after the IPO, but with the shares and money not changing hands until 6 months later! This is exactly what the lockup agreement prevent you from arranging once you have the shares.

The agreement Soros made was something like:

"I bet that Lyft stock will be lower in 6 months than it is next week. If it goes up I'll pay you 10 Million times the amount it goes up, and if it goes down then you pay me that instead. And the bank said sure, as long as you pay us a small fee upfront, win or lose."

So in six months, when the lockup ends, Soros will sell 10 million shares on the public market, and if that is above the post-IPO price, he'll pay the excess to the bank. If it is instead below the IPO price, the bank will pay him the difference. So he's effectively locked into the post-IPO price.
A species of sentient hermit crabs would have entirely different moral intuitions from a species of sentient apes. Take this [0] as fictional evidence. :)

Empathy doesn't have much to do with morals, it is closer to a mechanism of knowing what the other entity feels. This is useful in antagonistic scenarios as well as in cooperative ones. What you use it for is entirely up to you (and your built-in morals).

I agree that entire society can be wrong, even if all other societies of a given species share that opinion at the time. Where relativism would come in is where there is a major difference in mind architecture.

[0] - https://www.lesswrong.com/posts/HawFh7RvDM4RyoJ2d/three-worl...
Hey,

You should buy one like this:

https://www.amazon.com/Tranquility-Pro-Adjustable-Mouthpiece...

I am sure you can find some in this style for even cheaper, maybe around $20. I had sleep apnea for the last 18 months, which got so bad that I couldn't hold down a job or do much of anything. I would sleep around 14 hours a day, which sounds crazy, but every time I hit REM I would just wake up. So, it would take around 12-14 hours to finally accumulate enough REM to not feel totally fatigued. I would typically wake up around 3pm and just loathe around without much energy waiting for the following night's choking spell.

I tried it all. CPAP, sleeping with tennis balls on my back, a backpack, sleeping face down on a massage table, sleeping upside-down (don't try that). Anyways, for me, the mouthguard I linked was the item which provided the most relief. I went as far as to jury-rig the device into extruding my lower jaw out even further than it was designed to by using some screws to separate the top and bottom even more extensively. It actually gave me a terrible underbite, because at night the pressure from my lower jaw pushed my top teeth back further into my mouth. But, I was able to sort of sleep, and it probably saved my life. Sleep apnea is no joke.

I ended up getting three surgeries, the last of which was just last week and from which I am still recovering. It feels like I am finally cured, and boy, does it feel good to finally sleep.

edit - Oh and if you have any questions please feel free to reach out. I have several lifetime's worth of experience in this area now after working so hard to have this resolved. Email is in my bio.
/dev/urandom is not always sufficiently seeded.

/dev/random makes sure that it's seeded, then pretends it can run out somehow.

getrandom() with default settings is the right behavior almost always, and it took ages to get implemented.
Only if you don't know how to use your ORM properly.
If they're doing it they aren't 'open' about it unless you think there's no difference whatever Alex Jones or Richard Spencer are and conservatives.
yes, this.

think about taxi drivers: very low numbers, low revenue=low taxes, huge political clout.

same thing with the model aircraft enthusiasts:
https://www.google.co.uk/amp/s/amp.ft.com/content/2574825c-6...

considering that most young people that work in these tech companies don’t vote, these tech companies are ripe for plundering.
We do have standards over electronics longevity... as far as lightbulbs and new technology, the laws were created to ensure the bulbs WOULD break, and thus ensure american jobs.
The sizes closer to 100MB seem to be from debug builds. From the bug you linked (and this one which it links to: https://github.com/flutter/flutter/issues/16833), bare flutter apps are around 4MB on Android.

Doesn't seem bad to me.
The consequence of overestimating is you don’t get the project. Occasionally that’s the consequence of proper estimation too, as people tend to underestimate when selling the project to get it through. Once I estimated a project at 3 months team of 5. They told me it should be 3 months team of 2. “We are doing sales mate” they told me. “You are, I am doing delivery” I responded, and then did neither sales nor delivery. ..
Interesting thanks. I'm looking to make something that can play media and animations would like it to run on beefy PCs as well as tablets if I can.
As I understand it is meant to have merge lots of modern improvements but keep the (positive parts of the) feeling of C.
Actually, when I bought my last car, I did get the trim level that had all the extra safety features.

However, I'm not transporting passengers for money and accepting liability for passengers' lives; airlines do, so their financial calculation should be very different from Joe Blow private car buyer.

Finally, if I understand correctly, these extra safety features were software only, meaning they don't cost the manufacturer anything to add on, so there's no excuse to not make them standard. On cars, the extra safety features require expensive sensors, so they really do add to the BOM cost of the car, and putting them on an economy car really could push the price too high for buyers to afford, so carmakers put them in higher-cost models to help make them more commonplace and then move them into lower-cost models as the volumes increase and economies of scale make costs lower.
It's actually the very same main.dart.js (dart2js compiler does not have ability to target a specific browser, its output is supposed to work in every supported browser).

359kb is its compressed size, 990k is its uncompressed size.

Firefox shows compressed size in the "Transferred" column and uncompressed size in "Size" column.

In Chrome by default you see compressed size only, but if you click "Use large request rows" then you will see both compressed and uncompressed size.
It is always interesting to get different perspectives from folks.

How do you filter the people who hold the door for everyone vs the ones that are only doing it for ladies? Or for those fellas who where told countless times as a youth to hold the door for a woman. Because someone is polite, that is a red flag?

As for calling a woman a lady this one is new to me, and I don't think I've ever used the word "colleague" aloud in my life. I would say, "that is a {guy|lady} that I work with." I've never been made aware previously that referring to a woman as a lady would be taken negatively. I had only heard that some woman don't care for ma'am as they can feel that is a title for an older woman. fwiw, I do tend to use gender neutral words like "they" or "them" over he/she when writing.
what about ansible? how does it fit into the "only system installed python"?
I guess that makes sense, and it's not a particularly new phenomenon. The MOS 6507 (used in the Atari 2600) was mostly the same silicon as the 6502 (as used in Apple II and many other places), but cheaper because it was in a smaller package.
The most pragmatic explanation is that if 128 or 256 bits of random could run out, the cryptography underlying almost everything we do online would be unsound. If you trust those crypto systems to take a sufficient seed and stretch it, why don't you trust the OS RNG to do so?
This reminded me of Big Clive's youtube channel. https://www.youtube.com/channel/UCtM5z2gkrGRuWd0JQMx76qA

He does tear downs of consumer grade led lights for (mostly for the European/UK market since that's where he's based). It's interesting seeing some the iterations that "cheap" devices go through as they are refined to the bare minimum of cost.
Interesting to call Elon Musk charlatan considering he put an actual electric car on the road that is on its way to sell 400k units in a year and kicking other non charlatan like BMW and GMs ass
> This is possibly a very dark direction for the Web

Yes, that imagined dark direction for the web is indeed very dark.

Call it too big to ship reasonably, but Chrome didn't ship an Angular player or Polymer player, so I don't see what suggests they'd start now.
Show HN: Datum.js a JavaScript data binding library